This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/ybTxR0x2jRWWGn2w__zXIUaPJIc.roa File: ybTxR0x2jRWWGn2w__zXIUaPJIc.roa (raw, json) Hash identifier: ETJae5pzCeijYgD++SmhhmIykHq3ChLRMibSEkvYURQ= Subject key identifier: C9:B4:F1:47:4C:76:8D:15:96:1A:7D:B0:FF:FC:D7:21:46:8F:24:87 Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Certificate serial: 019B7F8336FD2D5295C9D5E75248EFA55E07 Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/ybTxR0x2jRWWGn2w__zXIUaPJIc.roa Signing time: Fri 02 Jan 2026 16:21:04 +0000 ROA not before: Fri 02 Jan 2026 16:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199143 IP address blocks: 5.158.216.0/24 maxlen: 24 5.158.217.0/24 maxlen: 24 5.158.218.0/24 maxlen: 24 5.158.219.0/24 maxlen: 24 5.158.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:36:fd:2d:52:95:c9:d5:e7:52:48:ef:a5:5e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37 Validity Not Before: Jan 2 16:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9b4f1474c768d15961a7db0fffcd721468f2487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:04:6c:d9:2e:a9:37:3d:d0:43:91:aa:e7: 4b:57:87:6c:be:fe:76:d2:9f:f9:2d:50:65:19:25: f5:92:08:72:d2:0e:43:76:4d:22:8c:b8:5c:7c:b6: e4:d9:23:ab:c8:4e:fa:5d:39:63:c1:ca:46:26:53: 29:55:b8:59:99:08:7f:cd:ea:3f:77:59:f0:18:3d: 2d:8c:86:2a:26:c8:06:8b:d5:dc:23:8f:d2:b2:de: ce:48:2f:5a:72:9d:e1:d5:94:b3:68:df:ef:a2:54: ab:92:17:fc:e5:bf:19:e8:1e:91:35:26:2c:58:a1: b3:ec:5a:59:5f:4d:cc:b6:dc:4e:7f:18:5e:e9:fd: 0d:82:8d:24:1c:3d:0c:0f:57:3b:48:3f:53:e3:17: de:75:49:df:c6:8d:f0:f4:a6:4d:20:b9:f4:d5:7d: b8:b9:f8:c8:58:44:a6:7a:cc:66:a8:8c:66:48:8a: df:ef:27:12:70:cd:d4:d4:2e:f9:cc:bf:33:df:e4: 24:40:45:19:45:65:d1:49:26:a3:29:e6:98:13:19: c7:f5:ee:9c:a7:34:c9:9b:1b:bf:63:5c:01:da:75: 72:5f:7e:41:28:60:be:b1:60:8a:92:84:54:28:64: e5:7e:fc:fe:1a:e1:6e:35:8c:08:f5:f9:09:8b:cb: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B4:F1:47:4C:76:8D:15:96:1A:7D:B0:FF:FC:D7:21:46:8F:24:87 X509v3 Authority Key Identifier: keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/ybTxR0x2jRWWGn2w__zXIUaPJIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.158.216.0-5.158.220.255 Signature Algorithm: sha256WithRSAEncryption 4b:46:97:84:ab:37:8e:28:6f:ec:ad:59:bf:b3:90:72:34:1c: 59:be:56:d0:2e:3a:e3:d2:44:d9:fd:19:27:d6:e6:bb:1f:1f: 63:21:20:b7:49:c5:fa:80:c1:88:76:73:ce:74:d2:37:6d:25: 37:8d:84:67:9d:25:c1:2c:c0:96:ec:4c:ef:aa:3c:fb:a2:7e: ec:9b:59:36:88:c3:25:84:cf:44:b7:8e:40:2a:4d:74:ff:ff: 1b:23:b9:87:a1:b8:37:fb:4f:15:6f:7f:07:98:70:ec:15:7b: 62:d1:72:f9:c9:63:f8:69:91:60:a2:b4:a4:06:c8:5d:4f:11: 24:7f:b4:7a:c9:d4:83:fd:7e:e5:3c:73:7a:e7:a3:05:e9:15: 06:5c:5e:68:14:90:80:32:7d:dc:74:ba:9f:06:65:36:cc:e7: 1e:d1:ed:47:1f:c5:e3:6c:88:f2:47:f5:3d:0c:e0:84:21:3f: e0:94:de:05:3b:34:03:9e:27:45:ec:9b:25:ad:5a:6c:ff:d9: 14:91:12:ee:7f:fa:09:b6:ff:b7:7a:f5:4a:31:bc:4b:ad:75: 0b:b0:5d:22:02:75:81:1b:cb:d7:cf:1a:dc:76:29:ce:60:3a: f6:ef:82:ca:38:c1:6b:a2:7e:2b:bf:4b:de:37:41:9a:8f:68: c0:27:f2:76 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/gzb9LVKVydXnUkjvpV4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm OWFhMzcwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWI0ZjE0NzRjNzY4ZDE1OTYxYTdkYjBmZmZjZDcyMTQ2OGYyNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7gEbNkuqTc90EORqudLV4dsvv52 0p/5LVBlGSX1kghy0g5Ddk0ijLhcfLbk2SOryE76XTljwcpGJlMpVbhZmQh/zeo/ d1nwGD0tjIYqJsgGi9XcI4/Sst7OSC9acp3h1ZSzaN/volSrkhf85b8Z6B6RNSYs WKGz7FpZX03MttxOfxhe6f0Ngo0kHD0MD1c7SD9T4xfedUnfxo3w9KZNILn01X24 ufjIWESmesxmqIxmSIrf7ycScM3U1C75zL8z3+QkQEUZRWXRSSajKeaYExnH9e6c pzTJmxu/Y1wB2nVyX35BKGC+sWCKkoRUKGTlfvz+GuFuNYwI9fkJi8vAJwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMm08UdMdo0Vlhp9sP/81yFGjySHMB8GA1UdIwQY MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt ZjAxYTJmNThlZjg4LzEveWJUeFIweDJqUldXR24yd19felhJVWFQSkljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4 LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMFntgD BAAFntwwDQYJKoZIhvcNAQELBQADggEBAEtGl4SrN44ob+ytWb+zkHI0HFm+VtAu OuPSRNn9GSfW5rsfH2MhILdJxfqAwYh2c8500jdtJTeNhGedJcEswJbsTO+qPPui fuybWTaIwyWEz0S3jkAqTXT//xsjuYehuDf7TxVvfweYcOwVe2LRcvnJY/hpkWCi tKQGyF1PESR/tHrJ1IP9fuU8c3rnowXpFQZcXmgUkIAyfdx0up8GZTbM5x7R7Ucf xeNsiPJH9T0M4IQhP+CU3gU7NAOeJ0XsmyWtWmz/2RSREu5/+gm2/7d69UoxvEut dQuwXSICdYEby9fPGtx2Kc5gOvbvgso4wWuifiu/S943QZqPaMAn8nY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:20 2026 by rpki-client