This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/Yjfy-v-HKMEWBvN16nQfiAd0IRs.roa File: Yjfy-v-HKMEWBvN16nQfiAd0IRs.roa (raw, json) Hash identifier: uBEQAFGBVO4swE9ohNLmgnxXcBg9SBRkpgcmULSTVLA= Subject key identifier: 62:37:F2:FA:FF:87:28:C1:16:06:F3:75:EA:74:1F:88:07:74:21:1B Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd Certificate serial: 019B7BA537A0DFD2F8C4D4ABBC8EAFE9B445 Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/Yjfy-v-HKMEWBvN16nQfiAd0IRs.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 163.162.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:37:a0:df:d2:f8:c4:d4:ab:bc:8e:af:e9:b4:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6237f2faff8728c11606f375ea741f880774211b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ea:93:2a:b0:e0:0f:e1:58:db:80:0c:35:61: 4a:16:f2:ec:c2:f7:49:ea:44:d9:23:da:2e:ef:6c: fc:b8:7e:dd:ce:b4:39:d2:b8:eb:56:64:20:49:4e: a2:f6:45:a0:b2:85:e7:54:b0:c5:a4:42:3e:fe:9b: e4:77:f1:e0:55:8f:9e:45:b6:77:a7:54:56:f1:48: 18:9a:5e:82:78:d5:fa:6d:8c:c8:1f:d0:dc:ba:b2: 7f:75:6a:f0:38:ea:71:9d:a6:32:23:83:9a:34:93: 42:ea:48:76:39:97:a8:92:43:ed:19:d7:f7:42:3b: 61:75:91:09:cb:41:5c:eb:e0:07:18:fa:3e:85:8c: 7f:a5:5d:9d:50:20:75:fa:f3:72:09:ee:64:3c:50: 19:05:15:ff:2d:53:cf:bc:89:16:0f:bc:9f:54:0c: 2b:3a:11:a8:ab:02:58:a5:8c:bd:18:00:5b:00:8e: 8d:b8:0d:08:25:4e:26:00:f3:88:98:fa:04:40:00: 4e:ee:fb:2d:86:65:2f:c6:86:e0:0e:6a:71:eb:d7: 44:6d:aa:b8:56:5c:77:5b:74:a1:7c:dc:ac:60:c6: 66:ab:dd:98:9f:a4:b6:55:ef:7e:23:ba:90:a3:32: 9c:46:78:73:a7:c9:7e:cf:1d:31:8a:99:08:16:d2: 39:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:37:F2:FA:FF:87:28:C1:16:06:F3:75:EA:74:1F:88:07:74:21:1B X509v3 Authority Key Identifier: keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/Yjfy-v-HKMEWBvN16nQfiAd0IRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.162.0.0/16 Signature Algorithm: sha256WithRSAEncryption 98:70:d3:7c:b6:a7:d8:2e:0e:a4:08:b3:39:3a:87:67:81:3c: 6a:15:a4:ad:26:55:c1:7e:b4:e8:b3:8f:b6:9f:f3:5d:14:f4: 1a:9e:d5:6d:49:63:38:0d:ab:77:d8:86:8e:b8:ff:74:47:98: 02:da:d0:c0:16:00:27:9b:9c:8e:f3:27:fa:02:e5:a7:18:57: d8:8a:70:a0:be:d2:dd:97:1c:47:d4:7b:2f:24:2e:b3:ef:6d: 0a:ea:25:34:b2:d8:5b:71:b6:b1:5b:3d:34:26:dd:ef:3c:88: 6c:a0:1a:ba:03:be:00:2a:86:2a:c5:99:72:7f:db:cd:45:ec: 55:5b:e7:2f:75:25:37:08:ce:83:42:0d:49:ad:56:07:a1:a7: 22:3c:50:45:51:f0:21:d7:90:d9:9d:b5:a8:10:11:c6:70:50: 39:4c:98:98:bb:6f:d4:e6:04:e6:6c:7e:b7:6e:af:fc:91:1c: 0e:ff:62:34:9c:03:70:5e:4d:bb:e3:db:45:fe:2a:30:00:57: 0e:de:a2:19:fe:6b:7f:b2:43:ef:6a:2e:8e:24:d7:e3:ed:6d: 27:4f:3b:ac:83:37:7b:43:28:a8:aa:68:f3:b3:2f:f9:88:88: f0:bf:da:46:02:ad:89:9c:29:0d:59:7f:f8:e0:b9:59:01:1f: 34:cf:83:52 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7pTeg39L4xNSrvI6v6bRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNGZiZmNmNWZkYzQ4YWIwYmZiNTI4NTRmN2EwNGZjMWNm ZjFkYmQwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjM3ZjJmYWZmODcyOGMxMTYwNmYzNzVlYTc0MWY4ODA3NzQyMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uqTKrDgD+FY24AMNWFKFvLswvdJ 6kTZI9ou72z8uH7dzrQ50rjrVmQgSU6i9kWgsoXnVLDFpEI+/pvkd/HgVY+eRbZ3 p1RW8UgYml6CeNX6bYzIH9DcurJ/dWrwOOpxnaYyI4OaNJNC6kh2OZeokkPtGdf3 QjthdZEJy0Fc6+AHGPo+hYx/pV2dUCB1+vNyCe5kPFAZBRX/LVPPvIkWD7yfVAwr OhGoqwJYpYy9GABbAI6NuA0IJU4mAPOImPoEQABO7vsthmUvxobgDmpx69dEbaq4 Vlx3W3ShfNysYMZmq92Yn6S2Ve9+I7qQozKcRnhzp8l+zx0xipkIFtI59wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFGI38vr/hyjBFgbzdep0H4gHdCEbMB8GA1UdIwQY MBaAFEtPv89f3EirC/tShU96BPwc/x29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODIt OTJkZGVjNmJkMGEyLzEvWWpmeS12LUhLTUVXQnZOMTZuUWZpQWQwSVJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODItOTJkZGVjNmJkMGEy LzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAo6IwDQYJ KoZIhvcNAQELBQADggEBAJhw03y2p9guDqQIszk6h2eBPGoVpK0mVcF+tOizj7af 810U9Bqe1W1JYzgNq3fYho64/3RHmALa0MAWACebnI7zJ/oC5acYV9iKcKC+0t2X HEfUey8kLrPvbQrqJTSy2FtxtrFbPTQm3e88iGygGroDvgAqhirFmXJ/281F7FVb 5y91JTcIzoNCDUmtVgehpyI8UEVR8CHXkNmdtagQEcZwUDlMmJi7b9TmBOZsfrdu r/yRHA7/YjScA3BeTbvj20X+KjAAVw7eohn+a3+yQ+9qLo4k1+PtbSdPO6yDN3tD KKiqaPOzL/mIiPC/2kYCrYmcKQ1Zf/jguVkBHzTPg1I= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:04 2026 by rpki-client