This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/YPVTV3WJ_kGERtyfsujU7TWmTuo.roa
File: YPVTV3WJ_kGERtyfsujU7TWmTuo.roa (raw, json)
Hash identifier: 3mQ5HyF6SXyaMb4D8sGEX7HkxBwBKSkoqI68TSckUnY=
Subject key identifier: 60:F5:53:57:75:89:FE:41:84:46:DC:9F:B2:E8:D4:ED:35:A6:4E:EA
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 019B7AC8E44EF3DF61B144A73CA2A000E2B5
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/YPVTV3WJ_kGERtyfsujU7TWmTuo.roa
Signing time: Thu 01 Jan 2026 18:19:04 +0000
ROA not before: Thu 01 Jan 2026 18:19:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61242
IP address blocks: 46.22.161.0/24 maxlen: 24
46.22.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:e4:4e:f3:df:61:b1:44:a7:3c:a2:a0:00:e2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 18:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60f553577589fe418446dc9fb2e8d4ed35a64eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:37:b4:c3:63:0d:a8:91:31:19:5a:61:f2:
8f:a9:d2:73:1e:9e:d2:3b:30:07:a5:2b:fc:8d:26:
90:37:52:f5:81:8d:14:b5:e6:d6:11:6c:8f:1d:db:
89:74:ab:20:05:9d:60:a0:df:c9:96:53:b2:15:e8:
4c:52:bd:9b:c4:0c:78:6e:4d:e5:3f:55:ee:8c:bb:
0f:2e:dc:00:28:b7:95:8a:96:77:0e:02:6f:9e:6b:
6b:69:10:ea:6e:27:b2:f5:03:ed:ae:91:40:3c:ba:
4f:03:53:07:10:83:ad:95:82:bf:cd:e4:45:ff:15:
3d:f4:25:02:af:44:37:f0:c7:07:0c:b5:e3:63:37:
00:98:a5:7e:8c:3d:9d:40:3d:8e:3f:b5:b5:e3:5a:
03:71:31:5b:75:e8:c2:a3:d9:1b:53:8d:95:5a:60:
d3:0a:83:26:b5:3b:bc:e3:cf:ce:b7:1e:5e:f4:dd:
13:c7:1d:48:e0:4a:bf:3c:1e:64:df:2b:d3:19:17:
0b:f5:46:87:f2:ab:f1:bc:0b:d8:53:8b:3e:26:02:
2c:4f:69:20:76:92:73:82:9e:d0:24:9e:a6:00:89:
10:cd:c0:bb:56:e0:94:56:ea:25:15:9e:d6:95:93:
6d:20:27:19:e9:e4:6c:ee:93:81:2a:8e:95:69:88:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F5:53:57:75:89:FE:41:84:46:DC:9F:B2:E8:D4:ED:35:A6:4E:EA
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/YPVTV3WJ_kGERtyfsujU7TWmTuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.161.0/24
46.22.172.0/24
Signature Algorithm: sha256WithRSAEncryption
87:59:4f:02:dc:e5:6c:76:26:d4:34:06:ed:d5:16:44:fe:32:
27:de:1b:6a:63:27:de:58:db:e4:9f:51:34:8f:4d:f4:ab:3f:
5d:f3:cb:c3:04:25:08:64:ca:d5:a4:59:0e:d1:29:32:60:24:
04:fc:cf:1a:51:1d:4f:59:94:62:83:45:75:dc:7c:01:f5:00:
6e:f1:be:94:3c:a8:f4:0c:99:3f:e4:43:0d:56:3e:25:4f:dd:
9d:75:1d:95:30:7f:61:6b:ca:82:32:3e:1b:51:4e:0f:4f:0f:
4a:d1:dc:2f:0a:ba:53:84:74:e6:77:b0:af:69:08:3d:a9:09:
d4:31:4e:a8:75:73:ea:f6:69:96:7e:fe:a9:79:b8:44:e8:71:
b4:0d:72:c5:87:b5:e6:5b:e3:25:3c:ca:01:d4:ee:68:bf:f6:
68:42:51:15:b6:5f:ce:d2:76:2a:5c:e0:46:62:12:b8:f5:42:
d0:98:2b:f6:82:a6:98:f8:d4:80:cc:6c:59:28:59:e6:91:3a:
ae:d7:10:f8:5b:b0:60:c7:bc:e9:da:e3:64:88:b1:a3:ec:bd:
37:d9:a8:45:58:1b:19:fb:63:a9:a6:6c:94:50:23:f3:97:ac:
79:33:d6:4c:4d:62:8f:30:71:2a:a9:e8:48:ba:93:20:f1:4d:
81:35:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:31:49 2026 by rpki-client