This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/YbeGTIIokJMHl8QEnhR1xFC_ito.roa File: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (raw, json) Hash identifier: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU= Subject key identifier: 61:B7:86:4C:82:28:90:93:07:97:C4:04:9E:14:75:C4:50:BF:8A:DA Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019B7D5D27CB0C7E59E4615BBFCEFA79BDE6 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/YbeGTIIokJMHl8QEnhR1xFC_ito.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 45.135.168.0/24 maxlen: 24 45.141.212.0/23 maxlen: 24 79.143.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:27:cb:0c:7e:59:e4:61:5b:bf:ce:fa:79:bd:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61b7864c822890930797c4049e1475c450bf8ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:1c:b2:a2:12:f1:35:3f:b9:d5:a4:0f:e5: f4:dd:bc:9a:23:ac:12:09:6a:93:73:b1:fe:f0:56: ce:97:3f:03:a4:08:b3:ef:7c:a4:dd:16:d6:e0:e5: 95:98:aa:ef:38:1e:ab:b0:83:86:73:20:f1:74:4a: ee:8d:2e:6c:0b:cd:e4:6c:ea:a5:c7:70:d8:fd:bc: 8b:d7:dc:2c:7f:6b:cb:c8:23:62:58:6c:bb:f4:d7: 0f:fb:73:2b:e4:ab:f4:1d:b8:fe:4b:2e:6e:10:5d: 71:11:4f:45:1a:0b:e9:a9:5d:dd:da:a1:0b:c9:b1: 90:1b:d6:ea:f1:69:3f:44:cf:3c:15:79:57:4b:d3: 61:be:bc:76:40:d2:6d:ef:a0:e2:df:bd:21:4c:20: 17:76:68:37:20:c6:af:da:77:9d:63:38:22:45:bc: 2b:7a:15:f5:8a:79:83:81:ed:44:b6:b2:7b:22:ed: e1:b4:f9:7c:cb:7e:7c:a6:27:a1:a4:87:b1:63:88: b1:92:0b:ba:9f:47:c5:6d:ea:f8:f4:c0:7c:d8:00: b7:36:ee:2e:b5:c7:6a:2b:cb:51:49:3e:6a:04:3f: 68:c9:8a:67:76:a5:86:8e:bf:65:11:40:1b:3e:61: d4:14:2f:4b:da:c7:b0:30:3e:b3:25:0a:62:44:43: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B7:86:4C:82:28:90:93:07:97:C4:04:9E:14:75:C4:50:BF:8A:DA X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/YbeGTIIokJMHl8QEnhR1xFC_ito.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.168.0/24 45.141.212.0/23 79.143.136.0/24 Signature Algorithm: sha256WithRSAEncryption 23:90:0a:07:ea:98:c5:a1:8b:8a:95:6b:7b:bf:07:a6:1e:8d: 0d:73:74:b2:d1:a8:7f:ca:49:49:59:57:07:b4:9a:0c:b6:7c: bc:28:d9:b7:8a:61:0f:b6:00:62:88:f9:07:fa:34:13:93:8b: 05:ed:5e:4e:f5:3a:a1:95:55:2c:45:ee:d9:63:c4:fa:34:9f: 02:62:27:84:2c:50:4d:ec:94:c4:e2:a4:78:00:f1:21:22:26: e9:8c:03:dc:83:ad:d6:40:1f:c8:87:36:e5:cb:c2:c3:39:54: a2:d8:ed:73:2f:fb:99:9e:f2:85:41:04:c5:90:5e:ba:49:1f: ad:0e:cc:3b:c2:75:cb:27:e7:20:5c:62:61:51:b2:f8:cf:04: 5f:3a:9b:0a:94:06:bd:85:5e:4c:f6:2b:9a:2f:51:1c:0f:0f: 80:9a:07:e9:30:f3:95:c5:33:be:1d:ba:91:73:e0:19:41:8a: 5b:bc:07:43:c3:5a:6d:bc:69:6d:a5:b1:3a:46:09:26:b7:d8: ec:1b:9e:f5:9b:93:e0:7c:88:db:6a:a5:62:b5:4f:c6:99:b0: 8f:4e:d7:c3:e6:59:f2:c0:2b:d0:47:58:87:31:76:84:5b:1a: 6a:04:84:72:51:ad:62:e0:12:62:60:bb:2a:6f:d6:59:0f:ec: 83:6a:ff:cc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XSfLDH5Z5GFbv876eb3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWI3ODY0YzgyMjg5MDkzMDc5N2M0MDQ5ZTE0NzVjNDUwYmY4YWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYwcsqIS8TU/udWkD+X03byaI6wS CWqTc7H+8FbOlz8DpAiz73yk3RbW4OWVmKrvOB6rsIOGcyDxdErujS5sC83kbOql x3DY/byL19wsf2vLyCNiWGy79NcP+3Mr5Kv0Hbj+Sy5uEF1xEU9FGgvpqV3d2qEL ybGQG9bq8Wk/RM88FXlXS9Nhvrx2QNJt76Di370hTCAXdmg3IMav2nedYzgiRbwr ehX1inmDge1EtrJ7Iu3htPl8y358piehpIexY4ixkgu6n0fFber49MB82AC3Nu4u tcdqK8tRST5qBD9oyYpndqWGjr9lEUAbPmHUFC9L2sewMD6zJQpiREPo4wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGG3hkyCKJCTB5fEBJ4UdcRQv4raMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvWWJlR1RJSW9rSk1IbDhRRW5oUjF4RkNfaXRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYeoAwQB LY3UAwQAT4+IMA0GCSqGSIb3DQEBCwUAA4IBAQAjkAoH6pjFoYuKlWt7vwemHo0N c3Sy0ah/yklJWVcHtJoMtny8KNm3imEPtgBiiPkH+jQTk4sF7V5O9TqhlVUsRe7Z Y8T6NJ8CYieELFBN7JTE4qR4APEhIibpjAPcg63WQB/Ihzbly8LDOVSi2O1zL/uZ nvKFQQTFkF66SR+tDsw7wnXLJ+cgXGJhUbL4zwRfOpsKlAa9hV5M9iuaL1EcDw+A mgfpMPOVxTO+HbqRc+AZQYpbvAdDw1ptvGltpbE6Rgkmt9jsG571m5PgfIjbaqVi tU/GmbCPTtfD5lnywCvQR1iHMXaEWxpqBIRyUa1i4BJiYLsqb9ZZD+yDav/M -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:33 2026 by rpki-client