This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa File: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (raw, json) Hash identifier: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8= Subject key identifier: 63:52:BE:AD:0F:95:5F:8E:2B:58:08:EF:AA:19:7F:87:0E:C3:C1:EA Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B7758BC3B7A31412FBD312B14D021DECF Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203363 IP address blocks: 109.69.111.0/24 maxlen: 24 178.239.171.0/24 maxlen: 24 178.239.174.0/24 maxlen: 24 193.176.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bc:3b:7a:31:41:2f:bd:31:2b:14:d0:21:de:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6352bead0f955f8e2b5808efaa197f870ec3c1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:c7:04:f3:65:aa:cb:5d:aa:11:a4:e6:6a: 12:c3:67:f8:56:3c:f5:36:04:0e:ec:0d:dd:86:80: 01:f3:3b:3c:de:ca:01:99:72:31:fe:46:7d:68:e7: f3:10:00:b6:54:a4:7f:77:01:79:46:ce:40:03:12: d9:7f:96:84:c1:d8:58:30:34:ae:35:c0:1f:48:59: 3b:cb:50:25:88:73:cc:56:7a:9e:e2:a7:f7:1c:da: 19:ef:7a:bc:07:7a:d6:6e:ab:fa:fd:be:f2:3d:4b: 0a:a4:7f:69:21:93:1f:78:60:27:c8:a4:1c:b1:4a: cb:0f:6a:d8:33:5a:07:16:72:7c:7c:92:de:8a:c0: 7d:74:21:71:e4:da:59:21:e2:45:b1:e7:74:e3:f1: 24:30:c6:6a:56:41:6a:39:dd:c4:87:57:93:01:bd: bc:70:9f:a8:13:47:f5:e0:9d:e3:32:61:eb:69:5a: cf:68:d4:06:25:4d:63:57:c6:07:48:da:45:d7:66: 3c:4f:52:bc:ae:07:5e:a2:2a:74:12:6f:9d:00:7e: 6e:3c:10:48:f8:34:5f:23:ac:5e:f3:f9:59:54:91: cb:aa:7e:6e:23:ee:e1:cd:dd:8f:e1:4c:43:40:d4: 23:f1:99:d7:da:9a:91:1d:18:b0:ab:b0:24:35:79: 09:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:52:BE:AD:0F:95:5F:8E:2B:58:08:EF:AA:19:7F:87:0E:C3:C1:EA X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.111.0/24 178.239.171.0/24 178.239.174.0/24 193.176.28.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:c9:76:20:5f:67:ea:86:53:fc:dc:f5:36:f5:88:26:f4:8e: 56:99:95:0a:07:96:b3:c5:0e:c8:82:df:25:d4:40:45:eb:53: 2d:00:97:bb:28:99:7d:e5:95:d0:2c:fb:49:e1:ea:eb:36:15: bc:6a:0e:1b:c0:19:5c:88:ab:dc:42:98:e2:d9:f7:d0:dc:d4: 05:71:99:16:ca:8f:c7:72:35:5f:14:41:9c:cd:5c:d4:b5:a9: 51:67:94:11:1a:f4:c2:38:66:9d:e8:c9:b2:d5:24:9e:df:fa: ca:21:a1:16:cb:62:37:63:10:83:26:91:33:41:05:b5:a0:49: f0:bf:0f:e3:9d:d1:d6:8f:89:69:0e:57:ed:46:b6:66:43:72: e0:1f:09:43:54:e3:b0:72:07:d4:38:ba:e9:6a:44:2d:69:88: e3:fd:f0:a6:90:ce:57:88:82:58:a0:b4:28:4f:3c:a2:fc:87: 68:7f:e9:ea:7a:1a:62:7b:7f:d3:99:7e:53:73:0e:54:85:82: 64:1d:89:07:fe:48:cd:74:20:72:21:28:2d:53:5e:a0:c7:19: 31:2a:2a:48:07:18:49:9e:2d:e3:e6:6e:71:46:d5:57:79:6e: 5c:28:45:d1:ae:ea:54:da:e5:01:4d:56:da:3c:3e:29:7f:04: c7:f1:bd:53 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WLw7ejFBL70xKxTQId7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzUyYmVhZDBmOTU1ZjhlMmI1ODA4ZWZhYTE5N2Y4NzBlYzNjMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5THBPNlqstdqhGk5moSw2f4Vjz1 NgQO7A3dhoAB8zs83soBmXIx/kZ9aOfzEAC2VKR/dwF5Rs5AAxLZf5aEwdhYMDSu NcAfSFk7y1AliHPMVnqe4qf3HNoZ73q8B3rWbqv6/b7yPUsKpH9pIZMfeGAnyKQc sUrLD2rYM1oHFnJ8fJLeisB9dCFx5NpZIeJFsed04/EkMMZqVkFqOd3Eh1eTAb28 cJ+oE0f14J3jMmHraVrPaNQGJU1jV8YHSNpF12Y8T1K8rgdeoip0Em+dAH5uPBBI +DRfI6xe8/lZVJHLqn5uI+7hzd2P4UxDQNQj8ZnX2pqRHRiwq7AkNXkJ+QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGNSvq0PlV+OK1gI76oZf4cOw8HqMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvWTFLLXJRLVZYNDRyV0FqdnFobF9odzdEd2VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAbUVvAwQA su+rAwQAsu+uAwQAwbAcMA0GCSqGSIb3DQEBCwUAA4IBAQBfyXYgX2fqhlP83PU2 9Ygm9I5WmZUKB5azxQ7Igt8l1EBF61MtAJe7KJl95ZXQLPtJ4errNhW8ag4bwBlc iKvcQpji2ffQ3NQFcZkWyo/HcjVfFEGczVzUtalRZ5QRGvTCOGad6Mmy1SSe3/rK IaEWy2I3YxCDJpEzQQW1oEnwvw/jndHWj4lpDlftRrZmQ3LgHwlDVOOwcgfUOLrp akQtaYjj/fCmkM5XiIJYoLQoTzyi/Idof+nqehpie3/TmX5Tcw5UhYJkHYkH/kjN dCByISgtU16gxxkxKipIBxhJni3j5m5xRtVXeW5cKEXRrupU2uUBTVbaPD4pfwTH 8b1T -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:34 2026 by rpki-client