This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Yq8XQJymVBJsVyncZJCF8CnkrVM.roa File: Yq8XQJymVBJsVyncZJCF8CnkrVM.roa (raw, json) Hash identifier: 2gIvHCujAYk3VfeKm7UN2oyr4C3GwshOvWOmySie+aU= Subject key identifier: 62:AF:17:40:9C:A6:54:12:6C:57:29:DC:64:90:85:F0:29:E4:AD:53 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12FCF8AD9129F8A754D2A9E134645C Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Yq8XQJymVBJsVyncZJCF8CnkrVM.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199225 IP address blocks: 212.243.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fc:f8:ad:91:29:f8:a7:54:d2:a9:e1:34:64:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62af17409ca654126c5729dc649085f029e4ad53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:7d:08:cb:b5:da:d0:43:70:35:e9:61:36: 20:a9:a4:e6:15:4a:0a:48:4b:2a:0f:0e:04:b6:27: fa:57:96:9b:f4:4f:3c:08:53:d8:33:80:f8:75:69: ee:79:9e:a8:1e:6c:c8:74:60:f4:fc:79:d8:43:1f: 1b:fc:b8:d8:96:61:5e:2f:75:c0:d9:1e:a0:5a:e0: 5f:a2:77:3d:68:e6:ac:05:b9:17:53:17:c8:c9:ed: 87:94:e5:df:ba:d8:be:5e:9b:1d:b7:fe:5e:7f:00: c2:65:69:81:0e:15:0d:3d:fb:d7:16:09:70:03:69: 58:0b:e9:1c:ff:05:3f:14:79:24:39:b5:7b:1a:49: 7e:86:c9:28:58:2c:86:20:35:1a:2d:e4:8a:13:0a: 2a:07:13:d9:07:b0:2b:74:48:b9:24:95:a1:b7:a5: c6:9b:fe:78:00:9f:62:21:53:72:ce:df:43:22:ed: 3f:3d:fa:2f:b0:81:46:0a:48:a3:93:8a:26:04:04: 1f:d0:69:1a:ea:54:7d:15:6a:e6:03:da:40:3d:d6: c4:9e:cf:0a:fb:5c:79:ec:ce:34:34:15:6c:bc:f6: 3e:dd:6e:49:30:91:24:a4:ae:a9:6a:56:4f:1b:70: 20:a3:52:26:ce:dd:dd:e7:b4:56:23:e3:7a:52:a2: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AF:17:40:9C:A6:54:12:6C:57:29:DC:64:90:85:F0:29:E4:AD:53 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Yq8XQJymVBJsVyncZJCF8CnkrVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.243.123.0/24 Signature Algorithm: sha256WithRSAEncryption a9:6d:95:23:7b:86:d0:87:10:9c:7a:89:8e:4e:13:df:ad:8e: b7:15:04:78:1f:f0:b3:f9:b6:9a:d1:9f:aa:34:fb:e4:a1:fd: fb:f5:d8:97:2f:39:37:a7:60:db:63:98:25:16:3e:68:c8:ce: 16:e2:0f:00:95:ec:8e:70:bd:15:09:df:9f:50:84:dd:47:61: 60:00:0a:44:c3:83:34:57:78:82:d0:fc:e2:4a:cd:51:0e:6d: 13:f5:8c:85:02:24:c2:5a:13:a9:73:24:e0:7a:a6:23:f9:d8: 99:a0:0a:c9:58:bd:b1:86:41:f8:c1:cd:f4:e0:6c:45:44:db: 1e:42:3e:81:ee:d4:0c:66:f9:8f:d1:50:b0:86:0b:ac:02:3f: 84:ba:e8:72:3b:e5:ca:34:3d:ad:1f:42:d5:9d:bd:58:f5:db: 34:69:54:8e:c1:b2:2f:09:e9:fb:5f:0a:78:47:a4:4e:ae:5d: b8:be:9a:c3:6c:cf:ec:25:31:96:c1:25:b0:5a:96:dc:5f:1d: 16:6c:f7:96:d2:6e:c4:12:51:39:46:b7:1d:f6:8d:3b:31:98: d0:6f:3b:05:53:d4:5a:0b:59:b6:e1:07:1b:8d:e8:18:f4:d7: 1b:10:11:c1:0e:de:b2:77:03:f2:c2:53:f0:f1:34:97:95:13: 34:45:be:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Evz4rZEp+KdU0qnhNGRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmFmMTc0MDljYTY1NDEyNmM1NzI5ZGM2NDkwODVmMDI5ZTRhZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykF9CMu12tBDcDXpYTYgqaTmFUoK SEsqDw4Etif6V5ab9E88CFPYM4D4dWnueZ6oHmzIdGD0/HnYQx8b/LjYlmFeL3XA 2R6gWuBfonc9aOasBbkXUxfIye2HlOXfuti+Xpsdt/5efwDCZWmBDhUNPfvXFglw A2lYC+kc/wU/FHkkObV7Gkl+hskoWCyGIDUaLeSKEwoqBxPZB7ArdEi5JJWht6XG m/54AJ9iIVNyzt9DIu0/PfovsIFGCkijk4omBAQf0Gka6lR9FWrmA9pAPdbEns8K +1x57M40NBVsvPY+3W5JMJEkpK6palZPG3Ago1Imzt3d57RWI+N6UqIa5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKvF0CcplQSbFcp3GSQhfAp5K1TMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvWXE4WFFKeW1WQkpzVnluY1pKQ0Y4Q25rclZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN7MA0G CSqGSIb3DQEBCwUAA4IBAQCpbZUje4bQhxCceomOThPfrY63FQR4H/Cz+baa0Z+q NPvkof379diXLzk3p2DbY5glFj5oyM4W4g8AleyOcL0VCd+fUITdR2FgAApEw4M0 V3iC0PziSs1RDm0T9YyFAiTCWhOpcyTgeqYj+diZoArJWL2xhkH4wc304GxFRNse Qj6B7tQMZvmP0VCwhgusAj+EuuhyO+XKND2tH0LVnb1Y9ds0aVSOwbIvCen7Xwp4 R6ROrl24vprDbM/sJTGWwSWwWpbcXx0WbPeW0m7EElE5Rrcd9o07MZjQbzsFU9Ra C1m24QcbjegY9NcbEBHBDt6ydwPywlPw8TSXlRM0Rb5v -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:26 2026 by rpki-client