This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa File: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (raw, json) Hash identifier: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w= Subject key identifier: C9:DB:69:E9:16:BC:CA:FD:77:74:94:65:8F:95:38:BC:4A:4B:E5:A4 Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019B7C8073756583ACD970DA1785F942BFF9 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa Signing time: Fri 02 Jan 2026 02:19:11 +0000 ROA not before: Fri 02 Jan 2026 02:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 109.105.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:73:75:65:83:ac:d9:70:da:17:85:f9:42:bf:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jan 2 02:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9db69e916bccafd777494658f9538bc4a4be5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:27:65:54:5a:b6:4c:98:d4:ab:7e:d0:71: 6a:6b:95:4a:2d:68:61:95:88:33:e7:f0:80:f1:3f: 6e:25:2d:b0:ca:3a:42:69:3d:60:1a:6f:45:c5:39: df:57:13:63:3c:50:db:75:61:fd:8d:47:aa:e9:09: c8:73:7f:07:e1:e0:75:47:43:97:ab:75:c0:79:25: ed:35:be:c3:cc:4e:de:19:ed:3a:c0:1d:2b:be:b0: a2:8c:d1:51:30:68:fa:17:40:55:1b:d2:4f:22:4e: 78:b9:ad:71:5c:be:e7:1a:d2:77:86:57:35:42:cb: ce:4a:67:2d:16:10:8f:5a:99:e1:86:15:a0:bd:ff: 17:42:de:58:04:7c:27:3b:71:f7:56:39:21:dc:fd: b6:c6:e0:fd:17:22:c7:36:1e:95:24:d8:ab:08:e1: 43:1c:65:3b:1a:d8:43:27:1b:47:ae:c3:db:53:d1: 4e:38:c9:d0:61:1f:25:69:14:5d:81:80:18:fd:d7: 21:40:a8:12:ba:37:dc:20:67:50:18:eb:b5:ca:a6: 02:ac:18:af:b5:a2:8d:69:98:5f:19:f8:49:cb:99: a8:3f:02:ce:bb:2d:9d:ce:05:7d:1f:9b:ee:ca:50: 80:ae:ce:33:ce:01:7c:20:ea:97:db:5a:94:2d:37: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DB:69:E9:16:BC:CA:FD:77:74:94:65:8F:95:38:BC:4A:4B:E5:A4 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.105.192.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:99:a7:42:55:a0:8b:bb:dd:03:6e:13:61:0f:28:13:fa:a8: 57:f8:c9:5a:1a:c7:eb:d8:14:f8:eb:83:81:a4:0f:f3:a6:36: a1:98:74:6f:36:02:c0:02:69:06:47:7e:a7:db:e2:31:9c:04: 33:dd:05:29:92:e2:0a:3a:71:4e:57:d1:4d:f8:f7:fb:db:b9: 98:d5:97:ea:13:00:0e:4e:ec:d7:8b:fb:d7:97:92:64:76:a4: e1:63:82:0e:11:39:e7:37:12:c1:3f:fa:a7:4c:21:d2:bb:fa: ad:56:6c:f0:17:20:7f:a4:de:4d:f4:d3:35:ba:f7:e5:16:de: 9b:0e:cb:81:95:f3:08:80:c5:b2:dc:86:6b:ec:14:f8:d5:1b: 81:46:b0:59:2f:08:b7:ac:d7:f7:e3:9c:2c:39:a0:99:13:a5: 31:e3:c6:5d:4f:2e:57:e6:7e:3c:cf:3f:7f:8f:98:80:d6:00: 7d:40:9b:d6:7f:9f:f8:04:a5:2b:d4:ec:5d:da:a5:6f:d1:e7: a8:1a:f8:37:0c:df:02:4b:f2:43:5c:53:46:8b:fc:50:a9:db: 9a:2d:43:fa:e5:5c:54:f1:d3:03:dc:49:13:f2:f4:01:90:88: f5:68:cc:13:97:10:2d:a4:44:2f:6d:b4:6c:ca:b8:b8:df:1b: c1:e9:f9:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHN1ZYOs2XDaF4X5Qr/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwMTAyMDIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWRiNjllOTE2YmNjYWZkNzc3NDk0NjU4Zjk1MzhiYzRhNGJlNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3QnZVRatkyY1Kt+0HFqa5VKLWhh lYgz5/CA8T9uJS2wyjpCaT1gGm9FxTnfVxNjPFDbdWH9jUeq6QnIc38H4eB1R0OX q3XAeSXtNb7DzE7eGe06wB0rvrCijNFRMGj6F0BVG9JPIk54ua1xXL7nGtJ3hlc1 QsvOSmctFhCPWpnhhhWgvf8XQt5YBHwnO3H3Vjkh3P22xuD9FyLHNh6VJNirCOFD HGU7GthDJxtHrsPbU9FOOMnQYR8laRRdgYAY/dchQKgSujfcIGdQGOu1yqYCrBiv taKNaZhfGfhJy5moPwLOuy2dzgV9H5vuylCArs4zzgF8IOqX21qULTdhGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnbaekWvMr9d3SUZY+VOLxKS+WkMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEveWR0cDZSYTh5djEzZEpSbGo1VTR2RXBMNWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnAMA0G CSqGSIb3DQEBCwUAA4IBAQA6madCVaCLu90DbhNhDygT+qhX+MlaGsfr2BT464OB pA/zpjahmHRvNgLAAmkGR36n2+IxnAQz3QUpkuIKOnFOV9FN+Pf727mY1ZfqEwAO TuzXi/vXl5JkdqThY4IOETnnNxLBP/qnTCHSu/qtVmzwFyB/pN5N9NM1uvflFt6b DsuBlfMIgMWy3IZr7BT41RuBRrBZLwi3rNf345wsOaCZE6Ux48ZdTy5X5n48zz9/ j5iA1gB9QJvWf5/4BKUr1Oxd2qVv0eeoGvg3DN8CS/JDXFNGi/xQqduaLUP65VxU 8dMD3EkT8vQBkIj1aMwTlxAtpEQvbbRsyri43xvB6flV -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:16 2026 by rpki-client