This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa File: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (raw, json) Hash identifier: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw= Subject key identifier: 60:34:DA:6C:38:BC:28:88:95:9F:68:39:83:40:11:67:81:4E:8F:A6 Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Certificate serial: 019B7F1581A11BBD6E9E1E8294EF81A448B3 Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25593 IP address blocks: 46.19.176.0/21 maxlen: 21 89.107.168.0/21 maxlen: 21 93.188.168.0/21 maxlen: 21 185.48.44.0/22 maxlen: 22 185.48.46.0/24 maxlen: 24 212.67.32.0/20 maxlen: 20 217.19.48.0/20 maxlen: 20 2a00:1a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:81:a1:1b:bd:6e:9e:1e:82:94:ef:81:a4:48:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6034da6c38bc2888959f683983401167814e8fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:e4:41:a2:de:07:01:3c:7f:02:50:b6:92: 8e:45:e8:1a:77:43:14:08:32:b9:be:01:61:78:86: a2:dd:ac:d9:40:6d:48:33:55:3d:d0:1d:38:7c:b7: 14:06:7b:c9:a3:3c:e1:f6:50:08:5e:03:66:1a:1f: 46:5b:a6:dc:b7:61:76:33:88:2e:04:de:b8:b2:0d: 0c:03:52:4e:4e:71:8f:b5:07:95:93:a3:88:4f:1f: 91:91:eb:80:79:06:82:29:5c:e8:fa:26:59:bc:dd: 42:6f:73:50:b0:d6:ac:49:5e:51:92:61:38:e6:93: b5:90:e9:e9:50:8e:be:62:35:c6:5b:4c:fa:3b:fe: 84:e0:6e:67:b4:47:4a:d3:d9:b7:6d:b8:f5:57:f4: 21:d4:bb:82:cc:98:33:19:d7:ce:41:bf:c6:30:21: 5a:3a:e9:f4:34:45:b2:49:cf:2a:99:93:cc:d9:d3: 18:44:06:ce:80:ca:b8:b2:68:57:db:89:ce:f3:cb: fb:1c:a9:4e:eb:b1:50:ad:ad:61:18:6a:f0:4c:97: cc:14:89:28:b2:da:de:5e:e8:85:ee:bf:43:fc:bb: b9:fb:c9:49:b6:ad:af:4c:31:88:3e:bf:9b:9b:cd: af:cb:51:34:a1:0d:7f:38:d6:42:6e:79:5f:a2:31: 70:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:34:DA:6C:38:BC:28:88:95:9F:68:39:83:40:11:67:81:4E:8F:A6 X509v3 Authority Key Identifier: keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.176.0/21 89.107.168.0/21 93.188.168.0/21 185.48.44.0/22 212.67.32.0/20 217.19.48.0/20 IPv6: 2a00:1a00::/32 Signature Algorithm: sha256WithRSAEncryption 34:02:a3:53:3c:21:c7:3e:1d:b6:d4:b8:55:d4:12:59:ec:12: 06:01:c2:ea:02:fa:2e:82:cb:1e:e9:b6:f9:aa:39:9c:67:de: 86:8c:53:a1:3f:6e:18:c9:65:35:0e:58:f9:e5:9c:ef:21:b5: 2f:67:35:6d:9f:53:a4:d0:c2:06:83:b1:fb:e3:d5:e5:fe:0d: 3c:77:c5:83:fc:cf:a4:63:41:24:33:b4:75:87:b0:d5:36:c9: ab:63:1d:5f:34:c0:f4:de:e2:fc:f6:54:05:c2:0e:99:79:f8: 7c:e7:40:04:cc:d8:eb:83:67:ec:e7:7a:18:93:4f:d2:bd:7e: c4:f8:46:dd:ce:76:4e:ec:d8:61:21:3a:0d:c6:84:1e:9c:89: 80:27:92:ff:32:c3:a3:bb:bc:93:95:f3:5d:e3:03:8c:c0:b4: 3d:c2:cd:e1:f3:0d:92:73:dd:93:53:86:7d:26:ff:92:5b:e8: 59:91:e3:0b:91:13:d5:a7:a6:6a:03:b9:5e:d1:cf:5a:41:db: 93:9a:d9:d7:0d:7a:7b:e9:97:d4:6c:25:a4:78:4c:aa:a3:bb: f6:5a:26:09:3c:ef:5b:40:6f:c2:4a:09:df:0e:70:ce:c8:0c: 39:89:24:79:65:00:21:7c:be:37:16:c3:46:c3:45:09:0e:d4: 5c:b5:4f:4e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt/FYGhG71unh6ClO+BpEizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1 NDYzOWUwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDM0ZGE2YzM4YmMyODg4OTU5ZjY4Mzk4MzQwMTE2NzgxNGU4ZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVbkQaLeBwE8fwJQtpKORegad0MU CDK5vgFheIai3azZQG1IM1U90B04fLcUBnvJozzh9lAIXgNmGh9GW6bct2F2M4gu BN64sg0MA1JOTnGPtQeVk6OITx+RkeuAeQaCKVzo+iZZvN1Cb3NQsNasSV5RkmE4 5pO1kOnpUI6+YjXGW0z6O/6E4G5ntEdK09m3bbj1V/Qh1LuCzJgzGdfOQb/GMCFa Oun0NEWySc8qmZPM2dMYRAbOgMq4smhX24nO88v7HKlO67FQra1hGGrwTJfMFIko streXuiF7r9D/Lu5+8lJtq2vTDGIPr+bm82vy1E0oQ1/ONZCbnlfojFw6wIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFGA02mw4vCiIlZ9oOYNAEWeBTo+mMB8GA1UdIwQY MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt MTM1OGMyYjVkNTQxLzEvWURUYWJEaThLSWlWbjJnNWcwQVJaNEZPajZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDLhOwAwQD WWuoAwQDXbyoAwQCuTAsAwQE1EMgAwQE2RMwMA0EAgACMAcDBQAqABoAMA0GCSqG SIb3DQEBCwUAA4IBAQA0AqNTPCHHPh221LhV1BJZ7BIGAcLqAvougsse6bb5qjmc Z96GjFOhP24YyWU1Dlj55ZzvIbUvZzVtn1Ok0MIGg7H749Xl/g08d8WD/M+kY0Ek M7R1h7DVNsmrYx1fNMD03uL89lQFwg6Zefh850AEzNjrg2fs53oYk0/SvX7E+Ebd znZO7NhhIToNxoQenImAJ5L/MsOju7yTlfNd4wOMwLQ9ws3h8w2Sc92TU4Z9Jv+S W+hZkeMLkRPVp6ZqA7le0c9aQduTmtnXDXp76ZfUbCWkeEyqo7v2WiYJPO9bQG/C SgnfDnDOyAw5iSR5ZQAhfL43FsNGw0UJDtRctU9O -----END CERTIFICATE-----Generated at Mon Jan 12 01:42:24 2026 by rpki-client