This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Yu_2a_JSdb628YAV6zq4OpFRtME.roa File: Yu_2a_JSdb628YAV6zq4OpFRtME.roa (raw, json) Hash identifier: ZMvHLXYbr4bec3dMlUS7HJhANNiRBeRT3BtMcIvwSA8= Subject key identifier: 62:EF:F6:6B:F2:52:75:BE:B6:F1:80:15:EB:3A:B8:3A:91:51:B4:C1 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C04A163B98442886D72E7FEC0C94C1A4F Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Yu_2a_JSdb628YAV6zq4OpFRtME.roa Signing time: Wed 28 Jan 2026 12:43:31 +0000 ROA not before: Wed 28 Jan 2026 12:43:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44828 IP address blocks: 87.121.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:a1:63:b9:84:42:88:6d:72:e7:fe:c0:c9:4c:1a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 28 12:43:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62eff66bf25275beb6f18015eb3ab83a9151b4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:43:a4:ba:2f:5c:24:e6:63:ac:43:b1:76: d5:63:80:b8:0c:35:f1:98:c9:25:51:e6:e5:88:f3: b8:c4:0e:26:81:2f:64:68:0c:5e:d4:e8:ab:4f:09: 5a:ad:7d:a4:7b:dd:f1:82:d9:91:a3:92:06:8d:0c: 17:4f:a8:fb:2f:b4:f9:fd:7c:d5:19:6d:f5:54:32: b3:5f:1d:87:7b:ce:33:eb:dd:5e:64:11:11:ac:2d: de:ac:7b:c7:78:0c:5d:d0:b2:66:4b:4d:5a:d5:f7: c6:d6:11:13:2e:11:c9:2f:ef:cb:30:fe:8c:8d:10: 24:58:5f:9b:ca:ff:69:a2:2e:7d:3f:13:1f:96:ac: 3f:8f:df:20:61:fc:18:a3:2b:01:97:41:62:88:c3: 07:34:8d:99:ad:ec:41:33:f0:0a:a9:64:86:11:7a: 7a:5d:0c:75:ec:ad:93:85:5d:89:9f:f7:33:a6:d3: b1:5b:92:41:e5:68:d6:26:b4:8c:26:fa:c2:3c:4f: 03:58:0c:ad:e1:28:d5:07:cd:6e:d3:28:3d:ab:06: 07:ad:c8:7c:09:10:ca:d7:4b:2f:1f:27:9b:4a:35: 7b:b2:89:f3:d2:60:25:74:48:dc:e3:ec:a9:e8:1f: 2b:c4:c2:38:38:c7:79:5b:67:6d:10:7e:ad:da:f0: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EF:F6:6B:F2:52:75:BE:B6:F1:80:15:EB:3A:B8:3A:91:51:B4:C1 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Yu_2a_JSdb628YAV6zq4OpFRtME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.134.0/24 Signature Algorithm: sha256WithRSAEncryption 40:66:05:a5:b4:46:37:d1:26:2f:5d:c1:c5:73:15:83:40:02: 08:b9:c4:86:cb:2d:45:01:be:10:06:aa:51:91:40:ff:cb:38: cd:77:ff:82:4f:1d:60:f6:c5:28:82:a2:fa:85:ac:2e:c8:f1: 6a:94:a6:c9:e7:25:e7:01:dc:5d:25:66:d2:c9:9a:da:53:d3: cb:97:cc:33:97:90:6b:01:43:ac:1f:9c:46:9a:cf:2a:70:5a: ac:58:3b:df:b7:a2:7a:c6:ae:25:04:a9:4c:da:ba:67:39:0b: 56:6d:f6:89:ea:b4:4f:d2:36:19:6c:40:90:04:35:e4:77:36: 4b:d7:5f:36:ef:2e:8a:aa:aa:43:db:98:7e:b2:ed:dd:91:03: f0:c6:52:6c:4d:f3:90:e1:7f:14:29:d0:98:c0:eb:d2:7a:76: fe:fd:c0:0f:6c:78:8f:ff:5d:1c:2d:dc:36:0f:1e:6b:d5:09: 76:73:88:75:2a:68:0d:c4:28:61:5b:6a:c2:6c:ba:4a:38:6e: f5:1b:fe:6d:49:2b:4d:81:fe:4c:3d:5d:e0:3b:b1:c6:97:8f: 2f:7e:ee:a1:00:94:9a:1f:9a:f2:d9:f8:74:13:12:5a:61:3a: ea:58:74:54:bc:0a:7f:46:b3:4a:13:39:34:d7:77:1f:4d:24: 73:cd:9a:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwEoWO5hEKIbXLn/sDJTBpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTI4MTI0MzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmVmZjY2YmYyNTI3NWJlYjZmMTgwMTVlYjNhYjgzYTkxNTFiNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDRDpLovXCTmY6xDsXbVY4C4DDXx mMklUebliPO4xA4mgS9kaAxe1OirTwlarX2ke93xgtmRo5IGjQwXT6j7L7T5/XzV GW31VDKzXx2He84z691eZBERrC3erHvHeAxd0LJmS01a1ffG1hETLhHJL+/LMP6M jRAkWF+byv9poi59PxMflqw/j98gYfwYoysBl0FiiMMHNI2ZrexBM/AKqWSGEXp6 XQx17K2ThV2Jn/czptOxW5JB5WjWJrSMJvrCPE8DWAyt4SjVB81u0yg9qwYHrch8 CRDK10svHyebSjV7sonz0mAldEjc4+yp6B8rxMI4OMd5W2dtEH6t2vBl1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGLv9mvyUnW+tvGAFes6uDqRUbTBMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvWXVfMmFfSlNkYjYyOFlBVjZ6cTRPcEZSdE1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3mGMA0G CSqGSIb3DQEBCwUAA4IBAQBAZgWltEY30SYvXcHFcxWDQAIIucSGyy1FAb4QBqpR kUD/yzjNd/+CTx1g9sUogqL6hawuyPFqlKbJ5yXnAdxdJWbSyZraU9PLl8wzl5Br AUOsH5xGms8qcFqsWDvft6J6xq4lBKlM2rpnOQtWbfaJ6rRP0jYZbECQBDXkdzZL 11827y6KqqpD25h+su3dkQPwxlJsTfOQ4X8UKdCYwOvSenb+/cAPbHiP/10cLdw2 Dx5r1Ql2c4h1KmgNxChhW2rCbLpKOG71G/5tSStNgf5MPV3gO7HGl48vfu6hAJSa H5ry2fh0ExJaYTrqWHRUvAp/RrNKEzk013cfTSRzzZo8 -----END CERTIFICATE-----Generated at Thu Jan 29 14:47:10 2026 by rpki-client