This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yygNN_RB9KBwA23_4dLY0fJvEMU.roa File: yygNN_RB9KBwA23_4dLY0fJvEMU.roa (raw, json) Hash identifier: Sg9ZIUeKLs1OgMYeHtMe9LGuR/Fh52ufIPD96i/SlF0= Subject key identifier: CB:28:0D:37:F4:41:F4:A0:70:03:6D:FF:E1:D2:D8:D1:F2:6F:10:C5 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ADE48ADE91A5983446A06EC852B1A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yygNN_RB9KBwA23_4dLY0fJvEMU.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215224 IP address blocks: 213.210.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:de:48:ad:e9:1a:59:83:44:6a:06:ec:85:2b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb280d37f441f4a070036dffe1d2d8d1f26f10c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:b5:87:ce:2b:f2:7e:74:b9:6f:2d:1a:7f: 7d:47:04:45:27:c2:f0:37:13:ec:74:d4:cc:fa:12: a6:cb:00:c8:95:0f:d5:9b:c4:df:bf:fc:8f:c0:ec: 22:f2:f4:0d:f2:d1:da:f4:17:ae:9b:93:fa:9a:6a: 7e:cf:bc:67:54:d4:5d:09:70:d5:01:71:06:eb:00: 7d:00:77:f0:8f:6e:ed:66:e5:d9:61:38:a6:e3:be: 22:cb:62:62:d5:54:f6:8c:8a:03:ad:e5:b9:c0:82: 67:25:43:bf:d4:b3:1e:96:de:ed:e4:15:0d:47:92: 3e:b2:73:fd:a7:45:2a:04:f3:af:d1:22:03:fa:be: 1e:cf:fd:96:a6:9a:88:cc:e2:27:f4:7c:6a:27:14: db:ea:c3:b3:5b:48:cb:83:2f:c5:fa:e4:c7:d2:20: 95:ba:fb:a0:4a:05:55:59:e4:80:4b:1d:a3:e8:15: 22:06:d0:db:d8:7e:92:e2:28:24:c6:16:88:e6:7d: ae:ea:dc:ea:e8:ef:26:cc:8f:de:20:3c:a0:0e:d8: c4:cc:f1:35:8b:c4:a3:70:97:b5:c1:22:0d:ac:1f: 0c:23:82:08:7e:bf:01:14:45:53:87:e6:40:5f:10: f6:72:fa:d1:e2:56:33:cd:9d:89:4d:16:aa:8e:dd: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:28:0D:37:F4:41:F4:A0:70:03:6D:FF:E1:D2:D8:D1:F2:6F:10:C5 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yygNN_RB9KBwA23_4dLY0fJvEMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.210.40.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:1c:66:03:30:9c:60:d1:73:37:76:f5:3d:c1:e9:8c:c4:51: bf:3f:fe:76:97:48:f6:5d:43:34:0a:e9:dc:25:14:dc:64:9b: aa:a4:3a:40:f8:d4:fa:35:db:e7:fe:bd:0d:6e:fb:6b:d7:be: 37:c0:f6:ab:7d:b8:9d:e3:04:9a:2d:b7:3b:83:99:0f:02:af: f3:4b:47:29:c0:e4:66:05:ba:b8:c6:7f:ad:a5:bd:74:87:75: ed:02:68:da:38:d5:8d:c9:a5:d2:e6:c0:25:4f:96:af:92:2e: 4d:5b:09:b5:e6:00:4e:6e:b5:eb:16:28:08:0f:19:81:f8:26: 2b:b2:0c:c8:ea:07:c3:8d:fb:91:7b:c6:9b:59:00:99:a6:c2: 27:99:2f:42:d5:9c:b3:28:a9:99:a7:81:0d:d7:d8:0d:c3:6a: 34:11:33:b8:ec:d0:89:5b:54:f5:e3:3c:4a:3f:a6:82:0f:af: c5:0c:a9:b2:2e:be:7c:b7:f5:30:a6:66:61:fb:8f:db:c4:5a: 9b:71:95:4d:0e:b5:19:e8:69:87:72:75:77:de:1f:14:3a:57: 75:89:77:e2:ee:8a:7a:20:23:3e:46:41:aa:00:58:7a:60:07: 97:37:d6:57:23:44:37:a3:76:c7:62:0c:10:4c:97:a6:d7:36: c0:1c:0f:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wt5IrekaWYNEagbshSsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjI4MGQzN2Y0NDFmNGEwNzAwMzZkZmZlMWQyZDhkMWYyNmYxMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x+1h84r8n50uW8tGn99RwRFJ8Lw NxPsdNTM+hKmywDIlQ/Vm8Tfv/yPwOwi8vQN8tHa9Beum5P6mmp+z7xnVNRdCXDV AXEG6wB9AHfwj27tZuXZYTim474iy2Ji1VT2jIoDreW5wIJnJUO/1LMelt7t5BUN R5I+snP9p0UqBPOv0SID+r4ez/2WppqIzOIn9HxqJxTb6sOzW0jLgy/F+uTH0iCV uvugSgVVWeSASx2j6BUiBtDb2H6S4igkxhaI5n2u6tzq6O8mzI/eIDygDtjEzPE1 i8SjcJe1wSINrB8MI4IIfr8BFEVTh+ZAXxD2cvrR4lYzzZ2JTRaqjt3HPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMsoDTf0QfSgcANt/+HS2NHybxDFMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEveXlnTk5fUkI5S0J3QTIzXzRkTFkwZkp2RU1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dIoMA0G CSqGSIb3DQEBCwUAA4IBAQCaHGYDMJxg0XM3dvU9wemMxFG/P/52l0j2XUM0Cunc JRTcZJuqpDpA+NT6Ndvn/r0Nbvtr1743wParfbid4wSaLbc7g5kPAq/zS0cpwORm Bbq4xn+tpb10h3XtAmjaONWNyaXS5sAlT5avki5NWwm15gBObrXrFigIDxmB+CYr sgzI6gfDjfuRe8abWQCZpsInmS9C1ZyzKKmZp4EN19gNw2o0ETO47NCJW1T14zxK P6aCD6/FDKmyLr58t/UwpmZh+4/bxFqbcZVNDrUZ6GmHcnV33h8UOld1iXfi7op6 ICM+RkGqAFh6YAeXN9ZXI0Q3o3bHYgwQTJem1zbAHA+W -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:42 2026 by rpki-client