This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/YW3dbYMvMGpRlXCgljvs9WEA8II.roa File: YW3dbYMvMGpRlXCgljvs9WEA8II.roa (raw, json) Hash identifier: 0QFB4Z6/oF+6LZXj3qGwOBveMLWnuMyB/KPTEoXelQI= Subject key identifier: 61:6D:DD:6D:83:2F:30:6A:51:95:70:A0:96:3B:EC:F5:61:00:F0:82 Certificate issuer: /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b Certificate serial: 019BDA506EEA5B0C21ED1B07172DBB638231 Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/YW3dbYMvMGpRlXCgljvs9WEA8II.roa Signing time: Tue 20 Jan 2026 07:31:02 +0000 ROA not before: Tue 20 Jan 2026 07:31:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44653 IP address blocks: 212.19.135.0/24 maxlen: 24 212.19.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:50:6e:ea:5b:0c:21:ed:1b:07:17:2d:bb:63:82:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b Validity Not Before: Jan 20 07:31:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=616ddd6d832f306a519570a0963becf56100f082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:3f:51:7e:96:f7:04:53:b4:f7:9f:69:be: 66:e9:44:42:6e:ec:15:9d:ec:3b:2a:3d:10:ac:21: dd:9a:65:56:2a:dc:a5:69:20:78:2a:b4:0a:80:bd: 52:6d:6a:9a:40:23:af:42:49:23:68:ae:14:d8:23: 3e:e8:0a:63:e4:ea:bf:6c:e5:7b:c8:a1:e2:0f:01: 88:81:fc:08:cf:a6:fd:65:1e:ce:a5:4a:21:d3:a3: 19:7b:0e:8c:e5:9c:3f:cd:7c:48:d6:62:8e:08:b1: b8:d6:22:67:2c:45:7a:7d:d1:ae:fa:91:fa:cf:be: 83:91:d8:8e:fd:85:f8:a7:f0:8d:87:79:6a:1c:de: 67:fd:39:eb:81:06:34:83:1a:6b:39:2e:d5:89:4b: 01:5d:7b:d4:c4:ca:48:18:0f:bd:f6:7b:6e:3b:0c: f8:ad:8c:9a:37:3c:9b:2c:a1:6c:6d:d8:1a:04:af: 9d:44:8d:f6:7a:60:c1:76:0b:f6:6d:d1:67:49:03: ea:1a:7a:b3:f7:d2:d4:55:94:e4:17:43:0d:76:c6: 02:bb:dc:dd:10:5d:12:9a:da:1b:dc:97:df:d5:66: 9a:6b:b5:34:f5:82:17:2a:40:49:51:71:e9:d3:0c: 99:54:04:d4:62:f9:17:24:b6:8a:0a:27:f9:5f:a2: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6D:DD:6D:83:2F:30:6A:51:95:70:A0:96:3B:EC:F5:61:00:F0:82 X509v3 Authority Key Identifier: keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/YW3dbYMvMGpRlXCgljvs9WEA8II.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.19.135.0/24 212.19.137.0/24 Signature Algorithm: sha256WithRSAEncryption 55:c5:7b:e1:54:e1:ec:6c:81:8e:1c:ea:47:50:54:55:65:6c: be:3c:e0:2b:35:64:6d:12:9c:47:cf:2c:6b:ef:24:74:5d:24: 3a:3b:59:ad:19:04:1f:f4:9e:5e:55:68:7b:1a:84:34:8c:25: 8a:43:d2:d1:78:27:cf:d1:50:8e:d7:de:3d:9a:d3:c1:0b:e0: 05:7e:33:72:97:a4:f9:74:42:08:de:3c:99:96:aa:f2:54:d7: e6:1e:18:75:86:73:40:38:de:a0:46:47:a3:84:f3:e0:aa:c4: 43:e4:8b:d0:ff:ae:74:8d:7a:eb:d6:37:e6:a0:05:64:ca:77: c4:cf:17:1a:ee:0d:11:4d:14:e5:7a:6a:59:4f:96:ed:e8:1c: 14:3f:66:6e:42:01:1f:96:d3:b7:7a:b1:9f:2b:44:d5:ac:39: fb:c6:52:d7:ab:b8:d1:99:73:f9:6a:67:8c:15:2e:c5:5e:ed: 3d:d5:70:91:f7:ce:df:a9:28:2e:47:26:4a:25:ff:9e:58:1e: 26:6d:8d:f2:7c:43:41:bd:73:4b:98:fd:24:24:93:2b:22:51: ac:53:5e:49:fe:c1:0d:ad:35:1c:b6:90:3a:05:3a:70:0e:c8: 86:5c:1b:e4:cb:67:e6:d7:18:50:28:c9:e4:82:3b:9f:7d:78: 15:b1:f6:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvaUG7qWwwh7RsHFy27Y4IxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZTQyYzU2MGZjMjI4YjViYjRmNGNmMDBlZGUyZGZlMjZj NjYzMGIwHhcNMjYwMTIwMDczMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTZkZGQ2ZDgzMmYzMDZhNTE5NTcwYTA5NjNiZWNmNTYxMDBmMDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Q/UX6W9wRTtPefab5m6URCbuwV new7Kj0QrCHdmmVWKtylaSB4KrQKgL1SbWqaQCOvQkkjaK4U2CM+6Apj5Oq/bOV7 yKHiDwGIgfwIz6b9ZR7OpUoh06MZew6M5Zw/zXxI1mKOCLG41iJnLEV6fdGu+pH6 z76DkdiO/YX4p/CNh3lqHN5n/TnrgQY0gxprOS7ViUsBXXvUxMpIGA+99ntuOwz4 rYyaNzybLKFsbdgaBK+dRI32emDBdgv2bdFnSQPqGnqz99LUVZTkF0MNdsYCu9zd EF0Smtob3Jff1Waaa7U09YIXKkBJUXHp0wyZVATUYvkXJLaKCif5X6I0hQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGFt3W2DLzBqUZVwoJY77PVhAPCCMB8GA1UdIwQY MBaAFI3kLFYPwii1u09M8A7eLf4mxmMLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMt M2JmODNiN2UxN2JjLzEvWVczZGJZTXZNR3BSbFhDZ2xqdnM5V0VBOElJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMtM2JmODNiN2UxN2Jj LzEvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1BOHAwQA 1BOJMA0GCSqGSIb3DQEBCwUAA4IBAQBVxXvhVOHsbIGOHOpHUFRVZWy+POArNWRt EpxHzyxr7yR0XSQ6O1mtGQQf9J5eVWh7GoQ0jCWKQ9LReCfP0VCO1949mtPBC+AF fjNyl6T5dEII3jyZlqryVNfmHhh1hnNAON6gRkejhPPgqsRD5IvQ/650jXrr1jfm oAVkynfEzxca7g0RTRTlempZT5bt6BwUP2ZuQgEfltO3erGfK0TVrDn7xlLXq7jR mXP5ameMFS7FXu091XCR987fqSguRyZKJf+eWB4mbY3yfENBvXNLmP0kJJMrIlGs U15J/sENrTUctpA6BTpwDsiGXBvky2fm1xhQKMnkgjuffXgVsfZk -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:37 2026 by rpki-client