This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa File: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (raw, json) Hash identifier: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo= Subject key identifier: 61:CC:E3:EF:3C:15:0E:CD:9C:5F:FC:0D:43:EB:2C:A8:BA:6E:AD:FD Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Certificate serial: 019B7EA578CB5F6058D32D46E466B067C936 Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa Signing time: Fri 02 Jan 2026 12:18:52 +0000 ROA not before: Fri 02 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12574 IP address blocks: 213.160.64.0/19 maxlen: 24 2a00:17d8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:78:cb:5f:60:58:d3:2d:46:e4:66:b0:67:c9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61cce3ef3c150ecd9c5ffc0d43eb2ca8ba6eadfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ee:69:ca:bf:21:bc:c4:83:4b:53:bc:0a:66: f3:84:a2:ba:90:79:65:dc:1a:e0:ef:19:81:5b:36: 95:70:2c:43:d9:5e:42:45:c1:6e:e4:cf:16:68:cf: a9:78:d7:fa:e0:19:35:8f:1f:08:6e:9c:54:d8:08: 61:d6:bf:f4:a1:99:d7:30:8c:ba:47:ef:ff:c3:c0: 11:ad:3a:b6:e9:f4:ea:1c:49:5e:46:a5:30:44:6a: 6c:b5:bb:3e:57:60:cd:99:3e:b8:c7:ae:a3:1b:2e: 4f:31:2c:34:78:5c:9e:ae:66:4e:3c:07:2a:70:95: 60:47:64:6e:c5:a0:91:04:8c:4a:68:c3:33:60:95: 71:6d:b9:a3:14:44:c6:ab:7b:74:99:f0:33:e3:94: f3:ff:be:b4:7e:68:f5:13:42:57:d5:69:85:53:23: ee:15:40:f7:29:05:6c:eb:56:41:0b:70:0a:5d:df: d7:c0:08:1e:de:36:e8:16:4c:5a:b0:8f:14:76:bf: 95:fb:84:81:aa:bd:38:e8:49:06:cc:54:ac:64:7f: ba:f8:91:6d:3c:d0:c2:b0:84:aa:1e:cc:39:4d:15: b8:97:58:00:df:c7:98:89:7f:ce:71:80:a4:28:ec: d6:8d:1c:36:27:d7:f8:b4:aa:f8:eb:b3:90:1e:2e: b3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CC:E3:EF:3C:15:0E:CD:9C:5F:FC:0D:43:EB:2C:A8:BA:6E:AD:FD X509v3 Authority Key Identifier: keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.160.64.0/19 IPv6: 2a00:17d8::/32 Signature Algorithm: sha256WithRSAEncryption 3c:55:d5:7d:55:9f:bc:5a:bc:45:9d:9e:fe:16:70:f4:7d:b3: 93:0f:c4:a7:5e:3f:14:89:d8:99:9d:1d:b6:93:cc:b1:73:1f: 5d:57:c6:03:f4:af:29:94:db:36:3a:74:fe:c4:17:88:3f:0c: 64:c2:ab:28:78:c0:dc:37:06:a4:a0:30:25:62:36:c1:e1:5c: 18:80:92:ea:33:98:cf:59:7d:10:7a:78:16:57:71:3a:88:a9: c0:b3:7d:df:a5:78:b8:c5:af:b6:97:e6:f1:4f:65:8b:9b:3c: ea:7d:0e:b9:ea:8a:8d:4b:e6:c2:cd:07:50:c1:5c:73:8b:7d: 7a:e8:42:1b:0b:4d:bb:da:fb:d9:cf:43:7c:fa:8f:a0:97:e6: 13:03:62:7b:34:90:a8:d3:97:a7:7c:6d:8f:e1:97:62:80:c2: f5:1d:d3:dc:72:39:d2:bd:9b:29:3a:e2:98:54:96:3c:f8:27: 43:7c:85:0d:d9:90:29:c5:05:66:04:0f:06:2a:96:df:49:ef: aa:55:bb:21:a0:c9:8d:60:52:b0:f1:f4:74:56:8c:a2:69:9b: 45:2c:50:52:90:e8:09:fa:de:bb:39:a1:60:a6:92:4d:a2:e3: 94:b7:c9:5f:55:22:0f:20:83:01:b7:e9:6b:6a:43:1d:f2:87: 23:cd:24:f4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pXjLX2BY0y1G5GawZ8k2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNWZmOWNjODljNjZhOGEzYTVkNzM0YTBkNjVjNjFmZGM4 NTE4YmUwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWNjZTNlZjNjMTUwZWNkOWM1ZmZjMGQ0M2ViMmNhOGJhNmVhZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e5pyr8hvMSDS1O8CmbzhKK6kHll 3Brg7xmBWzaVcCxD2V5CRcFu5M8WaM+peNf64Bk1jx8IbpxU2Ahh1r/0oZnXMIy6 R+//w8ARrTq26fTqHEleRqUwRGpstbs+V2DNmT64x66jGy5PMSw0eFyermZOPAcq cJVgR2RuxaCRBIxKaMMzYJVxbbmjFETGq3t0mfAz45Tz/760fmj1E0JX1WmFUyPu FUD3KQVs61ZBC3AKXd/XwAge3jboFkxasI8Udr+V+4SBqr046EkGzFSsZH+6+JFt PNDCsISqHsw5TRW4l1gA38eYiX/OcYCkKOzWjRw2J9f4tKr467OQHi6zgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGHM4+88FQ7NnF/8DUPrLKi6bq39MB8GA1UdIwQY MBaAFABf+cyJxmqKOl1zSg1lxh/chRi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTkt MGUyZDY5N2IyN2UzLzEvWWN6ajd6d1ZEczJjWF93TlEtc3NxTHB1cmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTktMGUyZDY5N2IyN2Uz LzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1aBAMA0E AgACMAcDBQAqABfYMA0GCSqGSIb3DQEBCwUAA4IBAQA8VdV9VZ+8WrxFnZ7+FnD0 fbOTD8SnXj8UidiZnR22k8yxcx9dV8YD9K8plNs2OnT+xBeIPwxkwqsoeMDcNwak oDAlYjbB4VwYgJLqM5jPWX0QengWV3E6iKnAs33fpXi4xa+2l+bxT2WLmzzqfQ65 6oqNS+bCzQdQwVxzi3166EIbC0272vvZz0N8+o+gl+YTA2J7NJCo05enfG2P4Zdi gML1HdPccjnSvZspOuKYVJY8+CdDfIUN2ZApxQVmBA8GKpbfSe+qVbshoMmNYFKw 8fR0VoyiaZtFLFBSkOgJ+t67OaFgppJNouOUt8lfVSIPIIMBt+lrakMd8ocjzST0 -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:46 2026 by rpki-client