This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Yj-VBlrXXkXy7icQGZdJXd7Q8_0.roa File: Yj-VBlrXXkXy7icQGZdJXd7Q8_0.roa (raw, json) Hash identifier: kLw+PjrNhF9ia6Vgd6Sw10KJLcJBVjx3xuVq/yqObtM= Subject key identifier: 62:3F:95:06:5A:D7:5E:45:F2:EE:27:10:19:97:49:5D:DE:D0:F3:FD Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38EDC531DB1FC985A2244364A7A7DB Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Yj-VBlrXXkXy7icQGZdJXd7Q8_0.roa Signing time: Fri 02 Jan 2026 10:20:18 +0000 ROA not before: Fri 02 Jan 2026 10:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206286 IP address blocks: 109.122.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ed:c5:31:db:1f:c9:85:a2:24:43:64:a7:a7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=623f95065ad75e45f2ee27101997495dded0f3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:22:72:0d:d3:55:79:cf:34:de:41:ea:0a: e9:b5:bf:e0:5a:c5:97:2a:c4:4d:d5:8c:e9:30:1c: fb:5a:37:0c:d9:3d:02:91:97:6d:4d:c5:62:03:fd: 5f:c5:50:aa:7e:6b:cd:b1:e7:4f:03:5d:3f:e5:67: d0:fb:27:1c:5d:96:c1:c6:27:06:4a:6f:8a:29:e9: d1:f2:59:9e:80:f6:ea:56:00:15:1a:e1:3b:d4:65: ee:1b:53:89:80:47:e2:37:0f:7f:cf:87:a6:28:6e: 19:e2:9a:fa:50:26:16:d8:8f:23:c7:41:61:30:56: 1f:3e:62:53:be:be:9f:ff:e3:52:d8:e2:26:43:c0: 07:af:41:e0:37:a7:72:5c:e9:27:a6:90:7d:11:9c: ab:b3:36:e5:3d:b1:da:bb:7a:7b:f0:47:93:be:39: c0:18:aa:57:b7:7c:80:73:2a:b6:43:5a:99:95:fe: 22:86:df:81:cb:aa:5e:99:d3:da:58:14:03:f8:f7: 16:00:88:73:85:01:58:98:16:23:55:d6:a5:e7:1d: 8b:66:46:44:bb:9e:e7:ec:55:97:4c:33:b1:d5:05: a1:30:a6:d8:c6:e1:00:bf:fb:2e:cc:89:04:da:45: 78:a3:c8:52:71:b1:fa:11:f4:11:73:af:15:6a:31: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3F:95:06:5A:D7:5E:45:F2:EE:27:10:19:97:49:5D:DE:D0:F3:FD X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Yj-VBlrXXkXy7icQGZdJXd7Q8_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.16.0/24 Signature Algorithm: sha256WithRSAEncryption 99:ff:c2:2c:e7:f4:78:a6:44:de:9c:db:bc:4a:d0:bb:14:74: 3d:c7:0b:92:ee:6e:89:6d:9b:8f:c9:b9:c3:23:32:db:48:b8: 88:c6:49:e6:55:c4:b7:d6:a7:20:f1:05:42:e8:08:cf:1b:82: cd:db:b3:03:61:fd:97:d9:53:53:d3:41:6e:77:b7:70:f7:e3: 78:02:05:3b:ae:9b:50:59:36:b5:bf:fc:72:6c:00:b3:84:d7: 0e:ee:a3:9e:62:18:a4:2e:17:f8:3f:fa:2a:f4:6d:ca:bd:b9: e9:50:85:68:87:d9:d9:5a:17:de:8f:13:aa:f3:fc:df:65:46: 66:82:13:0e:12:c1:3a:05:f6:00:e5:99:ce:61:97:96:28:3e: ad:81:84:84:aa:56:0d:ef:9c:13:ec:62:75:b5:af:31:e6:af: 94:79:26:fe:cd:b1:a5:25:df:64:3a:83:6c:fa:5f:e6:c7:db: d8:52:71:31:d3:63:86:a3:a3:89:95:2b:b4:31:1b:46:28:51: ae:80:88:43:1c:dc:7d:a0:ef:f2:16:d5:9b:1e:a2:55:68:cf: 5d:27:25:59:91:f2:90:db:8f:fd:0a:f6:24:18:fe:6a:29:c6: 9d:d1:54:48:68:11:c1:38:75:df:b9:00:ae:c8:ec:9a:43:12: 45:51:16:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OO3FMdsfyYWiJENkp6fbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjNmOTUwNjVhZDc1ZTQ1ZjJlZTI3MTAxOTk3NDk1ZGRlZDBmM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulcicg3TVXnPNN5B6grptb/gWsWX KsRN1YzpMBz7WjcM2T0CkZdtTcViA/1fxVCqfmvNsedPA10/5WfQ+yccXZbBxicG Sm+KKenR8lmegPbqVgAVGuE71GXuG1OJgEfiNw9/z4emKG4Z4pr6UCYW2I8jx0Fh MFYfPmJTvr6f/+NS2OImQ8AHr0HgN6dyXOknppB9EZyrszblPbHau3p78EeTvjnA GKpXt3yAcyq2Q1qZlf4iht+By6pemdPaWBQD+PcWAIhzhQFYmBYjVdal5x2LZkZE u57n7FWXTDOx1QWhMKbYxuEAv/suzIkE2kV4o8hScbH6EfQRc68VajHCSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGI/lQZa115F8u4nEBmXSV3e0PP9MB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvWWotVkJsclhYa1h5N2ljUUdaZEpYZDdROF8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoQMA0G CSqGSIb3DQEBCwUAA4IBAQCZ/8Is5/R4pkTenNu8StC7FHQ9xwuS7m6JbZuPybnD IzLbSLiIxknmVcS31qcg8QVC6AjPG4LN27MDYf2X2VNT00Fud7dw9+N4AgU7rptQ WTa1v/xybACzhNcO7qOeYhikLhf4P/oq9G3KvbnpUIVoh9nZWhfejxOq8/zfZUZm ghMOEsE6BfYA5ZnOYZeWKD6tgYSEqlYN75wT7GJ1ta8x5q+UeSb+zbGlJd9kOoNs +l/mx9vYUnEx02OGo6OJlSu0MRtGKFGugIhDHNx9oO/yFtWbHqJVaM9dJyVZkfKQ 24/9CvYkGP5qKcad0VRIaBHBOHXfuQCuyOyaQxJFURZC -----END CERTIFICATE-----Generated at Sun Jan 11 21:02:29 2026 by rpki-client