This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/cYBrnaocLjA_DaHgp5BukHetZEw.roa File: cYBrnaocLjA_DaHgp5BukHetZEw.roa (raw, json) Hash identifier: WSYQBuYEacORy4ZqYo8p12iSgdVpFErki2QNc5JX+Q8= Subject key identifier: 71:80:6B:9D:AA:1C:2E:30:3F:0D:A1:E0:A7:90:6E:90:77:AD:64:4C Certificate issuer: /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397 Certificate serial: 019B797F0F4578A480C06E8D716C1133D42B Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/cYBrnaocLjA_DaHgp5BukHetZEw.roa Signing time: Thu 01 Jan 2026 12:18:48 +0000 ROA not before: Thu 01 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33806 IP address blocks: 109.197.38.0/24 maxlen: 24 195.200.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0f:45:78:a4:80:c0:6e:8d:71:6c:11:33:d4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397 Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71806b9daa1c2e303f0da1e0a7906e9077ad644c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e9:7b:06:5c:12:3d:a7:4d:0a:3e:b7:fa:8a: 8c:6f:c1:0e:ed:b3:37:91:45:92:c8:20:4c:86:92: 82:99:e5:c5:e8:c1:b4:e4:3d:87:c8:6a:0a:cf:31: 4f:29:03:cf:d8:ea:fe:56:7b:f8:68:9f:01:76:9f: 19:a2:8d:09:ab:61:14:8a:28:3e:9a:0b:4a:a2:d0: 9c:48:bd:81:34:4b:ec:46:5a:27:9f:33:d8:29:94: ff:f2:74:1b:85:cd:13:91:b6:88:33:f4:95:e4:75: 31:45:b0:f0:fd:f3:59:6b:0f:80:5b:96:6c:8a:83: 56:44:c7:be:12:9b:6e:1a:b5:eb:e9:29:4a:5a:39: 29:38:0d:93:30:81:49:f9:dd:2f:fd:91:3a:2e:2d: 48:e5:20:6f:1f:28:e5:ec:57:84:d4:86:b7:c1:26: a2:f3:f0:2e:09:89:61:02:27:1e:fd:8d:8e:59:89: 19:88:07:4b:44:4f:7d:41:9b:61:84:ed:ce:12:21: 99:c1:de:3e:30:12:43:e3:cc:a7:8b:5e:bf:64:fc: 4d:9d:93:02:06:ef:76:cb:0f:43:1a:f9:77:6b:9a: 69:d8:64:52:dc:ac:da:1a:34:b9:4d:0a:71:a3:90: 4b:88:38:df:46:ba:c2:af:b6:f3:54:cb:a4:1a:62: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:80:6B:9D:AA:1C:2E:30:3F:0D:A1:E0:A7:90:6E:90:77:AD:64:4C X509v3 Authority Key Identifier: keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/cYBrnaocLjA_DaHgp5BukHetZEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.38.0/24 195.200.206.0/24 Signature Algorithm: sha256WithRSAEncryption 88:5f:81:14:47:e5:6f:8b:cf:1e:ec:e9:67:6c:e0:70:f6:85: ba:bf:3b:b9:f9:fe:e9:e4:fb:89:92:42:1d:b7:ae:6b:44:49: 46:ce:b5:e4:b4:8d:0b:f7:2d:7a:41:52:c6:60:35:e3:45:0d: aa:dd:42:fb:29:43:39:43:45:ab:32:68:40:8e:2a:6e:b7:b0: 17:3b:df:65:f6:c6:10:01:48:c1:fe:f6:08:52:52:7e:78:67: b3:a0:3c:cd:54:81:17:02:07:37:a7:01:2e:b8:7a:c2:30:56: fc:cb:e8:2e:18:bd:0d:b5:c8:7e:09:7f:67:33:57:eb:f1:25: 43:4d:4d:2b:8b:84:67:68:7e:66:49:d6:d1:97:69:46:d9:3d: f3:f1:6d:67:bf:23:89:cc:99:e1:88:e2:9a:03:bd:22:cb:79: e8:49:8f:3d:a5:5d:76:e7:d7:59:3f:9f:17:fb:d1:37:4c:12: 31:ad:69:cf:58:27:83:8f:07:50:ec:d4:ee:15:70:e7:49:12: a7:a0:ea:a4:98:aa:b1:3c:b0:36:c2:23:0f:8a:24:13:11:8f: 18:e3:47:db:43:b2:a0:d6:8b:36:e1:4f:40:f6:0d:15:71:d1: 21:cf:9a:2e:be:d0:2a:da:29:d8:f6:14:a3:19:60:fa:c0:5d: 51:70:e6:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fw9FeKSAwG6NcWwRM9QrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYmZiNDYzNTNiZmNjY2ZmOTQxMmRjYmRkNDgwZjE5YjRj OTgzOTcwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTgwNmI5ZGFhMWMyZTMwM2YwZGExZTBhNzkwNmU5MDc3YWQ2NDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ol7BlwSPadNCj63+oqMb8EO7bM3 kUWSyCBMhpKCmeXF6MG05D2HyGoKzzFPKQPP2Or+Vnv4aJ8Bdp8Zoo0Jq2EUiig+ mgtKotCcSL2BNEvsRlonnzPYKZT/8nQbhc0TkbaIM/SV5HUxRbDw/fNZaw+AW5Zs ioNWRMe+EptuGrXr6SlKWjkpOA2TMIFJ+d0v/ZE6Li1I5SBvHyjl7FeE1Ia3wSai 8/AuCYlhAice/Y2OWYkZiAdLRE99QZthhO3OEiGZwd4+MBJD48yni16/ZPxNnZMC Bu92yw9DGvl3a5pp2GRS3KzaGjS5TQpxo5BLiDjfRrrCr7bzVMukGmJt3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHGAa52qHC4wPw2h4KeQbpB3rWRMMB8GA1UdIwQY MBaAFFG/tGNTv8zP+UEty91IDxm0yYOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgt YzFlOTc0YmVkMTJlLzEvY1lCcm5hb2NMakFfRGFIZ3A1QnVrSGV0WkV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgtYzFlOTc0YmVkMTJl LzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbcUmAwQA w8jOMA0GCSqGSIb3DQEBCwUAA4IBAQCIX4EUR+Vvi88e7OlnbOBw9oW6vzu5+f7p 5PuJkkIdt65rRElGzrXktI0L9y16QVLGYDXjRQ2q3UL7KUM5Q0WrMmhAjiput7AX O99l9sYQAUjB/vYIUlJ+eGezoDzNVIEXAgc3pwEuuHrCMFb8y+guGL0Ntch+CX9n M1fr8SVDTU0ri4RnaH5mSdbRl2lG2T3z8W1nvyOJzJnhiOKaA70iy3noSY89pV12 59dZP58X+9E3TBIxrWnPWCeDjwdQ7NTuFXDnSRKnoOqkmKqxPLA2wiMPiiQTEY8Y 40fbQ7Kg1os24U9A9g0VcdEhz5ouvtAq2inY9hSjGWD6wF1RcOam -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:26 2026 by rpki-client