This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/YJ9HBfugKV0TxthqLm9MDPEsBq4.roa File: YJ9HBfugKV0TxthqLm9MDPEsBq4.roa (raw, json) Hash identifier: muct2cn0yyydW85h1pmTm+JomLouMfLTPtPtoA/rvMA= Subject key identifier: 60:9F:47:05:FB:A0:29:5D:13:C6:D8:6A:2E:6F:4C:0C:F1:2C:06:AE Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1 Certificate serial: 019B7D5CA2406144983F38F1395BB2D1DD9D Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/YJ9HBfugKV0TxthqLm9MDPEsBq4.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31713 IP address blocks: 217.113.64.0/19 maxlen: 24 217.113.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a2:40:61:44:98:3f:38:f1:39:5b:b2:d1:dd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1 Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=609f4705fba0295d13c6d86a2e6f4c0cf12c06ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:f7:ff:38:bb:95:72:dc:f5:d0:0b:87:30: 56:ae:d0:38:6a:5a:9f:2c:e1:d2:0e:a4:86:00:b5: df:e8:3f:aa:c3:56:ab:a6:76:16:1a:8f:50:76:e6: cd:e8:15:9b:32:65:4c:31:69:21:1f:32:29:dd:ad: 43:5c:e6:8a:30:73:fc:f7:29:13:53:7c:ee:18:25: 59:15:bf:11:c7:f7:46:3e:c8:62:f9:9e:c5:86:bc: 94:6b:e9:97:3b:4d:d4:73:de:7b:9f:d0:82:8d:d0: db:fd:f3:17:96:c5:c4:bb:1c:d5:c8:4d:c2:25:bc: 7c:21:b7:7d:27:f2:2b:08:c9:ca:a1:21:e0:28:8b: 3e:6e:48:b5:ef:46:ff:0c:cf:a7:4d:92:42:5e:c5: 2e:a3:ed:87:cc:87:eb:6b:f2:28:ab:76:56:53:a6: 72:0d:70:5a:8c:3a:34:03:c6:03:75:e7:f4:7b:6f: 9d:9c:fb:69:ee:4e:1c:63:91:fb:34:6b:41:41:6b: 2a:3d:64:98:33:22:07:30:1b:32:79:ba:d5:4e:c8: 93:48:ab:6f:8d:18:61:e5:61:5e:1c:a0:fc:3b:df: f6:d2:60:89:8c:66:df:dc:d8:f4:a6:ff:bd:bc:63: 9c:63:5a:fd:2e:f4:53:a9:01:c5:7d:1d:fc:f7:67: 98:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9F:47:05:FB:A0:29:5D:13:C6:D8:6A:2E:6F:4C:0C:F1:2C:06:AE X509v3 Authority Key Identifier: keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/YJ9HBfugKV0TxthqLm9MDPEsBq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.64.0/19 Signature Algorithm: sha256WithRSAEncryption 77:b6:a6:f5:eb:37:54:07:46:91:09:67:83:e0:f0:96:01:5f: 21:30:64:2b:79:cf:2a:d5:31:50:7c:d5:ae:e9:7e:43:23:c0: 17:f9:df:2d:7f:69:6e:f6:98:04:aa:f8:ce:77:8b:c8:b1:31: 03:fd:2a:13:46:91:19:1c:81:3f:5e:80:7f:6d:51:ff:40:21: c0:42:4c:bf:86:d7:3a:fe:95:61:17:bf:a6:17:df:93:52:42: e8:0b:f1:82:93:08:48:a7:58:61:7b:d9:58:96:56:ae:db:f9: 6d:50:d9:eb:40:aa:39:40:aa:93:b0:c1:17:f7:b9:53:93:7c: 95:19:bd:e6:48:88:a7:62:6e:00:d1:07:22:f6:35:e2:5f:20: 1e:95:a8:2f:54:71:a8:63:5d:7a:a8:e3:7f:20:e8:9c:83:69: 87:5d:2f:23:77:6e:c2:07:da:83:e7:99:06:36:2a:48:d5:f1: 57:a7:05:29:03:dd:6c:ac:70:fd:df:a9:37:d6:69:23:87:f6: 01:59:6c:8d:d8:55:5f:87:25:d2:48:1f:e0:13:b0:59:e6:20: c3:f6:00:b6:d4:96:e0:90:ad:f0:52:11:1a:8e:db:84:cf:18: e9:84:db:d1:f0:cf:94:a6:c3:74:d7:16:d3:33:6a:ec:1c:60: d0:31:61:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKJAYUSYPzjxOVuy0d2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTMxYWUyY2U1N2M5NWY1YTM5ODkzMGVhNDU1MDM1NDI4 MDFiYTEwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDlmNDcwNWZiYTAyOTVkMTNjNmQ4NmEyZTZmNGMwY2YxMmMwNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucP3/zi7lXLc9dALhzBWrtA4alqf LOHSDqSGALXf6D+qw1arpnYWGo9QdubN6BWbMmVMMWkhHzIp3a1DXOaKMHP89ykT U3zuGCVZFb8Rx/dGPshi+Z7FhryUa+mXO03Uc957n9CCjdDb/fMXlsXEuxzVyE3C Jbx8Ibd9J/IrCMnKoSHgKIs+bki170b/DM+nTZJCXsUuo+2HzIfra/Ioq3ZWU6Zy DXBajDo0A8YDdef0e2+dnPtp7k4cY5H7NGtBQWsqPWSYMyIHMBsyebrVTsiTSKtv jRhh5WFeHKD8O9/20mCJjGbf3Nj0pv+9vGOcY1r9LvRTqQHFfR3892eYYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCfRwX7oCldE8bYai5vTAzxLAauMB8GA1UdIwQY MBaAFMhTGuLOV8lfWjmJMOpFUDVCgBuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjkt NDVkNTQyZDVmNTVmLzEvWUo5SEJmdWdLVjBUeHRocUxtOU1EUEVzQnE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjktNDVkNTQyZDVmNTVm LzEveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2XFAMA0G CSqGSIb3DQEBCwUAA4IBAQB3tqb16zdUB0aRCWeD4PCWAV8hMGQrec8q1TFQfNWu 6X5DI8AX+d8tf2lu9pgEqvjOd4vIsTED/SoTRpEZHIE/XoB/bVH/QCHAQky/htc6 /pVhF7+mF9+TUkLoC/GCkwhIp1hhe9lYllau2/ltUNnrQKo5QKqTsMEX97lTk3yV Gb3mSIinYm4A0Qci9jXiXyAelagvVHGoY116qON/IOicg2mHXS8jd27CB9qD55kG NipI1fFXpwUpA91srHD936k31mkjh/YBWWyN2FVfhyXSSB/gE7BZ5iDD9gC21Jbg kK3wUhEajtuEzxjphNvR8M+UpsN01xbTM2rsHGDQMWFS -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:35 2026 by rpki-client