This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YMCFykBaf6qbMIGsn5TLZFGkdBo.roa File: YMCFykBaf6qbMIGsn5TLZFGkdBo.roa (raw, json) Hash identifier: iBSdeSZfuPW5vW2QCYmCXB2hxqcD1rF3dEyenQwhLbM= Subject key identifier: 60:C0:85:CA:40:5A:7F:AA:9B:30:81:AC:9F:94:CB:64:51:A4:74:1A Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F4216DDE61FBC7ED11E0643AFA339 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YMCFykBaf6qbMIGsn5TLZFGkdBo.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215519 IP address blocks: 170.168.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:42:16:dd:e6:1f:bc:7e:d1:1e:06:43:af:a3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60c085ca405a7faa9b3081ac9f94cb6451a4741a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:8c:ec:6d:70:c8:96:a6:46:8a:d8:4f:b3: b3:fc:86:ce:9c:cd:02:78:f8:db:ed:69:08:f1:b6: 2b:88:6e:7c:79:05:96:b1:ac:be:0f:f3:d8:d9:15: b3:fb:3b:3d:88:1b:27:56:3e:2d:80:e2:ba:b3:2b: 3a:67:94:5a:7e:18:ee:cb:6e:01:eb:96:4b:9e:28: 7f:64:fc:d6:0e:5a:7e:65:1d:dd:6c:ce:22:92:2f: 03:74:e2:2e:7b:42:89:be:83:27:9d:5d:cd:03:c2: 44:6d:9d:7a:ff:a0:6e:d8:4e:db:1c:24:cd:09:c7: e9:77:22:11:c5:a1:8f:18:02:04:40:35:35:79:af: d1:7c:76:16:4d:ea:ca:ae:23:da:42:8f:6a:69:56: 1b:98:4a:e6:8c:13:b1:76:a0:a1:e7:38:f2:91:75: 60:b3:86:af:4a:8f:32:23:a0:af:9e:cd:70:0a:7d: 1f:cd:40:71:1d:48:47:a6:da:e4:eb:e1:4c:67:bb: 5f:54:45:00:b2:9b:06:15:f3:3c:2a:6b:ff:d2:92: 7e:4f:89:43:eb:45:3a:02:95:2b:27:e5:b7:ca:42: 4c:9c:ef:6a:63:fd:dc:2f:90:74:9f:7a:eb:bb:ab: 0f:93:90:36:2d:54:f5:4d:fc:fe:87:91:32:65:17: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C0:85:CA:40:5A:7F:AA:9B:30:81:AC:9F:94:CB:64:51:A4:74:1A X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YMCFykBaf6qbMIGsn5TLZFGkdBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.78.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:63:28:64:ff:cc:31:f9:03:39:15:c9:97:eb:fd:3f:28:40: ad:bc:92:ce:0b:53:68:ab:a5:43:24:19:1e:0b:03:1c:74:b3: 87:9c:4b:14:5f:17:90:a3:87:fe:ab:f8:0f:90:eb:ce:eb:f6: ce:36:0d:ac:7d:5f:3f:1b:8d:a5:99:e7:ef:ba:71:fb:ad:c0: ca:d1:a3:6e:85:10:27:72:5e:a9:80:60:1b:e9:da:ed:58:57: 12:8d:6b:ba:13:89:90:96:9e:42:a1:a7:e7:f5:4b:5c:20:85: 40:6a:3e:61:c5:09:3e:4f:c7:ca:05:c0:ff:89:dc:e5:6d:c5: aa:56:e4:10:5e:80:da:c3:0e:e1:88:cf:a3:6e:be:18:96:bd: bc:4c:ef:5b:83:ac:f1:36:b0:75:8a:29:d2:2f:95:30:6e:2d: 20:37:1a:1a:11:bd:e1:80:ed:01:34:d7:80:40:b4:0f:dc:73: 21:43:2d:d1:75:4b:78:1c:f9:a6:eb:7c:03:ad:de:80:06:9a: 8e:24:ab:ec:aa:17:ca:7a:52:4b:21:69:08:4c:9c:15:f7:31: af:e4:a2:19:3e:ec:c7:39:fb:67:0b:86:b0:51:99:8f:5e:0c: 4b:c3:03:6e:4c:b6:03:f3:54:7b:ad:c7:95:88:70:7a:98:84: ee:77:de:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0IW3eYfvH7RHgZDr6M5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGMwODVjYTQwNWE3ZmFhOWIzMDgxYWM5Zjk0Y2I2NDUxYTQ3NDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnemM7G1wyJamRorYT7Oz/IbOnM0C ePjb7WkI8bYriG58eQWWsay+D/PY2RWz+zs9iBsnVj4tgOK6sys6Z5Rafhjuy24B 65ZLnih/ZPzWDlp+ZR3dbM4iki8DdOIue0KJvoMnnV3NA8JEbZ16/6Bu2E7bHCTN CcfpdyIRxaGPGAIEQDU1ea/RfHYWTerKriPaQo9qaVYbmErmjBOxdqCh5zjykXVg s4avSo8yI6Cvns1wCn0fzUBxHUhHptrk6+FMZ7tfVEUAspsGFfM8Kmv/0pJ+T4lD 60U6ApUrJ+W3ykJMnO9qY/3cL5B0n3rru6sPk5A2LVT1Tfz+h5EyZRemfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGDAhcpAWn+qmzCBrJ+Uy2RRpHQaMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvWU1DRnlrQmFmNnFiTUlHc241VExaRkdrZEJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqhOMA0G CSqGSIb3DQEBCwUAA4IBAQA+Yyhk/8wx+QM5FcmX6/0/KECtvJLOC1Noq6VDJBke CwMcdLOHnEsUXxeQo4f+q/gPkOvO6/bONg2sfV8/G42lmefvunH7rcDK0aNuhRAn cl6pgGAb6drtWFcSjWu6E4mQlp5Coafn9UtcIIVAaj5hxQk+T8fKBcD/idzlbcWq VuQQXoDaww7hiM+jbr4Ylr28TO9bg6zxNrB1iinSL5Uwbi0gNxoaEb3hgO0BNNeA QLQP3HMhQy3RdUt4HPmm63wDrd6ABpqOJKvsqhfKelJLIWkITJwV9zGv5KIZPuzH OftnC4awUZmPXgxLwwNuTLYD81R7rceViHB6mITud94B -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:45 2026 by rpki-client