This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/YpuAf6bipEYI_wsXYgvUguZWUjo.roa File: YpuAf6bipEYI_wsXYgvUguZWUjo.roa (raw, json) Hash identifier: xnSVIYGDowcEmY2JoISAsx0GN3rUBIi7LHZUNw8hSC4= Subject key identifier: 62:9B:80:7F:A6:E2:A4:46:08:FF:0B:17:62:0B:D4:82:E6:56:52:3A Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759635A63DB51FD1B21E123D547C60B Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/YpuAf6bipEYI_wsXYgvUguZWUjo.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60694 IP address blocks: 89.40.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:63:5a:63:db:51:fd:1b:21:e1:23:d5:47:c6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=629b807fa6e2a44608ff0b17620bd482e656523a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:c1:f7:1e:15:10:24:3d:7e:1a:f1:1e:ce: a1:27:1d:99:ec:3a:d4:84:50:6d:9b:31:d3:df:7d: 8a:a1:b7:0f:58:86:81:6d:15:4b:5d:c4:e5:1b:b4: 22:d9:b5:c7:ca:21:4b:02:4b:07:d8:9d:e2:b1:ad: 3d:d4:36:d9:d4:2e:6b:08:10:ce:59:11:2b:f5:ce: e5:1f:7d:75:75:de:2b:86:90:38:01:e0:12:a3:86: 1e:3f:07:92:8e:e4:52:bc:eb:ba:0f:05:fb:96:96: 75:7f:a7:d1:52:ce:bf:ab:5a:c8:69:e5:d9:37:9a: 9d:0a:93:a6:50:4e:6e:10:fc:b4:f7:67:d9:29:90: 4f:ab:bc:6c:b3:56:ee:63:f6:dc:02:0b:f0:2a:58: 20:15:cf:3b:dc:b3:ab:0e:5a:1c:e5:85:c0:73:ee: 56:46:f2:a4:20:60:05:e7:cd:ed:49:c5:6b:9a:26: 7e:ae:f6:eb:09:c1:6e:ab:08:27:f0:c4:6d:6c:ba: 49:9a:c4:69:da:44:c3:6e:58:3a:a8:20:f6:d6:a0: 70:c2:00:7a:d4:f0:8e:96:0b:a8:a6:c3:89:f0:58: a4:19:6a:de:17:07:4f:a3:fb:3f:c3:e7:bc:ec:10: 6c:f2:eb:27:f3:31:2a:89:27:fe:eb:ec:f5:24:3a: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9B:80:7F:A6:E2:A4:46:08:FF:0B:17:62:0B:D4:82:E6:56:52:3A X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/YpuAf6bipEYI_wsXYgvUguZWUjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.167.0/24 Signature Algorithm: sha256WithRSAEncryption c9:cf:e4:6c:92:3f:3f:54:4a:f3:b5:de:ed:8d:09:d4:f2:4f: 3c:8b:89:62:14:c3:ae:2f:58:d9:9f:41:8d:67:13:98:7f:f0: 59:11:72:e6:c8:e6:e6:4e:e1:f8:2e:1e:81:78:cf:2a:99:1e: c2:0c:bd:86:c8:72:3d:ec:10:51:4e:49:65:b1:5d:0e:1e:e1: c0:e5:5f:3a:0b:e7:3d:ad:45:37:94:e7:c9:e8:d5:c2:f0:c4: 10:12:b6:df:2c:a0:e9:8b:1c:e4:6c:93:a8:14:71:3b:5e:10: c8:a9:05:a7:fa:b4:dd:9a:d8:24:3e:d8:d1:e5:cb:01:23:0d: 4f:61:71:03:00:ac:6f:a6:d6:a2:fb:4f:79:cb:27:22:f5:d2: 1e:52:7c:6b:e2:cc:36:f1:f6:94:13:d5:c1:89:c0:89:ee:f2: 73:01:d4:14:f0:e4:88:9e:9b:0b:f2:98:32:c7:70:05:59:f6: 2c:10:8c:34:aa:22:ea:0d:6d:10:26:0e:45:d4:45:f8:7e:5f: 36:a8:1b:03:19:9b:61:48:9f:11:e8:19:e2:d2:b6:a1:8c:11: 71:a9:e2:dd:dd:fa:c4:32:8f:e4:94:17:45:a5:2a:97:cf:45: cd:87:22:b7:4d:62:da:42:c8:d1:87:00:c2:a0:37:c6:4a:80: 58:27:77:d9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWNaY9tR/Rsh4SPVR8YLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjliODA3ZmE2ZTJhNDQ2MDhmZjBiMTc2MjBiZDQ4MmU2NTY1MjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/rB9x4VECQ9fhrxHs6hJx2Z7DrU hFBtmzHT332KobcPWIaBbRVLXcTlG7Qi2bXHyiFLAksH2J3isa091DbZ1C5rCBDO WREr9c7lH311dd4rhpA4AeASo4YePweSjuRSvOu6DwX7lpZ1f6fRUs6/q1rIaeXZ N5qdCpOmUE5uEPy092fZKZBPq7xss1buY/bcAgvwKlggFc873LOrDloc5YXAc+5W RvKkIGAF583tScVrmiZ+rvbrCcFuqwgn8MRtbLpJmsRp2kTDblg6qCD21qBwwgB6 1PCOlguopsOJ8FikGWreFwdPo/s/w+e87BBs8usn8zEqiSf+6+z1JDos1QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGKbgH+m4qRGCP8LF2IL1ILmVlI6MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1lwdUFmNmJpcEVZSV93c1hZZ3ZVZ3VaV1Vqby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZKKcw DQYJKoZIhvcNAQELBQADggEBAMnP5GySPz9USvO13u2NCdTyTzyLiWIUw64vWNmf QY1nE5h/8FkRcubI5uZO4fguHoF4zyqZHsIMvYbIcj3sEFFOSWWxXQ4e4cDlXzoL 5z2tRTeU58no1cLwxBAStt8soOmLHORsk6gUcTteEMipBaf6tN2a2CQ+2NHlywEj DU9hcQMArG+m1qL7T3nLJyL10h5SfGvizDbx9pQT1cGJwInu8nMB1BTw5Iiemwvy mDLHcAVZ9iwQjDSqIuoNbRAmDkXURfh+XzaoGwMZm2FInxHoGeLStqGMEXGp4t3d +sQyj+SUF0WlKpfPRc2HIrdNYtpCyNGHAMKgN8ZKgFgnd9k= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:26 2026 by rpki-client