This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/YNOoVHCcWGOrumTIt4QqkF1fRy0.roa File: YNOoVHCcWGOrumTIt4QqkF1fRy0.roa (raw, json) Hash identifier: D1/rRmk3LZamsgxPE84rp8oQbA0nmq0KIGoH4OKfkko= Subject key identifier: 60:D3:A8:54:70:9C:58:63:AB:BA:64:C8:B7:84:2A:90:5D:5F:47:2D Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C117F4E1330E26CAF36519BB2F0BC09 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/YNOoVHCcWGOrumTIt4QqkF1fRy0.roa Signing time: Fri 02 Jan 2026 00:18:00 +0000 ROA not before: Fri 02 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60594 IP address blocks: 192.162.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7f:4e:13:30:e2:6c:af:36:51:9b:b2:f0:bc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60d3a854709c5863abba64c8b7842a905d5f472d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:3d:99:84:20:cb:c8:fd:49:f9:93:d5:3f: e9:62:a8:a2:cc:0f:db:59:4d:51:30:b8:61:b2:98: 7c:3f:f2:9e:07:34:11:dc:33:3c:3d:fd:f9:84:e7: 10:90:53:bf:4a:aa:f1:d9:53:ca:0c:79:e6:8e:9a: c8:6c:67:01:68:d9:8a:e2:64:2c:0c:59:72:a5:06: 4f:7d:2b:2f:bb:05:4e:b2:ce:f7:c9:ae:7c:71:9b: bd:da:e2:12:1d:2b:a9:5d:9b:4d:ad:3c:d6:49:1a: 95:af:c1:34:8f:e2:22:ec:bd:f2:4a:06:5c:2f:a7: ed:39:33:7e:05:03:4f:75:d1:25:4e:c0:39:de:ef: 51:fc:f2:47:4b:01:8e:05:54:c3:d4:7b:97:33:65: aa:21:ad:59:48:38:d0:30:d9:c8:bf:79:66:23:92: 03:5b:9f:d8:71:df:9c:c8:f5:bb:ce:9a:b3:95:4b: d6:ec:a6:b7:f8:e6:ff:11:5e:5c:9d:36:59:36:30: ca:3c:26:b7:ac:a7:f2:36:2d:7e:26:00:d5:27:17: e3:af:b1:9e:5b:c6:75:0e:c8:7c:10:da:6b:0a:42: 05:c2:16:cf:bf:f9:f8:da:f3:37:74:77:31:85:e9: 3f:fa:c8:81:0e:d6:0b:8c:90:e1:b4:04:be:2b:f1: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D3:A8:54:70:9C:58:63:AB:BA:64:C8:B7:84:2A:90:5D:5F:47:2D X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/YNOoVHCcWGOrumTIt4QqkF1fRy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.198.0/24 Signature Algorithm: sha256WithRSAEncryption a8:67:05:84:28:78:0d:ab:d1:0d:a1:6b:76:60:5d:79:f5:9b: 25:5d:5a:a1:dd:31:36:38:5d:ed:8f:56:a9:f2:f4:c7:32:46: 73:b5:70:1c:7a:8e:2f:3b:b7:fb:33:ac:15:46:16:81:ca:c9: d9:e8:3b:b5:c5:be:9f:0f:94:3b:c4:09:85:81:7a:96:b4:b5: 15:09:50:3a:47:e8:be:56:d6:b9:6d:1e:34:19:30:18:06:8b: ec:5d:0b:62:6c:e0:c7:7e:dc:a3:b8:ec:8a:e8:cd:4d:b0:ee: bb:d5:8d:74:7c:d2:ee:59:bd:98:2b:db:94:aa:0f:c7:75:b0: 93:8d:78:96:60:20:b4:3f:c4:3b:4a:f8:21:75:a5:0d:1c:eb: 57:8f:d8:af:e9:71:1c:6b:fb:c2:3f:e8:2d:97:76:fa:ad:cb: 2a:80:24:e1:aa:6b:38:26:61:94:ad:d8:87:81:d8:cf:b1:cb: 6b:45:04:a8:9b:88:c4:24:36:94:c6:41:4b:56:22:d2:7a:74: 6b:c7:9b:a9:de:0c:f8:b4:30:52:44:34:62:0f:9c:43:aa:8e: 80:90:1b:48:43:ef:d4:22:d0:fe:1d:4a:dd:b7:a6:05:3e:1a: 84:87:ae:ec:a9:37:6d:ba:3a:ac:d8:0d:c0:7e:fa:f6:7d:89: f5:e1:5d:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EX9OEzDibK82UZuy8LwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGQzYTg1NDcwOWM1ODYzYWJiYTY0YzhiNzg0MmE5MDVkNWY0NzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyA9mYQgy8j9SfmT1T/pYqiizA/b WU1RMLhhsph8P/KeBzQR3DM8Pf35hOcQkFO/Sqrx2VPKDHnmjprIbGcBaNmK4mQs DFlypQZPfSsvuwVOss73ya58cZu92uISHSupXZtNrTzWSRqVr8E0j+Ii7L3ySgZc L6ftOTN+BQNPddElTsA53u9R/PJHSwGOBVTD1HuXM2WqIa1ZSDjQMNnIv3lmI5ID W5/Ycd+cyPW7zpqzlUvW7Ka3+Ob/EV5cnTZZNjDKPCa3rKfyNi1+JgDVJxfjr7Ge W8Z1Dsh8ENprCkIFwhbPv/n42vM3dHcxhek/+siBDtYLjJDhtAS+K/HA4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGDTqFRwnFhjq7pkyLeEKpBdX0ctMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvWU5Pb1ZIQ2NXR09ydW1USXQ0UXFrRjFmUnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKLGMA0G CSqGSIb3DQEBCwUAA4IBAQCoZwWEKHgNq9ENoWt2YF159ZslXVqh3TE2OF3tj1ap 8vTHMkZztXAceo4vO7f7M6wVRhaBysnZ6Du1xb6fD5Q7xAmFgXqWtLUVCVA6R+i+ Vta5bR40GTAYBovsXQtibODHftyjuOyK6M1NsO671Y10fNLuWb2YK9uUqg/HdbCT jXiWYCC0P8Q7SvghdaUNHOtXj9iv6XEca/vCP+gtl3b6rcsqgCThqms4JmGUrdiH gdjPsctrRQSom4jEJDaUxkFLViLSenRrx5up3gz4tDBSRDRiD5xDqo6AkBtIQ+/U ItD+HUrdt6YFPhqEh67sqTdtujqs2A3Afvr2fYn14V1n -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:37 2026 by rpki-client