This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/b8CCvMj6XsXWpjo1kqL4lHdDIeI.roa File: b8CCvMj6XsXWpjo1kqL4lHdDIeI.roa (raw, json) Hash identifier: ORCFwxYaf4vPg6tOj10K2FmfsSRr15XuWRZrPrnhk3A= Subject key identifier: 6F:C0:82:BC:C8:FA:5E:C5:D6:A6:3A:35:92:A2:F8:94:77:43:21:E2 Certificate issuer: /CN=61c68268743e823e0e1c870060c0a14223f151eb Certificate serial: 019B76EB2C11784243F8C09A9F6E5B9C4604 Authority key identifier: 61:C6:82:68:74:3E:82:3E:0E:1C:87:00:60:C0:A1:42:23:F1:51:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcaCaHQ-gj4OHIcAYMChQiPxUes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/b8CCvMj6XsXWpjo1kqL4lHdDIeI.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34749 IP address blocks: 93.94.160.0/21 maxlen: 24 193.168.50.0/24 maxlen: 24 2a00:ea80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/YcaCaHQ-gj4OHIcAYMChQiPxUes.crl rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/YcaCaHQ-gj4OHIcAYMChQiPxUes.mft rsync://rpki.ripe.net/repository/DEFAULT/YcaCaHQ-gj4OHIcAYMChQiPxUes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2c:11:78:42:43:f8:c0:9a:9f:6e:5b:9c:46:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61c68268743e823e0e1c870060c0a14223f151eb Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fc082bcc8fa5ec5d6a63a3592a2f894774321e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9b:2f:ff:ac:11:08:4a:98:5e:8c:dc:6a:e6: 65:e3:c2:6e:e9:41:b4:1a:c3:35:81:4f:59:df:41: 22:5b:a9:6d:df:c4:c8:5d:86:0d:68:4e:ce:ba:47: 52:39:c2:a4:cf:18:dc:8c:b0:59:26:d0:bc:4a:ff: be:8e:e7:fc:aa:57:a6:ac:e0:51:8d:7e:af:d8:68: a7:fb:84:d7:fc:c9:e3:e4:0b:20:fa:ed:73:69:5a: c1:8f:b6:0c:b7:01:ca:72:0f:4b:e2:a3:4a:7f:6f: 54:e5:4c:ad:5b:7e:51:49:76:8e:25:7e:e0:2b:38: c4:1e:43:58:9d:89:99:72:3a:77:d4:3b:c6:44:fb: b4:e5:c1:55:9e:e0:ad:6c:5b:37:54:31:6a:68:5e: 1f:90:b1:47:0c:61:23:26:11:ce:e1:f2:57:ad:83: 30:c2:a8:1e:fd:1d:93:39:c5:22:53:0f:3e:31:53: 80:7a:e2:85:84:8d:79:fc:a5:07:bd:cd:33:66:cc: 15:51:82:d4:6f:36:4c:b9:04:8a:12:4a:d7:7a:15: a9:67:ce:6f:2b:33:49:1c:32:f3:3f:43:72:78:54: 3f:e7:9e:3a:72:32:9f:ee:4a:2f:77:d4:a2:b3:32: f7:2d:3a:6e:24:16:4f:7f:67:d0:25:16:aa:65:28: 1f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C0:82:BC:C8:FA:5E:C5:D6:A6:3A:35:92:A2:F8:94:77:43:21:E2 X509v3 Authority Key Identifier: keyid:61:C6:82:68:74:3E:82:3E:0E:1C:87:00:60:C0:A1:42:23:F1:51:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcaCaHQ-gj4OHIcAYMChQiPxUes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/b8CCvMj6XsXWpjo1kqL4lHdDIeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62641c-3444-4425-bf51-6d05c0d0da6f/1/YcaCaHQ-gj4OHIcAYMChQiPxUes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.160.0/21 193.168.50.0/24 IPv6: 2a00:ea80::/32 Signature Algorithm: sha256WithRSAEncryption 0d:3a:2f:c3:68:81:e6:73:a8:8d:a3:03:a2:c3:36:6b:57:a7: 36:5b:58:99:56:bd:8a:5d:18:78:0e:7f:56:ca:d2:34:91:09: 4a:ad:bb:cd:22:5e:90:2b:04:2e:81:bc:35:5b:14:0c:21:bc: 8b:96:a4:43:74:16:69:98:fe:98:ee:c3:57:13:58:e4:80:0b: d7:ae:b6:d4:48:c0:e2:b2:86:1f:8d:14:e4:37:15:03:68:d4: bb:96:7a:cd:dd:bb:3c:2d:65:66:87:2f:3c:06:f2:12:6d:69: d0:b5:c0:62:2a:01:a5:d1:0e:94:8a:26:e8:85:a6:ce:49:8e: b2:6d:29:ef:9a:65:48:5a:c6:71:42:4c:f7:22:06:47:7d:3d: 73:61:97:00:61:b4:c9:4a:5a:d4:3d:9a:ed:af:d1:fd:91:da: c1:2f:6c:a8:b3:8f:ab:98:a9:30:b9:83:59:b0:29:0d:df:e7: 9a:1e:d1:5f:f3:e1:b7:09:00:ae:30:94:00:c5:c4:a9:6c:10: 04:30:3c:0a:56:14:51:0f:e2:8f:8d:3b:0a:49:2f:5c:9f:9d: 9f:b5:6b:64:92:87:e8:7e:4f:bb:f9:69:72:e9:ab:1e:9c:a3: 0b:5d:60:69:7a:ec:29:9d:36:ff:aa:ac:5a:5f:88:cd:26:ba: 5a:fe:76:38 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26ywReEJD+MCan25bnEYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYzY4MjY4NzQzZTgyM2UwZTFjODcwMDYwYzBhMTQyMjNm MTUxZWIwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmMwODJiY2M4ZmE1ZWM1ZDZhNjNhMzU5MmEyZjg5NDc3NDMyMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25sv/6wRCEqYXozcauZl48Ju6UG0 GsM1gU9Z30EiW6lt38TIXYYNaE7OukdSOcKkzxjcjLBZJtC8Sv++juf8qlemrOBR jX6v2Gin+4TX/Mnj5Asg+u1zaVrBj7YMtwHKcg9L4qNKf29U5UytW35RSXaOJX7g KzjEHkNYnYmZcjp31DvGRPu05cFVnuCtbFs3VDFqaF4fkLFHDGEjJhHO4fJXrYMw wqge/R2TOcUiUw8+MVOAeuKFhI15/KUHvc0zZswVUYLUbzZMuQSKEkrXehWpZ85v KzNJHDLzP0NyeFQ/5546cjKf7kovd9SiszL3LTpuJBZPf2fQJRaqZSgfkQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFG/AgrzI+l7F1qY6NZKi+JR3QyHiMB8GA1UdIwQY MBaAFGHGgmh0PoI+DhyHAGDAoUIj8VHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWNhQ2FIUS1najRPSEljQVlNQ2hRaVB4VWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82MjY0MWMtMzQ0NC00NDI1LWJmNTEt NmQwNWMwZDBkYTZmLzEvYjhDQ3ZNajZYc1hXcGpvMWtxTDRsSGRESWVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82MjY0MWMtMzQ0NC00NDI1LWJmNTEtNmQwNWMwZDBkYTZm LzEvWWNhQ2FIUS1najRPSEljQVlNQ2hRaVB4VWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXV6gAwQA wagyMA0EAgACMAcDBQAqAOqAMA0GCSqGSIb3DQEBCwUAA4IBAQANOi/DaIHmc6iN owOiwzZrV6c2W1iZVr2KXRh4Dn9WytI0kQlKrbvNIl6QKwQugbw1WxQMIbyLlqRD dBZpmP6Y7sNXE1jkgAvXrrbUSMDisoYfjRTkNxUDaNS7lnrN3bs8LWVmhy88BvIS bWnQtcBiKgGl0Q6UiibohabOSY6ybSnvmmVIWsZxQkz3IgZHfT1zYZcAYbTJSlrU PZrtr9H9kdrBL2yos4+rmKkwuYNZsCkN3+eaHtFf8+G3CQCuMJQAxcSpbBAEMDwK VhRRD+KPjTsKSS9cn52ftWtkkofofk+7+Wly6asenKMLXWBpeuwpnTb/qqxaX4jN Jrpa/nY4 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:48 2026 by rpki-client