This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/yKhioiAI6-4jdwcerEQCLkvTbbQ.roa File: yKhioiAI6-4jdwcerEQCLkvTbbQ.roa (raw, json) Hash identifier: AKG0EdZvwdWd5/g3X8141KYxu5/oFF9spVOegmiaXd4= Subject key identifier: C8:A8:62:A2:20:08:EB:EE:23:77:07:1E:AC:44:02:2E:4B:D3:6D:B4 Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee Certificate serial: 019B7C7F54BDD510C2F22E20E0E96FA2E6AA Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/yKhioiAI6-4jdwcerEQCLkvTbbQ.roa Signing time: Fri 02 Jan 2026 02:17:57 +0000 ROA not before: Fri 02 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206673 IP address blocks: 80.66.92.0/22 maxlen: 24 185.174.128.0/22 maxlen: 24 185.185.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:54:bd:d5:10:c2:f2:2e:20:e0:e9:6f:a2:e6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee Validity Not Before: Jan 2 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8a862a22008ebee2377071eac44022e4bd36db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bb:5c:27:ca:b1:8f:60:03:f6:0d:11:7b:6e: f8:24:46:79:cb:13:91:be:14:9e:8e:9d:dc:24:cf: 63:09:af:1d:1e:da:08:77:35:c8:ac:16:e7:07:09: c7:6a:15:d7:25:c6:93:ad:cd:f8:34:ea:2e:b8:c6: 01:5e:df:3b:88:50:bd:2e:3d:c9:f6:14:a2:84:60: 93:16:7c:56:c8:8d:37:fa:48:93:be:16:b3:ed:16: 82:87:5a:97:e6:73:bf:e1:72:41:4d:5b:fa:96:cc: fc:32:bb:10:97:a6:78:fa:35:a4:36:c8:91:7f:a6: 5e:7d:86:0a:bd:fb:9f:45:11:40:13:55:d8:4b:63: 6c:fe:b9:e9:d9:50:1a:cf:a8:63:7c:ae:0c:0d:d4: 7e:ba:9e:59:f3:82:24:d9:8a:22:37:f7:ac:cf:40: a0:6a:de:9b:a5:11:40:2c:34:61:81:62:3d:ec:05: d0:93:24:93:0a:d1:7f:53:2f:4e:6d:b5:8e:01:33: 44:5b:4b:61:ad:46:fb:24:e4:f0:f4:de:fb:5f:67: 89:94:09:8e:c9:7b:c4:7c:3f:b8:a2:7b:4a:fb:9a: 96:dd:da:98:b2:77:f7:ce:ca:52:b7:73:30:e2:5d: d8:be:63:31:e8:9c:19:52:f4:23:81:9c:24:39:c4: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A8:62:A2:20:08:EB:EE:23:77:07:1E:AC:44:02:2E:4B:D3:6D:B4 X509v3 Authority Key Identifier: keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/yKhioiAI6-4jdwcerEQCLkvTbbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.92.0/22 185.174.128.0/22 185.185.148.0/22 Signature Algorithm: sha256WithRSAEncryption 01:dc:78:b4:45:54:0d:64:72:d6:bf:cc:97:74:97:fe:69:0f: a0:0d:28:14:e8:b2:0b:59:cd:8b:c8:97:25:77:28:8c:c9:f9: 63:ee:ad:07:0b:c5:1a:ee:3c:fe:d8:ca:45:ee:c0:8d:58:cf: e0:03:fa:25:1d:dd:4c:af:0c:ab:64:a1:bf:10:98:53:25:0d: 5e:fb:ca:c4:da:2c:ce:9f:8d:90:ce:ab:ea:cc:cc:7a:44:39: cd:20:f1:ce:44:0f:18:27:84:28:fa:2b:df:ed:31:04:9e:5f: 8a:20:1a:dc:92:e0:f5:7f:e9:10:8c:54:44:e0:96:b3:5f:af: 24:81:f0:88:a4:89:db:cd:f3:1c:09:bf:23:87:19:e1:53:ec: 0e:3d:54:ee:55:51:76:37:75:52:a9:5a:69:bb:9d:95:77:70: 51:94:37:37:51:f0:9b:d4:ff:39:ec:9d:28:32:98:0f:ff:1a: 1a:ae:a3:08:22:eb:e1:09:d1:18:c4:26:ad:ce:3a:96:a8:d5: 77:98:08:71:61:b5:36:2b:a6:e5:80:ee:14:b2:56:d9:5b:4a: 28:96:ed:4a:63:4d:96:29:8d:46:3c:11:5b:5b:25:af:02:1c: 42:af:9a:98:6f:b2:9b:38:af:38:da:13:40:58:7a:15:de:b2: 42:da:64:36 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f1S91RDC8i4g4OlvouaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNDIxYWNlNDZjNWRkNThhMjlkNDZjZDkxZmIyOGZjMzlj NTZmZWUwHhcNMjYwMTAyMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGE4NjJhMjIwMDhlYmVlMjM3NzA3MWVhYzQ0MDIyZTRiZDM2ZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3btcJ8qxj2AD9g0Re274JEZ5yxOR vhSejp3cJM9jCa8dHtoIdzXIrBbnBwnHahXXJcaTrc34NOouuMYBXt87iFC9Lj3J 9hSihGCTFnxWyI03+kiTvhaz7RaCh1qX5nO/4XJBTVv6lsz8MrsQl6Z4+jWkNsiR f6ZefYYKvfufRRFAE1XYS2Ns/rnp2VAaz6hjfK4MDdR+up5Z84Ik2YoiN/esz0Cg at6bpRFALDRhgWI97AXQkySTCtF/Uy9ObbWOATNEW0thrUb7JOTw9N77X2eJlAmO yXvEfD+4ontK+5qW3dqYsnf3zspSt3Mw4l3YvmMx6JwZUvQjgZwkOcRuMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMioYqIgCOvuI3cHHqxEAi5L0220MB8GA1UdIwQY MBaAFBpCGs5Gxd1Yop1GzZH7KPw5xW/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYt N2RmZmNlMWQ2ZTJkLzEveUtoaW9pQUk2LTRqZHdjZXJFUUNMa3ZUYmJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYtN2RmZmNlMWQ2ZTJk LzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUEJcAwQC ua6AAwQCubmUMA0GCSqGSIb3DQEBCwUAA4IBAQAB3Hi0RVQNZHLWv8yXdJf+aQ+g DSgU6LILWc2LyJcldyiMyflj7q0HC8Ua7jz+2MpF7sCNWM/gA/olHd1MrwyrZKG/ EJhTJQ1e+8rE2izOn42QzqvqzMx6RDnNIPHORA8YJ4Qo+ivf7TEEnl+KIBrckuD1 f+kQjFRE4JazX68kgfCIpInbzfMcCb8jhxnhU+wOPVTuVVF2N3VSqVppu52Vd3BR lDc3UfCb1P857J0oMpgP/xoarqMIIuvhCdEYxCatzjqWqNV3mAhxYbU2K6blgO4U slbZW0oolu1KY02WKY1GPBFbWyWvAhxCr5qYb7KbOK842hNAWHoV3rJC2mQ2 -----END CERTIFICATE-----Generated at Mon Jan 12 15:58:28 2026 by rpki-client