This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/YkD_uNZixvFZy5o-FN9c3GrSt2c.roa File: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (raw, json) Hash identifier: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg= Subject key identifier: 62:40:FF:B8:D6:62:C6:F1:59:CB:9A:3E:14:DF:5C:DC:6A:D2:B7:67 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019B77C6BD80D91E57BD0B5F41DC89C71E43 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/YkD_uNZixvFZy5o-FN9c3GrSt2c.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 92.60.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bd:80:d9:1e:57:bd:0b:5f:41:dc:89:c7:1e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6240ffb8d662c6f159cb9a3e14df5cdc6ad2b767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:1f:7e:f7:ee:73:40:92:5f:2c:8c:45:ee: 94:fb:88:0e:d6:28:2a:9d:8c:ae:81:37:34:12:26: b5:66:54:40:48:f3:2b:3a:35:61:d5:3d:85:01:2b: e0:c1:56:c8:ed:a1:cd:78:ab:60:fb:73:d3:0d:bf: 4b:16:1d:1a:d1:a1:0b:19:ba:e8:0a:13:dd:2e:9e: cd:33:20:e7:43:63:8b:6f:c3:4e:1c:cf:a6:f8:c7: 1a:43:99:31:1f:96:5a:19:96:14:02:20:2b:a0:8a: 07:4e:0b:83:3f:08:53:6c:14:95:41:21:1f:19:6e: 90:de:ad:4a:b1:a7:65:22:b7:5b:80:48:8b:2a:b3: ad:00:73:96:43:77:df:d1:d5:e1:ac:53:b4:ec:c5: 57:b7:ab:d8:22:80:02:84:aa:b1:a4:3d:92:25:95: c2:b8:67:29:0c:a5:79:b2:ea:e8:b9:4d:7b:7f:a4: dd:32:76:e3:4d:ab:93:12:63:85:14:39:73:50:8e: e5:ce:d2:96:93:8d:f0:c3:c2:ae:e2:05:61:29:0d: 8e:84:b7:fa:c3:9b:ba:b1:9a:69:90:54:71:cd:4b: 74:1c:2b:9f:e9:d2:45:dc:75:e4:0f:d5:4a:09:1a: 35:cb:53:87:c9:34:2c:08:44:97:82:7f:ec:62:19: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:40:FF:B8:D6:62:C6:F1:59:CB:9A:3E:14:DF:5C:DC:6A:D2:B7:67 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/YkD_uNZixvFZy5o-FN9c3GrSt2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.60.74.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:67:de:82:fe:09:25:fe:46:59:9a:f2:55:63:94:9d:6e:0a: 24:6e:24:e6:36:c3:b7:c4:4b:02:28:8c:a7:f6:d3:2f:b0:6c: 4c:69:c2:60:36:dc:e3:68:76:cb:cb:55:2e:53:b3:ec:30:e5: 31:6a:4a:5b:9e:1f:b3:dd:2c:a8:42:06:b4:8d:36:6e:33:b5: dd:5d:ef:8e:b1:fa:14:6d:6c:a6:33:a5:85:91:fe:dc:93:c2: 85:76:f3:3b:dc:b8:24:18:4e:14:b5:7d:7b:d0:46:49:a9:fd: 04:d7:08:06:90:14:7e:0a:24:8c:bb:ed:aa:e5:99:e4:f8:2a: 55:50:22:1c:a3:54:73:4e:0a:86:e9:07:ec:d0:42:d7:1c:36: 99:cc:b1:dd:a0:21:f3:71:77:8c:6f:f2:a8:2f:ff:f8:0f:54: ef:4d:8f:4e:49:3d:4c:f8:f6:0a:79:90:cb:61:ae:4d:f0:d5: 03:dd:86:cb:88:ae:0d:57:09:74:b6:89:d9:b3:ee:9c:19:a7: 85:81:8a:fd:49:fa:c5:b8:7b:88:bd:58:8c:34:db:1f:06:f4: e5:5a:06:7c:c5:34:eb:c4:44:a2:e3:08:aa:f5:e1:b8:77:93: 9d:b3:fa:e5:c9:2b:46:09:d8:a4:7d:21:52:49:8c:73:fe:03: a6:5d:db:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xr2A2R5XvQtfQdyJxx5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjQwZmZiOGQ2NjJjNmYxNTljYjlhM2UxNGRmNWNkYzZhZDJiNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy44ffvfuc0CSXyyMRe6U+4gO1igq nYyugTc0Eia1ZlRASPMrOjVh1T2FASvgwVbI7aHNeKtg+3PTDb9LFh0a0aELGbro ChPdLp7NMyDnQ2OLb8NOHM+m+McaQ5kxH5ZaGZYUAiAroIoHTguDPwhTbBSVQSEf GW6Q3q1KsadlIrdbgEiLKrOtAHOWQ3ff0dXhrFO07MVXt6vYIoAChKqxpD2SJZXC uGcpDKV5surouU17f6TdMnbjTauTEmOFFDlzUI7lztKWk43ww8Ku4gVhKQ2OhLf6 w5u6sZppkFRxzUt0HCuf6dJF3HXkD9VKCRo1y1OHyTQsCESXgn/sYhnNwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGJA/7jWYsbxWcuaPhTfXNxq0rdnMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvWWtEX3VOWml4dkZaeTVvLUZOOWMzR3JTdDJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDxKMA0G CSqGSIb3DQEBCwUAA4IBAQBqZ96C/gkl/kZZmvJVY5SdbgokbiTmNsO3xEsCKIyn 9tMvsGxMacJgNtzjaHbLy1UuU7PsMOUxakpbnh+z3SyoQga0jTZuM7XdXe+OsfoU bWymM6WFkf7ck8KFdvM73LgkGE4UtX170EZJqf0E1wgGkBR+CiSMu+2q5Znk+CpV UCIco1RzTgqG6Qfs0ELXHDaZzLHdoCHzcXeMb/KoL//4D1TvTY9OST1M+PYKeZDL Ya5N8NUD3YbLiK4NVwl0tonZs+6cGaeFgYr9SfrFuHuIvViMNNsfBvTlWgZ8xTTr xESi4wiq9eG4d5Ods/rlyStGCdikfSFSSYxz/gOmXduH -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:07 2026 by rpki-client