This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/ygV7k6nVaZCAnScNFHt4paZc8MM.roa File: ygV7k6nVaZCAnScNFHt4paZc8MM.roa (raw, json) Hash identifier: Fv0BlTXpeeDK0QHZ/q3zQcl9lKT33vm1AnUd5vQrW08= Subject key identifier: CA:05:7B:93:A9:D5:69:90:80:9D:27:0D:14:7B:78:A5:A6:5C:F0:C3 Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076 Certificate serial: 019B7C12851E6A08BD5B8044F04EE51B6DA8 Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/ygV7k6nVaZCAnScNFHt4paZc8MM.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214294 IP address blocks: 123.100.225.0/24 maxlen: 24 2a01:ee80::/32 maxlen: 32 2a01:ee80:1::/48 maxlen: 48 2a01:ee80:2::/48 maxlen: 48 2a01:ee80:77::/48 maxlen: 48 2a01:ee80:141::/48 maxlen: 48 2a01:ee80:169::/48 maxlen: 48 2a01:ee80:333::/48 maxlen: 48 2a01:ee80:777::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:85:1e:6a:08:bd:5b:80:44:f0:4e:e5:1b:6d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca057b93a9d56990809d270d147b78a5a65cf0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:5f:2c:d9:d8:f2:65:7d:3c:db:e9:bc:c2: e3:ed:0a:60:ce:d5:7c:ce:33:b2:59:8a:55:ff:54: 75:f5:ca:38:1b:53:be:76:26:12:2f:db:5b:03:6a: b3:40:e6:c6:93:3b:b5:6a:17:ac:7f:f2:f4:51:61: 56:4c:50:30:f2:07:57:5a:6b:02:e2:43:3a:26:c8: 93:29:a2:72:03:ad:82:3b:06:83:91:86:cb:58:ff: 48:35:1f:9d:02:b5:b4:38:09:49:9c:60:34:6b:c9: 54:2d:a1:12:43:80:48:2b:d6:db:4b:01:25:4c:7d: 6d:fa:15:57:07:20:46:18:66:d5:2b:1e:0f:cb:61: ab:23:0d:3c:6e:59:a7:61:68:0d:de:ce:6d:0d:c4: d5:58:12:1d:7b:b7:fc:24:79:78:a4:26:23:89:be: 9e:d7:bb:5b:30:cf:f6:73:6d:a7:5f:ac:fc:a3:ad: 72:7e:90:cd:17:53:96:27:22:b8:47:c9:af:75:fa: 4f:ff:9e:a6:fe:05:40:f7:d7:24:de:b4:98:06:1d: 79:66:85:b2:a1:4d:2c:80:d1:56:8a:87:76:52:90: f4:79:08:52:e6:48:6d:b6:1e:0d:01:fe:67:ed:d7: bf:38:75:12:09:4f:0a:08:f7:78:e4:f2:e3:b2:9f: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:05:7B:93:A9:D5:69:90:80:9D:27:0D:14:7B:78:A5:A6:5C:F0:C3 X509v3 Authority Key Identifier: keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/ygV7k6nVaZCAnScNFHt4paZc8MM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.100.225.0/24 IPv6: 2a01:ee80::/32 Signature Algorithm: sha256WithRSAEncryption 4a:81:f3:13:d5:82:59:38:c5:de:99:7e:0a:17:66:a5:4d:8a: d3:8f:fb:a4:0f:45:b8:ff:75:20:9f:ad:77:2c:6f:e7:13:b8: 1f:fa:d8:71:70:c8:b8:8f:73:f3:da:03:ea:dd:b2:a0:ba:02: ab:53:0f:2e:0d:08:77:cf:aa:04:d2:b2:e0:ed:2f:44:d0:40: 26:5c:ad:b2:fd:15:2d:a6:7f:06:85:9b:72:be:97:02:3e:4a: 57:db:41:b5:bb:20:a0:63:ca:a2:38:e4:9e:cf:f6:c1:85:18: 85:1b:ad:72:b6:00:08:c4:83:60:c6:7c:7c:86:87:ff:3a:2a: 56:c0:05:c7:82:92:46:f6:05:63:56:4a:16:ee:e3:1e:96:b7: 70:5f:21:52:27:dd:f2:65:ed:99:df:da:a3:c2:ac:cb:3f:e6: d3:1d:58:12:c2:a3:41:cd:21:9f:46:0a:79:4b:6e:a4:27:19: 89:77:cd:aa:b2:cf:1a:59:3d:8c:ad:3f:3c:99:67:18:70:0e: 8f:d2:be:d6:eb:ef:1a:e8:b0:40:bc:76:a7:d8:b3:31:64:2c: ee:3e:a8:48:52:5f:6f:0f:f1:8b:b7:1f:a5:ac:08:b6:9a:c5: 43:01:9d:a0:61:52:ba:08:65:19:8a:6a:74:80:72:ce:a8:17: a6:96:4c:cd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EoUeagi9W4BE8E7lG22oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDI1ZmEzNTdjMjBhYmJmMTE4NDI2MjM0NjU4ZTYyZDdk YzcwNzYwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTA1N2I5M2E5ZDU2OTkwODA5ZDI3MGQxNDdiNzhhNWE2NWNmMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCRfLNnY8mV9PNvpvMLj7QpgztV8 zjOyWYpV/1R19co4G1O+diYSL9tbA2qzQObGkzu1ahesf/L0UWFWTFAw8gdXWmsC 4kM6JsiTKaJyA62COwaDkYbLWP9INR+dArW0OAlJnGA0a8lULaESQ4BIK9bbSwEl TH1t+hVXByBGGGbVKx4Py2GrIw08blmnYWgN3s5tDcTVWBIde7f8JHl4pCYjib6e 17tbMM/2c22nX6z8o61yfpDNF1OWJyK4R8mvdfpP/56m/gVA99ck3rSYBh15ZoWy oU0sgNFWiod2UpD0eQhS5khtth4NAf5n7de/OHUSCU8KCPd45PLjsp+VswIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMoFe5Op1WmQgJ0nDRR7eKWmXPDDMB8GA1UdIwQY MBaAFA8CX6NXwgq78RhCYjRljmLX3HB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2Ut ZDRkNTlhMDk1YzdmLzEveWdWN2s2blZhWkNBblNjTkZIdDRwYVpjOE1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2UtZDRkNTlhMDk1Yzdm LzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAe2ThMA0E AgACMAcDBQAqAe6AMA0GCSqGSIb3DQEBCwUAA4IBAQBKgfMT1YJZOMXemX4KF2al TYrTj/ukD0W4/3Ugn613LG/nE7gf+thxcMi4j3Pz2gPq3bKgugKrUw8uDQh3z6oE 0rLg7S9E0EAmXK2y/RUtpn8GhZtyvpcCPkpX20G1uyCgY8qiOOSez/bBhRiFG61y tgAIxINgxnx8hof/OipWwAXHgpJG9gVjVkoW7uMelrdwXyFSJ93yZe2Z39qjwqzL P+bTHVgSwqNBzSGfRgp5S26kJxmJd82qss8aWT2MrT88mWcYcA6P0r7W6+8a6LBA vHan2LMxZCzuPqhIUl9vD/GLtx+lrAi2msVDAZ2gYVK6CGUZimp0gHLOqBemlkzN -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:33 2026 by rpki-client