This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa File: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (raw, json) Hash identifier: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM= Subject key identifier: 63:A5:12:06:FE:C4:B0:DF:E1:81:D8:16:D2:E5:B9:29:BA:66:44:DE Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C13195A0027E017C166D0A5CA2FCA78 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa Signing time: Fri 02 Jan 2026 00:19:45 +0000 ROA not before: Fri 02 Jan 2026 00:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 89.185.80.0/24 maxlen: 24 89.185.81.0/24 maxlen: 24 89.185.82.0/24 maxlen: 24 89.185.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:19:5a:00:27:e0:17:c1:66:d0:a5:ca:2f:ca:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63a51206fec4b0dfe181d816d2e5b929ba6644de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:8d:d7:e9:3f:26:72:78:cf:00:c1:54:62: f0:d9:74:a0:d8:d8:11:a8:51:f2:07:cc:8b:6b:49: ee:34:a1:bc:2d:fb:ce:38:4b:68:60:c8:9e:7a:ae: 01:e9:3a:50:a6:5e:3e:11:29:0e:13:88:61:59:cf: bc:52:d3:2b:e5:dc:5a:07:84:fe:8d:c3:d1:7a:55: c7:af:b1:41:d2:8b:e3:63:95:1f:ce:a0:a0:59:90: d5:8c:5d:56:d9:b7:10:54:38:b2:81:4d:7d:36:fb: 4a:5a:1b:73:7b:0d:12:bd:24:de:65:80:d4:c0:78: ab:fa:28:4d:24:24:e4:15:9e:07:d1:eb:fc:33:39: 58:e2:b5:ea:63:58:ec:5b:a3:46:8b:f8:0d:33:ee: 81:86:ac:04:71:83:a2:1a:f0:2c:91:99:f1:6f:47: a8:5d:fb:7d:91:80:90:52:f1:1e:4f:65:db:60:a0: 64:b4:08:3f:9e:4c:3e:9e:36:9f:af:c8:2e:fa:e2: 62:98:58:d0:61:80:46:dd:1a:cd:3e:d0:d7:27:9c: 29:6c:f4:d2:7b:5c:63:b4:0d:32:f4:0a:83:40:4e: 84:2b:82:f1:35:40:63:76:ea:b8:b8:07:4c:60:b7: fe:9f:0f:67:6e:64:9a:73:05:55:69:b6:04:b2:ec: 0f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A5:12:06:FE:C4:B0:DF:E1:81:D8:16:D2:E5:B9:29:BA:66:44:DE X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.80.0-89.185.82.255 89.185.84.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:a2:1c:27:e8:f3:e5:5e:c6:7b:05:26:db:ad:45:db:5e:9f: 60:4c:17:5c:76:99:c3:38:d8:f9:7c:e1:d9:b4:33:8f:91:a0: 37:47:f6:02:f8:90:8c:2d:c8:f3:46:e3:bd:63:28:fc:72:fa: 29:52:ec:b6:b5:fa:57:55:ad:33:16:57:b8:c3:fb:01:27:ec: d0:af:0b:87:13:0c:73:31:e4:49:21:36:48:83:cb:be:1d:d5: 92:a2:ee:02:09:e6:99:a1:a1:c4:dd:fb:3c:4b:e1:df:91:57: 0e:99:d2:76:39:79:2b:d0:5d:50:fd:1c:fc:dd:84:a6:0d:5a: 3d:85:31:ad:69:a4:89:19:38:c7:9e:3e:3e:df:80:3c:8e:41: 75:ea:82:c6:98:3c:79:d0:86:e5:e9:1a:ba:33:78:44:77:dd: 10:ea:f5:02:58:60:1c:97:e0:23:a3:d7:92:9e:41:ee:75:bf: 26:b1:63:6f:54:51:c2:51:1f:d4:e6:f4:47:01:47:df:e8:85: 54:f2:0b:1b:58:03:63:7a:e1:da:22:da:8f:11:fb:5d:ed:b6: 5e:37:ea:75:8e:41:08:b4:ab:1d:ce:47:e3:ea:11:27:b0:6d: ec:4c:9a:45:b7:93:10:d7:9d:dd:b6:30:3a:f5:3c:76:49:31: 22:42:8a:e8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8ExlaACfgF8Fm0KXKL8p4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2E1MTIwNmZlYzRiMGRmZTE4MWQ4MTZkMmU1YjkyOWJhNjY0NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNKN1+k/JnJ4zwDBVGLw2XSg2NgR qFHyB8yLa0nuNKG8LfvOOEtoYMieeq4B6TpQpl4+ESkOE4hhWc+8UtMr5dxaB4T+ jcPRelXHr7FB0ovjY5UfzqCgWZDVjF1W2bcQVDiygU19NvtKWhtzew0SvSTeZYDU wHir+ihNJCTkFZ4H0ev8MzlY4rXqY1jsW6NGi/gNM+6BhqwEcYOiGvAskZnxb0eo Xft9kYCQUvEeT2XbYKBktAg/nkw+njafr8gu+uJimFjQYYBG3RrNPtDXJ5wpbPTS e1xjtA0y9AqDQE6EK4LxNUBjduq4uAdMYLf+nw9nbmSacwVVabYEsuwPOwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGOlEgb+xLDf4YHYFtLluSm6ZkTeMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvWTZVU0J2N0VzTl9oZ2RnVzB1VzVLYnBtUk40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARZuVAD BABZuVIDBABZuVQwDQYJKoZIhvcNAQELBQADggEBAIuiHCfo8+VexnsFJtutRdte n2BMF1x2mcM42Pl84dm0M4+RoDdH9gL4kIwtyPNG471jKPxy+ilS7La1+ldVrTMW V7jD+wEn7NCvC4cTDHMx5EkhNkiDy74d1ZKi7gIJ5pmhocTd+zxL4d+RVw6Z0nY5 eSvQXVD9HPzdhKYNWj2FMa1ppIkZOMeePj7fgDyOQXXqgsaYPHnQhuXpGrozeER3 3RDq9QJYYByX4COj15KeQe51vyaxY29UUcJRH9Tm9EcBR9/ohVTyCxtYA2N64doi 2o8R+13ttl436nWOQQi0qx3OR+PqESewbexMmkW3kxDXnd22MDr1PHZJMSJCiug= -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:38 2026 by rpki-client