This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/YgaEaBPbEzI_TnIF4yh7SCgESPs.roa File: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (raw, json) Hash identifier: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww= Subject key identifier: 62:06:84:68:13:DB:13:32:3F:4E:72:05:E3:28:7B:48:28:04:48:FB Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38AEA1DC2EF5295A5F25D3119D388E Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/YgaEaBPbEzI_TnIF4yh7SCgESPs.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205656 IP address blocks: 212.111.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ae:a1:dc:2e:f5:29:5a:5f:25:d3:11:9d:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6206846813db13323f4e7205e3287b48280448fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:30:41:38:74:80:d3:4a:4f:7e:2c:d6:11: 5c:d4:4c:71:91:12:11:36:40:c6:1c:f5:1f:3d:2f: 6d:29:e7:fd:d1:d1:da:c2:b2:69:f9:c7:ba:8b:5e: df:db:6c:55:fc:96:80:e2:47:49:f0:dd:14:f4:91: 4b:39:9f:69:17:f0:fe:11:ac:08:42:3b:10:27:49: 83:66:92:01:f7:46:85:38:33:d5:59:cd:fc:9a:a5: 16:55:36:aa:b0:f4:98:ea:6e:fb:5d:62:d5:13:56: 68:50:1b:bf:ba:84:d0:83:95:a2:a6:04:bb:e9:72: 19:32:ff:40:bd:7a:c4:62:40:c3:a3:ca:72:85:67: a8:a9:a8:66:2d:f7:37:61:cf:9e:90:e5:d0:23:20: f1:7e:02:34:1f:13:38:95:17:07:1c:88:4b:04:9f: 22:d2:d2:a9:58:24:a2:b7:5c:7d:bd:68:35:9a:08: 3f:85:11:9e:9a:64:d7:24:da:54:00:84:37:99:8b: 04:1d:8a:a2:6a:e2:b1:de:05:32:80:d2:11:27:51: 2d:a3:f7:7c:28:4f:14:1c:f8:ab:79:36:a0:20:0e: b2:55:c3:3b:67:fc:58:51:85:2a:cf:15:62:40:47: 9c:91:37:14:64:88:c3:11:b5:89:2b:a4:49:64:b6: 26:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:06:84:68:13:DB:13:32:3F:4E:72:05:E3:28:7B:48:28:04:48:FB X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/YgaEaBPbEzI_TnIF4yh7SCgESPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.111.205.0/24 Signature Algorithm: sha256WithRSAEncryption 83:96:ed:6a:da:c1:1a:09:e1:65:22:d7:53:24:dc:f0:69:29: 21:18:63:72:59:f7:9c:77:ef:38:74:d4:61:39:a2:26:26:a3: b2:01:9f:33:36:22:12:f7:6e:87:be:f9:44:e7:03:0d:45:26: 1a:5b:ca:e3:a8:53:4f:9c:b7:48:0d:2b:88:24:04:60:aa:e3: a5:b3:3f:b0:c3:f5:56:4a:e8:08:04:f0:c5:a9:19:fb:9b:9b: 8d:45:52:9f:98:fd:b4:7b:a3:87:ed:6c:06:48:33:00:2a:bd: 32:09:75:03:e9:de:da:15:75:66:cf:2f:23:95:e1:0a:88:8d: 01:b0:21:77:74:03:7e:95:7a:29:18:f2:82:74:e0:80:db:40: 36:59:9f:4f:13:c1:a7:0a:7d:63:9e:b2:f2:8f:a2:d1:d3:1e: 80:9d:e7:dc:07:ad:90:f3:27:0d:d3:e4:d0:dc:34:16:9a:b3: 59:4c:b7:53:67:44:ca:44:98:39:19:83:ac:d8:58:65:84:59: e6:06:70:d7:0a:38:6f:e3:fb:12:ae:60:fb:5a:32:4a:24:f2: 74:cc:11:1e:84:58:1e:c6:c3:61:ed:82:26:0b:64:61:c8:ea: ce:e5:11:d0:ca:0b:8f:ab:f4:21:a0:30:52:a4:13:f3:b9:9d: d4:ce:0d:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OK6h3C71KVpfJdMRnTiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjA2ODQ2ODEzZGIxMzMyM2Y0ZTcyMDVlMzI4N2I0ODI4MDQ0OGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz8wQTh0gNNKT34s1hFc1ExxkRIR NkDGHPUfPS9tKef90dHawrJp+ce6i17f22xV/JaA4kdJ8N0U9JFLOZ9pF/D+EawI QjsQJ0mDZpIB90aFODPVWc38mqUWVTaqsPSY6m77XWLVE1ZoUBu/uoTQg5WipgS7 6XIZMv9AvXrEYkDDo8pyhWeoqahmLfc3Yc+ekOXQIyDxfgI0HxM4lRcHHIhLBJ8i 0tKpWCSit1x9vWg1mgg/hRGemmTXJNpUAIQ3mYsEHYqiauKx3gUygNIRJ1Eto/d8 KE8UHPireTagIA6yVcM7Z/xYUYUqzxViQEeckTcUZIjDEbWJK6RJZLYm3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGIGhGgT2xMyP05yBeMoe0goBEj7MB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvWWdhRWFCUGJFeklfVG5JRjR5aDdTQ2dFU1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G/NMA0G CSqGSIb3DQEBCwUAA4IBAQCDlu1q2sEaCeFlItdTJNzwaSkhGGNyWfecd+84dNRh OaImJqOyAZ8zNiIS926HvvlE5wMNRSYaW8rjqFNPnLdIDSuIJARgquOlsz+ww/VW SugIBPDFqRn7m5uNRVKfmP20e6OH7WwGSDMAKr0yCXUD6d7aFXVmzy8jleEKiI0B sCF3dAN+lXopGPKCdOCA20A2WZ9PE8GnCn1jnrLyj6LR0x6AnefcB62Q8ycN0+TQ 3DQWmrNZTLdTZ0TKRJg5GYOs2FhlhFnmBnDXCjhv4/sSrmD7WjJKJPJ0zBEehFge xsNh7YImC2RhyOrO5RHQyguPq/QhoDBSpBPzuZ3Uzg1U -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:12 2026 by rpki-client