This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/yK_rq1qKxY3NT-5pPsVf-TgWnNE.roa File: yK_rq1qKxY3NT-5pPsVf-TgWnNE.roa (raw, json) Hash identifier: qAGiyOp7/gR0aIiRv19K1is+KEj839TVxinvG6Vn5jg= Subject key identifier: C8:AF:EB:AB:5A:8A:C5:8D:CD:4F:EE:69:3E:C5:5F:F9:38:16:9C:D1 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807EB059E29D51371179184E2E93B9 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/yK_rq1qKxY3NT-5pPsVf-TgWnNE.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60508 IP address blocks: 212.163.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7e:b0:59:e2:9d:51:37:11:79:18:4e:2e:93:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8afebab5a8ac58dcd4fee693ec55ff938169cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:09:9e:b1:a3:c5:cb:13:5b:cf:a2:41:46: df:35:c3:81:87:12:1c:d1:87:1b:93:46:5a:41:a3: 77:7f:0b:fa:af:84:ad:6f:82:e5:a4:3c:c5:df:1d: f2:fb:06:06:0a:c0:a7:ff:63:19:26:67:13:09:e7: a2:f9:18:f7:0c:b5:5c:e3:a5:a4:c7:ee:98:f0:7c: ff:89:15:5e:34:25:e5:66:a9:bf:ec:a1:47:c8:9f: 3f:03:01:b3:79:4b:47:ce:7a:98:53:0b:94:6b:0e: db:6a:91:f8:30:73:d8:93:ab:28:4b:3c:f7:30:1a: ad:f5:87:b8:37:5e:7f:66:81:3a:4b:25:f4:d8:15: b6:9b:35:41:6f:c0:42:85:31:15:ad:a3:e3:3d:bd: c2:52:9a:51:58:51:aa:a0:df:3b:db:bb:12:78:dc: f4:09:59:1d:9a:64:9a:42:57:91:f3:18:64:bf:25: 6a:0d:ee:5c:2a:ca:83:f4:fe:22:b4:52:97:8c:a5: 23:0b:e5:03:50:b0:76:a5:e0:bb:93:38:81:de:fe: 9f:11:70:fc:06:61:23:4d:8f:16:ff:e7:71:ae:18: cc:b0:c3:a8:6c:01:c7:15:1a:73:64:d0:b9:6e:00: b3:2f:07:ba:be:81:d5:64:d4:76:0b:9a:48:39:04: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AF:EB:AB:5A:8A:C5:8D:CD:4F:EE:69:3E:C5:5F:F9:38:16:9C:D1 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/yK_rq1qKxY3NT-5pPsVf-TgWnNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.163.60.0/22 Signature Algorithm: sha256WithRSAEncryption 30:b4:ce:50:ac:e1:fa:19:07:d4:c9:0e:af:d5:2f:97:a7:38: 83:a5:55:69:9f:d7:0a:b8:17:df:e4:90:ca:0d:af:cd:87:39: a5:22:c4:56:15:9f:8a:96:7f:d6:31:db:1d:13:7a:84:cd:ec: 87:49:fd:05:b7:80:d9:ec:b3:39:54:12:e4:10:9b:68:60:2e: b9:8a:d5:bc:10:f9:b6:d3:3d:43:1b:6c:a9:36:7f:a8:1f:a5: 3f:e4:78:50:2d:00:51:93:82:11:07:14:5a:94:fc:3e:6a:6f: c8:9b:d0:55:55:f6:35:a5:b2:7e:27:3e:92:8f:a1:95:b8:6a: 4e:57:ae:10:83:8c:d9:8e:83:ea:1e:f6:2f:f2:69:51:45:36: 53:d5:59:6a:b6:c2:4b:08:77:bc:ce:29:ca:9d:1e:c0:93:a0: 13:6a:25:2c:ff:0c:3f:da:09:68:45:43:69:49:fc:6b:95:15: 39:ae:08:e9:15:ae:6a:60:f4:ed:7e:ce:fc:ad:86:f1:93:4f: 3d:b7:5c:3e:bf:d3:51:5f:a8:8b:b6:ab:4f:36:31:c1:d5:cf: 3e:9a:97:c3:60:39:d8:87:fb:ca:2b:7e:1e:a7:ac:72:5a:ca: 0f:b8:ce:51:c4:13:68:58:33:da:91:72:c5:82:af:bb:8d:46: cc:ca:f8:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gH6wWeKdUTcReRhOLpO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGFmZWJhYjVhOGFjNThkY2Q0ZmVlNjkzZWM1NWZmOTM4MTY5Y2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uEJnrGjxcsTW8+iQUbfNcOBhxIc 0Ycbk0ZaQaN3fwv6r4Stb4LlpDzF3x3y+wYGCsCn/2MZJmcTCeei+Rj3DLVc46Wk x+6Y8Hz/iRVeNCXlZqm/7KFHyJ8/AwGzeUtHznqYUwuUaw7bapH4MHPYk6soSzz3 MBqt9Ye4N15/ZoE6SyX02BW2mzVBb8BChTEVraPjPb3CUppRWFGqoN8727sSeNz0 CVkdmmSaQleR8xhkvyVqDe5cKsqD9P4itFKXjKUjC+UDULB2peC7kziB3v6fEXD8 BmEjTY8W/+dxrhjMsMOobAHHFRpzZNC5bgCzLwe6voHVZNR2C5pIOQSVGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMiv66taisWNzU/uaT7FX/k4FpzRMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEveUtfcnExcUt4WTNOVC01cFBzVmYtVGdXbk5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1KM8MA0G CSqGSIb3DQEBCwUAA4IBAQAwtM5QrOH6GQfUyQ6v1S+XpziDpVVpn9cKuBff5JDK Da/NhzmlIsRWFZ+Kln/WMdsdE3qEzeyHSf0Ft4DZ7LM5VBLkEJtoYC65itW8EPm2 0z1DG2ypNn+oH6U/5HhQLQBRk4IRBxRalPw+am/Im9BVVfY1pbJ+Jz6Sj6GVuGpO V64Qg4zZjoPqHvYv8mlRRTZT1VlqtsJLCHe8zinKnR7Ak6ATaiUs/ww/2gloRUNp SfxrlRU5rgjpFa5qYPTtfs78rYbxk089t1w+v9NRX6iLtqtPNjHB1c8+mpfDYDnY h/vKK34ep6xyWsoPuM5RxBNoWDPakXLFgq+7jUbMyvgI -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:15 2026 by rpki-client