This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/zY5JQr9qoWS3LvqY65cdYISq1lI.roa File: zY5JQr9qoWS3LvqY65cdYISq1lI.roa (raw, json) Hash identifier: i0oGPXnn+BnQVuxU9Asr8vW9IR5MNY2SETKGwHMUoXo= Subject key identifier: CD:8E:49:42:BF:6A:A1:64:B7:2E:FA:98:EB:97:1D:60:84:AA:D6:52 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C8053966ECBC2565FFBFBCBF6B045D0 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/zY5JQr9qoWS3LvqY65cdYISq1lI.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 80.242.60.0/24 maxlen: 24 90.156.144.0/24 maxlen: 24 90.156.145.0/24 maxlen: 24 185.39.16.0/24 maxlen: 24 185.42.12.0/24 maxlen: 24 213.109.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:53:96:6e:cb:c2:56:5f:fb:fb:cb:f6:b0:45:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd8e4942bf6aa164b72efa98eb971d6084aad652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:8b:03:09:14:d4:79:48:54:f1:e8:c1:ab: d5:2b:c7:16:31:20:d8:81:9b:cb:c4:ab:bf:98:25: 94:0b:b1:2f:2b:51:f5:58:59:9b:0d:db:ba:df:0d: b4:a7:37:c2:2a:80:75:49:09:92:28:9a:df:5e:97: 3c:ed:5e:f9:fe:ba:52:71:c8:29:14:7d:05:ff:62: 05:a3:18:47:2e:a1:ef:dc:f0:dc:20:29:c4:28:3b: 15:51:71:50:3d:7f:6c:6b:eb:6d:13:e0:71:7c:95: 75:09:21:df:0e:72:b3:05:0c:dc:05:24:92:08:2d: be:45:2b:dd:ca:3d:af:69:99:22:6a:52:7e:b6:ad: 43:0e:70:66:cd:b8:19:74:ff:c8:bc:47:55:79:83: d2:30:58:f0:0d:81:8d:ec:50:b3:21:3f:14:0a:1c: b4:cc:5b:18:30:08:b2:d6:d6:41:5d:0d:c4:42:bd: 25:27:8b:51:8c:29:d3:1a:c2:d8:08:11:06:d3:cb: 80:cc:58:7d:13:22:49:84:da:5f:23:f7:a6:6a:5a: 84:21:be:e9:e5:46:83:22:56:1b:fd:8f:27:91:5d: b0:83:2f:5a:96:98:f5:cb:72:68:94:1c:bf:29:82: 1f:d2:6c:54:66:a1:f5:63:9f:39:d5:33:a1:43:6c: cc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:49:42:BF:6A:A1:64:B7:2E:FA:98:EB:97:1D:60:84:AA:D6:52 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/zY5JQr9qoWS3LvqY65cdYISq1lI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.242.60.0/24 90.156.144.0/23 185.39.16.0/24 185.42.12.0/24 213.109.110.0/24 Signature Algorithm: sha256WithRSAEncryption 70:b9:c5:49:c2:2d:e5:59:3e:60:23:b5:b2:9c:86:ca:73:82: 81:a2:1c:0b:b6:f4:f1:b9:0d:d1:e1:b6:98:04:cb:d0:ef:da: c7:30:5d:75:46:1b:c4:65:31:49:93:d1:c0:8d:7d:fb:aa:c4: 0d:7a:ef:29:70:22:7d:9c:a5:42:d1:b6:fa:10:e1:aa:4b:25: d0:34:c3:4c:02:a8:23:66:c1:41:1d:33:b6:69:f7:78:a0:a6: 64:69:c3:04:2f:ba:31:f7:43:b7:f2:52:57:c9:65:ba:2a:fd: 86:48:2c:e5:dc:20:b1:1b:cc:94:0a:80:62:d4:f8:c3:ba:bd: 5f:ea:36:65:a1:bd:a0:c7:a3:11:94:85:3e:bd:95:46:db:e4: a1:e8:1e:df:82:ac:c4:8f:70:d8:95:f8:8c:bd:8c:b9:6d:97: 8b:9e:a1:5e:4e:93:8e:e2:bc:d7:f2:bc:50:92:a5:e1:49:bb: 93:96:5a:5c:c3:3e:0e:ce:f8:27:d9:0f:d1:17:39:7f:ca:0f: 5d:a4:82:a5:7a:fe:07:62:f9:0f:db:de:14:d3:8f:4c:9c:26: a9:10:ce:9b:ea:e2:f0:fc:3b:18:fc:02:d5:fa:22:3c:bb:0f: 9f:f5:48:54:3f:10:72:58:d5:56:b7:d1:d0:0a:3f:f9:ce:58: 8e:68:76:0d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8gFOWbsvCVl/7+8v2sEXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDhlNDk0MmJmNmFhMTY0YjcyZWZhOThlYjk3MWQ2MDg0YWFkNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXCLAwkU1HlIVPHowavVK8cWMSDY gZvLxKu/mCWUC7EvK1H1WFmbDdu63w20pzfCKoB1SQmSKJrfXpc87V75/rpSccgp FH0F/2IFoxhHLqHv3PDcICnEKDsVUXFQPX9sa+ttE+BxfJV1CSHfDnKzBQzcBSSS CC2+RSvdyj2vaZkialJ+tq1DDnBmzbgZdP/IvEdVeYPSMFjwDYGN7FCzIT8UChy0 zFsYMAiy1tZBXQ3EQr0lJ4tRjCnTGsLYCBEG08uAzFh9EyJJhNpfI/emalqEIb7p 5UaDIlYb/Y8nkV2wgy9alpj1y3JolBy/KYIf0mxUZqH1Y5851TOhQ2zMCQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFM2OSUK/aqFkty76mOuXHWCEqtZSMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvelk1SlFyOXFvV1MzTHZxWTY1Y2RZSVNxMWxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUPI8AwQB WpyQAwQAuScQAwQAuSoMAwQA1W1uMA0GCSqGSIb3DQEBCwUAA4IBAQBwucVJwi3l WT5gI7WynIbKc4KBohwLtvTxuQ3R4baYBMvQ79rHMF11RhvEZTFJk9HAjX37qsQN eu8pcCJ9nKVC0bb6EOGqSyXQNMNMAqgjZsFBHTO2afd4oKZkacMEL7ox90O38lJX yWW6Kv2GSCzl3CCxG8yUCoBi1PjDur1f6jZlob2gx6MRlIU+vZVG2+Sh6B7fgqzE j3DYlfiMvYy5bZeLnqFeTpOO4rzX8rxQkqXhSbuTllpcwz4Ozvgn2Q/RFzl/yg9d pIKlev4HYvkP294U049MnCapEM6b6uLw/DsY/ALV+iI8uw+f9UhUPxByWNVWt9HQ Cj/5zliOaHYN -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:14 2026 by rpki-client