This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/35AJFS3ma8wMh8DQN10mzkDprMk.roa File: 35AJFS3ma8wMh8DQN10mzkDprMk.roa (raw, json) Hash identifier: YkoFi1WFUEZ4n0D6yF8yyJuqKzAxH5ZEWT43XXgwB1k= Subject key identifier: DF:90:09:15:2D:E6:6B:CC:0C:87:C0:D0:37:5D:26:CE:40:E9:AC:C9 Certificate issuer: /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a Certificate serial: 019B7B3642B810F5ED6B4ACE3641022BDB32 Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/35AJFS3ma8wMh8DQN10mzkDprMk.roa Signing time: Thu 01 Jan 2026 20:18:32 +0000 ROA not before: Thu 01 Jan 2026 20:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52152 IP address blocks: 195.54.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:42:b8:10:f5:ed:6b:4a:ce:36:41:02:2b:db:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df9009152de66bcc0c87c0d0375d26ce40e9acc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:35:9f:fa:a1:16:cf:5e:a5:05:f5:59:13: ce:5a:8e:77:03:ff:8e:08:a0:47:43:65:49:c0:aa: c7:6b:62:5b:d8:94:71:00:28:e6:db:57:5a:3c:fa: 2c:46:c0:78:27:67:ba:cc:51:86:40:32:ba:d1:7f: 0d:e9:ec:41:4e:fc:0c:7b:c7:64:30:2f:85:6d:f9: 7d:1b:ea:51:04:be:40:17:39:fe:29:86:1e:e7:63: 50:b3:ca:a5:11:f6:65:f7:77:a5:39:a2:fb:76:7a: b5:40:31:68:25:a2:f2:d5:73:4d:c3:c2:e4:ff:a1: 2c:4c:90:2a:d5:ba:20:9f:ea:32:b0:10:0b:dd:db: 99:59:00:90:61:03:f3:11:ce:d9:e9:44:97:19:3f: cf:34:d1:2e:1a:0e:18:35:9f:be:ef:cb:8e:c4:1d: e3:ac:92:e5:c8:04:a4:4f:a4:d2:a3:cd:95:37:02: 71:59:3f:d6:0e:6a:be:95:c7:b9:9a:7b:79:9e:7e: 07:22:b3:90:3a:2e:05:62:c7:92:dc:b6:42:c6:30: cc:e7:9b:b4:8d:f0:a3:11:6e:40:ac:9c:ec:5a:1c: 68:55:ce:92:fb:84:99:35:f6:b3:7e:da:1e:be:94: c1:bc:64:78:39:7b:66:0b:5d:c8:f8:9e:91:a1:6a: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:90:09:15:2D:E6:6B:CC:0C:87:C0:D0:37:5D:26:CE:40:E9:AC:C9 X509v3 Authority Key Identifier: keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/35AJFS3ma8wMh8DQN10mzkDprMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.190.0/23 Signature Algorithm: sha256WithRSAEncryption 54:d2:4d:2d:c1:27:22:d7:21:fd:ec:b9:09:e0:2a:7b:f6:37: 17:7a:01:7d:60:1d:43:af:06:21:b2:0f:8a:19:fa:49:1e:28: ab:c2:fe:2e:9c:77:2d:1f:93:c5:36:1c:86:c0:c9:84:01:17: 21:9d:41:7b:12:59:02:2e:7d:c6:73:bf:24:3a:56:e8:20:0e: 9e:c8:7e:9a:5e:30:c7:f2:3d:21:34:ae:cc:f8:f1:2d:90:0e: 3a:a7:80:9e:bf:29:20:96:43:a7:16:9c:fd:a5:89:d8:b7:f1: b1:c3:ad:82:53:eb:ed:e1:ce:4d:61:ad:c8:1e:0a:ce:32:ec: 72:ad:df:e2:20:eb:4e:26:f0:91:85:01:90:ee:5c:20:d7:ba: 3d:19:4e:38:93:57:d0:e4:bb:1c:07:36:d3:7d:4f:e8:d7:03: 41:fb:36:5f:72:cb:6c:24:fa:b7:49:64:6a:ae:d1:e2:6c:58: fc:3f:61:21:4d:db:af:b0:c7:90:15:8b:aa:a5:64:bc:19:a4: fc:76:aa:41:9a:c2:00:b9:ad:64:89:44:0b:a9:2f:d6:9f:05: fa:03:06:ef:eb:7e:97:10:5b:fc:85:eb:c4:ca:4c:c4:e6:97: 68:88:f6:5a:d5:62:b3:c8:3e:17:5a:12:d6:49:fc:1f:90:c7: 4b:09:2c:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkK4EPXta0rONkECK9syMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZTg4ZmZlNmYwZGU1ZjJmMWZjOWQxNGVmNjJmMjU2NzBi ZDViNGEwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjkwMDkxNTJkZTY2YmNjMGM4N2MwZDAzNzVkMjZjZTQwZTlhY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sc1n/qhFs9epQX1WRPOWo53A/+O CKBHQ2VJwKrHa2Jb2JRxACjm21daPPosRsB4J2e6zFGGQDK60X8N6exBTvwMe8dk MC+Fbfl9G+pRBL5AFzn+KYYe52NQs8qlEfZl93elOaL7dnq1QDFoJaLy1XNNw8Lk /6EsTJAq1bogn+oysBAL3duZWQCQYQPzEc7Z6USXGT/PNNEuGg4YNZ++78uOxB3j rJLlyASkT6TSo82VNwJxWT/WDmq+lce5mnt5nn4HIrOQOi4FYseS3LZCxjDM55u0 jfCjEW5ArJzsWhxoVc6S+4SZNfazftoevpTBvGR4OXtmC13I+J6RoWpASwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+QCRUt5mvMDIfA0DddJs5A6azJMB8GA1UdIwQY MBaAFGDoj/5vDeXy8fydFO9i8lZwvVtKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEt MDcyNWYwNjk3YjgzLzEvMzVBSkZTM21hOHdNaDhEUU4xMG16a0Rwck1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEtMDcyNWYwNjk3Yjgz LzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwza+MA0G CSqGSIb3DQEBCwUAA4IBAQBU0k0twSci1yH97LkJ4Cp79jcXegF9YB1DrwYhsg+K GfpJHiirwv4unHctH5PFNhyGwMmEARchnUF7ElkCLn3Gc78kOlboIA6eyH6aXjDH 8j0hNK7M+PEtkA46p4CevykglkOnFpz9pYnYt/Gxw62CU+vt4c5NYa3IHgrOMuxy rd/iIOtOJvCRhQGQ7lwg17o9GU44k1fQ5LscBzbTfU/o1wNB+zZfcstsJPq3SWRq rtHibFj8P2EhTduvsMeQFYuqpWS8GaT8dqpBmsIAua1kiUQLqS/WnwX6Awbv636X EFv8hevEykzE5pdoiPZa1WKzyD4XWhLWSfwfkMdLCSzp -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:33 2026 by rpki-client