This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa File: YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa (raw, json) Hash identifier: VmD17BnA3G7W1dMkZraFPy0h1sdRJ/jQerJj3HVgUI8= Subject key identifier: 62:B8:C3:8D:A2:37:FD:0E:8A:3D:0F:74:7F:C4:68:60:11:2F:4E:A2 Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498 Certificate serial: 019B7D5CEC9AF91BFD400D28B2FD78FF3ED7 Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216149 IP address blocks: 81.30.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ec:9a:f9:1b:fd:40:0d:28:b2:fd:78:ff:3e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62b8c38da237fd0e8a3d0f747fc46860112f4ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:d4:4c:8b:39:03:1d:63:39:e9:00:b0:a9: 37:1a:1b:15:d9:1f:e7:fe:c8:93:8f:49:25:8d:af: c5:05:65:10:2d:25:93:fc:e9:cf:ba:8e:89:ec:72: b2:ee:f4:d9:9a:99:69:e1:20:50:80:dc:65:51:95: ff:3e:2f:c2:07:5f:7b:71:b2:c4:3d:ea:6e:e0:e9: a5:be:36:03:a0:e9:f2:02:3c:72:17:ec:d8:e6:a7: bf:1f:ff:4a:a4:94:4d:04:e0:de:11:4d:69:2e:40: 98:9c:1b:c6:da:4b:ec:a0:30:c4:cb:18:d9:f0:d1: 59:0d:cc:6d:43:82:fd:87:65:86:99:64:f3:a6:c9: 35:02:d9:3a:0e:f3:e6:97:e3:8c:4a:ae:98:00:f1: dc:26:83:63:15:0a:75:de:b5:e5:66:5d:ab:5e:c5: 1f:77:ed:aa:c1:29:11:2d:ee:25:ef:f4:90:1f:b9: 64:18:64:99:66:ef:b5:3d:56:ac:86:63:92:5c:52: 67:bc:12:0b:44:9d:80:71:29:97:7b:20:d7:0c:cc: 35:da:1b:ac:95:ff:8c:79:28:9a:05:ce:40:cd:d5: 27:4f:c1:f5:65:02:cc:87:48:60:a8:a3:5c:7d:f4: 9d:a4:6e:f2:b4:0e:e7:f2:44:03:cb:4d:76:cd:11: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:C3:8D:A2:37:FD:0E:8A:3D:0F:74:7F:C4:68:60:11:2F:4E:A2 X509v3 Authority Key Identifier: keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.104.0/24 Signature Algorithm: sha256WithRSAEncryption 36:f4:9f:73:69:6a:38:a7:64:34:b7:8b:16:00:f4:30:b5:8a: 26:1f:e5:34:74:9c:65:e8:87:2d:e7:db:72:6f:60:d9:26:e6: 2b:96:04:36:bb:33:c9:c6:42:6f:a1:40:18:da:93:d7:f9:44: 11:81:bb:c7:0e:9a:04:89:7c:b3:05:78:8f:5e:ad:56:eb:72: 92:52:7a:b1:24:e2:cd:96:db:f6:e5:a7:9a:ae:71:f6:be:2d: a9:ed:f7:fa:a6:34:00:55:d7:04:a4:42:d6:de:36:bf:07:2c: bc:93:d9:d3:89:9a:4d:f0:45:64:7e:de:3a:b9:5e:20:89:f0: ea:ed:a1:1d:22:b1:c8:ac:82:01:e8:f5:11:5d:61:15:c8:37: 69:dd:25:48:13:00:5a:90:35:be:c3:28:3c:4a:96:5f:68:d2: 26:fb:63:51:93:9c:8e:d5:c8:0d:61:03:81:b9:48:c6:ae:99: af:5c:2c:8f:48:d2:6a:c1:a0:fc:5c:6a:60:da:5b:08:1c:bc: 33:ff:de:af:00:66:a0:e5:b3:7a:4c:e9:95:73:75:2c:62:18: 3b:34:e4:4b:44:a5:62:c8:ea:b6:37:b3:92:cb:a6:1e:e6:f8: 99:38:73:65:5d:6d:65:f2:cc:1d:c7:11:10:14:21:29:76:65: d0:3d:2b:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOya+Rv9QA0osv14/z7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMWExMzBhOTBjYjAzN2UzODAzZmVhMGJmNDY1YWEwODJm ZTM0OTgwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmI4YzM4ZGEyMzdmZDBlOGEzZDBmNzQ3ZmM0Njg2MDExMmY0ZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl3UTIs5Ax1jOekAsKk3GhsV2R/n /siTj0klja/FBWUQLSWT/OnPuo6J7HKy7vTZmplp4SBQgNxlUZX/Pi/CB197cbLE Pepu4OmlvjYDoOnyAjxyF+zY5qe/H/9KpJRNBODeEU1pLkCYnBvG2kvsoDDEyxjZ 8NFZDcxtQ4L9h2WGmWTzpsk1Atk6DvPml+OMSq6YAPHcJoNjFQp13rXlZl2rXsUf d+2qwSkRLe4l7/SQH7lkGGSZZu+1PVashmOSXFJnvBILRJ2AcSmXeyDXDMw12hus lf+MeSiaBc5AzdUnT8H1ZQLMh0hgqKNcffSdpG7ytA7n8kQDy012zREt1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGK4w42iN/0Oij0PdH/EaGARL06iMB8GA1UdIwQY MBaAFGIaEwqQywN+OAP+oL9GWqCC/jSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yMTQ5MmYtMTY2My00MDlkLWJmYjIt NmEwNDUxYzQ5ZDRkLzEvWXJqRGphSTNfUTZLUFE5MGY4Um9ZQkV2VHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yMTQ5MmYtMTY2My00MDlkLWJmYjItNmEwNDUxYzQ5ZDRk LzEvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5oMA0G CSqGSIb3DQEBCwUAA4IBAQA29J9zaWo4p2Q0t4sWAPQwtYomH+U0dJxl6Ict59ty b2DZJuYrlgQ2uzPJxkJvoUAY2pPX+UQRgbvHDpoEiXyzBXiPXq1W63KSUnqxJOLN ltv25aearnH2vi2p7ff6pjQAVdcEpELW3ja/Byy8k9nTiZpN8EVkft46uV4gifDq 7aEdIrHIrIIB6PURXWEVyDdp3SVIEwBakDW+wyg8SpZfaNIm+2NRk5yO1cgNYQOB uUjGrpmvXCyPSNJqwaD8XGpg2lsIHLwz/96vAGag5bN6TOmVc3UsYhg7NORLRKVi yOq2N7OSy6Ye5viZOHNlXW1l8swdxxEQFCEpdmXQPSus -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:56 2026 by rpki-client