This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YxexpkROQ-LhZ9lovotoRV8RxC0.roa File: YxexpkROQ-LhZ9lovotoRV8RxC0.roa (raw, json) Hash identifier: s+BGCdMZh3jmu7goq1nzHTbaZrCNq7Fj2yphoWei2Hk= Subject key identifier: 63:17:B1:A6:44:4E:43:E2:E1:67:D9:68:BE:8B:68:45:5F:11:C4:2D Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAE9FC94BCD2C4A2D09D43C32DAD5C Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YxexpkROQ-LhZ9lovotoRV8RxC0.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31732 IP address blocks: 188.209.155.0/24 maxlen: 24 212.90.100.0/22 maxlen: 24 2001:16c0::/29 maxlen: 29 2001:16c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e9:fc:94:bc:d2:c4:a2:d0:9d:43:c3:2d:ad:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6317b1a6444e43e2e167d968be8b68455f11c42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ed:6d:11:0d:80:3c:63:8e:6a:43:d7:9f:99: 1b:3f:ab:04:41:b3:21:17:0d:11:7f:ef:52:96:87: 89:53:df:22:df:e5:cd:29:da:95:43:5e:1f:1b:d6: a9:f7:89:cc:50:2f:75:7c:b0:d6:be:15:d5:62:e9: 0f:c9:5f:05:e2:1e:d5:8d:a5:90:8f:e0:e0:d1:b7: aa:92:e5:b1:1d:b1:1d:ae:d2:61:06:cf:e5:ca:aa: ff:a8:e6:84:3a:ee:6c:79:b8:a1:27:e1:35:fd:7f: 6c:47:01:be:35:8f:dd:5e:38:12:1d:d1:0a:5c:f9: 66:07:d5:d9:91:27:2d:d7:88:f1:21:92:9c:3f:4f: e7:6e:16:58:c0:ec:fc:b7:95:48:f1:77:7d:d3:c2: 8a:32:03:85:95:c9:bd:4a:0d:01:86:e3:a0:92:3e: 4b:94:17:d1:76:56:b5:c6:57:30:6a:9b:6b:f0:48: 49:89:34:7c:84:a4:b0:a5:59:3c:5f:8e:0b:02:ce: bd:bb:82:31:29:fe:81:b6:2b:8c:d9:f8:9e:d2:62: 16:88:5c:68:2c:bc:7d:ed:71:b5:3e:db:b7:5c:2c: f2:ce:3e:79:83:5e:b1:fb:90:77:cf:63:7c:dc:0b: 0c:05:2f:d5:78:23:76:37:d5:a0:79:87:92:1e:b4: dc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:17:B1:A6:44:4E:43:E2:E1:67:D9:68:BE:8B:68:45:5F:11:C4:2D X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YxexpkROQ-LhZ9lovotoRV8RxC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.155.0/24 212.90.100.0/22 IPv6: 2001:16c0::/29 Signature Algorithm: sha256WithRSAEncryption 55:4a:61:ce:3b:bd:a1:44:a3:b9:f2:00:43:93:74:bb:bf:79: a5:22:07:c2:25:d0:b6:01:70:7b:23:ee:82:56:a9:06:a7:53: 58:20:5b:cf:ca:27:52:66:20:48:53:fd:dd:46:b7:e4:98:14: 95:79:79:b7:b7:86:64:de:e8:88:ca:7e:97:18:f0:40:f5:45: b1:ab:54:88:8f:61:03:87:45:73:41:c4:23:30:72:42:15:15: 9e:e2:85:c4:6e:f5:43:7e:73:6b:29:6e:d6:f4:bc:2d:b8:b1: 8a:78:a0:93:84:66:4a:0e:4d:0b:46:84:eb:1c:0d:b9:57:31: 47:e4:f0:15:29:4b:24:60:a2:81:ef:2b:be:c3:56:12:83:32: 14:42:ea:03:b7:a8:0c:1a:1c:99:64:18:83:47:a7:cd:45:32: 9f:3f:94:91:82:17:8a:12:42:2e:8b:e4:2c:04:72:29:2b:4e: b9:13:29:df:0d:89:fb:ae:38:5a:e4:32:61:63:91:b5:d3:97: c6:69:6c:fa:41:2a:a4:8b:91:d6:72:66:4a:26:f5:4e:74:e4: 00:09:1b:ca:2f:ba:d9:9e:73:00:b9:5a:ca:e9:76:a5:57:39: 85:8d:18:29:97:bd:cb:e1:2e:90:ce:ee:6d:e9:01:96:0f:6b: 54:2b:f4:7c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26un8lLzSxKLQnUPDLa1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzE3YjFhNjQ0NGU0M2UyZTE2N2Q5NjhiZThiNjg0NTVmMTFjNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O1tEQ2APGOOakPXn5kbP6sEQbMh Fw0Rf+9SloeJU98i3+XNKdqVQ14fG9ap94nMUC91fLDWvhXVYukPyV8F4h7VjaWQ j+Dg0beqkuWxHbEdrtJhBs/lyqr/qOaEOu5sebihJ+E1/X9sRwG+NY/dXjgSHdEK XPlmB9XZkSct14jxIZKcP0/nbhZYwOz8t5VI8Xd908KKMgOFlcm9Sg0BhuOgkj5L lBfRdla1xlcwaptr8EhJiTR8hKSwpVk8X44LAs69u4IxKf6BtiuM2fie0mIWiFxo LLx97XG1Ptu3XCzyzj55g16x+5B3z2N83AsMBS/VeCN2N9WgeYeSHrTchwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGMXsaZETkPi4WfZaL6LaEVfEcQtMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvWXhleHBrUk9RLUxoWjlsb3ZvdG9SVjhSeEMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAvNGbAwQC 1FpkMA0EAgACMAcDBQMgARbAMA0GCSqGSIb3DQEBCwUAA4IBAQBVSmHOO72hRKO5 8gBDk3S7v3mlIgfCJdC2AXB7I+6CVqkGp1NYIFvPyidSZiBIU/3dRrfkmBSVeXm3 t4Zk3uiIyn6XGPBA9UWxq1SIj2EDh0VzQcQjMHJCFRWe4oXEbvVDfnNrKW7W9Lwt uLGKeKCThGZKDk0LRoTrHA25VzFH5PAVKUskYKKB7yu+w1YSgzIUQuoDt6gMGhyZ ZBiDR6fNRTKfP5SRgheKEkIui+QsBHIpK065EynfDYn7rjha5DJhY5G105fGaWz6 QSqki5HWcmZKJvVOdOQACRvKL7rZnnMAuVrK6XalVzmFjRgpl73L4S6Qzu5t6QGW D2tUK/R8 -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:25 2026 by rpki-client