This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/YUXKYpsFemsNDBecWX4MUwbfgXA.roa File: YUXKYpsFemsNDBecWX4MUwbfgXA.roa (raw, json) Hash identifier: aALLuFrEzNbZ6xLI2lfoFLt5fV9m8J9Klkm3q6Pz7LI= Subject key identifier: 61:45:CA:62:9B:05:7A:6B:0D:0C:17:9C:59:7E:0C:53:06:DF:81:70 Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Certificate serial: 019B797F029430ED5A880C533897B5031C52 Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/YUXKYpsFemsNDBecWX4MUwbfgXA.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28854 IP address blocks: 195.49.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:02:94:30:ed:5a:88:0c:53:38:97:b5:03:1c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6145ca629b057a6b0d0c179c597e0c5306df8170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:40:0b:2b:c1:93:a3:d8:96:7a:65:eb:18: 7b:e9:8c:7d:5d:bd:cc:35:74:46:cb:31:82:e7:66: 50:4f:28:23:59:eb:ef:95:03:6e:84:df:8b:73:73: 5f:f3:b5:bd:f4:80:d2:04:97:f8:5b:43:66:58:46: 1e:6f:8b:75:cd:09:2e:07:40:08:db:3e:c4:1b:23: c2:68:b5:db:b3:2a:4c:8c:a6:ae:0d:d5:fa:ed:8d: 44:93:07:10:12:2b:c4:a8:0d:cd:16:c2:7b:3a:9e: 7d:9b:b9:b7:7a:20:e7:c5:6f:74:36:b0:dd:a4:64: 3a:3e:9f:b3:37:31:68:7e:2f:b5:76:93:04:35:53: 44:d1:cb:c8:47:b8:22:bb:af:1e:93:eb:b0:c8:8c: e3:0e:5a:ca:b7:a0:e0:80:98:d1:50:06:08:cf:7c: 17:a5:2d:9a:e5:2e:23:4a:c3:19:90:88:5d:d0:09: 0d:71:1f:68:0f:fa:58:5e:70:2a:da:ba:a7:ac:20: 0b:49:a2:5a:ae:30:11:3e:8e:0d:8f:6e:b6:75:2c: 96:0c:da:0c:16:ef:f4:80:d8:0a:d1:19:67:b0:16: dd:ce:7e:8c:2c:a6:26:ea:ca:aa:d5:5e:b6:7a:53: 32:41:06:c7:9c:51:2a:e2:0d:14:d9:44:92:e0:e7: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:CA:62:9B:05:7A:6B:0D:0C:17:9C:59:7E:0C:53:06:DF:81:70 X509v3 Authority Key Identifier: keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/YUXKYpsFemsNDBecWX4MUwbfgXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.49.240.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:75:f7:e5:56:c4:fb:80:d2:b0:1e:a3:2b:fa:c5:90:78:c4: 2f:10:8e:45:f4:56:a8:ae:03:5d:1d:53:c0:5b:3b:38:4a:e7: 89:0c:cc:39:48:4f:e5:24:bb:f5:34:5c:69:37:ce:4f:16:62: 7e:c3:27:96:b0:e8:4e:96:2d:e5:f4:25:20:56:bf:55:8c:43: 8b:d0:63:4a:98:29:6b:d2:01:41:40:82:59:69:bf:37:4e:90: b3:f7:d3:75:1a:65:9e:0a:0c:23:ce:e4:62:67:62:fa:5f:60: 00:bd:e3:9f:63:5d:6b:10:81:80:33:f0:ab:18:9f:ac:7d:29: 60:12:64:37:89:1d:80:eb:da:87:43:b6:aa:ae:ed:1f:9b:16: 40:74:91:ba:7c:22:95:e1:75:66:bc:24:e5:24:c7:8b:f0:48: e6:45:22:ed:34:a7:ef:c3:d6:9d:61:0d:9a:21:43:6f:61:e9: 68:fb:b5:2d:ba:a5:53:a1:03:e2:17:02:db:8c:ac:81:64:8a: a3:f7:fb:c1:c2:56:24:b2:99:33:33:c8:26:32:71:cb:de:06: 2a:94:6d:34:b9:d1:61:9b:36:9b:47:9d:48:9c:e1:b4:c8:2c: 88:e1:54:51:a2:61:41:80:f4:9c:71:c5:df:6a:f4:78:fe:08: 28:1b:31:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwKUMO1aiAxTOJe1AxxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZTNiYTg3ZTNhOTM0NjhjYzNiM2MzZjYwZmE2M2Q1ZTg1 M2MzMTQwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTQ1Y2E2MjliMDU3YTZiMGQwYzE3OWM1OTdlMGM1MzA2ZGY4MTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIRACyvBk6PYlnpl6xh76Yx9Xb3M NXRGyzGC52ZQTygjWevvlQNuhN+Lc3Nf87W99IDSBJf4W0NmWEYeb4t1zQkuB0AI 2z7EGyPCaLXbsypMjKauDdX67Y1EkwcQEivEqA3NFsJ7Op59m7m3eiDnxW90NrDd pGQ6Pp+zNzFofi+1dpMENVNE0cvIR7giu68ek+uwyIzjDlrKt6DggJjRUAYIz3wX pS2a5S4jSsMZkIhd0AkNcR9oD/pYXnAq2rqnrCALSaJarjARPo4Nj262dSyWDNoM Fu/0gNgK0RlnsBbdzn6MLKYm6sqq1V62elMyQQbHnFEq4g0U2USS4OeYpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFFymKbBXprDQwXnFl+DFMG34FwMB8GA1UdIwQY MBaAFGjjuofjqTRozDs8P2D6Y9XoU8MUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQt OTZlYjA3Zjc4MjViLzEvWVVYS1lwc0ZlbXNOREJlY1dYNE1Vd2JmZ1hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xZWZmMTctNjVlYy00NWVhLWE3NWQtOTZlYjA3Zjc4MjVi LzEvYU9PNmgtT3BOR2pNT3p3X1lQcGoxZWhUd3hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwzHwMA0G CSqGSIb3DQEBCwUAA4IBAQAudfflVsT7gNKwHqMr+sWQeMQvEI5F9FaorgNdHVPA Wzs4SueJDMw5SE/lJLv1NFxpN85PFmJ+wyeWsOhOli3l9CUgVr9VjEOL0GNKmClr 0gFBQIJZab83TpCz99N1GmWeCgwjzuRiZ2L6X2AAveOfY11rEIGAM/CrGJ+sfSlg EmQ3iR2A69qHQ7aqru0fmxZAdJG6fCKV4XVmvCTlJMeL8EjmRSLtNKfvw9adYQ2a IUNvYelo+7UtuqVToQPiFwLbjKyBZIqj9/vBwlYkspkzM8gmMnHL3gYqlG00udFh mzabR51InOG0yCyI4VRRomFBgPScccXfavR4/ggoGzE0 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:07 2026 by rpki-client