This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/YTJNsByK31dKM5wguVLetwL3nfw.roa File: YTJNsByK31dKM5wguVLetwL3nfw.roa (raw, json) Hash identifier: UMxwu5ZNLao+ppm6r8CZGZ9AMab7Hqrre/Kz6fEyZKY= Subject key identifier: 61:32:4D:B0:1C:8A:DF:57:4A:33:9C:20:B9:52:DE:B7:02:F7:9D:FC Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd Certificate serial: 019B797ED0D310527BAB2241A64B1B017633 Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/YTJNsByK31dKM5wguVLetwL3nfw.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9211 IP address blocks: 193.102.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d0:d3:10:52:7b:ab:22:41:a6:4b:1b:01:76:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61324db01c8adf574a339c20b952deb702f79dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:32:e5:63:82:9b:16:f2:14:37:2c:c2:83: 45:89:a8:1c:31:72:2b:d0:8f:7e:a1:f5:94:68:1b: fa:01:0e:d6:e0:ff:a4:4f:a1:48:ec:1b:c9:c9:f9: 6a:28:ce:b3:0e:2d:e5:33:bd:7e:09:76:d1:f4:83: 4c:d9:63:b1:d3:28:7b:e3:0a:f0:2c:4c:d0:d7:86: ec:68:38:96:f3:dc:eb:78:83:fa:79:17:8e:50:71: b0:bb:74:60:c8:26:09:2b:73:56:0e:ea:43:c8:e9: 17:23:1a:c8:b1:ce:be:7b:d1:90:f1:29:c3:4a:9a: 3d:3a:66:7e:95:37:3c:c7:e6:43:59:e4:d0:95:4f: 08:6c:59:a6:d7:fb:2a:ff:53:03:41:62:bd:c8:f4: 23:b7:e1:2b:e4:67:8c:59:c6:df:b7:48:71:08:9b: 36:1f:b5:51:0b:ba:82:7d:15:1a:80:a5:ac:cd:00: f0:8a:5a:fd:e9:35:b5:b9:16:a1:73:fe:21:8e:e7: a3:df:05:74:1a:95:80:99:d5:22:06:38:12:32:eb: 61:f3:09:c4:3c:30:c6:ca:b8:58:6c:10:4a:a6:29: 56:bf:59:5e:fe:d8:01:ad:ad:66:d5:b2:ec:39:9e: fa:ad:70:14:89:24:84:d4:95:93:98:55:fe:7d:d1: 18:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:32:4D:B0:1C:8A:DF:57:4A:33:9C:20:B9:52:DE:B7:02:F7:9D:FC X509v3 Authority Key Identifier: keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/YTJNsByK31dKM5wguVLetwL3nfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.102.240.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:c8:6f:95:d6:a3:10:ca:19:69:e8:78:85:b8:a3:41:e9:61: aa:60:ca:7e:28:26:f2:bd:94:34:fe:b3:f7:3b:1f:df:b3:22: fc:f3:e1:a7:18:76:e3:85:9a:16:6d:94:39:25:04:fe:5d:cb: c9:15:e8:65:fe:7e:c6:28:5b:7f:ec:57:bc:05:78:ae:e9:b0: 02:dc:9c:a1:b0:34:19:99:20:51:26:a9:5a:7a:3b:f9:fd:03: 5a:b8:8e:88:b4:bb:36:46:b7:75:89:13:dc:5a:b8:d2:9f:f4: 23:0a:61:f4:f9:2b:80:63:a7:4f:c0:48:e6:24:ab:b8:2a:dd: 9f:9a:4e:7c:8e:f7:b8:f8:dc:d6:3f:8c:93:4c:df:f7:47:38: a4:e7:07:c4:64:17:03:c8:77:91:de:52:77:95:9f:36:d1:fc: fc:8a:20:85:20:a9:d9:8d:0b:1a:48:0c:25:9a:e3:82:29:cd: 3c:df:ba:bf:e9:3a:3d:44:9d:25:4d:51:b7:a0:7e:37:3b:00: 3d:f4:32:89:f6:0c:4e:50:c4:7a:64:e5:92:19:0b:74:99:5e: 79:cd:48:23:40:14:93:c2:ed:1c:b1:74:05:36:d4:34:41:7a: 70:47:11:be:b2:f3:37:04:53:41:33:96:6d:c7:fb:fe:80:e3: 31:50:9a:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftDTEFJ7qyJBpksbAXYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0 ZjcwZGQwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTMyNGRiMDFjOGFkZjU3NGEzMzljMjBiOTUyZGViNzAyZjc5ZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw18y5WOCmxbyFDcswoNFiagcMXIr 0I9+ofWUaBv6AQ7W4P+kT6FI7BvJyflqKM6zDi3lM71+CXbR9INM2WOx0yh74wrw LEzQ14bsaDiW89zreIP6eReOUHGwu3RgyCYJK3NWDupDyOkXIxrIsc6+e9GQ8SnD Spo9OmZ+lTc8x+ZDWeTQlU8IbFmm1/sq/1MDQWK9yPQjt+Er5GeMWcbft0hxCJs2 H7VRC7qCfRUagKWszQDwilr96TW1uRahc/4hjuej3wV0GpWAmdUiBjgSMuth8wnE PDDGyrhYbBBKpilWv1le/tgBra1m1bLsOZ76rXAUiSSE1JWTmFX+fdEYBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGEyTbAcit9XSjOcILlS3rcC9538MB8GA1UdIwQY MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt NjdmOGU3ZDExMzdjLzEvWVRKTnNCeUszMWRLTTV3Z3VWTGV0d0wzbmZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWbwMA0G CSqGSIb3DQEBCwUAA4IBAQAbyG+V1qMQyhlp6HiFuKNB6WGqYMp+KCbyvZQ0/rP3 Ox/fsyL88+GnGHbjhZoWbZQ5JQT+XcvJFehl/n7GKFt/7Fe8BXiu6bAC3JyhsDQZ mSBRJqlaejv5/QNauI6ItLs2Rrd1iRPcWrjSn/QjCmH0+SuAY6dPwEjmJKu4Kt2f mk58jve4+NzWP4yTTN/3Rzik5wfEZBcDyHeR3lJ3lZ820fz8iiCFIKnZjQsaSAwl muOCKc0837q/6To9RJ0lTVG3oH43OwA99DKJ9gxOUMR6ZOWSGQt0mV55zUgjQBST wu0csXQFNtQ0QXpwRxG+svM3BFNBM5Ztx/v+gOMxUJrH -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:50 2026 by rpki-client