This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RYbdj0NLewtXWCgXlYi3OlXXkB4.roa File: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (raw, json) Hash identifier: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA= Subject key identifier: 45:86:DD:8F:43:4B:7B:0B:57:58:28:17:95:88:B7:3A:55:D7:90:1E Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A31BD332307B27F8676DE09F2D49CC Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RYbdj0NLewtXWCgXlYi3OlXXkB4.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215590 IP address blocks: 212.113.107.0/24 maxlen: 24 212.113.109.0/24 maxlen: 24 212.113.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1b:d3:32:30:7b:27:f8:67:6d:e0:9f:2d:49:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4586dd8f434b7b0b575828179588b73a55d7901e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:d0:01:dd:4c:3a:d2:b0:7e:ac:2c:fc:bd: 78:a3:c6:3d:58:52:74:5a:ce:da:6a:6b:50:1a:92: b7:dc:4e:c9:27:d1:20:e1:19:b8:a3:da:94:40:03: 91:bc:6d:0e:dc:85:17:11:a0:5a:b1:d9:10:f9:24: 10:a1:3f:28:a7:38:f7:0d:17:8d:07:9a:5b:ef:bd: 27:29:6d:cc:4d:a9:80:e4:91:57:cb:fc:f0:7b:0e: 54:0e:1b:8c:25:c5:c5:13:9f:bf:af:18:9f:2b:10: 18:c7:26:d8:dd:04:09:3a:e3:70:a2:0d:ac:37:fd: 0f:40:89:d5:c6:8c:4b:6b:9d:2e:c6:88:ee:8b:9b: 2f:ee:b4:78:f0:14:cf:de:1c:94:46:ea:67:52:37: d3:3d:ea:81:4d:2d:d6:cd:c6:b7:8c:2f:c7:00:b9: 4c:44:d4:a6:a3:0c:c1:13:cd:d2:18:bc:d2:5c:ec: 3c:eb:3d:ed:98:b0:26:fb:08:32:eb:60:b6:8e:6f: 0e:aa:57:f6:69:04:d6:ef:86:55:ba:c1:41:60:0e: 57:a2:c1:4f:4b:9f:b9:a1:98:fe:28:8d:a9:3e:ce: dd:fe:10:36:07:c4:fd:2d:9c:83:54:8c:ba:14:1c: 9b:01:50:3b:02:20:0d:51:85:5d:ce:c2:58:28:a0: a2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:86:DD:8F:43:4B:7B:0B:57:58:28:17:95:88:B7:3A:55:D7:90:1E X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RYbdj0NLewtXWCgXlYi3OlXXkB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.107.0/24 212.113.109.0/24 212.113.112.0/24 Signature Algorithm: sha256WithRSAEncryption 37:e2:72:9b:4f:07:fc:0b:27:98:b8:13:67:a4:e3:a1:e0:ba: fe:ae:7e:a9:bd:96:c3:84:02:3f:d8:d0:6c:58:9a:d0:c8:d2: 7f:3c:1b:a0:32:5f:14:5a:66:52:15:83:14:44:d4:de:6c:da: ac:d9:9e:57:d8:6a:92:bc:61:ad:f5:0f:85:eb:fa:05:66:c0: 2f:30:61:83:22:6f:fe:17:2c:b8:ce:a3:08:f1:1c:d3:b2:74: df:40:74:a7:a5:f0:3e:c9:35:48:02:36:2a:ba:43:59:d2:76: 7c:08:5c:01:db:48:3d:4e:d0:d0:31:3e:af:ac:fe:8e:5c:b9: d5:94:94:c6:4a:6b:f5:fd:56:fa:82:c2:4e:9e:ea:09:dc:24: 50:0a:04:3e:dd:bc:f0:14:91:30:64:7f:57:1f:5f:73:01:6a: 62:32:5d:23:05:27:b5:a3:95:50:cb:e6:b2:68:0a:53:19:ba: b3:39:98:6e:38:2e:e6:11:eb:e1:5b:a2:c1:c1:3d:c7:49:22: 1c:a7:d5:3c:3c:0c:aa:a9:11:8a:29:7f:2f:6f:61:22:2f:dd: ba:37:c0:96:b5:1d:6a:a6:54:92:6e:c4:20:ea:87:1f:87:37: 8a:05:fa:40:77:0d:59:e8:9a:4f:fc:1b:64:0f:5a:dc:73:3d: ff:12:1b:4b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oxvTMjB7J/hnbeCfLUnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTg2ZGQ4ZjQzNGI3YjBiNTc1ODI4MTc5NTg4YjczYTU1ZDc5MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/LQAd1MOtKwfqws/L14o8Y9WFJ0 Ws7aamtQGpK33E7JJ9Eg4Rm4o9qUQAORvG0O3IUXEaBasdkQ+SQQoT8opzj3DReN B5pb770nKW3MTamA5JFXy/zwew5UDhuMJcXFE5+/rxifKxAYxybY3QQJOuNwog2s N/0PQInVxoxLa50uxojui5sv7rR48BTP3hyURupnUjfTPeqBTS3Wzca3jC/HALlM RNSmowzBE83SGLzSXOw86z3tmLAm+wgy62C2jm8Oqlf2aQTW74ZVusFBYA5XosFP S5+5oZj+KI2pPs7d/hA2B8T9LZyDVIy6FBybAVA7AiANUYVdzsJYKKCiwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEWG3Y9DS3sLV1goF5WItzpV15AeMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvUlliZGowTkxld3RYV0NnWGxZaTNPbFhYa0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1HFrAwQA 1HFtAwQA1HFwMA0GCSqGSIb3DQEBCwUAA4IBAQA34nKbTwf8CyeYuBNnpOOh4Lr+ rn6pvZbDhAI/2NBsWJrQyNJ/PBugMl8UWmZSFYMURNTebNqs2Z5X2GqSvGGt9Q+F 6/oFZsAvMGGDIm/+Fyy4zqMI8RzTsnTfQHSnpfA+yTVIAjYqukNZ0nZ8CFwB20g9 TtDQMT6vrP6OXLnVlJTGSmv1/Vb6gsJOnuoJ3CRQCgQ+3bzwFJEwZH9XH19zAWpi Ml0jBSe1o5VQy+ayaApTGbqzOZhuOC7mEevhW6LBwT3HSSIcp9U8PAyqqRGKKX8v b2EiL926N8CWtR1qplSSbsQg6ocfhzeKBfpAdw1Z6JpP/BtkD1rccz3/EhtL -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:42 2026 by rpki-client