This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/YfWgj2my_KeNLyWnne6FgiOk-6s.roa File: YfWgj2my_KeNLyWnne6FgiOk-6s.roa (raw, json) Hash identifier: tWmUa8IGcqX7DqS4EQsx6DEzH9rUFPj7katD2nQ7ngQ= Subject key identifier: 61:F5:A0:8F:69:B2:FC:A7:8D:2F:25:A7:9D:EE:85:82:23:A4:FB:AB Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8 Certificate serial: 019B7A5A8454E1ABF42E5DAB3F1B09E0BFCA Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/YfWgj2my_KeNLyWnne6FgiOk-6s.roa Signing time: Thu 01 Jan 2026 16:18:31 +0000 ROA not before: Thu 01 Jan 2026 16:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12483 IP address blocks: 212.93.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:84:54:e1:ab:f4:2e:5d:ab:3f:1b:09:e0:bf:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8 Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61f5a08f69b2fca78d2f25a79dee858223a4fbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9c:32:1a:68:44:74:81:ac:47:f0:45:58:71: 8c:35:d8:5c:7e:a2:f1:82:c1:74:04:c7:27:c2:e7: d7:0a:62:cf:9b:d1:4e:b3:bc:8b:62:fe:2f:28:2b: 31:f0:a2:a0:f9:6b:17:14:17:3a:8d:d2:29:a2:1b: 3c:90:35:65:00:98:41:c8:90:74:a3:0c:1d:f9:4d: 23:94:65:65:84:b1:ff:7b:4a:34:77:6d:e2:5a:a1: e5:b2:c5:38:69:04:78:51:2f:ae:a7:84:cd:2d:b9: 88:b4:1b:72:3d:d6:86:ad:6c:36:0a:55:22:01:67: 3e:0e:af:24:16:2f:1d:df:0c:d5:44:12:6b:b6:11: 70:19:71:1a:be:7f:67:46:54:97:3b:61:d6:36:2f: 19:ec:33:a0:ee:1c:a7:89:6b:83:75:16:b6:8a:ed: 4a:96:0f:2f:3d:c1:60:7c:8e:ac:b3:7b:e3:71:15: d9:53:64:9e:09:9a:79:f0:cf:1c:6e:82:dc:aa:56: fc:e7:40:de:4c:55:bb:7d:94:bc:55:db:79:0d:64: c2:b7:98:2e:d8:b2:66:16:e0:7b:31:d8:f4:62:f1: 76:f5:9a:af:e8:5a:3d:fd:a8:c3:e4:50:c7:ab:c0: 01:0c:87:50:16:7e:90:67:6e:a9:77:da:35:8b:be: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F5:A0:8F:69:B2:FC:A7:8D:2F:25:A7:9D:EE:85:82:23:A4:FB:AB X509v3 Authority Key Identifier: keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/YfWgj2my_KeNLyWnne6FgiOk-6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.93.57.0/24 Signature Algorithm: sha256WithRSAEncryption 32:0b:a4:0a:d5:ba:22:c1:ee:9d:8f:a6:30:ec:f2:30:cb:87: 37:f8:d3:89:d0:41:cf:f4:4f:10:3e:84:10:08:71:27:5e:5d: 34:c5:ef:39:e7:8e:a3:12:31:07:ad:ad:71:21:d6:7f:8b:2c: 0b:e2:af:6a:06:f0:df:5d:5c:ab:72:28:20:97:5c:fd:43:07: 6e:9c:bd:f6:2b:ee:03:f5:64:d0:99:54:37:33:ee:9b:f8:ac: 19:75:7c:aa:38:c9:2e:0c:18:bf:12:92:4c:1f:b1:34:6b:69: f0:7c:2b:d7:04:b7:fc:07:5a:67:60:34:2c:fa:c6:ac:ca:7f: 0e:5b:84:d3:23:63:4c:94:a4:71:f0:4f:de:c3:bc:27:4f:09: 91:5c:54:89:2a:d9:59:02:41:cb:49:5e:43:9a:8d:4c:a0:5d: 76:62:1a:ae:18:30:f1:66:02:ad:d6:8e:cb:bd:b8:96:8b:e0: f1:bc:74:fc:70:46:e2:aa:7d:40:ba:20:a6:b2:46:52:ce:6d: fd:06:02:87:1b:66:73:00:65:bf:6f:75:c8:df:b0:eb:64:d9: 1b:59:d9:7b:9e:28:94:31:01:09:d5:79:35:73:4a:fb:98:78: a6:dc:e2:15:f0:2b:62:4c:9e:3a:55:50:c7:79:7e:3e:69:89: a4:d0:18:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WoRU4av0Ll2rPxsJ4L/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYjA3OGY3NWVhM2Q1MzU4ZmNjYTQ2NmM3NTVkNzVkMTIz MGY4ZDgwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWY1YTA4ZjY5YjJmY2E3OGQyZjI1YTc5ZGVlODU4MjIzYTRmYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5wyGmhEdIGsR/BFWHGMNdhcfqLx gsF0BMcnwufXCmLPm9FOs7yLYv4vKCsx8KKg+WsXFBc6jdIpohs8kDVlAJhByJB0 owwd+U0jlGVlhLH/e0o0d23iWqHlssU4aQR4US+up4TNLbmItBtyPdaGrWw2ClUi AWc+Dq8kFi8d3wzVRBJrthFwGXEavn9nRlSXO2HWNi8Z7DOg7hyniWuDdRa2iu1K lg8vPcFgfI6ss3vjcRXZU2SeCZp58M8cboLcqlb850DeTFW7fZS8Vdt5DWTCt5gu 2LJmFuB7Mdj0YvF29Zqv6Fo9/ajD5FDHq8ABDIdQFn6QZ26pd9o1i75LJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGH1oI9psvynjS8lp53uhYIjpPurMB8GA1UdIwQY MBaAFO6wePdeo9U1j8ykZsdV110SMPjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMt ODIxNzA3ZTJjMDAyLzEvWWZXZ2oybXlfS2VOTHlXbm5lNkZnaU9rLTZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMtODIxNzA3ZTJjMDAy LzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1F05MA0G CSqGSIb3DQEBCwUAA4IBAQAyC6QK1boiwe6dj6Yw7PIwy4c3+NOJ0EHP9E8QPoQQ CHEnXl00xe85546jEjEHra1xIdZ/iywL4q9qBvDfXVyrciggl1z9QwdunL32K+4D 9WTQmVQ3M+6b+KwZdXyqOMkuDBi/EpJMH7E0a2nwfCvXBLf8B1pnYDQs+sasyn8O W4TTI2NMlKRx8E/ew7wnTwmRXFSJKtlZAkHLSV5Dmo1MoF12YhquGDDxZgKt1o7L vbiWi+DxvHT8cEbiqn1AuiCmskZSzm39BgKHG2ZzAGW/b3XI37DrZNkbWdl7niiU MQEJ1Xk1c0r7mHim3OIV8CtiTJ46VVDHeX4+aYmk0Bhg -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:28 2026 by rpki-client