This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa File: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (raw, json) Hash identifier: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w= Subject key identifier: 60:94:1F:32:5F:A4:0D:DF:99:75:1B:91:58:BF:45:DC:96:83:02:D7 Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Certificate serial: 019B797E19DBCB4F06B6F1B3053256A87529 Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199855 IP address blocks: 212.14.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:19:db:cb:4f:06:b6:f1:b3:05:32:56:a8:75:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60941f325fa40ddf99751b9158bf45dc968302d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:54:b4:b1:d4:45:3e:09:60:e4:1c:99:90: 7f:0c:7d:c8:96:34:8f:5a:09:0f:7d:d1:d5:6f:30: 41:e6:df:df:9f:37:81:4f:1b:ad:f8:4c:1d:c6:db: 7a:5e:7b:63:d4:71:3b:64:98:f0:36:ce:d7:3a:06: 26:a1:37:b7:a0:7c:65:af:9c:5d:70:97:48:24:45: 5f:32:fe:05:8e:27:1f:aa:18:f2:1c:6f:02:16:b7: 10:f0:1d:f2:99:63:84:39:c7:30:a5:52:f8:38:7e: 76:ba:2c:86:09:b0:06:1e:d0:b7:0e:5c:de:83:9b: bd:3a:50:88:80:d8:7c:7f:27:99:86:0d:e9:18:f4: 42:e1:52:1d:05:82:bb:ec:b5:b4:76:83:4a:61:01: f4:5e:ed:c2:03:db:a0:b7:cb:da:0a:af:8c:51:5a: 71:a4:df:d7:bf:7a:c4:b5:e1:34:c9:85:47:e8:54: 6f:e7:3f:fa:49:bd:6c:38:d8:2f:ea:b9:4e:27:15: 61:88:41:42:4d:0a:25:0b:70:f5:d4:81:63:dc:88: c4:05:e7:28:3b:6a:8e:98:77:7c:b3:c4:d8:2b:0d: 15:5c:1c:81:2f:a2:94:5b:9f:19:fe:1a:70:1e:fe: 6b:8f:ae:e3:3c:25:41:4d:bd:83:0b:45:09:d7:bc: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:94:1F:32:5F:A4:0D:DF:99:75:1B:91:58:BF:45:DC:96:83:02:D7 X509v3 Authority Key Identifier: keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.14.55.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:38:76:6c:9e:9f:73:cf:dd:9e:3e:4c:bc:11:43:a8:21:f8: 1d:1f:94:1e:21:d8:68:18:7d:6c:6e:f8:1e:48:8f:d9:2f:7f: b3:8b:06:ca:65:85:30:21:de:49:96:4a:52:d2:bd:17:76:9c: 00:fd:38:61:48:47:85:be:25:97:56:1f:b2:84:02:a7:9d:de: 0d:56:42:8f:df:50:e4:6f:e9:fe:d9:8f:c8:03:41:28:6e:8b: b0:05:d7:3a:04:d2:44:2d:5f:ce:3d:64:4e:64:0f:c3:6e:40: 75:a7:62:78:80:83:b2:ed:02:e1:1e:a5:c1:e6:90:d1:33:a3: 0d:6f:20:3f:52:b3:6d:6a:e2:e1:33:de:f0:a2:60:6f:89:da: c0:cb:86:a1:9c:e8:d9:f5:d0:4d:25:c6:6e:de:97:3e:d3:b0: 5c:1b:e4:aa:d7:28:90:d1:57:7c:a0:4c:83:b8:9d:a9:19:71: 23:2e:c7:da:76:50:de:ce:1c:32:78:02:a0:90:0f:1a:fb:45: fc:17:dc:59:6d:eb:5d:13:7d:6a:40:df:b2:1b:ae:e4:fe:10: a2:58:92:fe:25:a9:63:b4:1f:3d:0e:7c:83:5e:a6:76:d4:28: 91:62:88:e6:95:da:c9:6d:cd:1f:26:70:1f:a3:92:21:68:6f: 73:85:89:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fhnby08GtvGzBTJWqHUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk OTFlMWUwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDk0MWYzMjVmYTQwZGRmOTk3NTFiOTE1OGJmNDVkYzk2ODMwMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxopUtLHURT4JYOQcmZB/DH3IljSP WgkPfdHVbzBB5t/fnzeBTxut+Ewdxtt6Xntj1HE7ZJjwNs7XOgYmoTe3oHxlr5xd cJdIJEVfMv4FjicfqhjyHG8CFrcQ8B3ymWOEOccwpVL4OH52uiyGCbAGHtC3Dlze g5u9OlCIgNh8fyeZhg3pGPRC4VIdBYK77LW0doNKYQH0Xu3CA9ugt8vaCq+MUVpx pN/Xv3rEteE0yYVH6FRv5z/6Sb1sONgv6rlOJxVhiEFCTQolC3D11IFj3IjEBeco O2qOmHd8s8TYKw0VXByBL6KUW58Z/hpwHv5rj67jPCVBTb2DC0UJ17z3qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCUHzJfpA3fmXUbkVi/RdyWgwLXMB8GA1UdIwQY MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt MDk3YzNjMWMyNTQwLzEvWUpRZk1sLWtEZC1aZFJ1UldMOUYzSmFEQXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1A43MA0G CSqGSIb3DQEBCwUAA4IBAQCKOHZsnp9zz92ePky8EUOoIfgdH5QeIdhoGH1sbvge SI/ZL3+ziwbKZYUwId5JlkpS0r0XdpwA/ThhSEeFviWXVh+yhAKnnd4NVkKP31Dk b+n+2Y/IA0EobouwBdc6BNJELV/OPWROZA/DbkB1p2J4gIOy7QLhHqXB5pDRM6MN byA/UrNtauLhM97womBvidrAy4ahnOjZ9dBNJcZu3pc+07BcG+Sq1yiQ0Vd8oEyD uJ2pGXEjLsfadlDezhwyeAKgkA8a+0X8F9xZbetdE31qQN+yG67k/hCiWJL+Jalj tB89DnyDXqZ21CiRYojmldrJbc0fJnAfo5IhaG9zhYmJ -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:05 2026 by rpki-client