This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/YgxrMVOG7AvOCLHZdSlMSHUnFyU.roa File: YgxrMVOG7AvOCLHZdSlMSHUnFyU.roa (raw, json) Hash identifier: ijRF/EOB5f7k1V0BlsNAIXkBXD94uVXkEThmH6/EVvo= Subject key identifier: 62:0C:6B:31:53:86:EC:0B:CE:08:B1:D9:75:29:4C:48:75:27:17:25 Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC94CA33A807EB5BE74F0508E79830E Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/YgxrMVOG7AvOCLHZdSlMSHUnFyU.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57888 IP address blocks: 5.59.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4c:a3:3a:80:7e:b5:be:74:f0:50:8e:79:83:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=620c6b315386ec0bce08b1d975294c4875271725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:bf:19:3a:27:a4:fd:81:1f:cd:6b:95:3c: cb:31:71:22:f9:6a:ee:73:b7:d3:3f:59:3e:49:ea: f1:07:1b:72:97:2b:4b:5b:41:4d:ac:99:cc:70:b7: d5:08:56:04:6b:bf:28:a0:99:4e:ab:36:15:01:bd: cd:89:af:a8:1e:51:49:e0:5f:d3:d3:d3:db:c6:90: 55:95:0e:73:80:97:0d:36:48:3c:ec:56:b2:90:65: 7b:26:f4:7f:11:00:eb:0c:5d:12:88:a9:1b:f2:ec: db:2b:27:14:4d:aa:76:72:73:d3:ba:0c:c5:26:32: 4f:f0:16:2a:a8:b4:d7:42:60:09:77:93:80:10:02: 4b:31:0a:eb:2f:98:bf:a0:59:e3:ba:a6:c7:d2:4a: 96:9d:b9:b8:d5:71:13:18:6f:c7:ba:62:29:19:65: 6f:3c:62:c6:6f:2b:82:20:f0:1d:66:ee:bb:3c:0a: c8:f2:30:d6:02:dd:ab:59:ae:19:53:8b:f6:cf:c5: 6b:dd:05:8b:84:df:af:44:18:bc:0d:6b:fe:36:c8: 87:67:bc:ce:45:6c:0a:fa:17:46:68:44:ef:c2:a2: 3d:da:f6:d2:4b:a0:95:9f:f3:aa:ca:eb:a9:0a:62: e3:5f:d5:43:8a:77:8c:84:a3:89:db:29:61:e7:12: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0C:6B:31:53:86:EC:0B:CE:08:B1:D9:75:29:4C:48:75:27:17:25 X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/YgxrMVOG7AvOCLHZdSlMSHUnFyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.160.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:60:da:ab:0f:80:60:45:76:8a:df:a0:f0:d4:b9:03:e0:c9: 60:b5:12:4b:27:97:1d:02:1a:ae:e5:b1:18:05:c0:1f:40:6d: 08:9e:ea:e1:50:cd:31:d4:45:17:85:52:12:2a:6e:9f:e0:71: eb:96:48:eb:20:b4:7e:80:3e:a0:18:41:ed:21:3f:f1:e3:cb: c3:32:51:93:39:1a:1f:94:61:53:21:b0:07:8d:f5:3a:d7:cf: 99:6b:49:8f:2a:98:2e:11:36:22:16:aa:de:f5:85:7e:2e:4d: d0:73:9b:53:1b:e3:57:c7:17:99:7c:4f:6d:4c:be:14:2f:5e: dd:48:99:19:75:09:68:cb:c9:dd:60:68:ab:e7:26:a9:80:8c: 91:0a:9a:9b:e3:68:0a:e9:88:34:2c:9a:ba:cc:91:b9:14:3d: 02:79:1e:4c:69:fe:b3:f9:da:0f:07:70:b9:c7:9a:63:41:96: f1:55:b9:03:26:ed:63:15:74:3d:1f:c8:3a:93:15:d0:be:d4: 2b:94:4e:a3:6c:ca:d1:50:92:a5:a5:2e:b8:46:7c:b9:37:8c: c8:bb:69:81:5d:a9:2c:71:6b:59:eb:7e:59:92:ca:f3:ac:43: 18:6a:03:a9:a0:13:05:a4:13:12:db:7e:a1:46:ed:5f:1b:c2: ac:14:14:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUyjOoB+tb508FCOeYMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjBjNmIzMTUzODZlYzBiY2UwOGIxZDk3NTI5NGM0ODc1MjcxNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoW/GTonpP2BH81rlTzLMXEi+Wru c7fTP1k+SerxBxtylytLW0FNrJnMcLfVCFYEa78ooJlOqzYVAb3Nia+oHlFJ4F/T 09PbxpBVlQ5zgJcNNkg87FaykGV7JvR/EQDrDF0SiKkb8uzbKycUTap2cnPTugzF JjJP8BYqqLTXQmAJd5OAEAJLMQrrL5i/oFnjuqbH0kqWnbm41XETGG/HumIpGWVv PGLGbyuCIPAdZu67PArI8jDWAt2rWa4ZU4v2z8Vr3QWLhN+vRBi8DWv+NsiHZ7zO RWwK+hdGaETvwqI92vbSS6CVn/OqyuupCmLjX9VDineMhKOJ2ylh5xLvhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIMazFThuwLzgix2XUpTEh1JxclMB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvWWd4ck1WT0c3QXZPQ0xIWmRTbE1TSFVuRnlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBTugMA0G CSqGSIb3DQEBCwUAA4IBAQB9YNqrD4BgRXaK36Dw1LkD4MlgtRJLJ5cdAhqu5bEY BcAfQG0InurhUM0x1EUXhVISKm6f4HHrlkjrILR+gD6gGEHtIT/x48vDMlGTORof lGFTIbAHjfU618+Za0mPKpguETYiFqre9YV+Lk3Qc5tTG+NXxxeZfE9tTL4UL17d SJkZdQloy8ndYGir5yapgIyRCpqb42gK6Yg0LJq6zJG5FD0CeR5Maf6z+doPB3C5 x5pjQZbxVbkDJu1jFXQ9H8g6kxXQvtQrlE6jbMrRUJKlpS64Rny5N4zIu2mBXaks cWtZ635ZksrzrEMYagOpoBMFpBMS236hRu1fG8KsFBRY -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:16 2026 by rpki-client