This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/YQR-M13FITu11JiiH0aP1_gjSMk.roa File: YQR-M13FITu11JiiH0aP1_gjSMk.roa (raw, json) Hash identifier: NMePy6MATxLOKWKo4OhLjfjmDVEUev8l7cfH0WAc4I8= Subject key identifier: 61:04:7E:33:5D:C5:21:3B:B5:D4:98:A2:1F:46:8F:D7:F8:23:48:C9 Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82 Certificate serial: 019B78A32AFCC019B407403D38F8FBF0E821 Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/YQR-M13FITu11JiiH0aP1_gjSMk.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59632 IP address blocks: 176.124.104.0/21 maxlen: 21 2001:67c:744::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2a:fc:c0:19:b4:07:40:3d:38:f8:fb:f0:e8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61047e335dc5213bb5d498a21f468fd7f82348c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:35:c6:d5:87:a9:38:f1:e0:5b:83:b6:e3:09: b0:b0:a1:54:9b:f1:76:e7:9c:c8:b2:1f:d3:71:a4: 4b:6b:b4:61:68:cb:98:18:24:e4:f9:83:46:b1:88: 66:1c:d1:20:ea:c0:4c:85:5d:53:68:89:cd:b9:35: 46:97:93:72:5f:ef:cf:6b:d9:2d:28:33:ca:af:f5: 43:70:8c:14:a8:50:1a:28:d7:46:4b:63:e8:c0:84: cb:eb:30:67:af:28:d0:be:47:78:d0:93:1e:17:ed: 68:ba:09:30:ec:d6:0f:80:87:83:37:cf:34:84:2e: 1c:4b:ad:8f:68:7b:db:ef:44:71:2a:72:d2:c3:09: 88:d7:bf:ff:e4:e2:b2:17:d7:14:2a:32:e8:44:3f: 06:dd:2e:c9:2c:e8:cf:b2:ed:2b:80:b6:8a:5a:e7: fc:7b:52:a0:a6:79:ba:ca:6b:c2:22:2d:96:05:56: 3a:ae:72:0a:ef:77:8e:59:b7:86:75:80:08:a9:3a: 4b:1c:34:56:ac:de:17:7e:36:4c:03:42:97:68:df: a8:d4:c5:da:59:ae:f0:36:7f:c3:c3:70:4f:ac:4f: f4:7c:53:48:c1:02:e1:ef:5f:68:2f:0b:95:ef:9a: dc:d1:b3:fc:bf:3a:6c:a1:7c:c0:f0:c9:6f:b6:1a: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:04:7E:33:5D:C5:21:3B:B5:D4:98:A2:1F:46:8F:D7:F8:23:48:C9 X509v3 Authority Key Identifier: keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/YQR-M13FITu11JiiH0aP1_gjSMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.104.0/21 IPv6: 2001:67c:744::/48 Signature Algorithm: sha256WithRSAEncryption 6c:79:56:3d:d2:2c:46:12:a0:c2:8e:eb:ce:89:3f:cc:e7:b7: c1:4b:74:f6:36:13:94:87:cd:08:a2:52:c4:5f:d1:33:c0:15: 16:da:ef:23:70:b3:13:01:f0:f4:22:bd:3c:83:97:f7:6d:2f: 97:bc:f7:09:1d:db:f3:81:f2:db:dc:a6:eb:1b:a2:ca:dd:17: df:8c:32:b9:8a:82:66:d0:23:84:57:27:d6:8a:c7:fb:dd:fb: 49:17:06:96:bf:b5:be:38:c6:96:e1:b8:fe:a4:13:8b:03:63: 8b:f5:3a:48:d0:12:c9:a8:15:70:c8:42:6a:65:fd:c3:99:d2: e4:e3:5f:a0:3c:ae:e5:fb:9b:90:15:96:02:cc:20:56:5b:bb: b0:ac:65:b4:87:f1:f1:33:65:45:5e:39:cc:14:d2:af:5d:11: bd:5e:21:70:6c:08:db:ba:18:91:ad:5b:78:e9:81:9c:99:59: 7d:17:c1:c3:a6:8d:1c:5e:9d:39:e2:5e:4c:6c:e9:31:f1:f5: ef:0c:83:a5:81:d2:da:30:ec:e1:ee:bd:2f:73:ac:56:22:41: 69:0b:19:60:73:5e:4d:2f:ae:1d:13:3b:b8:89:ec:50:94:2a: 8a:c8:a3:0f:d9:a0:0b:0a:76:86:ef:0b:9a:5a:7f:e4:fe:e5: 5c:82:40:b7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oyr8wBm0B0A9OPj78OghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTM4ZjJlMDMzZjk0MmJiOTRlNzMxZmY0NTI0NDhjNjgw MmFlODIwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTA0N2UzMzVkYzUyMTNiYjVkNDk4YTIxZjQ2OGZkN2Y4MjM0OGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zXG1YepOPHgW4O24wmwsKFUm/F2 55zIsh/TcaRLa7RhaMuYGCTk+YNGsYhmHNEg6sBMhV1TaInNuTVGl5NyX+/Pa9kt KDPKr/VDcIwUqFAaKNdGS2PowITL6zBnryjQvkd40JMeF+1ougkw7NYPgIeDN880 hC4cS62PaHvb70RxKnLSwwmI17//5OKyF9cUKjLoRD8G3S7JLOjPsu0rgLaKWuf8 e1Kgpnm6ymvCIi2WBVY6rnIK73eOWbeGdYAIqTpLHDRWrN4XfjZMA0KXaN+o1MXa Wa7wNn/Dw3BPrE/0fFNIwQLh719oLwuV75rc0bP8vzpsoXzA8MlvthoVMQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGEEfjNdxSE7tdSYoh9Gj9f4I0jJMB8GA1UdIwQY MBaAFG8Tjy4DP5QruU5zH/RSRIxoAq6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUt ZTEzOWZiYzI3OWI5LzEvWVFSLU0xM0ZJVHUxMUppaUgwYVAxX2dqU01rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUtZTEzOWZiYzI3OWI5 LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDsHxoMA8E AgACMAkDBwAgAQZ8B0QwDQYJKoZIhvcNAQELBQADggEBAGx5Vj3SLEYSoMKO686J P8znt8FLdPY2E5SHzQiiUsRf0TPAFRba7yNwsxMB8PQivTyDl/dtL5e89wkd2/OB 8tvcpusbosrdF9+MMrmKgmbQI4RXJ9aKx/vd+0kXBpa/tb44xpbhuP6kE4sDY4v1 OkjQEsmoFXDIQmpl/cOZ0uTjX6A8ruX7m5AVlgLMIFZbu7CsZbSH8fEzZUVeOcwU 0q9dEb1eIXBsCNu6GJGtW3jpgZyZWX0XwcOmjRxenTniXkxs6THx9e8Mg6WB0tow 7OHuvS9zrFYiQWkLGWBzXk0vrh0TO7iJ7FCUKorIow/ZoAsKdobvC5paf+T+5VyC QLc= -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:07 2026 by rpki-client