This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YBtQDmR3ZuNMVYATKtv-YKLLo1A.roa File: YBtQDmR3ZuNMVYATKtv-YKLLo1A.roa (raw, json) Hash identifier: gqj3aT1B72CRLQaZbcNB/nxg7DXCRMOkBDixVU4aRAc= Subject key identifier: 60:1B:50:0E:64:77:66:E3:4C:55:80:13:2A:DB:FE:60:A2:CB:A3:50 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E392D4616418E0D03FEE49BBF2B76AD Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YBtQDmR3ZuNMVYATKtv-YKLLo1A.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152672 IP address blocks: 163.5.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2d:46:16:41:8e:0d:03:fe:e4:9b:bf:2b:76:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=601b500e647766e34c5580132adbfe60a2cba350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:be:8f:0d:1c:da:c1:b4:f7:e8:a9:f6:be: 8f:bc:eb:47:b2:b0:54:10:51:2a:da:99:90:33:83: 0d:7d:43:43:e5:e3:1f:ad:96:fe:2c:56:4e:1b:0d: e7:e6:58:e0:54:df:ec:16:00:f6:a1:43:e1:03:62: 90:1c:0e:bc:58:16:8d:d0:4c:c8:db:62:9d:50:d0: 2d:8a:21:66:df:34:15:06:c3:44:27:09:ec:d3:f1: a0:d0:0a:47:4b:d5:cb:fd:f2:10:1c:92:d3:84:2c: af:4f:48:ba:b3:0c:b3:56:54:6f:e8:6d:83:a3:e4: cb:9e:ab:ba:f4:54:18:89:9e:0d:19:35:c6:9c:35: 0b:92:79:bc:18:2f:31:2c:d8:55:55:57:f1:ea:76: 18:6c:47:5a:c4:29:26:d6:00:0f:cc:b6:d1:9e:65: 7d:50:db:d4:72:0d:0a:2d:b8:8a:f1:10:91:cb:a5: 01:89:57:68:a7:56:ee:87:91:ae:26:d9:31:81:eb: a3:d9:9b:35:4e:ea:02:78:ee:5a:e9:a7:92:e6:f8: f0:e2:a4:d0:03:f7:e6:81:29:ac:e0:9f:f0:e3:e7: 1a:69:dc:6d:8a:9c:c4:69:2d:51:68:fb:59:22:ef: ea:a4:64:38:e6:61:80:d6:5d:b6:1b:83:ef:4d:26: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1B:50:0E:64:77:66:E3:4C:55:80:13:2A:DB:FE:60:A2:CB:A3:50 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YBtQDmR3ZuNMVYATKtv-YKLLo1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.79.0/24 Signature Algorithm: sha256WithRSAEncryption a3:4d:49:0a:c1:2f:79:f2:da:c4:16:81:dc:f0:33:da:32:c1: eb:27:f1:9e:24:fb:a3:34:9d:c5:75:6f:04:8e:09:2c:a3:3c: d6:f0:39:50:72:87:10:b4:a5:d4:75:7a:5b:6b:4a:18:e2:6e: 36:6c:41:d2:5c:12:77:c7:38:7d:8c:69:67:a6:d2:58:04:a1: ee:f7:d3:eb:58:02:73:47:73:33:51:3f:95:79:1e:fd:e7:cd: 50:ea:4f:1c:2f:be:4e:56:21:d5:d7:7e:39:89:98:a3:54:db: 4b:ac:7e:26:c2:6b:a8:a0:94:e3:08:3e:2b:21:ab:47:cd:46: 62:b5:62:7a:aa:87:fb:b7:1a:44:fc:e0:9d:1b:9b:ff:6a:40: 88:0b:b6:43:2e:1b:c7:3d:cf:fc:92:10:85:fc:5a:c5:dc:8c: 7c:02:df:be:97:12:d6:8f:56:e0:41:c5:9f:22:54:de:cc:14: a2:ec:e6:a4:e4:bc:fd:fd:cc:c9:ee:35:c7:9b:d8:0d:5e:20: 79:84:99:73:d7:80:64:8c:d6:63:cb:fb:27:58:ec:79:eb:d1: 32:01:f7:0b:b6:f7:dc:9a:15:5a:fd:33:f5:3c:f6:5a:3f:59: d4:b8:3e:3b:5e:19:82:57:11:5f:b6:6c:37:9d:2c:53:8a:a5: b5:69:42:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OS1GFkGODQP+5Ju/K3atMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDFiNTAwZTY0Nzc2NmUzNGM1NTgwMTMyYWRiZmU2MGEyY2JhMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YS+jw0c2sG09+ip9r6PvOtHsrBU EFEq2pmQM4MNfUND5eMfrZb+LFZOGw3n5ljgVN/sFgD2oUPhA2KQHA68WBaN0EzI 22KdUNAtiiFm3zQVBsNEJwns0/Gg0ApHS9XL/fIQHJLThCyvT0i6swyzVlRv6G2D o+TLnqu69FQYiZ4NGTXGnDULknm8GC8xLNhVVVfx6nYYbEdaxCkm1gAPzLbRnmV9 UNvUcg0KLbiK8RCRy6UBiVdop1buh5GuJtkxgeuj2Zs1TuoCeO5a6aeS5vjw4qTQ A/fmgSms4J/w4+caadxtipzEaS1RaPtZIu/qpGQ45mGA1l22G4PvTSYxjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGAbUA5kd2bjTFWAEyrb/mCiy6NQMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvWUJ0UURtUjNadU5NVllBVEt0di1ZS0xMbzFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVPMA0G CSqGSIb3DQEBCwUAA4IBAQCjTUkKwS958trEFoHc8DPaMsHrJ/GeJPujNJ3FdW8E jgksozzW8DlQcocQtKXUdXpba0oY4m42bEHSXBJ3xzh9jGlnptJYBKHu99PrWAJz R3MzUT+VeR79581Q6k8cL75OViHV1345iZijVNtLrH4mwmuooJTjCD4rIatHzUZi tWJ6qof7txpE/OCdG5v/akCIC7ZDLhvHPc/8khCF/FrF3Ix8At++lxLWj1bgQcWf IlTezBSi7Oak5Lz9/czJ7jXHm9gNXiB5hJlz14BkjNZjy/snWOx569EyAfcLtvfc mhVa/TP1PPZaP1nUuD47XhmCVxFftmw3nSxTiqW1aUJK -----END CERTIFICATE-----Generated at Sat Jan 10 12:50:26 2026 by rpki-client