This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/0Y8N1-0fJLBE_HY8U_P2_6WVc1w.roa File: 0Y8N1-0fJLBE_HY8U_P2_6WVc1w.roa (raw, json) Hash identifier: +jTSNuKfxuCvHo1F5dM5RaYN/hFX2mIW99lx2JVtRD0= Subject key identifier: D1:8F:0D:D7:ED:1F:24:B0:44:FC:76:3C:53:F3:F6:FF:A5:95:73:5C Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b Certificate serial: 019B7B36CCB0022CF3B1DC1A54F73A3FFD76 Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/0Y8N1-0fJLBE_HY8U_P2_6WVc1w.roa Signing time: Thu 01 Jan 2026 20:19:07 +0000 ROA not before: Thu 01 Jan 2026 20:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58074 IP address blocks: 91.197.247.0/24 maxlen: 24 91.212.74.0/24 maxlen: 24 193.104.121.0/24 maxlen: 24 193.105.91.0/24 maxlen: 24 193.105.239.0/24 maxlen: 24 193.200.165.0/24 maxlen: 24 194.6.201.0/24 maxlen: 24 194.107.112.0/24 maxlen: 24 195.88.38.0/23 maxlen: 24 195.245.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cc:b0:02:2c:f3:b1:dc:1a:54:f7:3a:3f:fd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d18f0dd7ed1f24b044fc763c53f3f6ffa595735c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:6a:95:3d:23:ff:de:72:9a:9f:a4:76:4d: 3b:a5:5a:23:ea:56:b5:61:c9:3a:be:00:71:fe:fe: b6:16:bb:15:af:3d:8e:30:ef:25:0d:1c:3a:20:61: 42:e1:63:d6:8d:ba:a2:97:af:08:9f:7b:48:d5:a9: 2e:c7:fe:9a:7f:31:90:6f:e9:c1:a4:b8:47:8e:8f: 5f:c2:8c:7f:64:95:cc:ec:99:1a:83:e3:69:8f:4a: ec:c0:5e:0c:08:d9:fd:9d:a1:14:47:e8:7f:18:a9: 91:6a:3b:4d:93:85:62:36:da:6c:d2:3a:25:51:8f: 8a:47:56:83:f1:99:87:ae:16:fc:4d:f1:e3:2f:d0: 7c:84:b8:df:f5:e9:c0:9b:8a:e7:54:99:0e:41:b1: 8b:48:d2:c0:d1:2b:4b:a8:6a:45:a2:01:a8:5c:9c: b3:b8:94:d6:d9:c4:3d:a7:c2:ad:42:e4:35:70:fa: 6d:cb:5a:aa:47:c7:25:08:bf:0d:76:38:30:d0:dd: 53:74:56:4a:e9:9f:61:ba:a6:24:16:11:37:39:85: b9:9d:d3:e2:77:16:63:ad:43:d1:fe:96:36:e7:f6: 7b:c6:eb:25:8f:82:22:6f:a4:ad:a2:7e:82:b0:53: c0:e7:2c:21:c1:b0:3a:d1:a7:dc:60:5f:23:47:8c: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8F:0D:D7:ED:1F:24:B0:44:FC:76:3C:53:F3:F6:FF:A5:95:73:5C X509v3 Authority Key Identifier: keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/0Y8N1-0fJLBE_HY8U_P2_6WVc1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.247.0/24 91.212.74.0/24 193.104.121.0/24 193.105.91.0/24 193.105.239.0/24 193.200.165.0/24 194.6.201.0/24 194.107.112.0/24 195.88.38.0/23 195.245.82.0/24 Signature Algorithm: sha256WithRSAEncryption b8:dc:d1:04:31:e7:3d:36:9a:b3:81:72:8e:9a:65:67:cf:30: e5:08:7f:09:85:a9:cf:e2:f2:4b:fa:a6:b5:e6:f6:23:cb:e3: 5d:92:bd:d0:65:70:6b:c3:98:11:e2:4f:4c:10:c6:c5:b6:4f: ec:57:f9:ed:d6:c4:3f:40:5c:94:05:ee:5b:37:60:47:eb:69: 83:b9:0c:97:96:7e:4a:bf:54:7c:a0:3b:08:a4:a5:fa:9f:ea: 27:30:5c:d4:4f:47:da:67:00:f2:8f:56:01:99:0b:d4:82:be: 6d:fb:be:9b:1b:c6:74:5e:99:33:76:fa:ae:42:05:ea:af:a8: 4d:be:ac:c2:f8:c7:b5:3a:31:16:61:51:f2:aa:13:40:9b:88: 20:7c:bb:44:9f:62:e5:a8:73:8a:9d:dd:95:5a:f2:4c:31:ae: d6:4b:09:82:f8:59:2d:f3:65:e7:0d:12:10:d2:78:42:9b:f9: 33:d5:ba:c7:eb:77:32:69:60:e1:d2:52:35:51:e6:70:db:66: 80:6f:39:58:ca:c1:6e:b0:1d:57:01:62:fd:85:32:71:e6:63: a8:eb:d5:6e:73:66:36:cf:f9:2d:0f:c0:6b:e1:02:f6:0c:4b: de:f8:54:75:86:f8:8f:ab:9a:0d:6b:71:58:0d:45:cc:68:08: 4b:92:c0:72 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt7NsywAizzsdwaVPc6P/12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2 NTE4NmIwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMThmMGRkN2VkMWYyNGIwNDRmYzc2M2M1M2YzZjZmZmE1OTU3MzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/BqlT0j/95ymp+kdk07pVoj6la1 Yck6vgBx/v62FrsVrz2OMO8lDRw6IGFC4WPWjbqil68In3tI1akux/6afzGQb+nB pLhHjo9fwox/ZJXM7Jkag+Npj0rswF4MCNn9naEUR+h/GKmRajtNk4ViNtps0jol UY+KR1aD8ZmHrhb8TfHjL9B8hLjf9enAm4rnVJkOQbGLSNLA0StLqGpFogGoXJyz uJTW2cQ9p8KtQuQ1cPpty1qqR8clCL8Ndjgw0N1TdFZK6Z9huqYkFhE3OYW5ndPi dxZjrUPR/pY25/Z7xuslj4Iib6Ston6CsFPA5ywhwbA60afcYF8jR4zG9wIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFNGPDdftHySwRPx2PFPz9v+llXNcMB8GA1UdIwQY MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt MDQyM2YyNjNmMmNiLzEvMFk4TjEtMGZKTEJFX0hZOFVfUDJfNldWYzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAW8X3AwQA W9RKAwQAwWh5AwQAwWlbAwQAwWnvAwQAwcilAwQAwgbJAwQAwmtwAwQBw1gmAwQA w/VSMA0GCSqGSIb3DQEBCwUAA4IBAQC43NEEMec9NpqzgXKOmmVnzzDlCH8JhanP 4vJL+qa15vYjy+Ndkr3QZXBrw5gR4k9MEMbFtk/sV/nt1sQ/QFyUBe5bN2BH62mD uQyXln5Kv1R8oDsIpKX6n+onMFzUT0faZwDyj1YBmQvUgr5t+76bG8Z0Xpkzdvqu QgXqr6hNvqzC+Me1OjEWYVHyqhNAm4ggfLtEn2LlqHOKnd2VWvJMMa7WSwmC+Fkt 82XnDRIQ0nhCm/kz1brH63cyaWDh0lI1UeZw22aAbzlYysFusB1XAWL9hTJx5mOo 69Vuc2Y2z/ktD8Br4QL2DEve+FR1hviPq5oNa3FYDUXMaAhLksBy -----END CERTIFICATE-----Generated at Sat Jan 3 06:25:49 2026 by rpki-client