This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/YppEuD63kZ31TGnLRIN3xiqWGBI.roa File: YppEuD63kZ31TGnLRIN3xiqWGBI.roa (raw, json) Hash identifier: felosXDJ6ap80oigDicxv12faJJwG7IilFVsyq10QVk= Subject key identifier: 62:9A:44:B8:3E:B7:91:9D:F5:4C:69:CB:44:83:77:C6:2A:96:18:12 Certificate issuer: /CN=12e28039646dcc32eceb58428f97cc994b998577 Certificate serial: 019B78A2EE77589DA3ED2E9CC03D75794747 Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/YppEuD63kZ31TGnLRIN3xiqWGBI.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33984 IP address blocks: 217.117.110.0/24 maxlen: 24 217.117.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ee:77:58:9d:a3:ed:2e:9c:c0:3d:75:79:47:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577 Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=629a44b83eb7919df54c69cb448377c62a961812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:ff:b1:9d:0d:5c:dc:5e:84:34:5e:c1:6d: 77:0a:a2:30:0e:b0:fb:d4:c9:aa:6f:f7:17:0b:ee: 44:62:6c:e4:3e:e1:52:76:76:99:3b:22:b7:1f:80: 1a:ab:28:08:f4:a7:40:fa:1f:d0:a8:a5:3e:8e:03: de:ab:07:e3:8d:fa:8f:ea:9b:3a:01:77:fb:69:ba: f0:ac:ab:1e:34:5d:a3:d5:a0:ca:c9:93:3c:29:6c: b7:0b:6c:fd:ed:bb:92:76:d7:3a:f8:77:aa:c2:51: 83:13:cc:14:30:b9:59:a2:87:49:da:48:77:7a:34: 58:29:a4:94:53:13:54:3c:d0:ac:54:b6:49:06:38: ce:a2:bd:54:20:d6:ae:7e:e6:84:0f:85:82:1d:73: a3:fb:80:74:fe:05:af:d0:ae:55:80:70:00:06:c3: 34:7e:d7:d1:96:b7:74:ff:8a:75:26:4a:72:2c:d5: f6:1b:16:2d:c3:eb:9e:c7:a2:6d:3b:b6:8a:cb:eb: 72:05:20:3a:f6:ca:fd:b3:5b:cb:fc:69:0e:f2:5e: 0b:a5:2f:fe:36:5d:6b:c6:8d:58:02:7c:c1:45:bc: 90:68:88:64:28:84:3d:e1:d5:a0:9c:8d:e7:25:73: de:5c:7e:04:6f:80:32:52:b8:05:90:3d:a9:be:40: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9A:44:B8:3E:B7:91:9D:F5:4C:69:CB:44:83:77:C6:2A:96:18:12 X509v3 Authority Key Identifier: keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/YppEuD63kZ31TGnLRIN3xiqWGBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.117.110.0/23 Signature Algorithm: sha256WithRSAEncryption 12:21:fe:4d:85:67:30:54:65:45:c3:ae:8b:5f:fb:24:32:bd: 41:58:ce:8c:c5:dd:6a:a7:ec:28:9d:ec:e2:1d:24:c2:d1:ee: b6:fd:54:63:37:ae:b9:21:08:01:73:78:5f:80:ae:e6:9e:91: d3:f0:ba:0d:eb:11:76:da:4c:1c:ad:6b:24:f3:08:7d:0a:f5: 1d:e5:f1:32:04:99:d8:9b:fd:5f:ee:41:8a:0f:fb:98:81:1a: 68:68:55:73:1f:d9:18:1b:1b:9b:4d:3f:bd:59:d3:df:c9:3f: 65:3f:4a:a9:80:f2:c9:fb:5a:a1:18:42:82:b8:85:e8:2d:24: 5b:3d:8e:8e:e4:5e:1b:2a:33:64:55:02:d9:9f:96:fa:85:8f: 54:28:07:93:fd:e3:8e:76:fc:49:d4:f7:bf:0b:09:d3:d1:80: 2b:fd:af:95:ae:ef:76:c4:7d:c6:1d:9a:09:5e:af:64:7f:74: a5:5f:cd:3c:d6:17:ef:84:8c:96:31:1f:ce:30:62:5c:3a:de: 05:90:31:a0:03:1d:3d:a3:45:52:09:e0:c4:72:94:b0:2a:de: 11:cd:d7:d5:e2:a8:81:17:60:9c:de:3a:3f:33:b8:37:9b:5d: 84:d3:4b:64:11:4b:0a:17:0e:3f:2b:1f:f1:7e:d9:ed:8d:47: 01:95:5b:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ou53WJ2j7S6cwD11eUdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZTI4MDM5NjQ2ZGNjMzJlY2ViNTg0MjhmOTdjYzk5NGI5 OTg1NzcwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjlhNDRiODNlYjc5MTlkZjU0YzY5Y2I0NDgzNzdjNjJhOTYxODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYn/sZ0NXNxehDRewW13CqIwDrD7 1Mmqb/cXC+5EYmzkPuFSdnaZOyK3H4AaqygI9KdA+h/QqKU+jgPeqwfjjfqP6ps6 AXf7abrwrKseNF2j1aDKyZM8KWy3C2z97buSdtc6+HeqwlGDE8wUMLlZoodJ2kh3 ejRYKaSUUxNUPNCsVLZJBjjOor1UINaufuaED4WCHXOj+4B0/gWv0K5VgHAABsM0 ftfRlrd0/4p1JkpyLNX2GxYtw+uex6JtO7aKy+tyBSA69sr9s1vL/GkO8l4LpS/+ Nl1rxo1YAnzBRbyQaIhkKIQ94dWgnI3nJXPeXH4Eb4AyUrgFkD2pvkA7VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKaRLg+t5Gd9Uxpy0SDd8YqlhgSMB8GA1UdIwQY MBaAFBLigDlkbcwy7OtYQo+XzJlLmYV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAt MzZkOTFkYmNmYzQxLzEvWXBwRXVENjNrWjMxVEduTFJJTjN4aXFXR0JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80YWIxZTAtNmQ3ZC00NGZkLThkMjAtMzZkOTFkYmNmYzQx LzEvRXVLQU9XUnR6RExzNjFoQ2o1Zk1tVXVaaFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2XVuMA0G CSqGSIb3DQEBCwUAA4IBAQASIf5NhWcwVGVFw66LX/skMr1BWM6Mxd1qp+wonezi HSTC0e62/VRjN665IQgBc3hfgK7mnpHT8LoN6xF22kwcrWsk8wh9CvUd5fEyBJnY m/1f7kGKD/uYgRpoaFVzH9kYGxubTT+9WdPfyT9lP0qpgPLJ+1qhGEKCuIXoLSRb PY6O5F4bKjNkVQLZn5b6hY9UKAeT/eOOdvxJ1Pe/CwnT0YAr/a+Vru92xH3GHZoJ Xq9kf3SlX8081hfvhIyWMR/OMGJcOt4FkDGgAx09o0VSCeDEcpSwKt4RzdfV4qiB F2Cc3jo/M7g3m12E00tkEUsKFw4/Kx/xftntjUcBlVvB -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:35 2026 by rpki-client