This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/yh2X2ozTLX2jv3i-6zTP4fuQL0s.roa File: yh2X2ozTLX2jv3i-6zTP4fuQL0s.roa (raw, json) Hash identifier: 3DAmw+iwLLlUS0HsEZXB/476bZhxozUVUrUhXhghaeA= Subject key identifier: CA:1D:97:DA:8C:D3:2D:7D:A3:BF:78:BE:EB:34:CF:E1:FB:90:2F:4B Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56 Certificate serial: 019B7BA393D917A9C9D22F894A83FE2B7DF1 Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/yh2X2ozTLX2jv3i-6zTP4fuQL0s.roa Signing time: Thu 01 Jan 2026 22:17:56 +0000 ROA not before: Thu 01 Jan 2026 22:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12813 IP address blocks: 212.11.224.0/19 maxlen: 19 212.11.224.0/24 maxlen: 24 212.11.225.0/24 maxlen: 24 212.11.226.0/24 maxlen: 24 212.11.227.0/24 maxlen: 24 212.11.235.0/24 maxlen: 24 212.11.240.0/24 maxlen: 24 212.11.241.0/24 maxlen: 24 212.11.242.0/24 maxlen: 24 212.11.244.0/24 maxlen: 24 212.11.245.0/24 maxlen: 24 2a00:1278::/32 maxlen: 32 2a00:1278:100::/40 maxlen: 40 2a00:1278:200::/40 maxlen: 40 2a00:1278:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:93:d9:17:a9:c9:d2:2f:89:4a:83:fe:2b:7d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca1d97da8cd32d7da3bf78beeb34cfe1fb902f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:83:e1:75:98:8c:bc:3a:63:c0:24:cc:17: 45:11:11:33:24:58:74:de:d6:19:3f:35:a1:e5:f6: 90:78:78:59:9d:f7:bb:92:66:da:62:3e:38:c6:7e: 32:af:1d:90:43:38:30:36:74:ee:75:6c:4a:79:5b: f9:17:cd:c7:f6:7d:ef:23:21:5d:bc:51:97:19:23: 5e:72:72:2b:7b:cc:f7:57:e3:1e:4b:d3:ef:8e:28: 74:82:c8:97:f5:31:f1:c0:ba:0b:a0:3a:3b:72:9a: fa:49:a2:c3:7f:77:3b:2c:c6:01:79:3b:d9:58:f1: f4:5e:49:df:8a:21:69:b7:47:1c:1c:56:a5:29:ed: 29:19:08:6c:e4:f1:12:61:e2:e2:57:6f:26:69:a5: 46:0c:1b:b5:7b:db:54:88:55:ce:e0:92:d5:45:53: c9:4c:25:81:28:98:d6:e6:cc:dc:69:ed:c9:3a:eb: 29:c5:90:c7:b5:a7:fe:58:9b:ba:47:c9:78:66:a3: 39:db:26:d2:0c:20:b1:87:7f:79:f8:bd:69:bc:d0: 64:c5:12:2b:03:81:e8:ac:b5:8a:3e:80:16:f1:40: 83:86:10:50:0d:ff:28:fb:85:27:78:01:b4:10:bd: e9:6b:d1:af:15:0f:21:ea:e6:65:fd:66:74:17:29: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1D:97:DA:8C:D3:2D:7D:A3:BF:78:BE:EB:34:CF:E1:FB:90:2F:4B X509v3 Authority Key Identifier: keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/yh2X2ozTLX2jv3i-6zTP4fuQL0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.11.224.0/19 IPv6: 2a00:1278::/32 Signature Algorithm: sha256WithRSAEncryption bf:d0:9e:4c:3d:7a:33:15:8f:98:92:6b:58:26:23:ee:34:95: 9a:ad:07:57:d8:43:77:b7:ac:b7:e4:cd:fd:5b:c4:80:6f:cf: 5f:e9:ea:fe:12:48:b3:73:b7:5a:c5:ae:35:3b:a0:76:1d:73: 4d:86:6c:bf:ee:af:de:58:7a:13:66:06:ac:f2:f3:e9:08:59: e6:4b:87:21:d2:fa:ed:cf:29:fd:41:83:e3:ec:e4:a0:d7:fa: ed:7d:29:84:ca:95:16:01:48:8c:f0:7c:48:09:db:49:6c:a0: 80:8b:6d:77:5e:f1:92:60:21:64:88:17:45:03:07:8c:2d:d1: 90:0d:20:a8:9e:3c:7a:52:eb:b9:f4:6c:24:ca:d8:d5:a2:45: 5f:c8:c8:52:ae:76:85:76:bd:f1:e7:ab:42:48:00:0c:f3:61: ae:e9:0a:bb:90:8b:10:7e:70:dd:24:eb:8f:61:74:db:9f:2a: ed:19:b2:91:db:2e:13:6e:8f:cd:ef:6d:9d:62:42:06:ef:6b: 14:ff:7d:28:65:6f:5e:e7:34:55:2f:3e:48:ce:5c:f4:b8:7f: 42:28:1f:cd:49:54:22:3a:b6:c8:49:94:dd:e3:06:1d:dc:87: 81:a2:a2:18:35:53:7e:ad:53:ba:ae:c4:93:30:98:1f:5a:dd: 45:40:5e:8d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o5PZF6nJ0i+JSoP+K33xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMjY0YzNmMDk4MzFjY2Q4ODk3MTJmNGZhYjVjNWIxYmUw Y2FkNTYwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTFkOTdkYThjZDMyZDdkYTNiZjc4YmVlYjM0Y2ZlMWZiOTAyZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpGD4XWYjLw6Y8AkzBdFEREzJFh0 3tYZPzWh5faQeHhZnfe7kmbaYj44xn4yrx2QQzgwNnTudWxKeVv5F83H9n3vIyFd vFGXGSNecnIre8z3V+MeS9Pvjih0gsiX9THxwLoLoDo7cpr6SaLDf3c7LMYBeTvZ WPH0XknfiiFpt0ccHFalKe0pGQhs5PESYeLiV28maaVGDBu1e9tUiFXO4JLVRVPJ TCWBKJjW5szcae3JOuspxZDHtaf+WJu6R8l4ZqM52ybSDCCxh395+L1pvNBkxRIr A4HorLWKPoAW8UCDhhBQDf8o+4UneAG0EL3pa9GvFQ8h6uZl/WZ0FymWmQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFModl9qM0y19o794vus0z+H7kC9LMB8GA1UdIwQY MBaAFFAmTD8JgxzNiJcS9Pq1xbG+DK1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMTgzNWYtNTA0Zi00NWJkLWEwNTIt NzE0Zjk2MjZkMDIxLzEveWgyWDJvelRMWDJqdjNpLTZ6VFA0ZnVRTDBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8wMTgzNWYtNTA0Zi00NWJkLWEwNTItNzE0Zjk2MjZkMDIx LzEvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1AvgMA0E AgACMAcDBQAqABJ4MA0GCSqGSIb3DQEBCwUAA4IBAQC/0J5MPXozFY+YkmtYJiPu NJWarQdX2EN3t6y35M39W8SAb89f6er+Ekizc7daxa41O6B2HXNNhmy/7q/eWHoT Zgas8vPpCFnmS4ch0vrtzyn9QYPj7OSg1/rtfSmEypUWAUiM8HxICdtJbKCAi213 XvGSYCFkiBdFAweMLdGQDSConjx6Uuu59GwkytjVokVfyMhSrnaFdr3x56tCSAAM 82Gu6Qq7kIsQfnDdJOuPYXTbnyrtGbKR2y4Tbo/N722dYkIG72sU/30oZW9e5zRV Lz5Izlz0uH9CKB/NSVQiOrbISZTd4wYd3IeBoqIYNVN+rVO6rsSTMJgfWt1FQF6N -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:01 2026 by rpki-client