This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa File: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (raw, json) Hash identifier: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU= Subject key identifier: 60:65:19:98:1E:72:F4:FB:33:C6:0F:66:4D:FC:4A:73:25:37:C0:FD Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019B7CECC376D43C8E6CE0FDD17B45E30F27 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa Signing time: Fri 02 Jan 2026 04:17:29 +0000 ROA not before: Fri 02 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214143 IP address blocks: 146.247.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c3:76:d4:3c:8e:6c:e0:fd:d1:7b:45:e3:0f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Jan 2 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=606519981e72f4fb33c60f664dfc4a732537c0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4d:1c:62:15:d1:77:c2:b5:44:27:47:da:15: 46:b7:c8:f3:b0:b6:0f:df:b6:90:0f:ad:9e:e2:cf: a9:63:4e:7b:ab:0d:bd:e8:97:55:63:b2:60:8e:20: 9b:a4:07:8f:d8:33:89:b2:2e:b2:07:3e:be:42:9e: 8d:f7:67:0b:e9:3f:e6:cb:ba:4a:ea:2a:f9:c7:3d: 2a:4f:d9:d3:a3:e1:23:84:95:a6:3e:db:df:96:64: 39:da:3e:e3:8e:2f:d9:6e:45:0a:99:6e:03:2e:ea: 18:8c:3d:c4:b1:83:1d:d1:56:43:80:2c:e9:38:91: 2f:63:d2:ce:ce:9c:d6:9a:f4:09:dc:5b:43:b9:6e: 02:65:4c:66:f0:2d:19:0c:1f:e4:a2:36:be:d0:6f: 3d:9c:60:a5:bf:c6:fc:a9:61:17:3e:eb:ab:d9:fa: 24:cb:9f:af:e8:ff:ce:79:34:e9:eb:f4:17:5a:79: 7e:7a:58:b4:14:dd:4a:91:86:ed:cc:57:db:ab:5a: 3a:f9:ae:37:91:9f:08:3c:f6:dd:c1:ca:17:9e:26: e2:d0:1b:aa:3c:ed:91:29:a1:b1:fa:90:71:fe:a7: e9:fe:4a:b6:41:65:c2:c4:b8:e9:5d:5f:6f:97:8e: 3f:04:14:a5:14:6b:8e:06:a9:b3:20:d2:a7:de:22: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:65:19:98:1E:72:F4:FB:33:C6:0F:66:4D:FC:4A:73:25:37:C0:FD X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.109.0/24 Signature Algorithm: sha256WithRSAEncryption 73:46:d7:ba:7e:d5:ef:56:89:fe:4c:9d:bc:87:88:a4:f4:fc: 97:dc:08:2e:ac:48:6e:35:07:14:8e:0d:7e:fc:d1:40:83:c1: df:6b:f4:10:76:f9:50:08:48:6e:c0:b6:d3:29:92:82:23:a3: 83:41:81:34:88:9c:cb:21:fe:c9:d2:14:96:f7:2f:36:ff:c6: 75:c6:54:8d:71:bb:b7:ce:2f:1d:f2:52:8c:75:50:1a:82:6f: d6:ee:91:64:24:63:9f:b6:b8:1b:74:8a:20:c1:9c:20:e2:b7: 55:81:52:5f:3c:25:98:69:6b:a9:5f:e6:60:cd:a7:ad:f1:5e: b5:21:e1:aa:25:91:79:ad:07:ad:48:59:1e:de:0f:a7:a1:26: 06:c2:8f:0d:2d:58:86:5e:c2:fd:0f:cc:45:92:68:b4:70:8f: 50:dc:77:64:a9:ce:ce:33:40:e7:12:80:3e:d0:95:97:b7:74: e1:4b:13:07:fb:9c:05:22:ce:c0:bc:73:4c:64:01:a4:0b:1c: 09:7b:5f:76:3c:fc:d5:d1:49:ae:4f:f3:ee:03:55:0b:02:b4: 3d:5c:fd:29:f2:3e:b2:4b:be:f2:73:68:e0:4d:c6:44:3a:de: 35:f5:bf:2d:7b:24:eb:e5:f2:fd:d1:a4:af:48:11:11:82:0a: dd:17:72:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87MN21DyObOD90XtF4w8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwMTAyMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDY1MTk5ODFlNzJmNGZiMzNjNjBmNjY0ZGZjNGE3MzI1MzdjMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7k0cYhXRd8K1RCdH2hVGt8jzsLYP 37aQD62e4s+pY057qw296JdVY7JgjiCbpAeP2DOJsi6yBz6+Qp6N92cL6T/my7pK 6ir5xz0qT9nTo+EjhJWmPtvflmQ52j7jji/ZbkUKmW4DLuoYjD3EsYMd0VZDgCzp OJEvY9LOzpzWmvQJ3FtDuW4CZUxm8C0ZDB/koja+0G89nGClv8b8qWEXPuur2fok y5+v6P/OeTTp6/QXWnl+eli0FN1KkYbtzFfbq1o6+a43kZ8IPPbdwcoXnibi0Buq PO2RKaGx+pBx/qfp/kq2QWXCxLjpXV9vl44/BBSlFGuOBqmzINKn3iLRQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBlGZgecvT7M8YPZk38SnMlN8D9MB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvWUdVWm1CNXk5UHN6eGc5bVRmeEtjeVUzd1AwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvdtMA0G CSqGSIb3DQEBCwUAA4IBAQBzRte6ftXvVon+TJ28h4ik9PyX3AgurEhuNQcUjg1+ /NFAg8Hfa/QQdvlQCEhuwLbTKZKCI6ODQYE0iJzLIf7J0hSW9y82/8Z1xlSNcbu3 zi8d8lKMdVAagm/W7pFkJGOftrgbdIogwZwg4rdVgVJfPCWYaWupX+Zgzaet8V61 IeGqJZF5rQetSFke3g+noSYGwo8NLViGXsL9D8xFkmi0cI9Q3Hdkqc7OM0DnEoA+ 0JWXt3ThSxMH+5wFIs7AvHNMZAGkCxwJe192PPzV0UmuT/PuA1ULArQ9XP0p8j6y S77yc2jgTcZEOt419b8teyTr5fL90aSvSBERggrdF3I0 -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:25 2026 by rpki-client