This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/YPx2c3RYrM8Uay8p-Jhbf6qFkfY.roa File: YPx2c3RYrM8Uay8p-Jhbf6qFkfY.roa (raw, json) Hash identifier: jPgFrnzK9XdaahAH17/G4k3SsWjfA1hQSptv2wqHEDM= Subject key identifier: 60:FC:76:73:74:58:AC:CF:14:6B:2F:29:F8:98:5B:7F:AA:85:91:F6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019BA4421B177D63FCABEBAC3DE72A5DC161 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/YPx2c3RYrM8Uay8p-Jhbf6qFkfY.roa Signing time: Fri 09 Jan 2026 19:35:54 +0000 ROA not before: Fri 09 Jan 2026 19:35:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7843 IP address blocks: 213.249.75.0/24 maxlen: 24 213.249.79.0/24 maxlen: 24 213.249.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:42:1b:17:7d:63:fc:ab:eb:ac:3d:e7:2a:5d:c1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jan 9 19:35:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60fc76737458accf146b2f29f8985b7faa8591f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:41:84:d3:c3:ed:79:2c:a3:86:4c:d1:2c: ea:8f:bb:a3:d8:22:2c:70:c6:6f:84:1c:a0:aa:39: c0:b5:a0:15:3c:0d:19:0d:7a:d3:06:82:b4:f9:0f: 51:67:e9:4d:ee:67:e6:fb:7b:1c:b3:4d:a3:4b:5e: 59:3c:df:f0:de:94:6b:ad:1a:a3:fe:54:41:ad:f7: 69:e5:d5:2e:e2:26:61:84:4c:90:ed:12:9b:73:c6: 7a:3f:01:20:b6:e9:01:be:15:be:32:b6:aa:f9:bc: 18:eb:40:9b:b4:77:00:25:0b:e1:db:5b:3c:e1:19: b1:c4:7d:c8:39:20:ab:3e:9e:34:37:8a:cf:52:f4: 3c:98:4b:c9:d2:d3:4a:9e:33:e7:b8:c2:a8:fd:71: 9e:01:9b:e4:4e:bf:c2:bc:84:cb:36:ed:a2:a9:af: c7:e8:cf:14:f9:03:3b:1f:f1:74:db:51:f0:82:53: 9f:51:2a:f4:a6:5e:de:4a:3c:a1:17:0c:86:89:48: 19:1d:69:3f:59:31:c1:67:8d:8f:8a:71:1b:34:10: 94:3e:d5:32:1b:8f:6f:fb:ea:e0:62:b7:ab:c0:bf: b1:b2:50:da:de:1c:f4:7e:16:3b:a7:56:66:c4:f8: 31:69:fe:3d:84:28:a7:aa:7d:ce:6c:b6:fe:a2:44: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FC:76:73:74:58:AC:CF:14:6B:2F:29:F8:98:5B:7F:AA:85:91:F6 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/YPx2c3RYrM8Uay8p-Jhbf6qFkfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.249.75.0/24 213.249.79.0/24 213.249.84.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:5e:37:5a:1b:5b:0d:27:fe:a1:2c:2d:cb:ab:fa:39:5a:2f: fa:fe:82:0e:ae:5a:38:8a:78:5d:a6:2f:e5:04:f6:bb:6c:b2: b2:5a:e4:18:db:17:f6:11:01:c3:5c:25:db:c5:4a:6a:81:b3: 59:e4:25:0a:c4:28:63:7e:65:45:e3:63:f5:b3:73:16:6d:3a: 23:d4:42:65:4e:08:34:59:85:94:b9:4d:36:d5:a1:28:9e:af: 6b:e2:d7:60:20:c2:a4:0d:be:93:32:54:b2:5c:02:05:53:aa: d4:66:88:b7:cb:31:b5:18:00:20:6a:fc:74:85:8b:8f:41:4f: 73:38:09:fd:92:a3:a3:a3:d2:96:11:fa:2f:8f:fb:04:f4:98: bb:a5:17:b0:f3:40:93:be:8e:f1:58:c8:e0:15:99:58:14:90: a6:ba:31:35:8d:54:38:3f:3f:65:09:78:af:4a:50:68:e3:ba: 97:e7:dc:b1:8f:2b:da:74:ee:d1:16:01:4c:dd:7b:1e:87:fd: 73:c6:b5:64:97:a2:c4:7b:57:33:7a:af:43:bf:51:8b:f0:5c: 63:9a:51:35:0b:4d:5d:3a:51:f8:af:a8:72:ee:04:57:03:b5: fc:87:0e:65:57:35:16:1a:3e:50:81:81:18:5d:74:7c:3c:b5: 1d:6e:33:d2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZukQhsXfWP8q+usPecqXcFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMTA5MTkzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGZjNzY3Mzc0NThhY2NmMTQ2YjJmMjlmODk4NWI3ZmFhODU5MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmFBhNPD7Xkso4ZM0Szqj7uj2CIs cMZvhBygqjnAtaAVPA0ZDXrTBoK0+Q9RZ+lN7mfm+3scs02jS15ZPN/w3pRrrRqj /lRBrfdp5dUu4iZhhEyQ7RKbc8Z6PwEgtukBvhW+Mraq+bwY60CbtHcAJQvh21s8 4RmxxH3IOSCrPp40N4rPUvQ8mEvJ0tNKnjPnuMKo/XGeAZvkTr/CvITLNu2iqa/H 6M8U+QM7H/F021HwglOfUSr0pl7eSjyhFwyGiUgZHWk/WTHBZ42PinEbNBCUPtUy G49v++rgYrerwL+xslDa3hz0fhY7p1ZmxPgxaf49hCinqn3ObLb+okSl5QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGD8dnN0WKzPFGsvKfiYW3+qhZH2MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvWVB4MmMzUllyTThVYXk4cC1KaGJmNnFGa2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1flLAwQA 1flPAwQA1flUMA0GCSqGSIb3DQEBCwUAA4IBAQA+XjdaG1sNJ/6hLC3Lq/o5Wi/6 /oIOrlo4inhdpi/lBPa7bLKyWuQY2xf2EQHDXCXbxUpqgbNZ5CUKxChjfmVF42P1 s3MWbToj1EJlTgg0WYWUuU021aEonq9r4tdgIMKkDb6TMlSyXAIFU6rUZoi3yzG1 GAAgavx0hYuPQU9zOAn9kqOjo9KWEfovj/sE9Ji7pRew80CTvo7xWMjgFZlYFJCm ujE1jVQ4Pz9lCXivSlBo47qX59yxjyvadO7RFgFM3Xseh/1zxrVkl6LEe1czeq9D v1GL8FxjmlE1C01dOlH4r6hy7gRXA7X8hw5lVzUWGj5QgYEYXXR8PLUdbjPS -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:01 2026 by rpki-client