This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/YhEfS85SYBMPKRthi3IBpgKLVMM.roa File: YhEfS85SYBMPKRthi3IBpgKLVMM.roa (raw, json) Hash identifier: GHyyiR6rzvrtE1D+fKHBtSmJRDZFZe0bkqf0kjPYJfQ= Subject key identifier: 62:11:1F:4B:CE:52:60:13:0F:29:1B:61:8B:72:01:A6:02:8B:54:C3 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C773C89B2D5406FC892C15F724DC99 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/YhEfS85SYBMPKRthi3IBpgKLVMM.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 212.116.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:73:c8:9b:2d:54:06:fc:89:2c:15:f7:24:dc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62111f4bce5260130f291b618b7201a6028b54c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:d8:d6:d4:bf:e3:f6:22:10:de:f2:bb:b7: 9c:6f:57:ff:fc:f0:76:84:d5:09:c1:41:83:c0:83: 1a:b7:00:52:d2:33:13:eb:27:4a:d6:dc:84:41:b2: 62:02:4c:9a:0d:78:87:c9:d8:9f:c0:84:95:81:13: 98:d3:eb:e6:18:53:56:0d:64:fb:bb:ef:9c:9a:2e: 6b:4f:fc:4b:9b:89:cc:2e:d8:bd:b4:79:28:65:99: 72:fe:e5:f9:cb:c0:0b:bd:f2:ac:fc:92:7e:f2:61: e8:6a:b7:ee:7b:b6:7c:d5:b2:9c:93:e0:9a:8e:68: b7:d4:b6:07:e4:98:a2:6f:24:fb:5b:c7:b6:2a:bf: 35:85:64:a5:cf:6d:b5:50:20:03:2b:43:8f:6a:56: b5:69:ac:77:c8:3c:cd:bf:c6:91:c8:9d:cb:eb:5d: c7:45:08:55:ad:65:cf:fe:39:e3:36:87:10:8d:b8: ca:f2:2d:f8:01:02:98:2f:b4:8c:6e:e9:91:7c:16: b4:b6:ac:11:0c:f2:e1:6a:1e:1c:45:d1:21:75:7e: 39:1d:f5:13:4c:07:86:a3:fd:9a:33:45:15:34:ff: 0f:93:7b:5f:62:0d:2a:bf:40:59:32:e2:db:e7:71: 86:1d:96:f5:60:e4:1d:fd:07:bb:7b:c1:50:53:a0: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:11:1F:4B:CE:52:60:13:0F:29:1B:61:8B:72:01:A6:02:8B:54:C3 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/YhEfS85SYBMPKRthi3IBpgKLVMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.241.0/24 Signature Algorithm: sha256WithRSAEncryption 07:4f:91:e3:6a:3f:47:6a:dc:04:f0:b1:ac:4c:78:1f:8f:b9: 25:8b:0e:82:18:72:21:53:3f:80:6d:b8:c9:14:a1:44:05:f6: 64:68:31:8e:63:46:fb:5a:c6:c0:62:f7:e8:aa:b4:f9:18:32: 90:c2:69:62:be:10:bd:b3:45:f5:fd:83:f7:04:76:4d:e6:05: 37:55:0e:32:ad:ad:fe:7e:10:dd:0b:86:01:6a:01:03:24:54: 3a:19:db:fc:54:90:ab:86:0f:c0:12:dd:d9:a8:75:ae:89:33: 38:66:47:a6:95:17:1c:71:8d:36:cc:aa:1c:58:4a:74:8d:64: 14:d3:3c:bc:51:cf:ad:2a:94:83:54:ac:45:11:c2:8c:e3:c0: 4e:3a:15:4a:78:15:4d:28:7f:50:53:16:2f:a5:62:44:c3:3e: 82:5b:34:1e:89:8f:15:40:f7:b0:b2:b7:39:1f:e8:48:79:64: f2:88:fd:7b:9a:0e:d9:bd:24:8e:fa:25:4a:ac:a9:08:36:0b: d0:fa:e6:b1:a0:9d:6c:09:04:a3:25:1f:dd:8a:b1:c5:87:0e: c9:7d:b7:6e:90:99:87:ba:2d:23:79:46:5e:df:ce:48:b1:fd: f6:c3:4f:04:fc:39:32:bd:88:cb:66:db:79:d8:b7:5d:83:c0: 56:5d:0f:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3PImy1UBvyJLBX3JNyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjExMWY0YmNlNTI2MDEzMGYyOTFiNjE4YjcyMDFhNjAyOGI1NGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlevY1tS/4/YiEN7yu7ecb1f//PB2 hNUJwUGDwIMatwBS0jMT6ydK1tyEQbJiAkyaDXiHydifwISVgROY0+vmGFNWDWT7 u++cmi5rT/xLm4nMLti9tHkoZZly/uX5y8ALvfKs/JJ+8mHoarfue7Z81bKck+Ca jmi31LYH5JiibyT7W8e2Kr81hWSlz221UCADK0OPala1aax3yDzNv8aRyJ3L613H RQhVrWXP/jnjNocQjbjK8i34AQKYL7SMbumRfBa0tqwRDPLhah4cRdEhdX45HfUT TAeGo/2aM0UVNP8Pk3tfYg0qv0BZMuLb53GGHZb1YOQd/Qe7e8FQU6CwiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIRH0vOUmATDykbYYtyAaYCi1TDMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvWWhFZlM4NVNZQk1QS1J0aGkzSUJwZ0tMVk1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTxMA0G CSqGSIb3DQEBCwUAA4IBAQAHT5Hjaj9HatwE8LGsTHgfj7kliw6CGHIhUz+AbbjJ FKFEBfZkaDGOY0b7WsbAYvfoqrT5GDKQwmlivhC9s0X1/YP3BHZN5gU3VQ4yra3+ fhDdC4YBagEDJFQ6Gdv8VJCrhg/AEt3ZqHWuiTM4ZkemlRcccY02zKocWEp0jWQU 0zy8Uc+tKpSDVKxFEcKM48BOOhVKeBVNKH9QUxYvpWJEwz6CWzQeiY8VQPewsrc5 H+hIeWTyiP17mg7ZvSSO+iVKrKkINgvQ+uaxoJ1sCQSjJR/dirHFhw7JfbdukJmH ui0jeUZe385Isf32w08E/DkyvYjLZtt52Lddg8BWXQ8x -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:45 2026 by rpki-client