This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/yrgQph9zHMA3wU0ZObxjZhTJQrM.roa File: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (raw, json) Hash identifier: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE= Subject key identifier: CA:B8:10:A6:1F:73:1C:C0:37:C1:4D:19:39:BC:63:66:14:C9:42:B3 Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Certificate serial: 019B7CEE2DB8F75A1B0D47CDEED37B94980A Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/yrgQph9zHMA3wU0ZObxjZhTJQrM.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6205 IP address blocks: 185.121.124.0/24 maxlen: 24 185.121.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2d:b8:f7:5a:1b:0d:47:cd:ee:d3:7b:94:98:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cab810a61f731cc037c14d1939bc636614c942b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:03:c8:36:c5:01:b2:39:90:d4:95:c5:67: 2b:12:1e:43:dc:c4:84:6a:0d:4d:78:d7:f5:37:5c: f2:22:d5:68:a9:9a:d6:7f:89:4a:af:bd:f2:1c:6e: f9:92:01:ce:15:85:ca:20:d7:90:c9:42:cd:4e:a2: 33:d6:05:11:a4:ae:6d:42:a6:89:1d:8f:d5:dd:70: 06:c8:00:0d:2f:60:7c:32:fc:0d:1d:73:fd:4e:bc: ae:ae:50:85:03:91:8d:79:88:d5:d0:75:36:0a:84: 6c:f1:d6:8f:b2:b7:00:cf:aa:3b:a2:2a:5c:68:b2: d1:ed:7e:ec:73:c2:d8:24:c9:98:b8:e3:ef:62:b3: cb:0a:4b:b6:08:05:e9:f1:3a:69:3c:76:82:6d:82: 56:fa:6b:6e:10:1a:24:36:78:cd:c4:4e:4f:b6:72: 98:41:e3:fd:78:e8:91:46:67:1c:0f:a2:a1:44:17: 59:80:ab:de:a3:59:0d:c1:e2:ae:5a:01:65:f2:21: af:35:2a:73:d3:3f:d3:3f:8c:f0:b1:82:f1:29:04: 69:b6:db:a0:c1:0d:29:23:d9:67:20:82:d5:9b:6a: 64:56:01:21:d5:f9:08:64:fc:a5:ad:d2:5f:04:13: f6:85:d5:96:b6:23:25:54:26:0a:ad:50:5d:65:ba: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B8:10:A6:1F:73:1C:C0:37:C1:4D:19:39:BC:63:66:14:C9:42:B3 X509v3 Authority Key Identifier: keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/yrgQph9zHMA3wU0ZObxjZhTJQrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.124.0/23 Signature Algorithm: sha256WithRSAEncryption 27:a5:42:c7:89:08:29:a4:80:25:70:bc:75:cc:87:95:62:71: 57:48:f8:7b:1c:7f:ab:d8:89:df:a1:20:b3:bf:d3:9e:5a:42: 58:2f:ae:9e:ba:3f:37:1b:54:f0:08:f0:cf:8c:d5:a7:e2:13: 59:bf:58:34:dc:be:b7:dd:51:17:e4:fc:f6:e3:88:fa:d8:dc: c9:03:fa:0a:a8:10:a9:a7:fd:7c:97:16:0b:97:62:e1:e5:cf: 3e:f6:ed:05:81:50:95:70:3b:35:70:85:bb:00:ca:76:b3:26: a6:c0:c6:e1:84:9f:2b:98:c3:62:57:98:d0:66:da:5e:55:09: 4e:0c:9d:d3:6b:2b:1f:31:21:cd:a0:90:fc:1f:e7:af:3e:20: f7:ea:a6:9f:8b:98:80:22:d0:77:64:fc:03:ad:17:d4:fb:fb: e1:1b:90:6d:18:aa:89:25:3b:fa:15:19:5e:96:0a:84:05:e3: 5e:71:a9:e2:7d:e3:a5:5a:2f:a0:3a:d7:e9:ad:6f:53:ec:47: b5:64:dd:9f:c9:7c:a3:39:cd:a5:47:29:3d:3c:62:61:b4:63: 1b:0f:c1:8e:87:0b:4a:81:e9:0c:e6:c6:f4:7f:3b:09:4f:e9: 37:af:37:7c:a1:78:ea:0b:f2:79:7c:ff:b4:63:3f:21:a2:dc: 2f:f0:ea:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87i2491obDUfN7tN7lJgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz NzNlMmEwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWI4MTBhNjFmNzMxY2MwMzdjMTRkMTkzOWJjNjM2NjE0Yzk0MmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gkDyDbFAbI5kNSVxWcrEh5D3MSE ag1NeNf1N1zyItVoqZrWf4lKr73yHG75kgHOFYXKINeQyULNTqIz1gURpK5tQqaJ HY/V3XAGyAANL2B8MvwNHXP9TryurlCFA5GNeYjV0HU2CoRs8daPsrcAz6o7oipc aLLR7X7sc8LYJMmYuOPvYrPLCku2CAXp8TppPHaCbYJW+mtuEBokNnjNxE5PtnKY QeP9eOiRRmccD6KhRBdZgKveo1kNweKuWgFl8iGvNSpz0z/TP4zwsYLxKQRpttug wQ0pI9lnIILVm2pkVgEh1fkIZPylrdJfBBP2hdWWtiMlVCYKrVBdZbr45wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMq4EKYfcxzAN8FNGTm8Y2YUyUKzMB8GA1UdIwQY MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct NjJkODgxYWE5MDZmLzEveXJnUXBoOXpITUEzd1UwWk9ieGpaaFRKUXJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXl8MA0G CSqGSIb3DQEBCwUAA4IBAQAnpULHiQgppIAlcLx1zIeVYnFXSPh7HH+r2InfoSCz v9OeWkJYL66euj83G1TwCPDPjNWn4hNZv1g03L633VEX5Pz244j62NzJA/oKqBCp p/18lxYLl2Lh5c8+9u0FgVCVcDs1cIW7AMp2syamwMbhhJ8rmMNiV5jQZtpeVQlO DJ3TaysfMSHNoJD8H+evPiD36qafi5iAItB3ZPwDrRfU+/vhG5BtGKqJJTv6FRle lgqEBeNecanifeOlWi+gOtfprW9T7Ee1ZN2fyXyjOc2lRyk9PGJhtGMbD8GOhwtK gekM5sb0fzsJT+k3rzd8oXjqC/J5fP+0Yz8hotwv8OqJ -----END CERTIFICATE-----Generated at Mon Jan 26 18:17:07 2026 by rpki-client