This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Y_qh5r9T2xhCuxsghsFLFTjvGh0.roa File: Y_qh5r9T2xhCuxsghsFLFTjvGh0.roa (raw, json) Hash identifier: sV9l7QyOFa5cFbGmFiIOjsobVZZWNkUdTEOXDxeETcY= Subject key identifier: 63:FA:A1:E6:BF:53:DB:18:42:BB:1B:20:86:C1:4B:15:38:EF:1A:1D Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B7DCAE1759FB56BF1E9310A47CE168D54 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Y_qh5r9T2xhCuxsghsFLFTjvGh0.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 87.254.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e1:75:9f:b5:6b:f1:e9:31:0a:47:ce:16:8d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63faa1e6bf53db1842bb1b2086c14b1538ef1a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:2b:ff:d9:3b:aa:03:a5:e0:ac:1a:72:9c: 91:56:23:9e:61:64:d0:f5:0b:78:c7:c3:fe:6f:87: 7d:75:9c:68:3d:5c:df:05:7c:d1:a4:c6:a9:30:93: 5a:08:ef:ec:7d:44:bc:18:fc:ed:f1:ae:3a:0c:33: eb:f7:1b:90:5d:e6:d0:f2:69:bb:30:9c:3f:93:fe: ad:5d:b1:e8:0f:19:bf:a6:85:2c:b5:d5:c5:3a:60: 8a:8d:bd:75:bd:ab:7c:88:e7:5c:b6:b8:94:18:55: 55:14:92:09:e1:8a:62:49:5e:19:80:9e:8c:2e:e8: 36:ec:4c:8c:14:fc:b1:5f:e8:a3:df:e7:7e:48:ac: a0:81:c3:67:c2:a5:4f:51:9c:f4:2c:c8:b7:0a:20: 31:86:5a:9e:bc:a5:df:70:0c:25:7b:e4:c6:9b:34: 85:1c:61:71:c4:21:b4:cf:5d:42:cb:4f:b2:09:a3: e7:c5:2d:29:e4:db:fb:dd:1d:a6:0d:7d:cf:ed:61: e5:f4:55:5f:b0:04:98:8f:2e:93:c2:02:08:19:25: 88:23:da:ba:2a:98:ed:bb:b9:6c:11:d6:a3:47:60: 7f:2a:75:a5:87:b0:42:f3:51:13:66:8c:ee:b4:c0: 47:c1:90:26:4f:0a:b7:f6:68:1a:57:85:41:45:d7: 10:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FA:A1:E6:BF:53:DB:18:42:BB:1B:20:86:C1:4B:15:38:EF:1A:1D X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Y_qh5r9T2xhCuxsghsFLFTjvGh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.3.0/24 Signature Algorithm: sha256WithRSAEncryption 85:15:bb:d4:8b:4f:f8:52:3e:38:4c:d1:2b:1a:c5:80:ac:ce: ea:5b:e2:ed:e4:40:83:9a:62:a8:16:6d:b9:e1:25:4b:7a:e1: f8:d0:2c:40:1d:5e:6b:3f:d2:5e:95:4c:22:52:05:b3:22:98: c6:64:9a:32:b6:70:9e:e8:5e:8f:dc:2e:a1:22:36:29:33:d5: 83:7a:ad:64:65:02:79:83:93:a8:71:fa:52:b7:36:5e:cc:6d: e9:96:75:ad:b2:9d:b6:61:87:10:14:87:9b:bb:23:8a:5b:41: 3f:ea:91:f9:be:54:fc:db:9d:6a:dd:e5:43:8d:0e:78:0e:d2: 29:f9:d4:c7:e6:24:c9:64:ad:5e:78:aa:ec:52:2a:9f:e4:bb: 3c:3c:6b:87:29:72:8c:1e:2a:19:f1:b6:70:47:c4:46:7b:ac: 4e:24:33:73:c5:fe:00:7b:26:1f:08:66:47:3c:fa:3a:3d:ca: 82:e5:7a:6c:3a:de:a6:e7:95:57:3d:5d:a3:c3:eb:79:0f:d9: 6a:6c:7e:00:1b:63:ad:3c:9f:1f:73:ec:5d:f4:42:6a:fb:39: b8:d5:ee:49:88:4c:8f:30:31:69:98:80:6a:17:f3:81:c8:fd: af:6e:60:73:cd:b3:03:dd:ba:00:a6:1b:cc:5e:de:68:c4:49: 99:ff:a5:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuF1n7Vr8ekxCkfOFo1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2ZhYTFlNmJmNTNkYjE4NDJiYjFiMjA4NmMxNGIxNTM4ZWYxYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7or/9k7qgOl4KwacpyRViOeYWTQ 9Qt4x8P+b4d9dZxoPVzfBXzRpMapMJNaCO/sfUS8GPzt8a46DDPr9xuQXebQ8mm7 MJw/k/6tXbHoDxm/poUstdXFOmCKjb11vat8iOdctriUGFVVFJIJ4YpiSV4ZgJ6M Lug27EyMFPyxX+ij3+d+SKyggcNnwqVPUZz0LMi3CiAxhlqevKXfcAwle+TGmzSF HGFxxCG0z11Cy0+yCaPnxS0p5Nv73R2mDX3P7WHl9FVfsASYjy6TwgIIGSWII9q6 Kpjtu7lsEdajR2B/KnWlh7BC81ETZozutMBHwZAmTwq39mgaV4VBRdcQYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGP6oea/U9sYQrsbIIbBSxU47xodMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvWV9xaDVyOVQyeGhDdXhzZ2hzRkxGVGp2R2gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4DMA0G CSqGSIb3DQEBCwUAA4IBAQCFFbvUi0/4Uj44TNErGsWArM7qW+Lt5ECDmmKoFm25 4SVLeuH40CxAHV5rP9JelUwiUgWzIpjGZJoytnCe6F6P3C6hIjYpM9WDeq1kZQJ5 g5OocfpStzZezG3plnWtsp22YYcQFIebuyOKW0E/6pH5vlT8251q3eVDjQ54DtIp +dTH5iTJZK1eeKrsUiqf5Ls8PGuHKXKMHioZ8bZwR8RGe6xOJDNzxf4AeyYfCGZH PPo6PcqC5XpsOt6m55VXPV2jw+t5D9lqbH4AG2OtPJ8fc+xd9EJq+zm41e5JiEyP MDFpmIBqF/OByP2vbmBzzbMD3boAphvMXt5oxEmZ/6Vh -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:42 2026 by rpki-client