This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/YyXF3OxgRNyX-Tn0zjDBLmmYjz4.roa File: YyXF3OxgRNyX-Tn0zjDBLmmYjz4.roa (raw, json) Hash identifier: YNkifw1EJhoRPJYXOYjV87L3gIcwvA9cvc3CZwAakSE= Subject key identifier: 63:25:C5:DC:EC:60:44:DC:97:F9:39:F4:CE:30:C1:2E:69:98:8F:3E Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F56008CDEF3263A44B67A00D4D7DA Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/YyXF3OxgRNyX-Tn0zjDBLmmYjz4.roa Signing time: Fri 02 Jan 2026 02:17:58 +0000 ROA not before: Fri 02 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43253 IP address blocks: 217.17.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:56:00:8c:de:f3:26:3a:44:b6:7a:00:d4:d7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6325c5dcec6044dc97f939f4ce30c12e69988f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:0d:10:2e:1f:40:65:7f:d8:75:9d:99:b5: 97:9c:8d:8e:fc:f8:2e:d7:c8:79:ca:9e:3e:31:38: f4:79:4d:a9:81:1f:68:8b:3d:d7:e9:77:df:a7:69: c2:25:96:68:51:39:97:58:93:91:93:df:5c:ee:17: 1f:a5:0b:0d:5f:7a:6a:dc:51:61:27:8c:fe:7c:ab: 78:52:12:b9:4c:86:b5:45:2e:e2:fd:cc:18:b3:18: 44:5b:82:ef:b4:1f:b7:18:f5:6d:74:7a:b0:8a:5d: 83:5f:41:08:6c:98:c2:a8:26:11:5e:98:02:af:d2: 15:b6:98:58:2e:02:e4:dd:61:fd:d5:2d:3a:16:e8: cb:19:5c:74:26:a6:60:9b:df:f2:b0:82:bd:e3:af: 62:27:57:d8:8b:14:1d:6d:a0:51:05:a1:71:6c:7f: c4:04:e8:b8:a0:db:9f:d4:6c:e7:4c:ea:dd:d9:07: 76:6c:22:32:28:bd:bf:a5:98:8e:cb:d9:b0:b0:20: e5:ac:56:f5:7d:75:c5:d5:b0:70:b8:1c:f2:6f:bf: 27:2a:d9:cb:70:6a:82:c2:a7:86:25:3f:2d:90:2b: 2f:f7:c3:b6:76:61:2a:16:aa:e0:9a:e5:03:e0:52: 54:48:5b:cb:52:df:f0:e2:c2:14:84:f3:9c:3e:74: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:25:C5:DC:EC:60:44:DC:97:F9:39:F4:CE:30:C1:2E:69:98:8F:3E X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/YyXF3OxgRNyX-Tn0zjDBLmmYjz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.17.38.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:ba:cd:4d:d7:7d:62:5e:d4:c0:d2:85:66:9f:2b:ec:1a:47: 83:04:e6:86:db:af:7c:34:18:5f:ad:c7:44:ca:38:9a:58:48: f5:59:ba:d2:c8:00:ff:ee:da:25:46:37:96:fb:4d:e4:33:04: 30:cf:7e:83:18:8e:18:91:a7:7d:97:b5:9c:fd:87:52:82:25: 4f:84:a3:50:1d:0f:54:cd:cb:0a:f1:dc:26:cb:98:e9:e6:02: dc:14:67:d9:ba:40:31:39:a9:45:3b:8d:d6:f8:d5:51:fe:9c: 9e:53:35:2a:32:3a:2f:16:44:1b:82:25:b3:ae:d8:5a:0f:1d: a9:19:64:65:1a:53:42:1b:a8:0a:43:3c:89:66:98:d8:22:6a: 14:09:97:6e:ef:c0:b7:51:e5:f8:76:6f:57:10:98:9d:74:81: f8:d2:73:64:8a:03:a7:f0:1b:d6:f0:11:62:6f:52:fe:89:13: e0:dd:9d:2f:a9:72:01:5e:34:19:5b:d9:66:b7:0e:28:ed:b1: c1:27:dc:fe:f8:b4:6c:54:ea:92:56:45:81:22:b0:72:5e:fd: fe:56:70:45:7f:24:f6:4c:23:7d:79:2a:0c:e3:1c:08:2d:3a: de:1b:8f:20:4b:fc:65:35:b5:59:7a:c3:7d:55:11:4f:3e:68: 0c:df:67:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f1YAjN7zJjpEtnoA1NfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzI1YzVkY2VjNjA0NGRjOTdmOTM5ZjRjZTMwYzEyZTY5OTg4ZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhUNEC4fQGV/2HWdmbWXnI2O/Pgu 18h5yp4+MTj0eU2pgR9oiz3X6Xffp2nCJZZoUTmXWJORk99c7hcfpQsNX3pq3FFh J4z+fKt4UhK5TIa1RS7i/cwYsxhEW4LvtB+3GPVtdHqwil2DX0EIbJjCqCYRXpgC r9IVtphYLgLk3WH91S06FujLGVx0JqZgm9/ysIK9469iJ1fYixQdbaBRBaFxbH/E BOi4oNuf1GznTOrd2Qd2bCIyKL2/pZiOy9mwsCDlrFb1fXXF1bBwuBzyb78nKtnL cGqCwqeGJT8tkCsv98O2dmEqFqrgmuUD4FJUSFvLUt/w4sIUhPOcPnS+pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMlxdzsYETcl/k59M4wwS5pmI8+MB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvWXlYRjNPeGdSTnlYLVRuMHpqREJMbW1Zano0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2REmMA0G CSqGSIb3DQEBCwUAA4IBAQBdus1N131iXtTA0oVmnyvsGkeDBOaG2698NBhfrcdE yjiaWEj1WbrSyAD/7tolRjeW+03kMwQwz36DGI4Ykad9l7Wc/YdSgiVPhKNQHQ9U zcsK8dwmy5jp5gLcFGfZukAxOalFO43W+NVR/pyeUzUqMjovFkQbgiWzrthaDx2p GWRlGlNCG6gKQzyJZpjYImoUCZdu78C3UeX4dm9XEJiddIH40nNkigOn8BvW8BFi b1L+iRPg3Z0vqXIBXjQZW9lmtw4o7bHBJ9z++LRsVOqSVkWBIrByXv3+VnBFfyT2 TCN9eSoM4xwILTreG48gS/xlNbVZesN9VRFPPmgM32db -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:37 2026 by rpki-client