This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/YkJBxQSqvpt04FPzKvCEg11P2gA.roa File: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (raw, json) Hash identifier: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4= Subject key identifier: 62:42:41:C5:04:AA:BE:9B:74:E0:53:F3:2A:F0:84:83:5D:4F:DA:00 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C76FBD4EC299A57230191D1B0ACAB6 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/YkJBxQSqvpt04FPzKvCEg11P2gA.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 94.103.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6f:bd:4e:c2:99:a5:72:30:19:1d:1b:0a:ca:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=624241c504aabe9b74e053f32af084835d4fda00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:03:9d:55:8d:6f:d4:88:78:f5:4b:57:f3: bc:39:ae:b9:12:e8:b4:fe:9d:01:0c:05:5f:2f:f3: 40:df:9d:ed:d4:28:ed:f6:7a:73:da:76:a3:84:27: 74:5c:30:f7:03:f9:f8:50:a0:72:37:ef:56:2c:a7: 2e:ee:29:07:cc:f3:b2:b1:e9:b0:5f:e9:d2:f6:73: 35:9b:a0:1a:65:28:db:a5:e3:e5:50:ff:02:db:f1: 1e:8f:62:4e:d0:ad:54:d2:d3:a6:11:3a:5f:e8:cb: 05:92:3d:45:2a:ff:f5:23:89:cc:a9:5a:61:be:4c: d7:03:9f:b2:03:61:af:dc:db:b8:ad:d2:a6:e5:50: 6e:4a:81:7e:59:3d:7d:ea:1c:8b:ee:47:76:ce:05: 83:54:b5:41:a6:38:82:df:9f:9c:43:16:db:c8:a3: 79:ab:05:eb:26:30:04:5c:e3:76:66:3f:06:f8:6a: b7:ef:d2:6c:1d:a4:d9:01:dc:1a:48:41:c4:ba:73: 62:c1:01:49:d8:58:e5:1e:7f:fb:07:13:42:93:cc: 61:61:05:10:aa:00:b4:f3:db:03:5d:8f:96:dd:9c: 2c:fa:44:10:5e:59:cd:ab:a1:ae:a2:b6:75:c7:b8: da:05:9b:16:27:12:ef:99:ce:c8:90:a9:0b:6b:7b: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:42:41:C5:04:AA:BE:9B:74:E0:53:F3:2A:F0:84:83:5D:4F:DA:00 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/YkJBxQSqvpt04FPzKvCEg11P2gA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.103.60.0/22 Signature Algorithm: sha256WithRSAEncryption 70:26:48:92:30:e8:38:0d:4f:6b:bc:fd:f5:2f:05:56:d7:19: f5:6d:07:76:73:90:29:cc:9e:4c:c5:bd:86:3e:d1:95:5c:83: 56:1f:7d:53:b4:9c:c4:52:b3:4a:cc:d0:6e:43:74:8d:e7:22: 20:4b:fe:c8:5a:d6:cb:aa:bb:6f:13:cf:4f:b8:84:6c:36:96: 6b:0a:ac:6f:36:ef:18:8f:7a:64:86:1c:5b:3b:a4:6f:4f:ca: d0:69:31:06:ee:00:da:3a:1c:82:df:18:cd:18:fb:65:28:28: 8e:d5:33:9f:9e:0c:5d:a0:10:49:a2:62:a2:2a:ad:dd:b0:93: b9:2f:b7:a8:6c:19:38:3f:de:23:7f:63:1d:59:f5:0b:d0:1d: c0:55:25:a4:57:b8:2b:b8:60:45:7e:89:75:de:0d:1a:2d:99: e4:d8:07:18:67:ef:01:4c:34:22:44:2b:35:bf:2e:42:82:e2: 8f:16:94:6d:b4:59:78:65:ad:c0:e1:ec:30:cc:98:20:a2:b0: db:b4:66:be:18:bd:e9:e4:d0:88:62:99:43:cc:62:93:8c:b8: 3f:fd:a0:c8:4a:ef:b8:33:75:ec:07:b3:ba:cd:9c:88:46:52: 22:81:fb:ad:60:f0:0b:28:55:af:58:66:11:67:4d:d4:27:80: 26:ac:29:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2+9TsKZpXIwGR0bCsq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjQyNDFjNTA0YWFiZTliNzRlMDUzZjMyYWYwODQ4MzVkNGZkYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1isDnVWNb9SIePVLV/O8Oa65Eui0 /p0BDAVfL/NA353t1Cjt9npz2najhCd0XDD3A/n4UKByN+9WLKcu7ikHzPOysemw X+nS9nM1m6AaZSjbpePlUP8C2/Eej2JO0K1U0tOmETpf6MsFkj1FKv/1I4nMqVph vkzXA5+yA2Gv3Nu4rdKm5VBuSoF+WT196hyL7kd2zgWDVLVBpjiC35+cQxbbyKN5 qwXrJjAEXON2Zj8G+Gq379JsHaTZAdwaSEHEunNiwQFJ2FjlHn/7BxNCk8xhYQUQ qgC089sDXY+W3Zws+kQQXlnNq6GuorZ1x7jaBZsWJxLvmc7IkKkLa3u3lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGJCQcUEqr6bdOBT8yrwhINdT9oAMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvWWtKQnhRU3F2cHQwNEZQekt2Q0VnMTFQMmdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXmc8MA0G CSqGSIb3DQEBCwUAA4IBAQBwJkiSMOg4DU9rvP31LwVW1xn1bQd2c5ApzJ5Mxb2G PtGVXINWH31TtJzEUrNKzNBuQ3SN5yIgS/7IWtbLqrtvE89PuIRsNpZrCqxvNu8Y j3pkhhxbO6RvT8rQaTEG7gDaOhyC3xjNGPtlKCiO1TOfngxdoBBJomKiKq3dsJO5 L7eobBk4P94jf2MdWfUL0B3AVSWkV7gruGBFfol13g0aLZnk2AcYZ+8BTDQiRCs1 vy5CguKPFpRttFl4Za3A4ewwzJggorDbtGa+GL3p5NCIYplDzGKTjLg//aDISu+4 M3XsB7O6zZyIRlIigfutYPALKFWvWGYRZ03UJ4AmrCnr -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:38 2026 by rpki-client