This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/yNfD365-tXOpusJAZY2aazsc3UA.roa File: yNfD365-tXOpusJAZY2aazsc3UA.roa (raw, json) Hash identifier: OKJa0B2w6ILG8VVTp6yanFtDn08u3rnQfhZF1PqwyYY= Subject key identifier: C8:D7:C3:DF:AE:7E:B5:73:A9:BA:C2:40:65:8D:9A:6B:3B:1C:DD:40 Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5 Certificate serial: 019B7E37D6182CC1687893C7C8AD8F51009D Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/yNfD365-tXOpusJAZY2aazsc3UA.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202513 IP address blocks: 43.230.184.0/22 maxlen: 24 185.98.16.0/22 maxlen: 24 185.249.148.0/22 maxlen: 24 2a0c:97c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d6:18:2c:c1:68:78:93:c7:c8:ad:8f:51:00:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5 Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8d7c3dfae7eb573a9bac240658d9a6b3b1cdd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:2d:e1:9e:98:e9:1b:4b:36:9c:d6:fe:c1: 0c:77:6e:6e:1e:1f:34:33:09:67:29:ca:05:24:29: 88:57:39:09:3c:cd:f8:16:dc:d6:dc:9e:80:4b:d2: 43:e9:4b:24:eb:58:0a:96:1c:3d:74:df:43:d1:69: d0:10:95:2b:8e:7b:32:d5:e6:44:09:c0:90:80:f3: 8c:f5:ae:c1:93:7a:cb:b0:d0:a4:83:53:55:0a:6e: b3:31:d7:66:e6:5d:9d:71:55:eb:74:89:90:a4:6f: 7e:cd:e5:6a:a5:a9:46:cd:b2:03:a1:df:34:11:24: 7a:10:34:a5:eb:22:41:2a:80:32:ad:52:92:dc:3a: 11:df:49:03:c2:fb:ed:7e:31:69:63:49:98:7c:a4: cc:43:b6:d3:64:64:d9:a1:df:3c:d3:ec:72:db:91: d7:66:5a:89:89:08:2e:2b:69:cb:70:21:51:45:60: 11:14:b3:a8:57:22:97:f7:35:19:d1:11:6f:4b:9b: 08:e6:d4:b4:09:8f:6c:6b:47:f9:5c:d3:df:1e:7f: 2c:84:7d:3b:6e:f3:97:e8:50:1c:c5:c7:9b:6c:86: ce:31:b0:3f:d9:b7:05:07:dd:53:90:00:5a:92:dd: a4:01:a0:d1:55:c2:8a:05:8c:e6:8a:63:e7:c9:b4: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D7:C3:DF:AE:7E:B5:73:A9:BA:C2:40:65:8D:9A:6B:3B:1C:DD:40 X509v3 Authority Key Identifier: keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/yNfD365-tXOpusJAZY2aazsc3UA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.184.0/22 185.98.16.0/22 185.249.148.0/22 IPv6: 2a0c:97c0::/29 Signature Algorithm: sha256WithRSAEncryption 00:94:a7:3f:17:5b:d9:e0:dd:23:8c:87:ec:b1:6d:44:10:76: 32:0d:65:00:6c:7f:41:95:88:eb:fb:34:7a:ae:fa:19:f2:19: 70:2b:71:17:4a:43:5d:c8:af:87:f8:70:b5:9f:54:e7:47:7a: 0b:a5:9e:99:23:da:6f:23:5e:57:0a:bf:8a:37:41:8f:1f:84: 25:8a:f4:cc:60:ff:9c:e8:cf:3f:18:4f:01:6c:ec:b4:d7:d7: 4f:92:4e:eb:62:89:5a:d5:cd:38:88:c8:c0:a9:03:e0:25:a3: c7:28:26:3c:53:f2:b3:72:57:54:f4:48:cf:32:6e:cf:36:7f: a8:ef:56:8c:1d:c6:18:17:bb:8a:21:5b:f8:45:f8:30:e2:c2: b4:fc:9d:ef:16:1d:e3:a8:7f:49:b2:60:85:64:46:c7:fa:35: 40:7a:df:28:ab:37:a4:03:85:84:d3:88:22:0d:85:ed:56:05: 90:37:58:65:06:8d:c6:fe:4c:cd:ea:50:e0:ed:2a:c3:da:c1: 88:80:45:41:f1:5f:90:9c:c0:8f:93:d0:04:76:c6:0e:93:9d: c4:5a:45:b0:b1:13:6c:7f:04:d0:66:fa:06:0a:48:f0:38:cb: a0:52:76:7c:fa:80:11:55:a9:10:16:c3:63:65:44:09:6b:34: 35:66:67:f7 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+N9YYLMFoeJPHyK2PUQCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODUwNjEzNjFiMTlmMjEyZWZlOTBjMmQ4Y2YzZWVlNjE3 ZjIwZTUwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGQ3YzNkZmFlN2ViNTczYTliYWMyNDA2NThkOWE2YjNiMWNkZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNgt4Z6Y6RtLNpzW/sEMd25uHh80 MwlnKcoFJCmIVzkJPM34FtzW3J6AS9JD6Usk61gKlhw9dN9D0WnQEJUrjnsy1eZE CcCQgPOM9a7Bk3rLsNCkg1NVCm6zMddm5l2dcVXrdImQpG9+zeVqpalGzbIDod80 ESR6EDSl6yJBKoAyrVKS3DoR30kDwvvtfjFpY0mYfKTMQ7bTZGTZod880+xy25HX ZlqJiQguK2nLcCFRRWARFLOoVyKX9zUZ0RFvS5sI5tS0CY9sa0f5XNPfHn8shH07 bvOX6FAcxcebbIbOMbA/2bcFB91TkABakt2kAaDRVcKKBYzmimPnybS4CwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMjXw9+ufrVzqbrCQGWNmms7HN1AMB8GA1UdIwQY MBaAFG2FBhNhsZ8hLv6QwtjPPu5hfyDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYt NjdhZDYwZDM4NmRkLzEveU5mRDM2NS10WE9wdXNKQVpZMmFhenNjM1VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYtNjdhZDYwZDM4NmRk LzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCK+a4AwQC uWIQAwQCufmUMA0EAgACMAcDBQMqDJfAMA0GCSqGSIb3DQEBCwUAA4IBAQAAlKc/ F1vZ4N0jjIfssW1EEHYyDWUAbH9BlYjr+zR6rvoZ8hlwK3EXSkNdyK+H+HC1n1Tn R3oLpZ6ZI9pvI15XCr+KN0GPH4QlivTMYP+c6M8/GE8BbOy019dPkk7rYola1c04 iMjAqQPgJaPHKCY8U/KzcldU9EjPMm7PNn+o71aMHcYYF7uKIVv4Rfgw4sK0/J3v Fh3jqH9JsmCFZEbH+jVAet8oqzekA4WE04giDYXtVgWQN1hlBo3G/kzN6lDg7SrD 2sGIgEVB8V+QnMCPk9AEdsYOk53EWkWwsRNsfwTQZvoGCkjwOMugUnZ8+oARVakQ FsNjZUQJazQ1Zmf3 -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:03 2026 by rpki-client