This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YSbp1AAGnP3qnXzWIlzdsjuFmPs.roa File: YSbp1AAGnP3qnXzWIlzdsjuFmPs.roa (raw, json) Hash identifier: 1A4EvPx0G+VllKKU4aPyIWw97/Ceb/svbaHTrWyzkxw= Subject key identifier: 61:26:E9:D4:00:06:9C:FD:EA:9D:7C:D6:22:5C:DD:B2:3B:85:98:FB Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC3BDFB01921778B80B513C03693E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YSbp1AAGnP3qnXzWIlzdsjuFmPs.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210734 IP address blocks: 82.153.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c3:bd:fb:01:92:17:78:b8:0b:51:3c:03:69:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6126e9d400069cfdea9d7cd6225cddb23b8598fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:3d:99:17:fd:42:82:f0:34:21:ae:94:ff: a8:77:4f:90:96:d4:c7:5a:6a:e3:32:ff:5b:20:cb: 66:51:14:b1:5d:53:0c:97:6d:05:4d:75:da:66:65: 06:3c:c2:8e:df:31:7c:e6:28:d9:20:2b:81:4e:c3: 7d:40:87:4e:57:7d:fe:50:c3:c5:ba:7b:95:d8:33: e0:18:77:0a:83:db:2e:08:13:39:59:e4:18:00:83: d8:a4:2a:d2:61:ae:71:62:18:3f:95:8d:e0:a7:15: a9:3e:b8:c1:55:82:f4:da:aa:a4:d1:c8:4b:06:9f: de:d7:d8:e6:33:49:72:e9:94:0e:69:c8:07:c5:b3: 49:30:ba:82:74:d6:a4:1c:51:5b:0e:93:4b:17:15: 92:a8:e1:4c:45:ce:6b:dc:2f:56:e2:11:e2:9d:24: f9:bd:5b:52:eb:9b:0e:2c:f2:b4:4a:97:5d:44:66: f0:81:c1:40:fe:ba:79:4b:9c:16:3d:39:de:fc:e5: 55:61:52:f2:6d:ad:4e:ea:fe:6a:f0:81:7d:ae:a3: 96:58:27:1e:71:30:bb:f4:e1:da:a1:09:74:d8:bb: 1d:8e:44:47:10:40:d7:15:f9:70:54:6d:d2:d2:a7: 9a:ea:ea:51:b8:94:75:91:74:7c:0f:14:0a:59:d9: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:26:E9:D4:00:06:9C:FD:EA:9D:7C:D6:22:5C:DD:B2:3B:85:98:FB X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YSbp1AAGnP3qnXzWIlzdsjuFmPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.50.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:52:55:d7:95:bd:92:eb:be:46:09:c3:ac:58:c9:ce:21:fb: e6:69:f8:e5:ce:9b:72:82:a8:ea:6f:fd:93:92:9e:28:d0:30: 30:cf:a6:d2:88:7d:1b:31:30:22:89:d4:c6:66:5d:cb:07:3e: 23:40:6b:dc:b4:a4:bd:54:79:86:7e:0c:98:98:8f:d2:d1:8b: de:d1:2a:04:4f:81:eb:c2:0f:75:78:1d:af:b4:bd:21:01:42: 98:68:03:23:f3:0d:7f:9e:6d:88:9f:d7:49:f9:d9:7e:82:2f: 4a:28:68:2a:13:22:a7:27:bc:b5:66:85:6a:b3:2d:fe:05:1a: 99:93:62:f4:d5:b4:38:67:66:9d:f4:14:21:c9:9a:46:38:f5: 5f:77:6d:54:d3:97:75:3b:3e:52:e5:18:fa:1b:f2:69:94:06: 10:f7:dc:76:7d:a1:5a:1f:0c:96:68:23:2e:23:35:2f:5d:0f: dc:48:73:89:b9:11:0d:05:66:f0:90:f2:6e:92:8b:fa:b1:8d: ef:ac:03:06:7d:ce:b3:ac:20:0e:35:c8:3e:67:82:95:51:5d: c7:9f:5e:28:33:2b:96:50:68:fa:a5:57:76:28:ae:67:c8:95: f1:7e:50:10:f5:db:a7:79:be:6f:a1:30:08:12:42:ef:42:39: ef:83:a8:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsO9+wGSF3i4C1E8A2k+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTI2ZTlkNDAwMDY5Y2ZkZWE5ZDdjZDYyMjVjZGRiMjNiODU5OGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYM9mRf9QoLwNCGulP+od0+QltTH WmrjMv9bIMtmURSxXVMMl20FTXXaZmUGPMKO3zF85ijZICuBTsN9QIdOV33+UMPF unuV2DPgGHcKg9suCBM5WeQYAIPYpCrSYa5xYhg/lY3gpxWpPrjBVYL02qqk0chL Bp/e19jmM0ly6ZQOacgHxbNJMLqCdNakHFFbDpNLFxWSqOFMRc5r3C9W4hHinST5 vVtS65sOLPK0SpddRGbwgcFA/rp5S5wWPTne/OVVYVLyba1O6v5q8IF9rqOWWCce cTC79OHaoQl02LsdjkRHEEDXFflwVG3S0qea6upRuJR1kXR8DxQKWdkX7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGEm6dQABpz96p181iJc3bI7hZj7MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWVNicDFBQUduUDNxblh6V0lsemRzanVGbVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpkyMA0G CSqGSIb3DQEBCwUAA4IBAQAsUlXXlb2S675GCcOsWMnOIfvmafjlzptygqjqb/2T kp4o0DAwz6bSiH0bMTAiidTGZl3LBz4jQGvctKS9VHmGfgyYmI/S0Yve0SoET4Hr wg91eB2vtL0hAUKYaAMj8w1/nm2In9dJ+dl+gi9KKGgqEyKnJ7y1ZoVqsy3+BRqZ k2L01bQ4Z2ad9BQhyZpGOPVfd21U05d1Oz5S5Rj6G/JplAYQ99x2faFaHwyWaCMu IzUvXQ/cSHOJuRENBWbwkPJukov6sY3vrAMGfc6zrCAONcg+Z4KVUV3Hn14oMyuW UGj6pVd2KK5nyJXxflAQ9duneb5voTAIEkLvQjnvg6j5 -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:25 2026 by rpki-client