This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/YinM9FZ7tYvDuQZElbcHdEksbHw.roa File: YinM9FZ7tYvDuQZElbcHdEksbHw.roa (raw, json) Hash identifier: 8pZ2RgiQMW7t4pyoRKcJqD0BNRo6lf7CbatwYv4YjtM= Subject key identifier: 62:29:CC:F4:56:7B:B5:8B:C3:B9:06:44:95:B7:07:74:49:2C:6C:7C Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef Certificate serial: 019B7C805C84FA9707E9EEC81C6F69EB340A Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/YinM9FZ7tYvDuQZElbcHdEksbHw.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207645 IP address blocks: 80.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5c:84:fa:97:07:e9:ee:c8:1c:6f:69:eb:34:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6229ccf4567bb58bc3b9064495b70774492c6c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:96:85:90:54:0e:b8:68:a4:97:0e:14:e4: 40:b7:1c:ee:ff:f0:0d:0d:1b:9d:6a:8c:2f:6f:79: ae:32:d5:55:61:c2:9b:0c:e7:00:8c:d1:fd:f0:ca: b1:45:4c:01:b6:a9:f6:c2:55:f9:00:67:3a:f2:cf: 03:0e:44:fe:4a:0f:e5:6c:83:75:04:cc:16:fa:d5: 3a:a8:2c:ce:8a:9b:cf:f1:0f:76:b5:5c:c1:21:9d: 18:bc:21:d2:62:83:fa:ec:e5:0d:30:03:2f:b9:87: af:ab:9a:a4:59:f8:d3:97:28:66:7a:bf:82:19:7f: e1:ef:66:f5:b3:c5:5d:9f:cd:b8:54:7c:bf:19:96: 1d:70:f9:92:77:9c:ca:e0:14:a5:9b:7b:36:04:1b: 7b:54:46:9b:49:49:9f:8a:8f:80:eb:80:b1:d5:be: 1e:37:cd:18:60:89:aa:5b:ba:cf:fb:0d:88:c3:c6: 4b:35:10:26:45:b3:57:2f:c7:0d:01:2a:01:d4:c3: a6:59:27:4d:80:20:ef:87:f9:55:51:78:5d:fb:5a: 80:8c:44:20:eb:29:2b:43:42:88:18:03:6c:49:c5: ea:f9:27:2b:ad:23:48:86:11:1c:f7:24:74:08:5d: 9a:e4:3c:63:30:f7:56:69:cb:1d:0e:e0:e1:71:24: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:29:CC:F4:56:7B:B5:8B:C3:B9:06:44:95:B7:07:74:49:2C:6C:7C X509v3 Authority Key Identifier: keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/YinM9FZ7tYvDuQZElbcHdEksbHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.249.128.0/24 Signature Algorithm: sha256WithRSAEncryption 74:49:54:47:ef:61:4c:61:12:70:e6:46:fb:8d:6c:3e:f2:c6: ae:74:ae:6a:a0:0b:86:98:0b:28:82:84:17:c2:54:56:8a:89: 98:1f:e6:b1:12:1a:32:c8:06:ef:dd:83:24:27:a5:9e:04:6c: 06:d1:14:e7:7b:e3:45:ef:ac:d4:b4:5a:dc:b7:54:fe:38:fb: d8:35:3a:0c:ab:09:5c:df:23:fc:c6:3e:8d:84:0d:a4:5f:b5: 5c:9a:11:58:6f:b8:3d:73:49:9a:5f:3c:7e:29:87:2a:20:06: 08:a1:70:5d:53:26:0a:e6:31:82:1e:a6:d6:b5:eb:c0:32:e6: f5:da:a2:1c:a7:15:ed:57:af:75:1f:17:03:24:d0:c5:47:85: 2c:5f:54:43:00:23:c6:2c:b1:68:5a:4c:01:de:a6:8a:cf:08: 78:7e:69:96:65:f1:bc:e7:65:8a:4d:d4:f4:69:71:6f:03:57: 54:09:aa:28:85:97:ab:d2:30:3f:35:81:6c:7f:27:b8:78:6d: cc:f5:7a:13:5f:ff:6a:1e:d1:ce:97:89:27:b9:f0:61:3d:ee: de:79:31:06:f1:3f:09:4b:76:81:22:b6:1f:cd:bf:25:3e:a9: 13:48:89:18:79:e5:79:3c:a3:82:d6:70:d8:bb:7e:c1:4b:c4: 50:eb:fd:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFyE+pcH6e7IHG9p6zQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOTNjYzhjY2E4MWZhMDBkYzUzZTdiODA3OGU5MWI1YzEx YmEyZWYwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjI5Y2NmNDU2N2JiNThiYzNiOTA2NDQ5NWI3MDc3NDQ5MmM2YzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeKWhZBUDrhopJcOFORAtxzu//AN DRudaowvb3muMtVVYcKbDOcAjNH98MqxRUwBtqn2wlX5AGc68s8DDkT+Sg/lbIN1 BMwW+tU6qCzOipvP8Q92tVzBIZ0YvCHSYoP67OUNMAMvuYevq5qkWfjTlyhmer+C GX/h72b1s8Vdn824VHy/GZYdcPmSd5zK4BSlm3s2BBt7VEabSUmfio+A64Cx1b4e N80YYImqW7rP+w2Iw8ZLNRAmRbNXL8cNASoB1MOmWSdNgCDvh/lVUXhd+1qAjEQg 6ykrQ0KIGANsScXq+ScrrSNIhhEc9yR0CF2a5DxjMPdWacsdDuDhcSSknwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIpzPRWe7WLw7kGRJW3B3RJLGx8MB8GA1UdIwQY MBaAFK6TzIzKgfoA3FPnuAeOkbXBG6LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgt ZjQwNmM4M2IzZmJhLzEvWWluTTlGWjd0WXZEdVFaRWxiY0hkRWtzYkh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgtZjQwNmM4M2IzZmJh LzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPmAMA0G CSqGSIb3DQEBCwUAA4IBAQB0SVRH72FMYRJw5kb7jWw+8saudK5qoAuGmAsogoQX wlRWiomYH+axEhoyyAbv3YMkJ6WeBGwG0RTne+NF76zUtFrct1T+OPvYNToMqwlc 3yP8xj6NhA2kX7VcmhFYb7g9c0maXzx+KYcqIAYIoXBdUyYK5jGCHqbWtevAMub1 2qIcpxXtV691HxcDJNDFR4UsX1RDACPGLLFoWkwB3qaKzwh4fmmWZfG852WKTdT0 aXFvA1dUCaoohZer0jA/NYFsfye4eG3M9XoTX/9qHtHOl4knufBhPe7eeTEG8T8J S3aBIrYfzb8lPqkTSIkYeeV5PKOC1nDYu37BS8RQ6/2l -----END CERTIFICATE-----Generated at Thu Feb 5 01:25:59 2026 by rpki-client