This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa File: YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa (raw, json) Hash identifier: myHnrIBgh1OqNZnDZDrhs0mkn1s9VqCibLxchoW9EaQ= Subject key identifier: 61:2F:F2:6D:E1:4E:FA:40:69:1E:4E:28:39:5E:96:9A:95:C5:99:84 Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Certificate serial: 019B7BA4E486863D100CD4F696E415E30E86 Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa Signing time: Thu 01 Jan 2026 22:19:22 +0000 ROA not before: Thu 01 Jan 2026 22:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48095 IP address blocks: 147.78.52.0/23 maxlen: 23 147.78.54.0/23 maxlen: 23 185.226.80.0/22 maxlen: 22 193.37.52.0/23 maxlen: 23 193.37.54.0/23 maxlen: 23 193.38.240.0/23 maxlen: 23 193.38.242.0/23 maxlen: 23 194.26.176.0/22 maxlen: 22 194.55.80.0/22 maxlen: 22 194.93.36.0/23 maxlen: 23 194.93.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e4:86:86:3d:10:0c:d4:f6:96:e4:15:e3:0e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=612ff26de14efa40691e4e28395e969a95c59984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:5d:49:35:e3:21:d6:32:60:1b:15:c5:84: 55:b5:54:7e:be:88:15:dd:09:02:8b:1e:83:e4:02: 78:aa:64:e1:e2:d7:69:86:19:e5:26:99:6a:49:56: 7b:b4:60:6a:59:89:b6:c3:2b:c0:51:16:56:07:4f: 43:b7:23:5a:c3:cd:ab:a6:87:84:61:2c:77:fc:72: 25:3a:e4:66:d9:7e:3f:f7:c5:05:93:6d:00:2e:b5: bf:09:65:e2:30:94:22:3a:45:6b:43:f6:79:48:69: 9f:0b:89:4c:bc:07:1c:fa:c0:4d:55:03:6c:e1:82: 84:3a:5f:3b:09:f4:e9:03:10:01:04:49:97:1b:30: ed:92:b1:8d:21:70:b3:8d:46:a6:6f:5b:3f:df:9e: ec:e8:1d:df:92:fe:6a:d6:33:17:15:78:5a:ef:fc: 7f:71:53:8c:f4:10:2b:9b:8c:e9:59:ec:c5:b2:d0: 0a:6d:d8:df:ce:d4:e6:70:57:ac:a1:d7:5d:07:5c: 59:f8:db:fb:f6:74:4e:69:9e:18:57:61:6b:1e:65: f5:78:9a:5c:8a:b5:63:bd:fd:16:97:51:54:a4:1d: 77:7d:b0:d6:2f:9c:63:60:18:cb:78:08:6c:a4:3a: 78:fb:6b:bd:e4:cb:27:44:c6:7e:73:4f:49:c5:30: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2F:F2:6D:E1:4E:FA:40:69:1E:4E:28:39:5E:96:9A:95:C5:99:84 X509v3 Authority Key Identifier: keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.52.0/22 185.226.80.0/22 193.37.52.0/22 193.38.240.0/22 194.26.176.0/22 194.55.80.0/22 194.93.36.0/22 Signature Algorithm: sha256WithRSAEncryption 47:5e:40:82:80:77:94:ff:7f:de:d3:1d:af:4d:b3:b7:14:7e: a1:34:e9:8b:f5:a3:94:16:e6:8d:76:83:47:7e:0a:3c:48:72: 8c:a7:56:68:49:59:36:a1:f9:21:fa:8f:c8:57:44:a4:81:df: 52:12:57:fb:f9:2b:e6:11:d0:c3:f7:9c:98:43:42:dd:6a:0a: d0:8c:9e:31:7a:25:cc:5e:41:d9:4c:f0:ed:15:c8:a0:06:fb: 84:55:83:ba:b2:32:c0:96:18:6f:ec:34:0e:68:1f:a0:6d:3c: 8d:4e:4d:7f:01:36:d1:0d:65:58:9f:5a:a0:99:48:7b:69:90: f8:a5:33:5b:f7:a2:1b:0d:0f:fb:6c:0f:95:f9:a0:23:b7:af: 68:3c:30:38:15:ad:ac:9a:33:0e:0f:c1:da:68:00:4c:3d:1c: d1:69:11:c5:f2:a4:09:a6:49:4a:7a:8c:b4:0a:5a:aa:e7:93: 1b:67:70:be:19:13:04:9f:24:90:04:3a:56:45:b4:da:c0:f9: be:cc:ce:05:23:83:4c:43:1b:01:ef:46:79:4c:3f:b7:23:b8: 79:ed:11:b0:d1:af:d1:99:28:6f:58:c8:ff:98:b5:81:ca:88: 41:ae:00:f8:17:f3:9b:36:d5:c0:00:7a:2b:46:ee:c9:b8:55: 57:a3:42:2a -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7pOSGhj0QDNT2luQV4w6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NzhiNDlmOWFlMjVmMWUxMjc1MzRiMTkxNTA0NGFjN2Qw ZDllNzMwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTJmZjI2ZGUxNGVmYTQwNjkxZTRlMjgzOTVlOTY5YTk1YzU5OTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1FdSTXjIdYyYBsVxYRVtVR+vogV 3QkCix6D5AJ4qmTh4tdphhnlJplqSVZ7tGBqWYm2wyvAURZWB09DtyNaw82rpoeE YSx3/HIlOuRm2X4/98UFk20ALrW/CWXiMJQiOkVrQ/Z5SGmfC4lMvAcc+sBNVQNs 4YKEOl87CfTpAxABBEmXGzDtkrGNIXCzjUamb1s/357s6B3fkv5q1jMXFXha7/x/ cVOM9BArm4zpWezFstAKbdjfztTmcFesodddB1xZ+Nv79nROaZ4YV2FrHmX1eJpc irVjvf0Wl1FUpB13fbDWL5xjYBjLeAhspDp4+2u95MsnRMZ+c09JxTBlTQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFGEv8m3hTvpAaR5OKDlelpqVxZmEMB8GA1UdIwQY MBaAFBZ4tJ+a4l8eEnU0sZFQRKx9DZ5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzIt NzQ1NGExOWQzMmQxLzEvWVNfeWJlRk8ta0JwSGs0b09WNldtcFhGbVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzItNzQ1NGExOWQzMmQx LzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCk040AwQC ueJQAwQCwSU0AwQCwSbwAwQCwhqwAwQCwjdQAwQCwl0kMA0GCSqGSIb3DQEBCwUA A4IBAQBHXkCCgHeU/3/e0x2vTbO3FH6hNOmL9aOUFuaNdoNHfgo8SHKMp1ZoSVk2 ofkh+o/IV0Skgd9SElf7+SvmEdDD95yYQ0LdagrQjJ4xeiXMXkHZTPDtFcigBvuE VYO6sjLAlhhv7DQOaB+gbTyNTk1/ATbRDWVYn1qgmUh7aZD4pTNb96IbDQ/7bA+V +aAjt69oPDA4Fa2smjMOD8HaaABMPRzRaRHF8qQJpklKeoy0Clqq55MbZ3C+GRME nySQBDpWRbTawPm+zM4FI4NMQxsB70Z5TD+3I7h57RGw0a/RmShvWMj/mLWByohB rgD4F/ObNtXAAHorRu7JuFVXo0Iq -----END CERTIFICATE-----Generated at Mon Jan 26 16:58:34 2026 by rpki-client