This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/YJd-1raR94ty3e3I_U-O_Msqbcw.roa File: YJd-1raR94ty3e3I_U-O_Msqbcw.roa (raw, json) Hash identifier: 5OEecA95crTZEV2zOr87dEQBIjiCM6GYAQ548/GNEBA= Subject key identifier: 60:97:7E:D6:B6:91:F7:8B:72:DD:ED:C8:FD:4F:8E:FC:CB:2A:6D:CC Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807A677FBFB46DF8D0010CADE6C83F Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/YJd-1raR94ty3e3I_U-O_Msqbcw.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13186 IP address blocks: 213.192.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7a:67:7f:bf:b4:6d:f8:d0:01:0c:ad:e6:c8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60977ed6b691f78b72ddedc8fd4f8efccb2a6dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:56:eb:63:04:90:53:01:1c:26:37:2e:dc: fd:1c:e1:34:e2:2c:a5:9f:a6:2d:94:73:13:5f:79: 73:83:29:c7:d5:d6:84:af:c2:6e:28:8b:7b:0f:b1: 1c:5e:56:2f:fd:b6:1a:62:5b:3f:de:5e:e9:e9:ca: b7:00:ac:59:72:ce:dd:47:68:ba:9a:cb:46:2d:ce: 6f:96:bd:6c:a7:61:7b:5b:cf:2e:ce:ee:62:51:7a: 52:8c:6e:6f:ac:4a:32:b4:97:aa:df:44:09:95:0f: 89:f4:8d:9b:08:be:78:96:0e:5e:3f:2e:73:47:0a: f6:7f:1e:74:14:5d:0c:5d:e1:8d:5f:61:bb:b4:83: e0:32:5a:d0:86:5a:8b:95:dc:1b:39:20:7c:3b:2c: ec:be:e4:6c:16:97:00:43:be:28:b3:91:17:be:8c: ed:e3:b3:52:7a:07:10:51:22:bd:ab:3d:00:f4:03: f6:2e:62:13:55:25:54:de:a2:10:59:28:fc:44:76: 58:7b:df:c7:12:e2:d8:6f:13:d6:de:87:07:a3:60: e6:8f:e1:9d:14:30:f4:ca:50:44:dc:30:6f:e6:9e: 2a:38:01:59:7d:60:32:a3:17:f0:62:6d:f8:ea:c0: 6e:45:21:e5:10:70:32:28:10:96:09:2a:f4:1f:1a: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:97:7E:D6:B6:91:F7:8B:72:DD:ED:C8:FD:4F:8E:FC:CB:2A:6D:CC X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/YJd-1raR94ty3e3I_U-O_Msqbcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.192.254.0/24 Signature Algorithm: sha256WithRSAEncryption 96:ea:dc:e0:b6:c6:7c:b5:84:0f:90:02:2c:a9:aa:d5:5d:b4: d3:8f:79:4e:d8:26:f6:06:6c:8c:50:f1:50:d6:b3:09:78:d0: 36:90:ef:aa:1b:78:f4:a9:c4:49:a4:8f:a4:ce:0a:30:9f:34: 13:40:ce:46:f1:68:92:73:2a:13:18:af:b8:29:54:6d:de:52: 12:80:fc:5d:49:58:9b:f7:0d:8b:b7:38:1c:ea:6b:dc:52:4c: a8:57:2c:6d:7b:b7:6c:c8:78:59:db:6c:2a:62:ec:08:ad:90: d6:d3:66:a7:3e:f4:5e:16:66:94:07:c9:09:0c:e5:6a:4d:4c: 6a:19:7a:15:a0:f4:07:95:f3:f5:75:4b:ee:5c:7b:98:2c:0b: c4:f2:51:e7:54:77:e2:d0:d4:6f:da:75:b6:fa:7d:a8:13:e1: 25:48:04:35:6e:da:3a:d5:2d:91:f5:e6:a2:67:f2:73:a1:b3: 34:d9:43:10:a5:7d:f2:4e:80:f9:0f:b7:25:96:6a:02:1f:d9: 9c:76:a9:d7:8f:98:f0:15:54:4e:61:ac:81:dd:64:da:82:67: 27:f8:d6:91:c3:92:3b:b1:75:d4:e9:c3:0a:72:ac:7f:86:16: a1:1b:17:fe:6a:0b:28:66:54:44:20:2e:73:27:93:47:37:65: 32:36:12:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHpnf7+0bfjQAQyt5sg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDk3N2VkNmI2OTFmNzhiNzJkZGVkYzhmZDRmOGVmY2NiMmE2ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlJW62MEkFMBHCY3Ltz9HOE04iyl n6YtlHMTX3lzgynH1daEr8JuKIt7D7EcXlYv/bYaYls/3l7p6cq3AKxZcs7dR2i6 mstGLc5vlr1sp2F7W88uzu5iUXpSjG5vrEoytJeq30QJlQ+J9I2bCL54lg5ePy5z Rwr2fx50FF0MXeGNX2G7tIPgMlrQhlqLldwbOSB8OyzsvuRsFpcAQ74os5EXvozt 47NSegcQUSK9qz0A9AP2LmITVSVU3qIQWSj8RHZYe9/HEuLYbxPW3ocHo2Dmj+Gd FDD0ylBE3DBv5p4qOAFZfWAyoxfwYm346sBuRSHlEHAyKBCWCSr0Hxo9hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCXfta2kfeLct3tyP1PjvzLKm3MMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvWUpkLTFyYVI5NHR5M2UzSV9VLU9fTXNxYmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cD+MA0G CSqGSIb3DQEBCwUAA4IBAQCW6tzgtsZ8tYQPkAIsqarVXbTTj3lO2Cb2BmyMUPFQ 1rMJeNA2kO+qG3j0qcRJpI+kzgownzQTQM5G8WiScyoTGK+4KVRt3lISgPxdSVib 9w2Ltzgc6mvcUkyoVyxte7dsyHhZ22wqYuwIrZDW02anPvReFmaUB8kJDOVqTUxq GXoVoPQHlfP1dUvuXHuYLAvE8lHnVHfi0NRv2nW2+n2oE+ElSAQ1bto61S2R9eai Z/JzobM02UMQpX3yToD5D7cllmoCH9mcdqnXj5jwFVROYayB3WTagmcn+NaRw5I7 sXXU6cMKcqx/hhahGxf+agsoZlREIC5zJ5NHN2UyNhIp -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:38 2026 by rpki-client