This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/YYcTpfzg-qxOriFzAQc4sR83vwQ.roa File: YYcTpfzg-qxOriFzAQc4sR83vwQ.roa (raw, json) Hash identifier: 5h0JVwXb5CNZ8oS+rmCxklJ1x85gCyuZA9bxlvjYhdU= Subject key identifier: 61:87:13:A5:FC:E0:FA:AC:4E:AE:21:73:01:07:38:B1:1F:37:BF:04 Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Certificate serial: 019B783508F6BFFB62B293DAB7A0A025E538 Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/YYcTpfzg-qxOriFzAQc4sR83vwQ.roa Signing time: Thu 01 Jan 2026 06:18:19 +0000 ROA not before: Thu 01 Jan 2026 06:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47868 IP address blocks: 31.177.24.0/21 maxlen: 21 94.125.216.0/21 maxlen: 21 2a00:db00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:08:f6:bf:fb:62:b2:93:da:b7:a0:a0:25:e5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Validity Not Before: Jan 1 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=618713a5fce0faac4eae2173010738b11f37bf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e1:33:90:27:37:e0:d8:36:7f:e5:5a:b7:e4: b1:54:ec:ee:95:4c:54:fe:bc:3b:c7:d5:cb:e6:ee: 9e:1c:75:fc:46:ff:4a:67:e9:ea:08:b6:89:76:3e: a3:51:b8:11:fc:c5:84:6e:77:7f:79:1a:48:58:c6: 4e:41:b3:9f:3f:a1:3e:49:83:46:3d:78:f0:b5:d6: e1:95:16:cb:c2:5f:17:cb:cf:1d:05:ad:3d:df:bb: 6d:bf:18:0e:37:55:69:95:b3:6a:ab:d5:eb:16:11: 1d:d9:99:57:35:9c:cd:74:43:9d:0a:b5:df:5d:ea: 87:56:8c:7c:ba:a6:91:ed:1b:92:62:be:3c:04:10: 05:fc:f5:e7:b2:cc:b0:b1:56:a1:53:54:da:24:56: dd:98:77:4b:18:99:e0:c7:eb:b0:c4:27:39:5c:fd: 54:02:73:c5:11:20:fa:ab:38:66:89:d2:09:cf:d3: 6f:24:be:24:07:78:fa:f7:da:c8:9a:6f:16:cf:7b: 86:4c:d0:c1:9d:22:66:6b:88:d4:c8:b1:8f:53:9a: 90:50:3a:fa:ee:b1:97:07:53:20:c7:f5:db:93:6b: 7a:9d:b2:9a:84:23:b3:e3:eb:89:f6:7c:c7:a3:c4: fe:bd:fc:5a:c3:9c:bd:9a:06:16:24:ce:4d:ec:d8: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:13:A5:FC:E0:FA:AC:4E:AE:21:73:01:07:38:B1:1F:37:BF:04 X509v3 Authority Key Identifier: keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/YYcTpfzg-qxOriFzAQc4sR83vwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.24.0/21 94.125.216.0/21 IPv6: 2a00:db00::/32 Signature Algorithm: sha256WithRSAEncryption bc:d1:bf:c9:db:de:19:69:01:07:d4:de:c0:a3:03:63:34:9f: 17:e7:e5:d3:18:db:0c:16:bb:e2:1a:48:7a:14:13:4b:8d:31: c5:fa:f0:d1:63:10:79:75:c8:d4:e0:7f:72:f9:83:65:e6:6f: 24:e8:af:57:ca:9c:15:c4:11:35:32:7c:23:e9:70:d5:d4:c6: 03:1e:7a:ac:53:37:00:ab:eb:bf:c0:76:e9:88:56:b8:d9:ac: 6d:06:95:40:45:ea:c2:4b:46:60:aa:ee:07:8f:f6:cb:e2:14: 46:a6:f7:b7:1b:02:85:98:da:5e:68:e1:fb:a4:7a:d3:4d:db: 94:b8:14:b3:3f:5b:a3:12:0f:be:08:1b:35:d1:e9:c8:1e:84: 70:2c:e5:7d:00:13:34:fe:a8:3c:75:ce:df:df:1b:18:6b:fb: 0c:99:2b:87:35:c0:93:47:0f:f5:89:45:19:ae:ae:32:e1:57: dc:5e:cc:2f:e6:3a:ab:6b:77:8e:c7:e1:e1:2e:8d:07:59:ed: e1:1f:7a:3f:ce:bf:4f:00:10:a5:04:a3:d1:db:91:98:00:9d: 9a:9a:76:18:b1:88:2f:bc:bb:4b:92:02:16:54:96:9b:b9:5b: d2:4c:ae:59:55:c1:d3:78:d4:bb:7d:da:be:00:9a:c0:8c:bf: 52:17:9b:23 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NQj2v/tispPat6CgJeU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGZmODgwMzMwYWY3NjJhZTZjYzA1MGRlNWYzNGI1ZjU3 YjBiMDkwHhcNMjYwMTAxMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTg3MTNhNWZjZTBmYWFjNGVhZTIxNzMwMTA3MzhiMTFmMzdiZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OEzkCc34Ng2f+Vat+SxVOzulUxU /rw7x9XL5u6eHHX8Rv9KZ+nqCLaJdj6jUbgR/MWEbnd/eRpIWMZOQbOfP6E+SYNG PXjwtdbhlRbLwl8Xy88dBa0937ttvxgON1VplbNqq9XrFhEd2ZlXNZzNdEOdCrXf XeqHVox8uqaR7RuSYr48BBAF/PXnssywsVahU1TaJFbdmHdLGJngx+uwxCc5XP1U AnPFESD6qzhmidIJz9NvJL4kB3j699rImm8Wz3uGTNDBnSJma4jUyLGPU5qQUDr6 7rGXB1Mgx/Xbk2t6nbKahCOz4+uJ9nzHo8T+vfxaw5y9mgYWJM5N7Nh0BwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGGHE6X84PqsTq4hcwEHOLEfN78EMB8GA1UdIwQY MBaAFJQP+IAzCvdirmzAUN5fNLX1ewsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAt YTgyZjY1OGEyYWExLzEvWVljVHBmemctcXhPcmlGekFRYzRzUjgzdndRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAtYTgyZjY1OGEyYWEx LzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDH7EYAwQD Xn3YMA0EAgACMAcDBQAqANsAMA0GCSqGSIb3DQEBCwUAA4IBAQC80b/J294ZaQEH 1N7AowNjNJ8X5+XTGNsMFrviGkh6FBNLjTHF+vDRYxB5dcjU4H9y+YNl5m8k6K9X ypwVxBE1Mnwj6XDV1MYDHnqsUzcAq+u/wHbpiFa42axtBpVARerCS0Zgqu4Hj/bL 4hRGpve3GwKFmNpeaOH7pHrTTduUuBSzP1ujEg++CBs10enIHoRwLOV9ABM0/qg8 dc7f3xsYa/sMmSuHNcCTRw/1iUUZrq4y4VfcXswv5jqra3eOx+HhLo0HWe3hH3o/ zr9PABClBKPR25GYAJ2amnYYsYgvvLtLkgIWVJabuVvSTK5ZVcHTeNS7fdq+AJrA jL9SF5sj -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:15 2026 by rpki-client