This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa File: YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa (raw, json) Hash identifier: bFavmNyn/CPcWGJeZG409Nafloy5IsBvUxX5L0UODxY= Subject key identifier: 62:62:11:B3:AF:F8:0B:1D:14:78:A3:24:19:40:DD:A7:99:91:93:FD Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c Certificate serial: 019B79ED1FBC54A2E0786A62AE33850B372F Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2850 IP address blocks: 137.43.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1f:bc:54:a2:e0:78:6a:62:ae:33:85:0b:37:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=626211b3aff80b1d1478a3241940dda7999193fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d2:c9:fd:4e:21:2b:11:04:f3:5b:7c:1f:86: 77:ea:23:02:ee:18:f2:72:b6:bf:50:40:39:5b:5d: 5c:9f:7d:4d:24:99:5e:a0:d8:34:09:57:9e:e2:dd: de:20:15:b3:91:99:d9:c9:13:ae:01:c4:16:5e:0b: 08:42:93:63:05:0c:32:f1:5c:2e:72:93:53:6b:58: 34:63:b6:98:59:87:eb:23:19:6d:b3:f1:8b:5c:08: f7:94:f4:1b:87:f6:fd:95:8c:b3:66:f7:53:db:68: cf:c7:94:2d:6e:06:31:2c:8a:e4:01:a1:ee:0b:a0: d3:24:b6:27:c5:6a:31:3f:7b:06:2b:81:25:34:68: 00:c2:c5:b8:ef:6d:2a:63:cf:7a:ca:2e:58:b5:92: cd:a6:16:7e:9a:8c:b8:65:d0:d5:21:5f:c1:8f:b4: 44:c6:de:31:f5:71:98:81:22:58:df:94:27:a4:93: cd:9e:a5:b4:eb:9f:7e:82:20:ad:d2:5a:f9:c2:0e: 21:0c:9b:75:b3:b6:7d:04:f8:f0:e4:24:d4:31:49: e8:1f:74:bc:70:0f:00:48:cb:ec:1c:46:79:e6:78: 1f:80:c3:11:06:4e:06:4f:ed:c5:3b:2e:cc:d8:92: cc:a0:19:6c:40:85:89:6d:d8:a2:44:2a:8b:95:34: 0e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:62:11:B3:AF:F8:0B:1D:14:78:A3:24:19:40:DD:A7:99:91:93:FD X509v3 Authority Key Identifier: keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.43.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:5a:d4:fc:dc:3f:28:cb:c6:75:e9:01:b9:26:64:b0:df:fa: aa:af:b9:be:1f:40:5e:9e:4c:a5:9a:d8:46:b6:b4:32:90:d3: 7d:31:08:76:63:ad:8b:8d:71:92:1d:69:56:d1:7c:0b:8c:8f: 12:c5:ea:36:86:7b:c3:ca:65:26:e9:b0:a9:a9:bc:43:e0:49: 2d:c9:98:42:e2:76:e3:09:9b:b2:0c:1a:28:02:24:e7:98:02: d6:fd:16:17:ad:a0:d3:e5:46:34:89:38:93:ab:81:77:ea:fb: f5:62:05:08:d1:5e:80:a2:f5:11:3a:d4:25:e2:41:d6:5e:5e: 59:f4:be:11:d3:71:cd:fa:53:0d:cb:db:63:53:3d:9f:66:f2: b0:54:39:93:cd:20:91:67:92:f1:5c:b2:75:fd:b8:15:39:3d: 64:4c:40:ff:9d:1e:01:ae:3b:44:77:27:14:84:25:18:a2:c7: b7:07:63:62:4a:50:96:e3:4e:fa:6a:1b:29:ac:e8:2d:2c:0b: 92:01:d7:53:1f:a2:54:d9:e5:94:b3:2c:d7:21:47:9e:bb:3c: 80:a7:cc:c3:e2:96:7a:ea:70:4e:44:ff:49:d1:2d:fa:3f:a5: be:0a:de:bf:df:34:5a:36:95:37:83:3d:e2:5b:f0:c5:4d:29: 0f:18:41:86 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt57R+8VKLgeGpirjOFCzcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5 ODNmNWMwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjYyMTFiM2FmZjgwYjFkMTQ3OGEzMjQxOTQwZGRhNzk5OTE5M2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69LJ/U4hKxEE81t8H4Z36iMC7hjy cra/UEA5W11cn31NJJleoNg0CVee4t3eIBWzkZnZyROuAcQWXgsIQpNjBQwy8Vwu cpNTa1g0Y7aYWYfrIxlts/GLXAj3lPQbh/b9lYyzZvdT22jPx5QtbgYxLIrkAaHu C6DTJLYnxWoxP3sGK4ElNGgAwsW4720qY896yi5YtZLNphZ+moy4ZdDVIV/Bj7RE xt4x9XGYgSJY35QnpJPNnqW0659+giCt0lr5wg4hDJt1s7Z9BPjw5CTUMUnoH3S8 cA8ASMvsHEZ55ngfgMMRBk4GT+3FOy7M2JLMoBlsQIWJbdiiRCqLlTQOZwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFGJiEbOv+AsdFHijJBlA3aeZkZP9MB8GA1UdIwQY MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt MzFhZGY2NDM5NjQzLzEvWW1JUnM2XzRDeDBVZUtNa0dVRGRwNW1Sa18wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiSswDQYJ KoZIhvcNAQELBQADggEBAHRa1PzcPyjLxnXpAbkmZLDf+qqvub4fQF6eTKWa2Ea2 tDKQ030xCHZjrYuNcZIdaVbRfAuMjxLF6jaGe8PKZSbpsKmpvEPgSS3JmELiduMJ m7IMGigCJOeYAtb9FhetoNPlRjSJOJOrgXfq+/ViBQjRXoCi9RE61CXiQdZeXln0 vhHTcc36Uw3L22NTPZ9m8rBUOZPNIJFnkvFcsnX9uBU5PWRMQP+dHgGuO0R3JxSE JRiix7cHY2JKUJbjTvpqGyms6C0sC5IB11MfolTZ5ZSzLNchR567PICnzMPilnrq cE5E/0nRLfo/pb4K3r/fNFo2lTeDPeJb8MVNKQ8YQYY= -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:09 2026 by rpki-client