This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/yTZqlhAkkerpe2L4CyUvh9Svaqs.roa File: yTZqlhAkkerpe2L4CyUvh9Svaqs.roa (raw, json) Hash identifier: hMnmd7o1av9aOhsK5OjFywbUYNzo9xYVVgQ8qsY2PHI= Subject key identifier: C9:36:6A:96:10:24:91:EA:E9:7B:62:F8:0B:25:2F:87:D4:AF:6A:AB Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C76E31101E471352BC2845DA6C9541 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/yTZqlhAkkerpe2L4CyUvh9Svaqs.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 212.116.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6e:31:10:1e:47:13:52:bc:28:45:da:6c:95:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9366a96102491eae97b62f80b252f87d4af6aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:04:fc:82:83:f9:c6:49:86:e5:ae:47:49: 4c:d6:68:60:7a:d4:61:c4:a7:e4:69:ed:56:17:52: c3:86:d2:aa:1a:81:cc:a3:1e:4f:ea:c7:64:4d:a7: 6f:81:f1:a2:ee:1d:a1:e2:47:2e:32:fb:32:62:02: 59:d6:bd:83:3f:64:98:35:5b:95:74:65:aa:4c:5a: 31:0e:6b:73:10:6d:86:1b:cf:40:d9:10:71:94:e6: 05:24:b7:69:d6:39:19:4b:2f:18:0c:34:c6:32:00: 71:55:3d:20:ea:26:82:78:cf:05:12:67:b4:9d:4b: 37:4a:99:91:89:d2:33:9a:97:c6:a6:1e:08:02:0f: 80:90:a8:bd:46:e1:d4:95:78:1f:fe:ea:8b:62:18: 85:bc:27:78:da:4e:28:f9:1e:5b:0b:8c:2b:48:c4: d1:85:84:65:2d:08:6a:8c:25:f6:2c:36:9f:b1:ca: 91:f1:e0:9c:1e:ba:27:f2:52:22:53:78:39:40:c6: e7:4d:04:e3:38:53:ef:a3:5b:9e:67:c5:74:c3:80: b6:9b:c8:c4:3a:48:d5:f0:d6:9e:0a:8a:98:1b:62: 55:77:3a:18:4b:d4:9d:bb:5a:39:4b:27:ff:79:0e: b1:a7:e2:c9:cf:f0:15:8d:b4:11:33:f1:85:4e:86: cd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:36:6A:96:10:24:91:EA:E9:7B:62:F8:0B:25:2F:87:D4:AF:6A:AB X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/yTZqlhAkkerpe2L4CyUvh9Svaqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.252.0/22 Signature Algorithm: sha256WithRSAEncryption 34:15:dc:72:f9:bf:59:69:7f:3e:9d:45:d4:ea:d1:51:5e:26: 74:3a:38:32:bd:25:c2:02:cc:c8:3e:d4:50:dc:c8:a3:a4:d4: a1:55:a7:f1:51:d3:fc:d5:ec:f9:1e:1e:79:6c:0b:fc:12:ed: 33:ff:b9:a9:d1:dc:3f:5c:12:7e:32:92:55:1a:50:65:ec:32: dd:3f:94:6d:e9:da:f9:dd:d2:ea:73:c1:62:9e:c8:cf:1c:7d: c6:ab:a7:06:4d:79:6f:80:0f:39:55:86:fa:43:7a:94:cb:48: 6b:ee:82:90:6d:46:a4:cc:a3:cc:16:77:da:f5:8c:67:78:20: 58:6e:91:f5:3d:f0:9c:aa:99:76:be:ab:77:19:c5:e0:7b:82: cb:4e:49:44:82:58:1b:42:47:9d:07:3e:cd:09:25:28:e2:f6: 9a:00:10:42:7f:94:e0:d7:51:cc:b3:48:65:22:4c:07:e9:b8: 44:6a:28:c2:a4:1a:97:8a:67:7b:80:2d:31:ed:f4:fd:c6:18: 82:02:32:eb:05:b0:54:88:2d:11:38:ac:56:c7:4b:f6:fb:d7: 5b:cf:4d:3f:10:cf:d8:38:79:ec:d2:bc:8c:ba:fc:af:74:69: 6e:4e:9b:86:c2:de:39:73:1a:38:e5:54:2f:4c:9c:3e:4f:0c: 5d:59:ba:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x24xEB5HE1K8KEXabJVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTM2NmE5NjEwMjQ5MWVhZTk3YjYyZjgwYjI1MmY4N2Q0YWY2YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteoE/IKD+cZJhuWuR0lM1mhgetRh xKfkae1WF1LDhtKqGoHMox5P6sdkTadvgfGi7h2h4kcuMvsyYgJZ1r2DP2SYNVuV dGWqTFoxDmtzEG2GG89A2RBxlOYFJLdp1jkZSy8YDDTGMgBxVT0g6iaCeM8FEme0 nUs3SpmRidIzmpfGph4IAg+AkKi9RuHUlXgf/uqLYhiFvCd42k4o+R5bC4wrSMTR hYRlLQhqjCX2LDafscqR8eCcHron8lIiU3g5QMbnTQTjOFPvo1ueZ8V0w4C2m8jE OkjV8NaeCoqYG2JVdzoYS9Sdu1o5Syf/eQ6xp+LJz/AVjbQRM/GFTobNTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMk2apYQJJHq6Xti+AslL4fUr2qrMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEveVRacWxoQWtrZXJwZTJMNEN5VXZoOVN2YXFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1HT8MA0G CSqGSIb3DQEBCwUAA4IBAQA0Fdxy+b9ZaX8+nUXU6tFRXiZ0OjgyvSXCAszIPtRQ 3MijpNShVafxUdP81ez5Hh55bAv8Eu0z/7mp0dw/XBJ+MpJVGlBl7DLdP5Rt6dr5 3dLqc8FinsjPHH3Gq6cGTXlvgA85VYb6Q3qUy0hr7oKQbUakzKPMFnfa9YxneCBY bpH1PfCcqpl2vqt3GcXge4LLTklEglgbQkedBz7NCSUo4vaaABBCf5Tg11HMs0hl IkwH6bhEaijCpBqXimd7gC0x7fT9xhiCAjLrBbBUiC0ROKxWx0v2+9dbz00/EM/Y OHns0ryMuvyvdGluTpuGwt45cxo45VQvTJw+TwxdWbrU -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:51 2026 by rpki-client