This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/YQMWlSJBfcoVK4TBIWBhsgchPg8.roa File: YQMWlSJBfcoVK4TBIWBhsgchPg8.roa (raw, json) Hash identifier: yRF9HBebSS614+uo7q49ozCeb/yJrJ/N0/LgzQsTjvc= Subject key identifier: 61:03:16:95:22:41:7D:CA:15:2B:84:C1:21:60:61:B2:07:21:3E:0F Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E946BC018C595A78A55185C99084 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/YQMWlSJBfcoVK4TBIWBhsgchPg8.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61361 IP address blocks: 94.247.47.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e9:46:bc:01:8c:59:5a:78:a5:51:85:c9:90:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6103169522417dca152b84c1216061b207213e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:fb:18:00:c6:b3:c4:74:ed:25:e6:3d:0b: c0:bb:da:1e:db:2f:d2:55:84:c9:b6:47:cd:dc:21: f3:c4:63:d8:73:f1:0d:7a:be:bf:bc:45:ce:58:a4: 6c:f2:1d:48:dd:e4:39:60:a0:7d:bb:ce:5e:bd:5e: 67:19:6e:66:41:2f:b0:82:d4:21:82:3b:53:ff:7b: 84:7c:1e:87:7a:be:f5:1d:3a:82:9b:0f:c8:c4:28: c7:20:69:9c:e2:5c:c9:3a:e4:ac:9d:35:c2:29:98: 93:f3:02:06:eb:af:44:92:89:d3:6b:a0:25:ed:38: 08:f0:64:42:cc:65:77:cf:6c:42:ab:29:28:a2:db: a7:ec:0c:2a:25:e8:e6:7b:86:fe:59:86:64:d6:39: 59:e9:ba:60:59:43:0d:bb:3f:c6:9d:5e:89:25:a8: 50:29:60:55:50:d6:b3:49:2d:0d:13:94:04:60:8a: f0:d6:75:03:6f:5e:f3:39:48:26:12:08:fe:27:da: 7c:8c:05:32:67:f2:10:79:50:71:e1:46:f2:c7:67: a4:38:0b:3c:b7:1a:a0:03:74:50:8b:c9:d3:5c:f3: 55:20:bd:52:c2:15:57:1a:b4:8e:6a:67:c7:40:db: ff:fa:e9:e8:67:da:3d:3d:ce:3c:31:4f:cc:7f:52: 37:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:03:16:95:22:41:7D:CA:15:2B:84:C1:21:60:61:B2:07:21:3E:0F X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/YQMWlSJBfcoVK4TBIWBhsgchPg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.47.0/24 Signature Algorithm: sha256WithRSAEncryption 21:15:a2:b4:fd:5b:cf:99:02:77:6c:5e:36:be:fc:01:72:84: d8:4e:b3:19:5f:03:18:32:31:e7:e5:4f:49:43:8b:a6:04:15: 81:42:2f:95:32:10:67:16:2a:95:c4:b3:58:a3:dd:6d:93:45: e4:ae:80:21:8d:cf:cf:44:f7:e3:92:2d:87:fd:1d:07:fd:bb: 62:8c:0f:56:1b:5e:db:1b:be:69:e0:c5:80:3a:1d:ad:81:3c: 60:4e:94:37:14:df:27:cd:e3:99:e8:d3:fb:7e:3f:f0:8b:ad: 2f:98:e1:3c:ee:86:cd:6e:ec:cf:37:84:fa:db:e8:4e:62:bd: 47:42:76:0d:76:f7:f7:0d:ad:da:cf:3a:da:de:af:95:4f:b2: d4:02:10:2c:8b:f1:73:3f:98:82:20:48:b1:20:d2:ed:53:3e: 73:9b:33:45:82:2d:17:fd:c8:3a:da:b0:05:cc:59:dc:b3:29: 9c:40:12:1f:a3:a6:7e:0c:37:cc:93:87:b0:00:88:e8:38:89: 04:41:c5:51:e7:80:da:5f:03:8e:5e:45:d7:5c:35:99:e3:09: f2:ad:b5:c3:cd:b5:1d:a0:2a:39:5f:c4:19:6f:49:c2:58:ae: 4f:1a:8b:d8:bc:df:76:aa:6b:4e:b1:03:b8:78:8f:d7:28:32: f8:16:c5:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOlGvAGMWVp4pVGFyZCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTAzMTY5NTIyNDE3ZGNhMTUyYjg0YzEyMTYwNjFiMjA3MjEzZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3j7GADGs8R07SXmPQvAu9oe2y/S VYTJtkfN3CHzxGPYc/ENer6/vEXOWKRs8h1I3eQ5YKB9u85evV5nGW5mQS+wgtQh gjtT/3uEfB6Her71HTqCmw/IxCjHIGmc4lzJOuSsnTXCKZiT8wIG669EkonTa6Al 7TgI8GRCzGV3z2xCqykootun7AwqJejme4b+WYZk1jlZ6bpgWUMNuz/GnV6JJahQ KWBVUNazSS0NE5QEYIrw1nUDb17zOUgmEgj+J9p8jAUyZ/IQeVBx4Ubyx2ekOAs8 txqgA3RQi8nTXPNVIL1SwhVXGrSOamfHQNv/+unoZ9o9Pc48MU/Mf1I39QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGEDFpUiQX3KFSuEwSFgYbIHIT4PMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvWVFNV2xTSkJmY29WSzRUQklXQmhzZ2NoUGc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvcvMA0G CSqGSIb3DQEBCwUAA4IBAQAhFaK0/VvPmQJ3bF42vvwBcoTYTrMZXwMYMjHn5U9J Q4umBBWBQi+VMhBnFiqVxLNYo91tk0XkroAhjc/PRPfjki2H/R0H/btijA9WG17b G75p4MWAOh2tgTxgTpQ3FN8nzeOZ6NP7fj/wi60vmOE87obNbuzPN4T62+hOYr1H QnYNdvf3Da3azzra3q+VT7LUAhAsi/FzP5iCIEixINLtUz5zmzNFgi0X/cg62rAF zFncsymcQBIfo6Z+DDfMk4ewAIjoOIkEQcVR54DaXwOOXkXXXDWZ4wnyrbXDzbUd oCo5X8QZb0nCWK5PGovYvN92qmtOsQO4eI/XKDL4FsXg -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:48 2026 by rpki-client