This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/YFnsBz-ThBGqQauorb6rDcdXyRc.roa File: YFnsBz-ThBGqQauorb6rDcdXyRc.roa (raw, json) Hash identifier: ofSsRHMM0MyWc7/I1MxyPNGPxwyZiKD6PRrjZ0gvq34= Subject key identifier: 60:59:EC:07:3F:93:84:11:AA:41:AB:A8:AD:BE:AB:0D:C7:57:C9:17 Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436 Certificate serial: 019B77C744FB0F97003435CF0BC5430730D4 Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/YFnsBz-ThBGqQauorb6rDcdXyRc.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137457 IP address blocks: 145.34.152.0/21 maxlen: 24 145.34.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:44:fb:0f:97:00:34:35:cf:0b:c5:43:07:30:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6059ec073f938411aa41aba8adbeab0dc757c917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:68:11:e6:c1:d6:dd:98:41:fd:ef:68:ff:67: 1e:cb:c2:37:fc:57:91:ad:ac:d5:07:93:5b:e4:a9: ca:2a:73:96:86:06:03:a1:d1:b2:14:0d:5b:2a:ca: b2:57:9a:27:d6:45:29:88:d5:72:81:d7:a2:d1:63: 3b:53:d3:be:5b:79:fd:7d:79:fe:0a:cd:d8:e0:48: 1a:14:8a:35:6f:58:d0:e2:05:58:3f:13:40:d0:f4: c9:1d:cb:52:8a:bd:04:10:4f:90:e0:bc:42:e7:07: 52:38:e2:08:b3:65:53:fc:a8:d9:49:f9:fe:9f:d5: 60:83:bf:9e:7e:f3:ea:d7:88:aa:b6:2c:f9:dc:41: d9:b3:dc:01:65:61:45:74:18:aa:64:f7:21:eb:86: 00:92:fc:4b:d3:b6:3b:cb:63:16:76:93:25:95:a7: cc:63:34:86:ee:f2:7b:fd:f7:c8:ec:fa:3e:31:54: c1:11:94:e5:43:d1:6a:ef:3b:ff:19:a6:e1:6e:30: 7e:d4:41:e2:a2:b6:f1:de:10:38:3d:58:db:93:5c: 9c:18:ff:75:53:47:aa:02:41:c7:e3:de:98:87:33: 73:1d:9a:7f:db:63:5f:9a:62:9b:af:37:68:f8:0e: a7:07:2a:37:c9:3b:2f:fd:96:be:8e:43:9e:2a:33: 99:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:59:EC:07:3F:93:84:11:AA:41:AB:A8:AD:BE:AB:0D:C7:57:C9:17 X509v3 Authority Key Identifier: keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/YFnsBz-ThBGqQauorb6rDcdXyRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.34.152.0/21 Signature Algorithm: sha256WithRSAEncryption 18:0f:00:83:5f:82:b9:ca:6e:cb:42:94:ee:42:36:40:a5:53: b2:46:d1:1b:54:ac:c6:05:dc:ba:51:49:82:68:52:0c:52:0b: 78:36:92:c1:99:7f:23:49:cc:05:03:ea:12:db:93:e7:98:9c: a0:7f:b3:c3:10:36:ab:17:81:42:68:66:08:1a:e2:1c:52:c6: 94:7f:62:90:f1:31:9c:bc:a8:00:c6:f0:50:1c:d7:ea:ab:c3: 37:63:3f:ec:39:67:4d:7c:6f:d5:50:58:ca:55:26:64:7c:df: 59:52:f9:5e:40:b9:c2:ba:bc:57:90:d2:2c:1f:ab:92:a2:48: 76:48:ea:91:ee:ea:af:cf:23:a7:2f:18:8c:48:c7:1d:af:e5: 99:34:4f:23:f0:8c:13:94:89:65:a5:ef:ec:fd:43:1f:34:91: 26:cf:d0:34:e2:1d:0c:21:f8:26:28:1c:4f:9f:ad:12:f2:42: d4:ff:cb:52:ab:97:a8:38:31:4b:f7:3e:1f:85:f8:76:22:ba: 9f:49:d0:aa:b3:6c:9a:5e:0f:d9:03:00:fd:f0:80:57:b9:87: 52:41:43:11:fe:19:64:14:fd:7e:fd:30:61:b9:dc:98:6b:7a: b9:ed:57:fd:96:b4:a8:2b:f5:c0:17:70:ab:43:14:50:cd:f4: 15:1b:94:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0T7D5cANDXPC8VDBzDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTM4NTQyY2ZkYjFlZTZlMDc1ZWFlNmIxMDFlN2JiNWIx NGM0MzYwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDU5ZWMwNzNmOTM4NDExYWE0MWFiYThhZGJlYWIwZGM3NTdjOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mgR5sHW3ZhB/e9o/2cey8I3/FeR razVB5Nb5KnKKnOWhgYDodGyFA1bKsqyV5on1kUpiNVygdei0WM7U9O+W3n9fXn+ Cs3Y4EgaFIo1b1jQ4gVYPxNA0PTJHctSir0EEE+Q4LxC5wdSOOIIs2VT/KjZSfn+ n9Vgg7+efvPq14iqtiz53EHZs9wBZWFFdBiqZPch64YAkvxL07Y7y2MWdpMllafM YzSG7vJ7/ffI7Po+MVTBEZTlQ9Fq7zv/GabhbjB+1EHiorbx3hA4PVjbk1ycGP91 U0eqAkHH496YhzNzHZp/22NfmmKbrzdo+A6nByo3yTsv/Za+jkOeKjOZ5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBZ7Ac/k4QRqkGrqK2+qw3HV8kXMB8GA1UdIwQY MBaAFNCjhULP2x7m4HXq5rEB57tbFMQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEt NDBkMTkxMWZhN2YzLzEvWUZuc0J6LVRoQkdxUWF1b3JiNnJEY2RYeVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEtNDBkMTkxMWZhN2Yz LzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkSKYMA0G CSqGSIb3DQEBCwUAA4IBAQAYDwCDX4K5ym7LQpTuQjZApVOyRtEbVKzGBdy6UUmC aFIMUgt4NpLBmX8jScwFA+oS25PnmJygf7PDEDarF4FCaGYIGuIcUsaUf2KQ8TGc vKgAxvBQHNfqq8M3Yz/sOWdNfG/VUFjKVSZkfN9ZUvleQLnCurxXkNIsH6uSokh2 SOqR7uqvzyOnLxiMSMcdr+WZNE8j8IwTlIllpe/s/UMfNJEmz9A04h0MIfgmKBxP n60S8kLU/8tSq5eoODFL9z4fhfh2IrqfSdCqs2yaXg/ZAwD98IBXuYdSQUMR/hlk FP1+/TBhudyYa3q57Vf9lrSoK/XAF3CrQxRQzfQVG5Sd -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:46 2026 by rpki-client