This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/YOETByGoQWvX1MVQbtKSNQjPq4I.roa File: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (raw, json) Hash identifier: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q= Subject key identifier: 60:E1:13:07:21:A8:41:6B:D7:D4:C5:50:6E:D2:92:35:08:CF:AB:82 Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238 Certificate serial: 019B7B35442CA953718C49DB473CBEEF67A5 Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/YOETByGoQWvX1MVQbtKSNQjPq4I.roa Signing time: Thu 01 Jan 2026 20:17:27 +0000 ROA not before: Thu 01 Jan 2026 20:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43995 IP address blocks: 45.159.44.0/22 maxlen: 22 82.151.32.0/19 maxlen: 27 185.77.24.0/22 maxlen: 24 2a02:e040::/29 maxlen: 64 2a0f:7180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:44:2c:a9:53:71:8c:49:db:47:3c:be:ef:67:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238 Validity Not Before: Jan 1 20:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60e1130721a8416bd7d4c5506ed2923508cfab82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:bd:06:ea:63:28:53:8a:8a:dc:b4:c4:c4: 56:1e:35:6e:91:34:35:a1:f7:52:8e:8c:43:d9:e9: 91:f5:2e:53:ad:71:df:01:b4:a1:eb:c3:c5:3e:89: 13:db:c7:1a:74:33:65:47:4f:89:44:63:f9:8a:d7: 5c:91:87:30:6b:4c:bc:81:e2:ee:a8:cd:c7:1b:32: 1c:e4:54:cf:76:74:66:5f:0b:e7:eb:98:09:88:be: af:44:4f:75:79:b9:2e:b1:24:b8:e1:12:0e:ce:56: 52:6a:e4:a0:cb:5c:d7:ea:73:00:c8:20:8a:64:ad: a4:20:3c:bf:16:e3:50:26:4d:e2:9e:2e:ae:35:05: 44:2e:28:25:15:1f:9d:8f:83:7b:41:2e:34:c8:05: 72:dc:c0:79:53:24:08:18:02:b7:30:91:d4:47:ea: 0a:46:92:00:19:64:e2:a5:a7:ff:bf:b4:5f:51:9e: 98:15:df:5f:83:a5:95:46:45:d8:19:a0:8d:a0:79: e3:c7:4b:17:08:90:35:e0:e0:3e:32:3d:4a:38:52: dd:37:c9:a9:2c:57:09:8f:a4:2c:47:61:5b:3b:77: ce:79:cb:6e:b9:d0:23:ba:31:09:85:a3:8a:45:bf: a4:7b:07:ee:f6:51:ac:c8:74:16:28:b5:ae:0a:95: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E1:13:07:21:A8:41:6B:D7:D4:C5:50:6E:D2:92:35:08:CF:AB:82 X509v3 Authority Key Identifier: keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/YOETByGoQWvX1MVQbtKSNQjPq4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.44.0/22 82.151.32.0/19 185.77.24.0/22 IPv6: 2a02:e040::/29 2a0f:7180::/29 Signature Algorithm: sha256WithRSAEncryption 2b:65:4f:c4:eb:ad:8b:d3:2c:8e:bf:08:5c:3b:e5:0d:82:c5: fa:63:0b:98:36:c7:02:aa:e2:f5:1f:d4:4c:73:94:0b:7e:39: 4f:07:62:6d:19:c9:8a:ba:d4:fb:cd:39:43:03:52:75:43:69: 8f:8f:4e:cd:e4:c7:72:32:34:1f:c2:2e:fb:b3:b6:d4:95:a4: 81:df:8d:cc:1c:fb:68:c9:e6:1e:b5:ab:1a:fe:41:35:31:69: 3f:60:a7:bd:8e:67:dc:1e:05:4d:ad:ab:bf:0d:6f:21:43:04: 03:f8:c1:d1:47:8c:0a:33:59:c8:e3:d5:c2:7e:4b:b2:d2:81: 69:38:3c:f7:8f:33:d3:0b:b5:06:c0:c9:38:ff:6a:8f:ee:e1: e2:09:3e:20:69:71:c2:4c:38:98:b0:86:32:6c:40:29:13:08: e7:fe:c5:43:f6:67:77:23:f8:72:61:35:ca:77:e0:ef:d0:cf: bb:97:05:af:74:07:65:1c:5d:fd:40:55:4e:20:8a:93:ec:60: 3f:74:b7:96:b3:14:bb:39:82:42:1f:d2:c6:0e:07:6c:8d:69: af:7b:d2:61:9d:19:48:3a:ba:0b:a0:80:32:88:ff:e4:dc:b1: 93:30:10:2f:00:2d:46:81:94:e2:7f:a9:99:9b:d2:b3:64:89: 27:94:29:e5 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7NUQsqVNxjEnbRzy+72elMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OGIyZjRlNjY4ZWYwYTE3NmE4YmQwMDA0ZTI3Nzc2NzA4 MzMyMzgwHhcNMjYwMTAxMjAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGUxMTMwNzIxYTg0MTZiZDdkNGM1NTA2ZWQyOTIzNTA4Y2ZhYjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mm9BupjKFOKity0xMRWHjVukTQ1 ofdSjoxD2emR9S5TrXHfAbSh68PFPokT28cadDNlR0+JRGP5itdckYcwa0y8geLu qM3HGzIc5FTPdnRmXwvn65gJiL6vRE91ebkusSS44RIOzlZSauSgy1zX6nMAyCCK ZK2kIDy/FuNQJk3ini6uNQVELiglFR+dj4N7QS40yAVy3MB5UyQIGAK3MJHUR+oK RpIAGWTipaf/v7RfUZ6YFd9fg6WVRkXYGaCNoHnjx0sXCJA14OA+Mj1KOFLdN8mp LFcJj6QsR2FbO3fOectuudAjujEJhaOKRb+kewfu9lGsyHQWKLWuCpX/HwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFGDhEwchqEFr19TFUG7SkjUIz6uCMB8GA1UdIwQY MBaAFPaLL05mjvChdqi9AATid3ZwgzI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEt NTJiMDc3NWM3Y2I0LzEvWU9FVEJ5R29RV3ZYMU1WUWJ0S1NOUWpQcTRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEtNTJiMDc3NWM3Y2I0 LzEvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCLZ8sAwQF UpcgAwQCuU0YMBQEAgACMA4DBQMqAuBAAwUDKg9xgDANBgkqhkiG9w0BAQsFAAOC AQEAK2VPxOuti9Msjr8IXDvlDYLF+mMLmDbHAqri9R/UTHOUC345TwdibRnJirrU +805QwNSdUNpj49OzeTHcjI0H8Iu+7O21JWkgd+NzBz7aMnmHrWrGv5BNTFpP2Cn vY5n3B4FTa2rvw1vIUMEA/jB0UeMCjNZyOPVwn5LstKBaTg8948z0wu1BsDJOP9q j+7h4gk+IGlxwkw4mLCGMmxAKRMI5/7FQ/ZndyP4cmE1ynfg79DPu5cFr3QHZRxd /UBVTiCKk+xgP3S3lrMUuzmCQh/Sxg4HbI1pr3vSYZ0ZSDq6C6CAMoj/5NyxkzAQ LwAtRoGU4n+pmZvSs2SJJ5Qp5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:50 2026 by rpki-client