This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa File: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (raw, json) Hash identifier: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU= Subject key identifier: CA:57:E6:26:BA:7C:E4:8F:EA:3A:AA:B3:DA:5E:1B:E0:E7:63:FD:7A Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38AE3C4D44BBC1AFFE5241FABD1993 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204879 IP address blocks: 212.111.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ae:3c:4d:44:bb:c1:af:fe:52:41:fa:bd:19:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca57e626ba7ce48fea3aaab3da5e1be0e763fd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:76:49:bd:36:91:af:b7:3a:75:06:71:fd: 9a:13:e7:c2:2e:d0:4c:d1:4a:50:60:a4:11:a6:22: eb:2a:dd:5c:8f:5c:84:2f:fd:a8:28:39:f9:ef:26: e9:ec:81:2e:57:ed:a7:97:5d:4a:71:d0:a4:cc:55: 04:b1:75:ae:87:f7:cf:60:3e:fd:e5:2a:26:8c:a7: 07:5f:b0:f0:95:6f:f3:28:e7:4f:1e:93:52:1f:c2: e0:4b:0a:fc:6d:ba:35:5b:20:a8:4f:96:a1:a7:1d: 4a:c5:57:5c:0e:54:46:b0:3d:69:c8:f3:c4:d2:f5: ea:ae:08:9d:92:3e:c2:da:20:c7:ae:db:9e:cc:5f: cb:41:41:bb:b7:ef:a2:a8:09:c9:94:26:25:98:ef: 81:40:06:88:7b:95:9a:04:c6:93:d6:41:d4:b0:55: 42:88:93:21:f2:9b:ad:a4:e3:a0:aa:94:0f:d9:3d: d1:d3:99:d6:54:eb:bf:22:04:b7:50:18:af:60:61: 9f:f7:c5:4a:ba:79:b2:e4:d7:e9:52:a4:f6:00:b2: fb:d5:7a:92:b1:4d:93:5a:66:3a:2b:f8:86:22:56: dd:c9:44:bf:2f:34:d0:11:88:04:03:e7:51:63:ec: 04:92:d5:34:fd:1b:72:ba:9d:cc:20:30:d5:01:bb: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:57:E6:26:BA:7C:E4:8F:EA:3A:AA:B3:DA:5E:1B:E0:E7:63:FD:7A X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.111.209.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:ce:de:d4:91:f1:5f:f1:c2:24:6c:e8:b3:1b:40:a5:53:03: ea:2f:11:fa:6e:90:fc:75:47:5e:7b:8c:fd:f6:ee:bd:13:95: ec:f2:e3:8b:ab:d5:6c:39:22:b2:8f:2c:b1:6f:46:7d:a4:5a: 33:5f:0b:05:9e:0a:7b:07:84:17:21:79:07:db:ea:b3:4c:e3: 30:98:ba:3c:30:f3:53:90:20:b0:a3:a2:6e:8e:61:7a:10:c3: 16:e9:fd:54:7e:19:71:18:3d:82:00:9d:84:bd:4f:91:c2:c1: 8a:21:4e:04:87:ec:23:a4:dc:a1:56:07:93:39:b3:f6:88:f8: 48:74:c0:8e:79:2d:71:8c:8f:79:84:c4:17:4f:98:eb:34:2d: 1c:65:70:34:9b:6b:cc:75:9d:38:bd:41:48:7f:7c:9e:f7:bc: 32:c8:7a:0e:1f:b9:51:2b:0e:62:a1:8a:1c:97:f0:15:47:36: 42:8e:d8:bb:ce:5c:90:6e:37:7f:c4:c3:d3:fb:bf:b9:bf:33: c9:f3:de:0e:fa:a7:31:61:ba:30:08:41:2f:17:c2:ab:be:f4: 66:a7:ad:51:54:46:20:8d:8e:fa:db:7e:d9:a0:e6:61:32:f3: bb:fb:7e:d0:09:a6:5f:e7:2f:83:97:18:f1:44:c2:58:f8:1f: f9:f2:02:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OK48TUS7wa/+UkH6vRmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTU3ZTYyNmJhN2NlNDhmZWEzYWFhYjNkYTVlMWJlMGU3NjNmZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlV2Sb02ka+3OnUGcf2aE+fCLtBM 0UpQYKQRpiLrKt1cj1yEL/2oKDn57ybp7IEuV+2nl11KcdCkzFUEsXWuh/fPYD79 5SomjKcHX7DwlW/zKOdPHpNSH8LgSwr8bbo1WyCoT5ahpx1KxVdcDlRGsD1pyPPE 0vXqrgidkj7C2iDHrtuezF/LQUG7t++iqAnJlCYlmO+BQAaIe5WaBMaT1kHUsFVC iJMh8putpOOgqpQP2T3R05nWVOu/IgS3UBivYGGf98VKunmy5NfpUqT2ALL71XqS sU2TWmY6K/iGIlbdyUS/LzTQEYgEA+dRY+wEktU0/Rtyup3MIDDVAburXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMpX5ia6fOSP6jqqs9peG+DnY/16MB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEveWxmbUpycDg1SV9xT3FxejJsNGI0T2RqX1hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G/RMA0G CSqGSIb3DQEBCwUAA4IBAQBLzt7UkfFf8cIkbOizG0ClUwPqLxH6bpD8dUdee4z9 9u69E5Xs8uOLq9VsOSKyjyyxb0Z9pFozXwsFngp7B4QXIXkH2+qzTOMwmLo8MPNT kCCwo6JujmF6EMMW6f1UfhlxGD2CAJ2EvU+RwsGKIU4Eh+wjpNyhVgeTObP2iPhI dMCOeS1xjI95hMQXT5jrNC0cZXA0m2vMdZ04vUFIf3ye97wyyHoOH7lRKw5ioYoc l/AVRzZCjti7zlyQbjd/xMPT+7+5vzPJ894O+qcxYbowCEEvF8KrvvRmp61RVEYg jY76237ZoOZhMvO7+37QCaZf5y+DlxjxRMJY+B/58gI0 -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:54 2026 by rpki-client