This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YVzqhL4Tokck5FsA_XpRhuKcrGQ.roa File: YVzqhL4Tokck5FsA_XpRhuKcrGQ.roa (raw, json) Hash identifier: zexsQDkCQUB0dFBO1is/FGmH5RaOw3tpJrdz0p3PEcU= Subject key identifier: 61:5C:EA:84:BE:13:A2:47:24:E4:5B:00:FD:7A:51:86:E2:9C:AC:64 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB45FB3098B1D33CF47B918759A48 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YVzqhL4Tokck5FsA_XpRhuKcrGQ.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153320 IP address blocks: 109.176.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b4:5f:b3:09:8b:1d:33:cf:47:b9:18:75:9a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=615cea84be13a24724e45b00fd7a5186e29cac64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d1:81:6f:55:9e:f6:0a:47:77:aa:5a:57:30: e8:c8:72:24:ed:d7:d1:8f:57:cd:bd:ec:b8:7a:fa: 60:3e:83:df:d0:41:56:0a:22:c4:2d:75:a5:f4:af: 18:4a:3a:fc:34:ae:ee:0a:ed:d2:41:c3:bc:3e:3b: d1:f4:77:6c:fa:f4:3f:d3:ac:2a:67:61:16:05:da: 52:b2:6a:6f:58:4d:51:08:f1:31:b4:25:78:0e:38: eb:27:79:1a:fa:e9:d7:10:b1:31:d0:6a:f5:1e:0a: 8c:c0:c5:4b:7c:d7:e4:f2:c6:8e:1b:c0:0d:65:f9: ce:64:60:6f:b5:01:8d:d7:e5:27:e6:31:36:0e:ae: a4:49:cb:9b:f9:b5:5f:39:3d:a0:57:b6:c7:27:1f: 41:d9:ee:1a:85:ec:77:33:39:e2:3b:4e:b5:ac:29: d8:80:62:4b:ee:07:97:d4:44:2e:1e:b3:2f:5d:e3: 2a:0f:1e:9e:a4:43:21:81:64:ac:4e:94:bc:4f:19: cb:5c:8e:db:df:0f:98:ed:c9:c8:a8:6f:20:f5:b4: d2:58:df:62:be:12:6d:03:f0:a7:1c:06:c9:2b:82: bf:9c:2f:e5:8c:7e:23:aa:08:2f:a3:b2:17:14:17: ed:c1:02:2a:e2:b2:45:fb:aa:9f:99:d6:36:7e:9e: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:EA:84:BE:13:A2:47:24:E4:5B:00:FD:7A:51:86:E2:9C:AC:64 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YVzqhL4Tokck5FsA_XpRhuKcrGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.22.0/24 Signature Algorithm: sha256WithRSAEncryption 65:2c:12:3f:b1:d4:f9:50:50:9a:b1:ce:a0:ce:ac:94:30:7d: 12:f2:9a:2e:21:ee:f4:33:3a:c0:4b:ef:c5:d7:28:f0:a2:a4: f0:9f:92:17:bd:80:fd:67:74:07:39:f4:7f:a4:e2:7b:5b:97: 7f:18:a8:6b:e1:6e:89:9c:a3:b7:32:45:cf:38:77:54:e8:bb: 34:b8:57:03:b9:ff:f3:3c:17:e0:a2:a8:23:df:28:ec:59:8d: 8e:d9:fd:ca:8f:89:d4:1e:c3:ad:cf:5e:27:ec:68:1e:77:b8: fe:81:2a:87:4d:8c:ba:29:e6:91:68:52:89:ec:16:82:03:98: 6c:25:b4:4d:5f:2f:69:2f:02:df:6e:47:ce:92:f4:99:75:c1: cc:07:6d:a5:a5:44:8d:07:51:77:ee:7c:6a:7d:95:54:3a:0b: b1:1a:44:33:09:f2:03:e5:e3:68:40:84:b9:08:6c:9b:d2:ed: c7:f1:e5:28:83:ac:26:98:f1:1f:a7:a2:bb:ff:37:03:5c:04: 47:bd:09:ee:97:9f:ed:e1:c9:cf:ba:a8:78:15:b4:a9:79:d5: 8d:f7:92:b8:04:ee:e1:c3:f1:70:0a:bf:b3:f8:f7:f9:16:b3: b6:ab:bd:16:df:81:fa:aa:45:38:19:cf:ae:47:dc:b1:76:78: 6f:fb:e8:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrRfswmLHTPPR7kYdZpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTVjZWE4NGJlMTNhMjQ3MjRlNDViMDBmZDdhNTE4NmUyOWNhYzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69GBb1We9gpHd6paVzDoyHIk7dfR j1fNvey4evpgPoPf0EFWCiLELXWl9K8YSjr8NK7uCu3SQcO8PjvR9Hds+vQ/06wq Z2EWBdpSsmpvWE1RCPExtCV4DjjrJ3ka+unXELEx0Gr1HgqMwMVLfNfk8saOG8AN ZfnOZGBvtQGN1+Un5jE2Dq6kScub+bVfOT2gV7bHJx9B2e4ahex3MzniO061rCnY gGJL7geX1EQuHrMvXeMqDx6epEMhgWSsTpS8TxnLXI7b3w+Y7cnIqG8g9bTSWN9i vhJtA/CnHAbJK4K/nC/ljH4jqggvo7IXFBftwQIq4rJF+6qfmdY2fp6jqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFc6oS+E6JHJORbAP16UYbinKxkMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWVZ6cWhMNFRva2NrNUZzQV9YcFJodUtjckdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbAWMA0G CSqGSIb3DQEBCwUAA4IBAQBlLBI/sdT5UFCasc6gzqyUMH0S8pouIe70MzrAS+/F 1yjwoqTwn5IXvYD9Z3QHOfR/pOJ7W5d/GKhr4W6JnKO3MkXPOHdU6Ls0uFcDuf/z PBfgoqgj3yjsWY2O2f3Kj4nUHsOtz14n7Gged7j+gSqHTYy6KeaRaFKJ7BaCA5hs JbRNXy9pLwLfbkfOkvSZdcHMB22lpUSNB1F37nxqfZVUOguxGkQzCfID5eNoQIS5 CGyb0u3H8eUog6wmmPEfp6K7/zcDXARHvQnul5/t4cnPuqh4FbSpedWN95K4BO7h w/FwCr+z+Pf5FrO2q70W34H6qkU4Gc+uR9yxdnhv++g1 -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:40 2026 by rpki-client