This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yfuTkFQKjPgCxkciPRz1HIUo6Gw.roa File: yfuTkFQKjPgCxkciPRz1HIUo6Gw.roa (raw, json) Hash identifier: V/g6j3QRRQ10jRrTt5T1G9dqYBUtdzYwy5fiLM0sH2I= Subject key identifier: C9:FB:93:90:54:0A:8C:F8:02:C6:47:22:3D:1C:F5:1C:85:28:E8:6C Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019B7D5B273771880DD041ABCFD77AAAE770 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yfuTkFQKjPgCxkciPRz1HIUo6Gw.roa Signing time: Fri 02 Jan 2026 06:18:04 +0000 ROA not before: Fri 02 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49581 IP address blocks: 109.122.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:27:37:71:88:0d:d0:41:ab:cf:d7:7a:aa:e7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jan 2 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9fb9390540a8cf802c647223d1cf51c8528e86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:d3:17:ca:ea:5a:f4:1e:bd:f7:4d:e2:14: 91:31:c7:58:9b:00:72:e1:49:eb:4f:a8:42:d8:90: 83:77:83:68:7a:f4:f4:d8:5c:87:66:9e:20:c0:c6: 2d:99:95:81:7e:19:93:e9:56:ba:f9:13:1f:ae:fa: 20:b2:ce:9f:e8:04:f0:a7:7c:ef:d6:44:bb:d6:a7: fb:0f:34:6d:06:30:38:53:b7:ca:fe:ce:9a:f6:54: 5e:a1:3c:a9:e9:18:04:6c:76:95:fd:b8:ac:31:be: ef:69:df:2b:cc:c5:01:c4:99:bb:71:f5:e1:a8:2e: b2:1c:b5:79:a8:1a:de:0b:c1:33:05:9b:de:e0:f1: 52:94:0c:9a:6f:5a:ee:39:84:4a:78:94:d7:6d:19: 0c:33:53:e1:5d:29:e6:84:2f:15:9f:fd:8f:32:38: e5:a4:b2:99:f4:8d:68:26:fa:e6:2f:87:b0:01:81: 85:15:bf:5e:d3:e4:07:c2:4a:1e:cc:b1:9f:62:f6: c3:aa:52:ce:34:13:79:63:9a:c7:eb:23:1c:4d:8c: aa:39:da:ed:16:15:7f:e6:da:24:f2:5c:53:8e:af: 29:69:61:d5:29:01:3d:b9:85:e6:32:b0:e7:9c:b1: f1:fb:f6:40:09:fc:08:c6:2f:d9:94:24:b3:72:f7: 1e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FB:93:90:54:0A:8C:F8:02:C6:47:22:3D:1C:F5:1C:85:28:E8:6C X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yfuTkFQKjPgCxkciPRz1HIUo6Gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.250.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:d4:03:e1:93:d2:e9:09:cc:2a:bb:54:37:e6:db:a5:79:fc: 13:c0:cc:f7:63:78:7f:e8:77:10:26:60:da:d6:14:c8:41:1e: 1c:88:c4:7b:da:2e:c3:5c:b7:e6:1b:79:60:c1:0c:fa:e9:80: 63:48:fc:1d:2b:af:da:37:f8:8b:3e:41:49:63:37:21:42:17: 15:61:e0:38:86:e2:2d:26:80:ee:05:49:7c:3a:e9:d9:82:bd: 13:0d:72:26:9c:fa:72:f3:4e:57:87:77:c6:3d:f6:42:d7:4d: 6f:aa:86:a3:42:94:88:8c:30:63:0d:ae:79:ec:9f:0f:ae:c9: 51:54:d2:14:1e:4c:d0:9e:86:a1:8d:c6:a2:86:1c:74:10:ea: b4:11:65:42:a9:37:0c:94:06:21:96:41:9f:03:da:ba:cd:8f: 64:48:81:24:a1:76:c5:32:9f:42:ac:7f:71:04:13:95:31:fa: 5a:f8:68:2d:f9:6e:71:8a:11:e0:bd:6d:6b:17:29:00:fb:b5: 3c:58:46:e1:2a:9b:4c:a7:47:21:8a:81:0f:e5:cf:68:1e:6d: 21:ae:c3:cf:79:c8:b0:b3:4c:e9:5d:85:22:68:4f:7e:9e:4f: cd:07:06:a3:c0:e9:dc:02:51:e1:01:be:c3:50:06:ef:e3:12: 66:7e:78:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wyc3cYgN0EGrz9d6qudwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMTAyMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWZiOTM5MDU0MGE4Y2Y4MDJjNjQ3MjIzZDFjZjUxYzg1MjhlODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXLTF8rqWvQevfdN4hSRMcdYmwBy 4UnrT6hC2JCDd4NoevT02FyHZp4gwMYtmZWBfhmT6Va6+RMfrvogss6f6ATwp3zv 1kS71qf7DzRtBjA4U7fK/s6a9lReoTyp6RgEbHaV/bisMb7vad8rzMUBxJm7cfXh qC6yHLV5qBreC8EzBZve4PFSlAyab1ruOYRKeJTXbRkMM1PhXSnmhC8Vn/2PMjjl pLKZ9I1oJvrmL4ewAYGFFb9e0+QHwkoezLGfYvbDqlLONBN5Y5rH6yMcTYyqOdrt FhV/5tok8lxTjq8paWHVKQE9uYXmMrDnnLHx+/ZACfwIxi/ZlCSzcvcejQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMn7k5BUCoz4AsZHIj0c9RyFKOhsMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEveWZ1VGtGUUtqUGdDeGtjaVBSejFISVVvNkd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXr6MA0G CSqGSIb3DQEBCwUAA4IBAQCN1APhk9LpCcwqu1Q35tulefwTwMz3Y3h/6HcQJmDa 1hTIQR4ciMR72i7DXLfmG3lgwQz66YBjSPwdK6/aN/iLPkFJYzchQhcVYeA4huIt JoDuBUl8OunZgr0TDXImnPpy805Xh3fGPfZC101vqoajQpSIjDBjDa557J8PrslR VNIUHkzQnoahjcaihhx0EOq0EWVCqTcMlAYhlkGfA9q6zY9kSIEkoXbFMp9CrH9x BBOVMfpa+Ggt+W5xihHgvW1rFykA+7U8WEbhKptMp0chioEP5c9oHm0hrsPPeciw s0zpXYUiaE9+nk/NBwajwOncAlHhAb7DUAbv4xJmfniJ -----END CERTIFICATE-----Generated at Wed Jan 21 09:14:20 2026 by rpki-client