This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/YfFz_cvuubO27xF6MbBKBhBTt1s.roa File: YfFz_cvuubO27xF6MbBKBhBTt1s.roa (raw, json) Hash identifier: lVZ4+6gwchQBjENEmiQk8Z9ZtryKh4eZJxHIRIQPpf8= Subject key identifier: 61:F1:73:FD:CB:EE:B9:B3:B6:EF:11:7A:31:B0:4A:06:10:53:B7:5B Certificate issuer: /CN=ba877e5b28d00b2755d63dd0c581c9fe49460675 Certificate serial: 019B7CEDC42F47855880004B7EB8D644980A Authority key identifier: BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/YfFz_cvuubO27xF6MbBKBhBTt1s.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61023 IP address blocks: 87.238.224.0/24 maxlen: 24 193.162.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c4:2f:47:85:58:80:00:4b:7e:b8:d6:44:98:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba877e5b28d00b2755d63dd0c581c9fe49460675 Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61f173fdcbeeb9b3b6ef117a31b04a061053b75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:7b:3c:f3:67:a4:20:fc:55:42:5d:8e:1f: a4:29:5f:92:3a:86:56:8c:84:4f:68:b0:44:19:42: a2:88:c6:44:01:60:84:f9:3c:54:62:cc:96:bc:42: 4a:84:4f:40:23:e9:d4:8b:61:f2:1f:a4:ea:5b:f8: e4:a9:71:a5:57:b1:fc:27:05:78:b5:c2:7d:89:6f: 19:00:4e:2c:cd:43:95:3e:e2:bc:5c:24:9e:60:0e: 0a:83:a1:b7:dd:d0:57:60:82:a4:76:f1:56:5e:33: 6c:a5:83:a0:f8:d9:ee:77:bd:86:61:47:80:8d:cf: ad:06:e0:df:bc:1e:97:74:b5:d1:78:f4:e2:0c:fe: 6f:3f:8b:0d:1a:33:e6:5a:fa:83:1d:6b:87:91:12: 97:09:12:bd:3d:50:e5:71:11:0e:ab:ac:ba:27:e1: f4:f3:36:51:07:00:f8:76:55:69:10:de:11:fb:ae: 5e:e9:65:82:ff:89:34:d8:f5:72:99:a2:a2:91:bb: ea:70:40:9d:9f:62:16:24:7d:62:ac:46:01:73:58: 3c:1a:c8:79:1f:4b:4d:39:c7:97:96:f4:36:a8:60: 70:83:df:bf:5f:03:31:d7:ef:8b:51:7b:12:db:d7: 49:a5:16:01:be:76:ee:d6:cc:f6:5d:62:77:6a:8d: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F1:73:FD:CB:EE:B9:B3:B6:EF:11:7A:31:B0:4A:06:10:53:B7:5B X509v3 Authority Key Identifier: keyid:BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/YfFz_cvuubO27xF6MbBKBhBTt1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.224.0/24 193.162.103.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:68:54:4b:33:b9:b6:d3:c3:3f:e2:93:ea:24:84:3c:32:ac: fb:f3:49:1c:cd:58:3d:9c:c1:6a:e5:f7:a5:ca:21:45:3c:40: db:10:23:6c:be:bc:38:7b:05:0e:0f:81:d6:1e:88:46:a7:94: 8e:b5:1c:1e:4d:b7:fe:88:f1:29:46:d8:ed:c7:b6:53:e0:20: 32:07:2b:72:d3:90:53:30:4c:f2:6a:be:ae:69:b0:ad:74:5d: 37:a0:ba:b8:53:e8:52:bf:1b:de:3d:08:2c:e5:33:a3:3a:81: de:fc:70:60:c7:4f:fb:b3:fc:97:a9:8a:4e:9b:fa:c2:43:30: 67:34:2f:f9:12:51:87:8f:dd:60:6e:94:f1:a8:ca:25:b7:ff: d9:6d:79:47:7e:54:78:33:e8:ef:b4:06:56:a3:10:0c:1e:49: 45:71:30:c0:a2:2a:a8:6e:af:b0:bc:3f:04:e9:8e:c7:73:e2: 01:1a:56:f0:a3:de:38:fc:e0:18:62:57:52:62:28:96:9f:b2: c7:e2:47:51:f1:92:a1:ad:a5:fc:1d:a0:0b:cb:c9:1a:40:74: d7:eb:e2:d5:f0:03:8f:3e:f0:c5:72:dc:4b:a1:15:ae:89:ec: cd:88:c2:4b:ad:07:7d:d0:48:f0:98:fa:52:12:4a:ef:eb:40: 04:0f:f1:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87cQvR4VYgABLfrjWRJgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODc3ZTViMjhkMDBiMjc1NWQ2M2RkMGM1ODFjOWZlNDk0 NjA2NzUwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWYxNzNmZGNiZWViOWIzYjZlZjExN2EzMWIwNGEwNjEwNTNiNzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxid7PPNnpCD8VUJdjh+kKV+SOoZW jIRPaLBEGUKiiMZEAWCE+TxUYsyWvEJKhE9AI+nUi2HyH6TqW/jkqXGlV7H8JwV4 tcJ9iW8ZAE4szUOVPuK8XCSeYA4Kg6G33dBXYIKkdvFWXjNspYOg+Nnud72GYUeA jc+tBuDfvB6XdLXRePTiDP5vP4sNGjPmWvqDHWuHkRKXCRK9PVDlcREOq6y6J+H0 8zZRBwD4dlVpEN4R+65e6WWC/4k02PVymaKikbvqcECdn2IWJH1irEYBc1g8Gsh5 H0tNOceXlvQ2qGBwg9+/XwMx1++LUXsS29dJpRYBvnbu1sz2XWJ3ao0k7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGHxc/3L7rmztu8RejGwSgYQU7dbMB8GA1UdIwQY MBaAFLqHflso0AsnVdY90MWByf5JRgZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9kLVd5alFDeWRWMWozUXhZSEpfa2xHQm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mNjk1M2ItZDU3My00NDJkLTg1NTAt MmM0Y2U4ODgzNzRhLzEvWWZGel9jdnV1Yk8yN3hGNk1iQktCaEJUdDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mNjk1M2ItZDU3My00NDJkLTg1NTAtMmM0Y2U4ODgzNzRh LzEvdW9kLVd5alFDeWRWMWozUXhZSEpfa2xHQm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+7gAwQA waJnMA0GCSqGSIb3DQEBCwUAA4IBAQCeaFRLM7m208M/4pPqJIQ8Mqz780kczVg9 nMFq5felyiFFPEDbECNsvrw4ewUOD4HWHohGp5SOtRweTbf+iPEpRtjtx7ZT4CAy Byty05BTMEzyar6uabCtdF03oLq4U+hSvxvePQgs5TOjOoHe/HBgx0/7s/yXqYpO m/rCQzBnNC/5ElGHj91gbpTxqMolt//ZbXlHflR4M+jvtAZWoxAMHklFcTDAoiqo bq+wvD8E6Y7Hc+IBGlbwo944/OAYYldSYiiWn7LH4kdR8ZKhraX8HaALy8kaQHTX 6+LV8AOPPvDFctxLoRWuiezNiMJLrQd90EjwmPpSEkrv60AED/Hm -----END CERTIFICATE-----Generated at Mon Jan 12 09:21:22 2026 by rpki-client