This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/YhsjFdGGK_6ON1FBtuxgmdwheyA.roa File: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (raw, json) Hash identifier: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA= Subject key identifier: 62:1B:23:15:D1:86:2B:FE:8E:37:51:41:B6:EC:60:99:DC:21:7B:20 Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa Certificate serial: 019B7758D10D79B8D64E732DB743BA4B2D36 Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/YhsjFdGGK_6ON1FBtuxgmdwheyA.roa Signing time: Thu 01 Jan 2026 02:17:47 +0000 ROA not before: Thu 01 Jan 2026 02:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9 IP address blocks: 95.141.135.0/24 maxlen: 24 188.0.131.0/24 maxlen: 24 188.0.144.0/24 maxlen: 24 188.127.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d1:0d:79:b8:d6:4e:73:2d:b7:43:ba:4b:2d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa Validity Not Before: Jan 1 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=621b2315d1862bfe8e375141b6ec6099dc217b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:28:f0:49:89:fb:a4:0e:91:22:6b:7c:10: c0:1c:57:c4:29:90:9f:9c:81:2e:9a:dd:77:8e:d5: b4:2d:77:53:f0:31:0c:f7:05:13:f9:47:2d:8a:71: 14:e7:db:ca:6f:3e:ca:40:a8:97:dc:da:32:8b:4f: 07:3e:94:23:66:12:30:b8:bc:e6:bf:10:5f:13:01: 30:38:ff:08:64:56:cc:d7:8c:b1:9c:18:b0:64:31: f5:c8:a8:dc:7e:52:95:3b:10:16:bb:ae:b6:33:4b: 07:48:4f:16:3e:19:96:6e:0b:1f:d2:e7:87:bc:2a: 5a:db:96:80:54:7f:35:9d:99:3a:1d:c2:dc:aa:d4: c4:8a:4b:78:36:f3:80:f6:0e:3b:3d:0b:12:d7:d3: c3:97:24:25:25:c7:05:d3:63:6c:f2:53:0a:2d:09: 4d:64:42:42:87:26:b1:5f:26:d3:de:8e:ab:a3:c0: 85:f4:fe:6f:23:a4:65:72:b3:1c:84:70:e6:5a:45: 55:aa:03:2e:f6:e2:53:9e:58:be:75:50:10:6d:85: 8a:55:ed:00:ec:14:aa:48:f4:b5:56:6e:e2:26:82: 0b:9c:39:f4:7a:3f:da:5b:d5:db:c7:87:63:54:3f: 89:a8:8d:0a:32:9b:1f:45:c5:3c:fc:92:b4:96:ec: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1B:23:15:D1:86:2B:FE:8E:37:51:41:B6:EC:60:99:DC:21:7B:20 X509v3 Authority Key Identifier: keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/YhsjFdGGK_6ON1FBtuxgmdwheyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.141.135.0/24 188.0.131.0/24 188.0.144.0/24 188.127.37.0/24 Signature Algorithm: sha256WithRSAEncryption 29:3d:2d:09:6c:c5:a7:64:c4:0d:41:c7:41:2e:81:d7:56:db: 7a:5a:93:60:f3:f8:fd:eb:ba:5c:50:cd:ed:b0:d3:d2:46:e4: 1a:ec:0e:59:1a:fc:52:9a:e1:c5:57:fc:28:15:9c:d6:48:be: eb:8d:ed:fc:14:20:9b:53:64:92:40:50:f1:68:03:c2:1f:a0: be:c3:95:54:9b:08:87:8d:f4:b6:13:1e:02:c6:2e:a1:f2:50: 14:7b:66:b7:71:bc:1c:79:69:51:34:43:14:f4:68:ae:c6:dd: 49:c0:5d:49:a3:df:be:95:f8:44:4c:7d:97:8f:5d:db:8c:ff: bf:f1:86:c1:ae:c2:8d:b1:0d:b4:21:ad:17:f6:97:19:08:fb: c1:77:82:2a:cc:9b:74:e2:36:7c:6e:ff:e3:00:89:73:32:c9: 58:48:d0:c7:9f:b1:44:27:7d:33:97:1f:81:23:b7:ea:0d:75: 21:37:2e:bc:e8:7b:5e:11:e9:d3:0b:fa:68:07:0b:1f:94:37: 57:94:ff:59:86:83:44:fd:3c:47:e4:f1:08:20:0d:30:71:a5: 9b:69:15:a7:8d:c2:99:d3:4c:66:59:9c:6a:58:0e:db:65:d4: 51:1c:13:5c:79:42:33:48:8c:d9:9f:5a:81:d6:98:df:1e:9f: d1:19:fa:10 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WNENebjWTnMtt0O6Sy02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh YmE5ZmEwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjFiMjMxNWQxODYyYmZlOGUzNzUxNDFiNmVjNjA5OWRjMjE3YjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOwo8EmJ+6QOkSJrfBDAHFfEKZCf nIEumt13jtW0LXdT8DEM9wUT+UctinEU59vKbz7KQKiX3Noyi08HPpQjZhIwuLzm vxBfEwEwOP8IZFbM14yxnBiwZDH1yKjcflKVOxAWu662M0sHSE8WPhmWbgsf0ueH vCpa25aAVH81nZk6HcLcqtTEikt4NvOA9g47PQsS19PDlyQlJccF02Ns8lMKLQlN ZEJChyaxXybT3o6ro8CF9P5vI6RlcrMchHDmWkVVqgMu9uJTnli+dVAQbYWKVe0A 7BSqSPS1Vm7iJoILnDn0ej/aW9Xbx4djVD+JqI0KMpsfRcU8/JK0luwP2QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGIbIxXRhiv+jjdRQbbsYJncIXsgMB8GA1UdIwQY MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt NDM4NDNjMmU5NDNiLzEvWWhzakZkR0dLXzZPTjFGQnR1eGdtZHdoZXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAX42HAwQA vACDAwQAvACQAwQAvH8lMA0GCSqGSIb3DQEBCwUAA4IBAQApPS0JbMWnZMQNQcdB LoHXVtt6WpNg8/j967pcUM3tsNPSRuQa7A5ZGvxSmuHFV/woFZzWSL7rje38FCCb U2SSQFDxaAPCH6C+w5VUmwiHjfS2Ex4Cxi6h8lAUe2a3cbwceWlRNEMU9Giuxt1J wF1Jo9++lfhETH2Xj13bjP+/8YbBrsKNsQ20Ia0X9pcZCPvBd4IqzJt04jZ8bv/j AIlzMslYSNDHn7FEJ30zlx+BI7fqDXUhNy686HteEenTC/poBwsflDdXlP9ZhoNE /TxH5PEIIA0wcaWbaRWnjcKZ00xmWZxqWA7bZdRRHBNceUIzSIzZn1qB1pjfHp/R GfoQ -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:44 2026 by rpki-client