This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/YA-H3bfE3r6ihPzDZtgenypbPbg.roa File: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (raw, json) Hash identifier: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM= Subject key identifier: 60:0F:87:DD:B7:C4:DE:BE:A2:84:FC:C3:66:D8:1E:9F:2A:5B:3D:B8 Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Certificate serial: 019B7DCB1675FF9609D64C16204F891031DF Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/YA-H3bfE3r6ihPzDZtgenypbPbg.roa Signing time: Fri 02 Jan 2026 08:20:20 +0000 ROA not before: Fri 02 Jan 2026 08:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.27.116.0/22 maxlen: 22 185.27.117.0/24 maxlen: 24 2a04:2ec0::/29 maxlen: 29 2a04:2ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:16:75:ff:96:09:d6:4c:16:20:4f:89:10:31:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc Validity Not Before: Jan 2 08:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=600f87ddb7c4debea284fcc366d81e9f2a5b3db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:0e:a9:b2:a3:3e:a6:f6:92:95:89:60:52: 6c:47:8e:0f:e9:d0:19:f6:91:4a:64:b3:d2:33:94: cc:80:c8:c4:a6:64:2b:5d:5d:8c:82:3b:84:c8:6e: 46:bd:d2:12:81:0a:17:ef:43:97:46:92:b0:61:2b: 8a:3a:ec:36:5c:91:9e:d5:d5:d5:95:4f:74:ea:ef: 60:8b:16:2b:77:bd:a6:99:83:41:3c:8c:74:7c:49: 66:66:55:b2:0d:7b:3f:00:19:fe:d0:ab:90:46:1d: 73:aa:33:7e:0a:01:0f:f0:45:ef:6c:cd:b6:ea:e0: db:9a:fb:8f:46:c2:4e:4c:5a:97:e8:e8:59:a1:94: 32:00:e5:76:e9:8b:bc:7e:c1:01:7f:00:89:6d:70: c3:1d:72:f7:d0:f6:df:81:f6:b5:31:11:43:b4:54: 56:ba:e7:8d:95:6d:52:67:39:17:e5:7d:dd:6f:d1: aa:54:72:f3:df:4f:df:1c:8c:47:28:30:a3:41:cb: 54:6f:ec:3c:2d:5b:c0:7e:81:26:f1:e5:6a:03:ba: 4b:90:09:f1:ea:e9:86:07:02:f0:6c:3f:ea:5a:40: 82:dc:55:67:bd:99:6d:92:a9:0b:89:04:93:b0:74: 6a:2d:7c:e4:ac:e1:61:e1:34:ae:35:e0:23:61:9a: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0F:87:DD:B7:C4:DE:BE:A2:84:FC:C3:66:D8:1E:9F:2A:5B:3D:B8 X509v3 Authority Key Identifier: keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/YA-H3bfE3r6ihPzDZtgenypbPbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.116.0/22 IPv6: 2a04:2ec0::/29 Signature Algorithm: sha256WithRSAEncryption 17:98:fc:9c:dc:b5:99:30:80:7d:d7:5c:1f:ed:66:64:f6:97: a1:db:8a:af:0a:c7:e6:28:0c:dc:bf:26:32:f6:82:52:fd:b0: 34:d1:03:32:be:b3:37:14:09:25:47:21:19:23:d5:82:d1:1a: 5b:eb:33:a1:f3:5e:5e:e3:c4:b3:ac:2c:28:ee:6c:17:b9:38: 31:b1:f0:63:76:97:26:1a:76:96:1c:ef:6a:fe:88:f6:29:29: cd:d0:6a:7b:7f:af:48:03:e8:aa:79:a2:07:a7:49:f0:1b:df: 1f:bb:f5:aa:e1:ef:16:e2:c2:7c:90:4d:08:0b:0c:bd:dc:e9: 00:7b:39:38:68:3d:08:80:1e:c8:7c:d6:da:b8:d1:ff:bd:ef: 5d:14:10:24:a3:63:4a:6b:af:7a:f2:5e:37:8f:ff:3a:9c:11: a2:94:34:43:69:45:c6:d4:a3:05:34:fb:22:d1:0f:1b:f5:c4: 35:4e:96:76:44:a5:93:14:6a:25:00:1f:08:b7:d6:0b:64:15: ad:59:73:9d:a4:c2:f9:6a:b1:fe:57:00:c8:22:ac:37:19:e0: 52:8e:19:f5:09:0d:26:94:f5:da:75:8c:8f:c7:42:50:57:37: f3:ab:64:d6:59:a3:7d:68:25:f9:8f:2c:46:44:9f:09:85:ef: 9e:3a:4d:5e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yxZ1/5YJ1kwWIE+JEDHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4 YmY1ZGMwHhcNMjYwMTAyMDgyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDBmODdkZGI3YzRkZWJlYTI4NGZjYzM2NmQ4MWU5ZjJhNWIzZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUEOqbKjPqb2kpWJYFJsR44P6dAZ 9pFKZLPSM5TMgMjEpmQrXV2MgjuEyG5GvdISgQoX70OXRpKwYSuKOuw2XJGe1dXV lU906u9gixYrd72mmYNBPIx0fElmZlWyDXs/ABn+0KuQRh1zqjN+CgEP8EXvbM22 6uDbmvuPRsJOTFqX6OhZoZQyAOV26Yu8fsEBfwCJbXDDHXL30Pbfgfa1MRFDtFRW uueNlW1SZzkX5X3db9GqVHLz30/fHIxHKDCjQctUb+w8LVvAfoEm8eVqA7pLkAnx 6umGBwLwbD/qWkCC3FVnvZltkqkLiQSTsHRqLXzkrOFh4TSuNeAjYZqS8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGAPh923xN6+ooT8w2bYHp8qWz24MB8GA1UdIwQY MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt OTRjODI1NGJkM2I3LzEvWUEtSDNiZkUzcjZpaFB6RFp0Z2VueXBiUGJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3 LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRt0MA0E AgACMAcDBQMqBC7AMA0GCSqGSIb3DQEBCwUAA4IBAQAXmPyc3LWZMIB911wf7WZk 9peh24qvCsfmKAzcvyYy9oJS/bA00QMyvrM3FAklRyEZI9WC0Rpb6zOh815e48Sz rCwo7mwXuTgxsfBjdpcmGnaWHO9q/oj2KSnN0Gp7f69IA+iqeaIHp0nwG98fu/Wq 4e8W4sJ8kE0ICwy93OkAezk4aD0IgB7IfNbauNH/ve9dFBAko2NKa6968l43j/86 nBGilDRDaUXG1KMFNPsi0Q8b9cQ1TpZ2RKWTFGolAB8It9YLZBWtWXOdpML5arH+ VwDIIqw3GeBSjhn1CQ0mlPXadYyPx0JQVzfzq2TWWaN9aCX5jyxGRJ8Jhe+eOk1e -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:53 2026 by rpki-client