This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/yu-i2x-62u9GgIqkbHtrB0flg3s.roa File: yu-i2x-62u9GgIqkbHtrB0flg3s.roa (raw, json) Hash identifier: DBRnQF75P0UT8wiwqTpnRrbuWAWKmmICP891u/zUXI4= Subject key identifier: CA:EF:A2:DB:1F:BA:DA:EF:46:80:8A:A4:6C:7B:6B:07:47:E5:83:7B Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5 Certificate serial: 019B85F7F21772E13C7A93E4DE4FF2A13F34 Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/yu-i2x-62u9GgIqkbHtrB0flg3s.roa Signing time: Sat 03 Jan 2026 22:26:17 +0000 ROA not before: Sat 03 Jan 2026 22:26:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198983 IP address blocks: 160.20.145.0/24 maxlen: 24 2a0e:b540:ffa1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:85:f7:f2:17:72:e1:3c:7a:93:e4:de:4f:f2:a1:3f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5 Validity Not Before: Jan 3 22:26:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caefa2db1fbadaef46808aa46c7b6b0747e5837b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:a4:d7:13:b9:ff:bf:fe:e4:14:3e:90:f0: 2d:6e:a3:ef:a3:28:63:74:e2:9e:31:30:cc:65:7f: 4c:a7:6f:cb:5a:72:2e:ff:ad:d5:a8:f0:84:12:30: d4:2e:79:ff:1d:0e:a8:8a:c8:d7:81:a8:25:05:c8: ac:02:2c:3e:e5:b3:d6:da:3d:bd:c5:ad:c5:7c:89: 4b:9a:67:96:2a:4c:f3:94:4e:13:dc:bb:09:3f:3a: 77:1c:73:65:96:6f:05:06:68:80:81:d0:36:6e:a1: 9a:d4:6f:76:f7:8f:65:cd:26:a3:89:31:80:ae:c1: 52:e0:ef:79:96:92:a5:a4:f9:3e:b8:32:cf:c6:e1: 01:e2:ec:d4:ea:a4:43:68:e0:31:2b:04:82:bb:4e: 34:e0:08:08:b1:bc:5f:03:ef:49:31:1a:a0:06:bc: 70:ed:55:fa:ce:f7:f4:d5:d1:c8:28:6d:4f:5c:20: e9:90:e2:91:ed:d0:18:72:db:48:cd:5a:86:67:a1: e9:ad:ef:54:b6:50:a4:46:0a:66:fb:07:33:87:4d: 8b:ec:53:9c:16:15:59:da:ae:d0:cb:67:ce:a7:3b: 59:f2:cc:f7:6d:04:83:8a:c6:f2:4d:9a:9c:70:3a: af:90:78:9d:00:b5:6a:83:dd:1b:f1:77:7b:79:cf: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EF:A2:DB:1F:BA:DA:EF:46:80:8A:A4:6C:7B:6B:07:47:E5:83:7B X509v3 Authority Key Identifier: keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/yu-i2x-62u9GgIqkbHtrB0flg3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.145.0/24 IPv6: 2a0e:b540:ffa1::/48 Signature Algorithm: sha256WithRSAEncryption 1d:4f:73:d1:24:ec:b1:78:03:1c:7d:93:22:6c:51:bb:59:c0: 2d:1c:0e:1f:da:6a:cd:bb:0e:ae:d5:9f:9f:47:53:a6:e6:71: 2e:61:ac:e7:a5:b0:63:80:5c:5b:6d:a4:ec:b7:5c:f9:02:49: 28:50:3d:6a:46:53:05:50:b5:0a:cf:e6:16:c2:33:c1:52:25: 9d:d5:74:b1:29:01:94:b0:37:35:1c:67:63:27:1b:27:d6:f8: a0:58:c2:a3:8a:66:f3:e5:9d:0a:72:27:62:fc:a6:38:2a:52: 0c:54:ae:ed:98:d6:98:d2:df:83:33:cf:11:76:0a:a9:dd:00: df:8e:5f:0e:94:a9:1b:77:be:9e:00:9d:4b:61:91:9c:6c:cb: 89:c3:f2:f5:f5:5e:a6:11:e4:58:6a:59:96:1c:60:ef:1e:ab: 84:62:51:f8:b1:45:b9:76:3c:58:0d:bc:c4:6f:75:f5:a3:94: ff:2d:5c:a8:ae:a4:45:38:b2:50:23:53:0a:d3:c2:5d:86:9e: 50:e2:e1:27:00:3d:7c:ed:fd:62:f8:92:98:12:10:a4:03:d7: 2f:13:38:c7:4f:8b:ed:d9:56:b7:34:e1:3a:97:e1:4d:54:5e: a8:cd:ef:d9:bb:b7:7c:58:32:2e:3a:c0:83:a1:02:29:8d:04: 15:95:ab:36 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZuF9/IXcuE8epPk3k/yoT80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDY2MWNiMWMzOGU2M2JkNzhiZDZiMmIxZDY4Njg2YTU0 MTViZjUwHhcNMjYwMTAzMjIyNjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWVmYTJkYjFmYmFkYWVmNDY4MDhhYTQ2YzdiNmIwNzQ3ZTU4MzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssGk1xO5/7/+5BQ+kPAtbqPvoyhj dOKeMTDMZX9Mp2/LWnIu/63VqPCEEjDULnn/HQ6oisjXgaglBcisAiw+5bPW2j29 xa3FfIlLmmeWKkzzlE4T3LsJPzp3HHNllm8FBmiAgdA2bqGa1G92949lzSajiTGA rsFS4O95lpKlpPk+uDLPxuEB4uzU6qRDaOAxKwSCu0404AgIsbxfA+9JMRqgBrxw 7VX6zvf01dHIKG1PXCDpkOKR7dAYcttIzVqGZ6Hpre9UtlCkRgpm+wczh02L7FOc FhVZ2q7Qy2fOpztZ8sz3bQSDisbyTZqccDqvkHidALVqg90b8Xd7ec/waQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMrvotsfutrvRoCKpGx7awdH5YN7MB8GA1UdIwQY MBaAFJdGYcscOOY714vWsrHWhoalQVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTkt OGFkYWMxN2U5MGFlLzEveXUtaTJ4LTYydTlHZ0lxa2JIdHJCMGZsZzNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTktOGFkYWMxN2U5MGFl LzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAoBSRMA8E AgACMAkDBwAqDrVA/6EwDQYJKoZIhvcNAQELBQADggEBAB1Pc9Ek7LF4Axx9kyJs UbtZwC0cDh/aas27Dq7Vn59HU6bmcS5hrOelsGOAXFttpOy3XPkCSShQPWpGUwVQ tQrP5hbCM8FSJZ3VdLEpAZSwNzUcZ2MnGyfW+KBYwqOKZvPlnQpyJ2L8pjgqUgxU ru2Y1pjS34MzzxF2CqndAN+OXw6UqRt3vp4AnUthkZxsy4nD8vX1XqYR5FhqWZYc YO8eq4RiUfixRbl2PFgNvMRvdfWjlP8tXKiupEU4slAjUwrTwl2GnlDi4ScAPXzt /WL4kpgSEKQD1y8TOMdPi+3ZVrc04TqX4U1UXqjN79m7t3xYMi46wIOhAimNBBWV qzY= -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:29 2026 by rpki-client