This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/YcTggkw1dIIwon9zpxmI36qcgzY.roa File: YcTggkw1dIIwon9zpxmI36qcgzY.roa (raw, json) Hash identifier: hJIPq4cJhvmtr5AA2Y+pzfZ+vAbq2fL2IZZMCvtTNqY= Subject key identifier: 61:C4:E0:82:4C:35:74:82:30:A2:7F:73:A7:19:88:DF:AA:9C:83:36 Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be Certificate serial: 019B7B36C5FEA0DC32987FFEAC914671A3B6 Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/YcTggkw1dIIwon9zpxmI36qcgzY.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59253 IP address blocks: 194.127.192.0/23 maxlen: 23 195.85.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c5:fe:a0:dc:32:98:7f:fe:ac:91:46:71:a3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61c4e0824c35748230a27f73a71988dfaa9c8336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:3b:2e:bc:9b:c3:7d:e2:9c:c7:99:7a:d4: fd:e2:8f:97:44:e3:93:93:e3:70:b8:6a:f7:d4:4c: 99:f3:51:9a:d6:00:e9:f8:3b:16:58:e9:d2:74:46: 50:80:c0:25:0c:34:ef:cc:43:10:d2:05:0c:e7:fa: a4:16:70:e8:07:a8:e0:60:6b:46:52:1c:e3:81:4e: 3d:b1:44:34:35:a2:0b:7d:75:a7:72:e3:b8:cb:c9: 51:4b:90:67:4d:3e:85:43:43:00:38:dd:a9:7a:50: 4f:fd:c7:c2:32:eb:43:ac:f1:91:52:79:6e:f3:37: e4:e6:f9:da:d4:c5:5c:3c:9e:05:36:b0:21:9b:2b: 21:5c:0a:d3:10:da:f6:df:ac:5c:ed:81:2c:93:45: 2d:5c:c5:df:0d:74:ae:88:f0:ee:88:1c:e0:c0:aa: aa:db:65:58:2f:df:4e:c9:76:37:d7:ec:68:0f:86: b0:4f:ff:c4:8e:56:c0:ce:77:14:eb:74:01:da:40: b5:02:4a:bd:fd:95:c4:56:ff:1f:ef:7c:cf:7a:87: 7f:0a:af:3f:00:4b:9e:8a:62:ee:73:8d:f4:39:31: 11:da:8d:4a:fa:35:5d:ad:d3:d4:ab:95:3f:fb:c4: d7:77:5b:d9:a8:97:1b:72:dd:53:ab:03:46:fb:6b: 5d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C4:E0:82:4C:35:74:82:30:A2:7F:73:A7:19:88:DF:AA:9C:83:36 X509v3 Authority Key Identifier: keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/YcTggkw1dIIwon9zpxmI36qcgzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.192.0/23 195.85.19.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:d2:d8:98:a9:66:86:92:0c:bb:7e:1e:f0:77:b5:bd:79:d2: a5:cd:e3:57:2a:c2:fc:a6:73:03:f6:38:ab:b4:e0:00:52:9d: 96:11:9c:56:35:1f:ea:78:38:21:16:32:0e:2e:76:55:45:4f: 48:81:a3:20:5f:10:fa:1f:bf:66:b3:4a:43:6b:e9:78:5a:ac: c4:56:0f:1b:aa:e6:fb:0c:10:64:7a:3a:51:d6:1b:bb:2d:9c: e5:b9:47:15:06:19:f4:97:5a:ee:7c:4f:1e:b6:76:d9:d5:c5: 67:cf:00:be:6b:1f:29:47:c9:3d:0d:1c:87:1d:ec:3a:79:f6: 90:e2:4f:97:fd:74:cb:0a:58:8b:c3:bb:09:b4:f6:3e:d6:b7: cd:ba:f5:75:38:09:bb:38:f1:d4:5f:af:bf:c3:05:9d:04:7e: 83:d9:65:c3:1e:d8:d8:58:c0:e9:fe:a3:ef:b5:35:4a:67:68: 28:9b:7e:89:80:01:84:a9:ac:c2:3a:56:7d:ca:b7:31:8f:00: 33:8d:44:48:a2:a7:23:9a:5e:ca:48:9e:fe:40:06:50:e6:26: e5:f2:11:a5:65:6d:6d:de:df:b2:de:f4:39:e3:af:f7:09:64: ed:46:10:5f:35:a5:c7:7c:a4:b8:b9:2e:45:81:4f:73:28:39: 0a:5d:1c:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NsX+oNwymH/+rJFGcaO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIyNmE3MDRjZjYyMGViMjAwMGYyN2U3YTkxOWNlNzMw OTkxYmUwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWM0ZTA4MjRjMzU3NDgyMzBhMjdmNzNhNzE5ODhkZmFhOWM4MzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCc7Lrybw33inMeZetT94o+XROOT k+NwuGr31EyZ81Ga1gDp+DsWWOnSdEZQgMAlDDTvzEMQ0gUM5/qkFnDoB6jgYGtG UhzjgU49sUQ0NaILfXWncuO4y8lRS5BnTT6FQ0MAON2pelBP/cfCMutDrPGRUnlu 8zfk5vna1MVcPJ4FNrAhmyshXArTENr236xc7YEsk0UtXMXfDXSuiPDuiBzgwKqq 22VYL99OyXY31+xoD4awT//EjlbAzncU63QB2kC1Akq9/ZXEVv8f73zPeod/Cq8/ AEueimLuc430OTER2o1K+jVdrdPUq5U/+8TXd1vZqJcbct1TqwNG+2tdIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGHE4IJMNXSCMKJ/c6cZiN+qnIM2MB8GA1UdIwQY MBaAFF8CJqcEz2IOsgAPJ+epGc5zCZG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAt NzVkOWNlNWI4ZDljLzEvWWNUZ2drdzFkSUl3b245enB4bUkzNnFjZ3pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAtNzVkOWNlNWI4ZDlj LzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwn/AAwQA w1UTMA0GCSqGSIb3DQEBCwUAA4IBAQAr0tiYqWaGkgy7fh7wd7W9edKlzeNXKsL8 pnMD9jirtOAAUp2WEZxWNR/qeDghFjIOLnZVRU9IgaMgXxD6H79ms0pDa+l4WqzE Vg8bqub7DBBkejpR1hu7LZzluUcVBhn0l1rufE8etnbZ1cVnzwC+ax8pR8k9DRyH Hew6efaQ4k+X/XTLCliLw7sJtPY+1rfNuvV1OAm7OPHUX6+/wwWdBH6D2WXDHtjY WMDp/qPvtTVKZ2gom36JgAGEqazCOlZ9yrcxjwAzjURIoqcjml7KSJ7+QAZQ5ibl 8hGlZW1t3t+y3vQ546/3CWTtRhBfNaXHfKS4uS5FgU9zKDkKXRyo -----END CERTIFICATE-----Generated at Wed Jan 21 07:34:07 2026 by rpki-client