This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ypDC3uyg-przKFMpLZkwKTMm_Xc.roa File: ypDC3uyg-przKFMpLZkwKTMm_Xc.roa (raw, json) Hash identifier: DhAfr7NWnLe6H2Gb/8uPGq3C8ErkApWLZGTHcM9FAXs= Subject key identifier: CA:90:C2:DE:EC:A0:FA:9A:F3:28:53:29:2D:99:30:29:33:26:FD:77 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38EF71F31CBBDE8C6829EC07618DE2 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ypDC3uyg-przKFMpLZkwKTMm_Xc.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213724 IP address blocks: 109.122.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ef:71:f3:1c:bb:de:8c:68:29:ec:07:61:8d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca90c2deeca0fa9af32853292d9930293326fd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:9a:fe:e5:05:4a:c5:d7:f5:9d:da:f8:d0: 04:ed:ec:5a:b4:1b:e9:70:1e:72:c7:89:24:3b:cc: 4d:e1:75:ec:a2:4d:b0:91:51:99:a8:1e:17:9f:eb: 8b:e0:2a:d5:cd:28:31:77:08:3b:e2:b6:d7:9f:63: d9:ba:d9:fa:62:29:e4:d8:bf:f5:a5:79:4a:f9:a5: 74:d7:7f:76:ad:8e:0e:d6:96:89:4b:74:97:3b:df: 8b:fa:9a:2f:74:02:0b:33:fb:f8:77:f6:f8:3a:8f: ff:8a:f8:8e:0b:5a:8f:af:8d:c7:45:9b:ee:06:35: 51:e8:a3:a0:3d:38:38:59:00:fd:d7:da:ee:db:76: 77:84:c7:a6:cf:3f:03:78:ac:3e:ac:df:df:62:6c: ac:2c:08:2b:b8:cf:85:0f:61:41:fc:43:0e:36:73: a9:c0:27:26:18:c9:a2:3b:3c:88:ef:bd:5d:f1:5b: 66:f2:e6:0d:a5:20:d6:76:87:2e:ed:7f:a3:61:5d: c6:73:01:84:67:bc:73:22:5a:1c:97:16:53:af:48: e2:5a:6a:ab:e3:0a:5a:e2:ff:6a:a5:3a:b2:8e:30: 85:4d:91:74:79:d4:d1:71:99:27:3b:95:8b:48:c4: cf:4c:bb:b9:8b:4f:5b:11:97:eb:ae:67:e5:32:c6: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:90:C2:DE:EC:A0:FA:9A:F3:28:53:29:2D:99:30:29:33:26:FD:77 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ypDC3uyg-przKFMpLZkwKTMm_Xc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.4.0/24 Signature Algorithm: sha256WithRSAEncryption 43:ca:a6:13:75:da:ab:9a:94:c5:d0:ee:76:7a:ba:89:74:59: 7d:94:9c:1a:fe:f6:19:d3:c8:7e:79:4b:5e:93:a4:8d:eb:8d: db:45:69:9e:cb:1c:74:85:c7:04:89:07:71:fc:de:49:5d:bd: f6:c1:7f:78:91:b3:39:f8:b1:9b:73:ec:21:27:13:65:13:cd: 9b:a8:98:d9:98:cd:32:e4:fa:46:45:7c:eb:99:83:df:23:a3: 52:22:f2:11:73:cd:25:9b:cf:08:57:a5:aa:fa:d9:10:c1:d2: 03:8b:83:89:09:38:9c:7a:c6:4f:39:df:4c:17:1e:c7:eb:21: 28:fe:b4:55:ae:db:28:4b:a5:41:06:a0:43:b9:b1:56:a1:a0: 21:ae:13:43:85:86:f8:22:a3:57:a5:be:4a:c0:a9:d9:09:6b: f4:af:48:e0:3e:6d:35:64:40:83:0f:44:ff:b6:ed:9e:e9:a4: 7f:6a:6c:10:ca:aa:7a:1a:55:95:64:07:74:44:57:dd:97:8e: da:84:a0:56:86:1e:38:fa:b1:21:4c:99:89:3a:77:a3:a1:5f: 9f:cf:64:a7:e1:1d:be:3f:41:70:c7:1b:e7:c0:f4:50:7e:cc: 25:49:02:31:9e:f2:9c:6f:64:cb:20:5d:89:6e:24:5b:c2:03: af:d1:8e:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OO9x8xy73oxoKewHYY3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTkwYzJkZWVjYTBmYTlhZjMyODUzMjkyZDk5MzAyOTMzMjZmZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Wa/uUFSsXX9Z3a+NAE7exatBvp cB5yx4kkO8xN4XXsok2wkVGZqB4Xn+uL4CrVzSgxdwg74rbXn2PZutn6Yink2L/1 pXlK+aV01392rY4O1paJS3SXO9+L+povdAILM/v4d/b4Oo//iviOC1qPr43HRZvu BjVR6KOgPTg4WQD919ru23Z3hMemzz8DeKw+rN/fYmysLAgruM+FD2FB/EMONnOp wCcmGMmiOzyI771d8Vtm8uYNpSDWdocu7X+jYV3GcwGEZ7xzIloclxZTr0jiWmqr 4wpa4v9qpTqyjjCFTZF0edTRcZknO5WLSMTPTLu5i09bEZfrrmflMsZNXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMqQwt7soPqa8yhTKS2ZMCkzJv13MB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEveXBEQzN1eWctcHJ6S0ZNcExaa3dLVE1tX1hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoEMA0G CSqGSIb3DQEBCwUAA4IBAQBDyqYTddqrmpTF0O52erqJdFl9lJwa/vYZ08h+eUte k6SN643bRWmeyxx0hccEiQdx/N5JXb32wX94kbM5+LGbc+whJxNlE82bqJjZmM0y 5PpGRXzrmYPfI6NSIvIRc80lm88IV6Wq+tkQwdIDi4OJCTicesZPOd9MFx7H6yEo /rRVrtsoS6VBBqBDubFWoaAhrhNDhYb4IqNXpb5KwKnZCWv0r0jgPm01ZECDD0T/ tu2e6aR/amwQyqp6GlWVZAd0RFfdl47ahKBWhh44+rEhTJmJOnejoV+fz2Sn4R2+ P0FwxxvnwPRQfswlSQIxnvKcb2TLIF2JbiRbwgOv0Y7C -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:03 2026 by rpki-client