This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/mET4_I0vQujHayV2JM5NI5ita-A.roa File: mET4_I0vQujHayV2JM5NI5ita-A.roa (raw, json) Hash identifier: e7Iitk3hYpEL0ONAjD0IO1Ux9f6z5Emc5/EOv6IJZlg= Subject key identifier: 98:44:F8:FC:8D:2F:42:E8:C7:6B:25:76:24:CE:4D:23:98:AD:6B:E0 Certificate issuer: /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c Certificate serial: 019B7F157B6DB3177CC5167A129C3F07F4C9 Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/mET4_I0vQujHayV2JM5NI5ita-A.roa Signing time: Fri 02 Jan 2026 14:21:12 +0000 ROA not before: Fri 02 Jan 2026 14:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 159.60.0.0/20 maxlen: 24 159.60.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7b:6d:b3:17:7c:c5:16:7a:12:9c:3f:07:f4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9844f8fc8d2f42e8c76b257624ce4d2398ad6be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:e4:4c:eb:a9:06:a6:df:a3:97:89:3f:3a: a3:fa:67:c2:52:f0:1d:0d:30:33:f6:2a:02:d1:1c: f0:2e:6d:7a:13:be:18:98:f6:bd:3f:71:5f:d8:c4: 8c:30:da:f7:31:6c:cf:70:a1:ba:14:87:67:64:aa: fe:42:fc:ab:e6:5f:41:11:7c:7b:23:0b:0e:0f:c6: 77:ea:72:81:be:4a:1e:c5:69:3d:89:a4:22:8e:45: 3e:b6:37:65:37:1a:a7:6e:ad:39:56:ce:4e:71:f1: 83:0d:39:66:11:95:38:66:68:6e:4d:12:81:7f:63: ef:22:39:49:63:ea:12:f8:fe:2f:ce:52:9c:27:da: 4d:e7:25:8b:92:ff:17:03:be:fb:15:0f:a0:15:60: 26:a3:66:48:fd:92:9d:65:c9:e4:68:a7:c0:b4:aa: a1:44:85:85:63:0a:95:ef:e6:4b:ed:7c:b2:09:54: f8:33:fd:f5:84:f8:eb:6c:b5:87:5f:a8:a0:50:aa: 7b:8b:a1:72:d5:e0:19:03:1a:11:41:09:14:bf:b8: 0f:68:15:5f:a8:d8:92:c6:01:3b:dc:88:0c:11:37: 65:cd:d1:d6:ff:12:1c:63:c5:f3:e3:60:2b:9a:34: 2f:e5:da:3e:cd:4b:73:40:7e:f2:f2:ac:c4:e4:f4: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:44:F8:FC:8D:2F:42:E8:C7:6B:25:76:24:CE:4D:23:98:AD:6B:E0 X509v3 Authority Key Identifier: keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/mET4_I0vQujHayV2JM5NI5ita-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.60.0.0/20 159.60.192.0/18 Signature Algorithm: sha256WithRSAEncryption ab:3d:a4:1c:6f:39:13:88:5b:31:01:78:28:e2:85:5d:dd:7b: 83:c3:bc:2b:34:b7:cc:8e:3f:78:fe:b2:f9:ac:4a:1d:58:92: d0:66:a6:58:c2:b1:0e:2c:74:56:98:6e:dc:b8:e1:34:d5:df: 91:76:e3:37:e8:ad:3e:17:c5:d0:3d:ee:d8:b1:c1:e8:78:bb: e7:9f:fd:2f:2d:a5:03:89:24:e6:70:1b:18:9f:80:3c:cf:72: 00:70:69:6f:f4:8f:6c:0b:ee:43:d5:a1:d0:76:bd:67:16:cf: 56:1d:23:a6:4b:dd:17:6e:cf:ca:b7:dc:bd:f9:bd:b0:3c:34: fc:2c:f3:1b:a4:bd:fe:97:46:a6:16:88:b9:2f:c5:1e:ad:5c: 97:da:96:f9:9d:f2:39:65:d9:f5:f1:a6:65:d0:3e:d4:02:6b: e9:99:12:fc:09:65:fa:53:09:19:39:d3:7b:b6:86:46:b7:f3: 46:4b:c3:40:db:33:00:21:a1:c2:a8:5f:6d:f4:bd:70:89:ae: d0:c4:8c:d5:a1:28:87:25:63:2c:13:85:28:8d:f6:f1:7f:b7: 8f:d1:55:bc:16:80:cd:82:1e:ca:b9:e6:31:37:3c:10:3b:a4: 03:6b:17:39:5e:e9:ca:65:0e:cd:55:1c:98:b6:04:98:a5:e6: 7f:8e:9b:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FXttsxd8xRZ6Epw/B/TJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjNlMWNhYjhjYmY1YjNjNmUwZmJiZTE0OTFmNDhkYTYw Y2FlNmMwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODQ0ZjhmYzhkMmY0MmU4Yzc2YjI1NzYyNGNlNGQyMzk4YWQ2YmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VTkTOupBqbfo5eJPzqj+mfCUvAd DTAz9ioC0RzwLm16E74YmPa9P3Ff2MSMMNr3MWzPcKG6FIdnZKr+Qvyr5l9BEXx7 IwsOD8Z36nKBvkoexWk9iaQijkU+tjdlNxqnbq05Vs5OcfGDDTlmEZU4ZmhuTRKB f2PvIjlJY+oS+P4vzlKcJ9pN5yWLkv8XA777FQ+gFWAmo2ZI/ZKdZcnkaKfAtKqh RIWFYwqV7+ZL7XyyCVT4M/31hPjrbLWHX6igUKp7i6Fy1eAZAxoRQQkUv7gPaBVf qNiSxgE73IgMETdlzdHW/xIcY8Xz42ArmjQv5do+zUtzQH7y8qzE5PQc+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJhE+PyNL0Lox2sldiTOTSOYrWvgMB8GA1UdIwQY MBaAFGGz4cq4y/WzxuD7vhSR9I2mDK5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJQaHlyakw5YlBHNFB1LUZKSDBqYVlNcm13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85ZGVmODYtYjFhYy00MGU2LTgzYmQt OTQ3Y2M1NGViZTAyLzEvbUVUNF9JMHZRdWpIYXlWMkpNNU5JNWl0YS1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi85ZGVmODYtYjFhYy00MGU2LTgzYmQtOTQ3Y2M1NGViZTAy LzEvWWJQaHlyakw5YlBHNFB1LUZKSDBqYVlNcm13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEnzwAAwQG nzzAMA0GCSqGSIb3DQEBCwUAA4IBAQCrPaQcbzkTiFsxAXgo4oVd3XuDw7wrNLfM jj94/rL5rEodWJLQZqZYwrEOLHRWmG7cuOE01d+RduM36K0+F8XQPe7YscHoeLvn n/0vLaUDiSTmcBsYn4A8z3IAcGlv9I9sC+5D1aHQdr1nFs9WHSOmS90Xbs/Kt9y9 +b2wPDT8LPMbpL3+l0amFoi5L8UerVyX2pb5nfI5Zdn18aZl0D7UAmvpmRL8CWX6 UwkZOdN7toZGt/NGS8NA2zMAIaHCqF9t9L1wia7QxIzVoSiHJWMsE4Uojfbxf7eP 0VW8FoDNgh7KueYxNzwQO6QDaxc5XunKZQ7NVRyYtgSYpeZ/jpsW -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:25 2026 by rpki-client