This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/YYkvi7iY5yBqNjG-94WUWFCEEoU.roa File: YYkvi7iY5yBqNjG-94WUWFCEEoU.roa (raw, json) Hash identifier: HgvhtGLtWSEuAUdli7GqTihRO3hye/C71rDsERDYV8A= Subject key identifier: 61:89:2F:8B:B8:98:E7:20:6A:36:31:BE:F7:85:94:58:50:84:12:85 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B7EA65C5624534B9EF66C3CF3801D4FAB Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/YYkvi7iY5yBqNjG-94WUWFCEEoU.roa Signing time: Fri 02 Jan 2026 12:19:50 +0000 ROA not before: Fri 02 Jan 2026 12:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208008 IP address blocks: 212.176.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5c:56:24:53:4b:9e:f6:6c:3c:f3:80:1d:4f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Jan 2 12:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61892f8bb898e7206a3631bef785945850841285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:84:f2:57:96:d9:a4:bc:61:d8:eb:b5:c5: ea:23:3f:f5:b5:43:67:ec:c4:c3:21:7e:a0:bb:07: 6e:c9:6d:33:1a:5d:c3:66:6f:10:a7:6c:48:11:f9: 24:4c:7b:29:c7:00:d5:4e:d9:e2:c8:9d:cd:96:1c: 7d:7d:ff:c1:2d:86:a7:88:62:e9:fb:2e:25:df:14: 39:f9:ba:93:bb:6e:11:a2:5f:2c:ef:a6:87:4c:27: 19:b2:61:8f:2e:10:60:72:7f:94:8b:a5:d3:ec:8a: fc:95:55:56:65:fc:96:01:27:81:81:83:98:78:1e: c0:9d:85:4a:84:82:e7:98:c2:39:45:8a:93:0e:d4: da:a2:a4:17:0b:8e:c1:b8:84:3d:fc:33:db:14:86: 2a:7b:7d:46:52:8b:30:a2:8c:e2:9d:fa:ce:a8:e2: 88:92:66:6d:be:24:18:f5:d9:1b:a8:f6:61:7c:07: 3d:31:92:c4:d1:8c:25:ff:8a:f8:64:67:7c:18:a3: fb:fc:6d:4f:35:0c:50:5e:46:d7:21:68:1e:30:f8: 97:3b:5c:21:ae:31:99:05:f0:40:ca:74:96:81:58: b7:53:02:94:b0:9e:16:d5:69:0f:98:e5:7c:84:65: de:1b:12:49:05:98:00:40:8f:25:7c:c8:c0:be:aa: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:2F:8B:B8:98:E7:20:6A:36:31:BE:F7:85:94:58:50:84:12:85 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/YYkvi7iY5yBqNjG-94WUWFCEEoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.176.94.0/23 Signature Algorithm: sha256WithRSAEncryption 09:69:5d:9c:d8:f6:5f:ee:7a:99:b8:95:9a:e3:fc:72:ca:6c: a6:e2:22:c1:d1:13:49:21:87:1b:ce:79:05:f2:b2:e9:d3:c4: ed:a3:92:fa:cb:29:02:2f:15:93:0b:df:f1:1c:ef:c5:44:40: 48:81:ca:c7:7b:af:38:f7:e8:25:ce:e2:eb:56:08:41:c3:b2: 82:e6:ba:88:c8:b1:d4:90:fa:ab:61:e9:a0:9b:ba:86:53:ea: 1f:3f:e9:6c:4a:db:a8:58:59:da:0c:54:a2:31:12:6b:c1:e5: bb:a9:f4:da:0a:66:07:02:07:d2:41:1a:f6:25:aa:45:e9:d0: 42:94:05:21:6d:a1:1a:9d:62:66:d0:50:ae:85:17:a0:97:30: a2:b7:52:db:d4:4f:d5:57:8c:25:c9:12:b9:d9:03:79:6f:4e: 7d:07:21:93:36:15:dd:9a:6d:6f:30:4e:c6:ee:eb:25:f2:8c: 73:89:f2:a8:b8:e6:ce:22:0d:f4:a5:be:fe:6f:ed:1d:8a:b9: 37:3b:38:c4:cc:89:68:be:b1:4c:f4:d1:ac:6f:b9:09:e9:91: fc:46:94:26:49:64:ac:30:e2:39:a8:66:d5:df:27:0a:d9:c3: 15:52:a5:0f:df:de:7c:c9:af:7d:bc:db:1b:44:cf:c7:a5:37: 63:49:07:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+plxWJFNLnvZsPPOAHU+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjYwMTAyMTIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTg5MmY4YmI4OThlNzIwNmEzNjMxYmVmNzg1OTQ1ODUwODQxMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBWE8leW2aS8YdjrtcXqIz/1tUNn 7MTDIX6guwduyW0zGl3DZm8Qp2xIEfkkTHspxwDVTtniyJ3Nlhx9ff/BLYaniGLp +y4l3xQ5+bqTu24Rol8s76aHTCcZsmGPLhBgcn+Ui6XT7Ir8lVVWZfyWASeBgYOY eB7AnYVKhILnmMI5RYqTDtTaoqQXC47BuIQ9/DPbFIYqe31GUoswoozinfrOqOKI kmZtviQY9dkbqPZhfAc9MZLE0Ywl/4r4ZGd8GKP7/G1PNQxQXkbXIWgeMPiXO1wh rjGZBfBAynSWgVi3UwKUsJ4W1WkPmOV8hGXeGxJJBZgAQI8lfMjAvqptVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGGJL4u4mOcgajYxvveFlFhQhBKFMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvWVlrdmk3aVk1eUJxTmpHLTk0V1VXRkNFRW9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1LBeMA0G CSqGSIb3DQEBCwUAA4IBAQAJaV2c2PZf7nqZuJWa4/xyymym4iLB0RNJIYcbznkF 8rLp08Tto5L6yykCLxWTC9/xHO/FREBIgcrHe6849+glzuLrVghBw7KC5rqIyLHU kPqrYemgm7qGU+ofP+lsStuoWFnaDFSiMRJrweW7qfTaCmYHAgfSQRr2JapF6dBC lAUhbaEanWJm0FCuhReglzCit1Lb1E/VV4wlyRK52QN5b059ByGTNhXdmm1vME7G 7usl8oxzifKouObOIg30pb7+b+0dirk3OzjEzIlovrFM9NGsb7kJ6ZH8RpQmSWSs MOI5qGbV3ycK2cMVUqUP3958ya99vNsbRM/HpTdjSQds -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:56 2026 by rpki-client