This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ycaAoCxQ0V1SNSlBaszmPbRpQfg.roa File: ycaAoCxQ0V1SNSlBaszmPbRpQfg.roa (raw, json) Hash identifier: zEbJPvvLHhcQEUbHZo7JdBXwb8r4Yq3m18GmSbG5NfQ= Subject key identifier: C9:C6:80:A0:2C:50:D1:5D:52:35:29:41:6A:CC:E6:3D:B4:69:41:F8 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37EFDCB1A9E5EBB1F8614E3AE0D54F Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ycaAoCxQ0V1SNSlBaszmPbRpQfg.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60096 IP address blocks: 31.145.70.0/24 maxlen: 24 31.145.71.0/24 maxlen: 24 31.206.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ef:dc:b1:a9:e5:eb:b1:f8:61:4e:3a:e0:d5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9c680a02c50d15d523529416acce63db46941f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:8c:77:af:f5:f5:3b:37:64:4e:af:65:d5: b7:17:3e:05:8a:1b:cb:f0:c7:1d:d7:20:bb:ca:77: 83:2d:6f:2e:ed:f0:9c:30:5a:61:73:86:37:6a:81: 50:3b:5a:ab:fe:15:20:41:77:4b:85:52:a9:4d:16: e8:1f:ae:a8:3c:48:c9:ef:22:ff:4b:79:1a:99:6a: a6:4a:fa:5c:96:14:8a:46:a3:c3:f4:fd:cf:ac:89: 78:9e:d2:17:6a:bf:64:bd:16:99:9a:17:e8:e3:d5: 4f:ae:aa:22:0c:7e:aa:e2:2c:9f:a3:0e:a0:94:03: 95:1b:f1:a0:68:6f:df:19:b0:d7:88:5c:c7:4b:d1: 96:fb:a1:7a:ba:94:61:30:50:31:d0:9f:ec:6a:69: 96:bf:af:34:8a:04:0c:13:7c:94:89:59:71:f9:3f: 51:1a:48:9c:5a:c3:69:9c:16:60:f0:5c:57:f3:19: 68:c4:f0:40:9f:64:9d:2d:07:a9:27:92:6e:9e:71: 45:3e:dd:93:56:e5:26:4c:c3:20:6c:e8:3c:11:6c: a3:51:68:97:6e:9e:ec:2f:4c:f6:75:fa:67:a9:17: 74:1c:95:bb:47:82:61:70:32:83:e5:47:4d:d1:d4: 11:f3:58:92:5e:15:31:f4:41:6a:1e:59:7e:35:f2: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C6:80:A0:2C:50:D1:5D:52:35:29:41:6A:CC:E6:3D:B4:69:41:F8 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ycaAoCxQ0V1SNSlBaszmPbRpQfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.145.70.0/23 31.206.32.0/24 Signature Algorithm: sha256WithRSAEncryption ca:d3:9d:4f:11:16:a9:6b:7c:7e:1e:c9:50:62:18:0f:1c:68: da:d1:37:e6:e6:61:54:b0:a2:08:78:dd:64:a5:a4:02:36:2f: d9:57:ca:62:37:c0:38:70:5a:e6:8f:89:ef:2a:64:48:c4:38: 8a:dc:8e:ea:b0:f9:9a:79:eb:d8:51:16:e3:0c:6f:93:1a:93: 98:70:3a:c8:9c:0b:c7:63:22:63:7a:ec:94:3f:c8:93:34:9e: 08:af:b1:53:2d:de:3b:55:eb:de:12:84:9f:63:56:08:ef:63: bb:25:36:e1:9b:a2:a6:26:7f:0e:7e:ea:59:1a:00:38:fa:9e: f5:80:8d:8e:3c:a6:be:67:fe:c6:41:48:8a:7f:c8:71:80:80: 5d:dd:98:8f:e1:0c:d4:0d:06:81:4f:20:c1:d8:04:31:ca:c3: 86:b8:19:d5:84:cf:29:71:9c:6e:9b:fe:ea:7b:92:9b:76:d2: 94:ef:bf:3d:38:ce:fd:9f:3a:f3:05:6f:59:6a:3c:41:3d:41: 0e:35:c3:43:88:12:31:b5:ca:47:c4:2d:d8:c5:83:f7:35:aa: ec:5a:5d:44:46:87:90:ea:c1:e5:b0:da:ac:47:d1:aa:80:0b: 40:d9:df:bb:8b:86:59:2d:5a:bf:37:9d:b3:08:50:62:4a:c8: 2d:48:f3:87 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N+/csanl67H4YU464NVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWM2ODBhMDJjNTBkMTVkNTIzNTI5NDE2YWNjZTYzZGI0Njk0MWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta+Md6/19Ts3ZE6vZdW3Fz4FihvL 8Mcd1yC7yneDLW8u7fCcMFphc4Y3aoFQO1qr/hUgQXdLhVKpTRboH66oPEjJ7yL/ S3kamWqmSvpclhSKRqPD9P3PrIl4ntIXar9kvRaZmhfo49VPrqoiDH6q4iyfow6g lAOVG/GgaG/fGbDXiFzHS9GW+6F6upRhMFAx0J/sammWv680igQME3yUiVlx+T9R GkicWsNpnBZg8FxX8xloxPBAn2SdLQepJ5JunnFFPt2TVuUmTMMgbOg8EWyjUWiX bp7sL0z2dfpnqRd0HJW7R4JhcDKD5UdN0dQR81iSXhUx9EFqHll+NfLFHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMnGgKAsUNFdUjUpQWrM5j20aUH4MB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEveWNhQW9DeFEwVjFTTlNsQmFzem1QYlJwUWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBH5FGAwQA H84gMA0GCSqGSIb3DQEBCwUAA4IBAQDK051PERapa3x+HslQYhgPHGja0Tfm5mFU sKIIeN1kpaQCNi/ZV8piN8A4cFrmj4nvKmRIxDiK3I7qsPmaeevYURbjDG+TGpOY cDrInAvHYyJjeuyUP8iTNJ4Ir7FTLd47VeveEoSfY1YI72O7JTbhm6KmJn8OfupZ GgA4+p71gI2OPKa+Z/7GQUiKf8hxgIBd3ZiP4QzUDQaBTyDB2AQxysOGuBnVhM8p cZxum/7qe5KbdtKU7789OM79nzrzBW9ZajxBPUEONcNDiBIxtcpHxC3YxYP3Nars Wl1ERoeQ6sHlsNqsR9GqgAtA2d+7i4ZZLVq/N52zCFBiSsgtSPOH -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:20 2026 by rpki-client