This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa File: YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa (raw, json) Hash identifier: aIUQvaxY70pNpKSk5tmYluexw6bkZHt2gtc/Ueg8vRM= Subject key identifier: 61:63:43:65:34:C8:66:83:A7:1E:80:D7:8B:D1:3A:0C:69:43:96:A6 Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782 Certificate serial: 019B7758AC7542EE3EBE52A7259F49B0BC4D Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa Signing time: Thu 01 Jan 2026 02:17:38 +0000 ROA not before: Thu 01 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13251 IP address blocks: 213.179.64.0/24 maxlen: 24 213.179.65.0/24 maxlen: 24 213.179.66.0/24 maxlen: 24 213.179.67.0/24 maxlen: 24 213.179.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ac:75:42:ee:3e:be:52:a7:25:9f:49:b0:bc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782 Validity Not Before: Jan 1 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6163436534c86683a71e80d78bd13a0c694396a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:20:a6:7b:43:ab:2f:5b:b9:b6:0d:52:e3: 45:17:81:cd:84:db:7d:4d:fd:b0:0e:fc:f4:71:4d: f8:d3:db:ae:e1:ec:a9:fc:83:b9:d4:36:0d:84:15: 9c:f5:2d:d9:97:2b:ac:55:58:b1:7f:7b:28:f3:08: 4f:3e:35:b4:f7:c2:b9:7e:b1:df:29:38:52:e8:c1: 2d:ea:ee:49:b0:20:42:b5:2a:9d:31:66:49:0c:a7: 4d:59:99:a0:af:64:fd:3c:c1:bd:5c:09:74:11:07: 00:43:b2:c0:95:f2:54:2e:9a:15:40:e6:4c:93:81: 27:9b:3e:a7:97:df:2b:43:c2:b5:57:8a:f6:54:29: 5a:db:e1:12:bb:b7:fb:77:6f:82:13:5c:1b:85:ac: 21:66:45:62:31:6e:45:2b:f9:76:1b:c0:f3:05:02: 18:06:77:2f:8e:2c:62:61:3b:81:a1:5e:d0:2b:43: db:51:06:0b:ae:9a:a4:62:8a:68:f8:56:e9:84:fd: 4c:28:66:0b:06:b5:19:a1:35:ff:ce:a4:eb:e4:cb: fa:ef:46:a6:55:5a:1e:c0:fb:4a:c6:96:5b:6c:26: d1:34:91:79:1b:8d:3b:bf:21:49:e5:07:b1:72:c9: 6d:a9:b1:42:a7:e7:a7:69:b7:28:94:96:a5:ff:a3: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:63:43:65:34:C8:66:83:A7:1E:80:D7:8B:D1:3A:0C:69:43:96:A6 X509v3 Authority Key Identifier: keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.179.64.0-213.179.68.255 Signature Algorithm: sha256WithRSAEncryption b7:0b:ce:06:2b:25:f7:21:f6:8c:99:c9:23:37:b9:ad:28:2c: 47:43:71:2f:8f:f7:96:f6:0b:e3:d6:aa:e6:9b:4a:96:10:bb: f5:5c:d8:d5:aa:ef:7f:5c:4f:a7:7d:6b:2c:09:54:95:b3:cb: 72:55:f4:43:64:33:e7:29:9d:5b:25:9e:85:72:a3:09:6e:34: fc:dd:ba:b2:7b:90:fd:fc:82:ab:b0:33:1f:c2:a5:96:00:15: 45:78:0b:5e:35:9d:11:2a:85:a2:4d:b5:0b:fb:12:0c:13:83: 46:84:34:9a:e1:00:7f:ac:54:cd:be:6b:9c:19:ae:6a:3a:24: fe:25:b7:0c:f0:13:be:ba:83:23:0c:d8:91:c7:2c:17:cc:06: 30:cc:83:21:c7:bc:80:87:c4:91:cf:96:de:a6:a4:de:53:d8: 1a:0c:c7:53:fc:59:28:c6:a1:60:87:03:af:2c:e1:22:6f:2e: 0d:85:8b:92:d8:51:c1:b8:da:df:64:ac:8f:a1:49:c2:d1:b9: 2f:8d:64:17:e4:6d:55:9e:a2:2e:03:51:e2:0e:02:2e:32:c2: c8:0b:9d:b8:21:7a:18:0a:a3:ca:d3:c7:6a:5e:2a:bd:80:d4: 4c:e9:1e:f0:a3:8a:28:31:68:40:86:6e:ad:99:a8:91:19:f8: 3b:0a:1f:8b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WKx1Qu4+vlKnJZ9JsLxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz Y2U3ODIwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTYzNDM2NTM0Yzg2NjgzYTcxZTgwZDc4YmQxM2EwYzY5NDM5NmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnkgpntDqy9bubYNUuNFF4HNhNt9 Tf2wDvz0cU3409uu4eyp/IO51DYNhBWc9S3ZlyusVVixf3so8whPPjW098K5frHf KThS6MEt6u5JsCBCtSqdMWZJDKdNWZmgr2T9PMG9XAl0EQcAQ7LAlfJULpoVQOZM k4Enmz6nl98rQ8K1V4r2VCla2+ESu7f7d2+CE1wbhawhZkViMW5FK/l2G8DzBQIY BncvjixiYTuBoV7QK0PbUQYLrpqkYopo+FbphP1MKGYLBrUZoTX/zqTr5Mv670am VVoewPtKxpZbbCbRNJF5G407vyFJ5QexcsltqbFCp+enabcolJal/6M3hwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGFjQ2U0yGaDpx6A14vROgxpQ5amMB8GA1UdIwQY MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt YWQ0YTFkYTM5M2ExLzEvWVdORFpUVElab09uSG9EWGk5RTZER2xEbHFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAbVs0AD BADVs0QwDQYJKoZIhvcNAQELBQADggEBALcLzgYrJfch9oyZySM3ua0oLEdDcS+P 95b2C+PWquabSpYQu/Vc2NWq739cT6d9aywJVJWzy3JV9ENkM+cpnVslnoVyowlu NPzdurJ7kP38gquwMx/CpZYAFUV4C141nREqhaJNtQv7EgwTg0aENJrhAH+sVM2+ a5wZrmo6JP4ltwzwE766gyMM2JHHLBfMBjDMgyHHvICHxJHPlt6mpN5T2BoMx1P8 WSjGoWCHA68s4SJvLg2Fi5LYUcG42t9krI+hScLRuS+NZBfkbVWeoi4DUeIOAi4y wsgLnbghehgKo8rTx2peKr2A1EzpHvCjiigxaECGbq2ZqJEZ+DsKH4s= -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:57 2026 by rpki-client