This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa File: Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa (raw, json) Hash identifier: 9JB+Ut5rRiBxCY40cvzaauAZdMWzFKX4dxG7GlKOoZM= Subject key identifier: 62:0E:17:F4:7E:03:58:61:8A:0F:C1:F9:61:13:D4:52:4A:18:94:7C Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8 Certificate serial: 019B7A5B081CE341F8C5C93C0010CF84059F Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197204 IP address blocks: 185.134.232.0/22 maxlen: 24 2a06:ef80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:08:1c:e3:41:f8:c5:c9:3c:00:10:cf:84:05:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8 Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=620e17f47e0358618a0fc1f96113d4524a18947c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:b7:c1:b3:15:f9:54:31:32:26:f5:89:a7: 3c:60:54:ca:af:60:9b:fd:ff:09:8c:a6:3c:3e:64: 80:09:e4:0c:a6:ef:58:13:2b:9b:53:b6:50:b0:0c: 99:24:b4:6d:de:a3:4a:e4:f6:c0:97:89:cf:5a:56: fd:b1:89:64:22:d4:e5:92:20:e7:87:68:19:d2:b9: 86:7a:41:ad:4f:ab:10:1c:8f:44:5a:4a:1d:80:23: 25:50:7a:ac:36:d2:6b:e1:ca:7f:73:44:d1:05:6a: 24:3f:a2:13:75:a7:69:fc:78:75:ea:fc:23:5d:1c: a5:d8:df:4a:52:0d:5e:56:c6:0f:97:ec:5c:8d:73: 19:0b:bd:ec:2a:fc:06:38:ff:1a:9a:69:ef:57:07: e7:db:20:44:a4:8b:5a:58:cf:b6:63:b5:dc:ea:b5: 73:70:3a:aa:55:9d:ec:08:bf:6d:f0:78:30:35:c0: 60:e8:82:b2:6e:03:5b:b2:55:9a:0d:71:06:c8:76: 6e:56:f4:15:8e:3d:7d:31:e9:4e:37:c1:82:34:2e: bd:a3:4a:ae:0d:e8:f0:3e:8a:9f:8f:f4:19:44:70: 6c:e4:85:7e:50:e8:fc:cb:30:61:23:7c:f4:c7:a1: 7a:a3:c5:fd:2f:fe:ec:3a:f4:f5:a3:1f:8c:4c:79: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0E:17:F4:7E:03:58:61:8A:0F:C1:F9:61:13:D4:52:4A:18:94:7C X509v3 Authority Key Identifier: keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.232.0/22 IPv6: 2a06:ef80::/29 Signature Algorithm: sha256WithRSAEncryption 1b:8f:d4:d7:3f:19:74:fc:11:01:2c:53:1d:27:2a:90:bb:cb: 21:2d:78:1b:ce:88:f6:9f:95:bf:bb:2e:27:9c:72:5f:0c:a7: d5:cb:c8:93:22:78:63:cd:04:1b:c2:07:8e:d0:9b:b5:29:4d: a4:53:92:bc:34:2d:b4:87:6d:a0:84:c1:36:9f:48:73:7d:55: 69:95:64:dd:17:d8:c3:0e:ec:75:64:2e:6e:5b:2a:5a:f5:1c: ce:ec:37:00:28:78:f2:58:cd:b2:d8:cf:36:fc:b9:49:ab:3d: f0:8e:df:b0:ca:d0:6f:b3:f0:9c:86:a3:6f:1e:bf:23:5a:4b: f4:71:a2:49:e8:99:8c:07:59:35:f4:ac:45:77:f9:d0:42:b5: 36:0c:6d:e9:c4:aa:d4:19:8b:76:da:33:ac:85:84:8f:05:84: 98:fe:93:62:bb:a7:36:b4:8c:a0:d5:25:89:9d:d6:d7:3b:fc: 54:be:23:59:67:a3:29:dd:7c:73:56:51:c9:1a:07:46:41:72: 3c:c0:e6:0b:e9:9d:92:59:c4:b0:dc:f5:71:7b:c9:54:a0:38: e9:e7:a7:7d:dc:53:37:c8:e1:c7:8a:58:3b:19:e8:09:4d:21: 3e:c2:cb:b1:35:be:0a:4e:5e:b1:2f:a5:2a:c5:a0:e4:fc:6b: 4f:38:0f:a4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wwgc40H4xck8ABDPhAWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZmFkN2M5YTQ4NWZlYjI5MTc5M2ViOWUyZGI5OGY0MThl NWM0YjgwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjBlMTdmNDdlMDM1ODYxOGEwZmMxZjk2MTEzZDQ1MjRhMTg5NDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5i3wbMV+VQxMib1iac8YFTKr2Cb /f8JjKY8PmSACeQMpu9YEyubU7ZQsAyZJLRt3qNK5PbAl4nPWlb9sYlkItTlkiDn h2gZ0rmGekGtT6sQHI9EWkodgCMlUHqsNtJr4cp/c0TRBWokP6ITdadp/Hh16vwj XRyl2N9KUg1eVsYPl+xcjXMZC73sKvwGOP8ammnvVwfn2yBEpItaWM+2Y7Xc6rVz cDqqVZ3sCL9t8HgwNcBg6IKybgNbslWaDXEGyHZuVvQVjj19MelON8GCNC69o0qu DejwPoqfj/QZRHBs5IV+UOj8yzBhI3z0x6F6o8X9L/7sOvT1ox+MTHkfcQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGIOF/R+A1hhig/B+WET1FJKGJR8MB8GA1UdIwQY MBaAFFP618mkhf6ykXk+ueLbmPQY5cS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9yWHlhU0ZfcktSZVQ2NTR0dVk5QmpseExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi81MTQwZTgtYzdmYy00OGJmLTk2MGUt MGYwNGM2YTk5NWZkLzEvWWc0WDlINERXR0dLRDhINVlSUFVVa29ZbEh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi81MTQwZTgtYzdmYy00OGJmLTk2MGUtMGYwNGM2YTk5NWZk LzEvVV9yWHlhU0ZfcktSZVQ2NTR0dVk5QmpseExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYboMA0E AgACMAcDBQMqBu+AMA0GCSqGSIb3DQEBCwUAA4IBAQAbj9TXPxl0/BEBLFMdJyqQ u8shLXgbzoj2n5W/uy4nnHJfDKfVy8iTInhjzQQbwgeO0Ju1KU2kU5K8NC20h22g hME2n0hzfVVplWTdF9jDDux1ZC5uWypa9RzO7DcAKHjyWM2y2M82/LlJqz3wjt+w ytBvs/CchqNvHr8jWkv0caJJ6JmMB1k19KxFd/nQQrU2DG3pxKrUGYt22jOshYSP BYSY/pNiu6c2tIyg1SWJndbXO/xUviNZZ6Mp3XxzVlHJGgdGQXI8wOYL6Z2SWcSw 3PVxe8lUoDjp56d93FM3yOHHilg7GegJTSE+wsuxNb4KTl6xL6UqxaDk/GtPOA+k -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:18 2026 by rpki-client