This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YxenGo7FLzgwaa6auNpv9ByDyhU.roa File: YxenGo7FLzgwaa6auNpv9ByDyhU.roa (raw, json) Hash identifier: sD5oiy2KEJVsA4JO35FK73ly6oOVCuMuLRUMFeiau94= Subject key identifier: 63:17:A7:1A:8E:C5:2F:38:30:69:AE:9A:B8:DA:6F:F4:1C:83:CA:15 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E77AAEBE089BDE8FE3DB979CE80FF Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YxenGo7FLzgwaa6auNpv9ByDyhU.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215865 IP address blocks: 89.251.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:77:aa:eb:e0:89:bd:e8:fe:3d:b9:79:ce:80:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6317a71a8ec52f383069ae9ab8da6ff41c83ca15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:f3:9c:36:33:14:59:e5:96:ec:90:34:d8: 7c:f9:0f:af:39:c5:92:e3:4c:5a:8f:fc:84:4b:4b: 63:8c:65:a4:8a:7c:bf:b0:56:f9:94:7e:4f:96:73: 2e:32:db:3c:72:c7:c5:57:29:12:2a:23:a6:61:ac: 92:45:c0:c2:56:9b:1b:20:e8:11:31:79:fb:66:82: 28:72:e0:2f:09:75:9e:24:9d:e2:dc:59:9a:a5:16: 38:0c:89:47:ba:11:5f:ce:5f:ab:eb:2c:0c:78:55: 06:4e:0f:6b:b6:8a:27:64:88:e6:85:d6:01:34:74: 74:e7:14:2f:df:13:78:f0:79:5d:5c:61:71:ab:28: 6e:10:50:85:1c:9c:1c:3b:49:ec:fc:1f:61:14:2e: 56:a9:a3:05:e2:d0:61:85:91:25:9a:62:75:3e:19: a9:71:ab:aa:68:75:f2:18:75:f5:47:74:74:9f:c7: e1:42:26:f3:bc:73:22:6d:3d:d2:a1:21:f2:36:cb: 9f:6d:36:4d:c8:5a:79:43:fd:06:6b:fb:03:39:3b: 6b:ab:10:f8:22:ba:5c:b1:aa:6e:58:92:91:ae:cd: eb:83:13:cb:39:9f:da:b3:0d:19:90:69:09:e1:b3: e1:d9:d3:55:2c:fb:15:6d:3e:70:d4:bc:d3:39:8e: 98:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:17:A7:1A:8E:C5:2F:38:30:69:AE:9A:B8:DA:6F:F4:1C:83:CA:15 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YxenGo7FLzgwaa6auNpv9ByDyhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.21.0/24 Signature Algorithm: sha256WithRSAEncryption 92:9d:a7:20:3c:71:b1:34:60:86:07:5b:7d:ee:85:6f:e8:4a: 1b:24:c4:fb:da:3a:cf:f8:23:04:b3:2f:26:fc:81:48:e8:5e: 5b:08:d7:3e:c1:f3:03:ee:f2:ee:b4:de:bf:e5:eb:07:dd:5a: 99:04:ad:1d:31:0a:f1:c2:09:1e:cc:34:96:40:a4:8b:e7:8a: e8:6a:1b:20:78:53:03:ab:94:ac:22:0e:5c:e7:6b:dc:ad:61: ea:86:83:82:76:41:6d:ba:21:fb:1f:a4:0b:ac:c6:0b:81:95: 7e:09:39:7b:f7:06:46:3b:65:5c:87:a6:95:7a:fd:f0:5a:97: 0a:81:3b:3c:2f:f9:7f:2b:d7:43:3d:7e:54:d9:30:bc:24:19: c2:b0:6c:5c:e2:b3:1b:6f:36:27:05:bf:0e:81:25:61:80:d5: c2:a9:13:4c:38:4e:29:42:47:0a:5b:a0:4a:7b:18:d8:5d:bd: 92:4a:75:cd:c2:f2:c5:c4:f9:75:fb:c6:8a:1d:f3:43:f7:d8: 16:36:bd:c1:0e:2b:9a:c1:8a:f7:01:a6:3f:1a:20:c7:ae:bc: 1d:12:9f:29:f4:e6:e4:f3:f5:44:ea:83:c0:6d:58:f4:4c:33: ac:8b:8e:c6:8c:b7:12:74:66:51:50:65:09:17:6f:53:62:92: 6a:1d:a4:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fneq6+CJvej+Pbl5zoD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzE3YTcxYThlYzUyZjM4MzA2OWFlOWFiOGRhNmZmNDFjODNjYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/zznDYzFFnlluyQNNh8+Q+vOcWS 40xaj/yES0tjjGWkiny/sFb5lH5PlnMuMts8csfFVykSKiOmYaySRcDCVpsbIOgR MXn7ZoIocuAvCXWeJJ3i3FmapRY4DIlHuhFfzl+r6ywMeFUGTg9rtoonZIjmhdYB NHR05xQv3xN48HldXGFxqyhuEFCFHJwcO0ns/B9hFC5WqaMF4tBhhZElmmJ1Phmp cauqaHXyGHX1R3R0n8fhQibzvHMibT3SoSHyNsufbTZNyFp5Q/0Ga/sDOTtrqxD4 IrpcsapuWJKRrs3rgxPLOZ/asw0ZkGkJ4bPh2dNVLPsVbT5w1LzTOY6YxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMXpxqOxS84MGmumrjab/Qcg8oVMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvWXhlbkdvN0ZMemd3YWE2YXVOcHY5QnlEeWhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsVMA0G CSqGSIb3DQEBCwUAA4IBAQCSnacgPHGxNGCGB1t97oVv6EobJMT72jrP+CMEsy8m /IFI6F5bCNc+wfMD7vLutN6/5esH3VqZBK0dMQrxwgkezDSWQKSL54roahsgeFMD q5SsIg5c52vcrWHqhoOCdkFtuiH7H6QLrMYLgZV+CTl79wZGO2Vch6aVev3wWpcK gTs8L/l/K9dDPX5U2TC8JBnCsGxc4rMbbzYnBb8OgSVhgNXCqRNMOE4pQkcKW6BK exjYXb2SSnXNwvLFxPl1+8aKHfND99gWNr3BDiuawYr3AaY/GiDHrrwdEp8p9Obk 8/VE6oPAbVj0TDOsi47GjLcSdGZRUGUJF29TYpJqHaSN -----END CERTIFICATE-----Generated at Mon Jan 19 13:55:14 2026 by rpki-client