This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YB_kJ562zOA0JKwO8rIsJMR8XF0.roa File: YB_kJ562zOA0JKwO8rIsJMR8XF0.roa (raw, json) Hash identifier: lmATeDQEZ6fGIbvYfMxrt5PvAkg8ix9gDxK/CdWWUOU= Subject key identifier: 60:1F:E4:27:9E:B6:CC:E0:34:24:AC:0E:F2:B2:2C:24:C4:7C:5C:5D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB4A19E6452545616FD0800E2C5BAD Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YB_kJ562zOA0JKwO8rIsJMR8XF0.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135027 IP address blocks: 151.242.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4a:19:e6:45:25:45:61:6f:d0:80:0e:2c:5b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=601fe4279eb6cce03424ac0ef2b22c24c47c5c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:69:1a:35:c2:c1:f2:fd:72:39:b1:54:4f: e8:01:e2:01:b1:26:60:b2:40:01:db:01:fb:8a:d0: fb:a5:de:9b:7a:aa:7a:fc:ea:96:3f:2b:a5:73:23: 56:b7:81:03:6c:c1:9d:27:fb:9b:3a:8d:f1:93:dc: 7e:a4:7c:bf:09:30:70:7e:df:81:3d:ab:22:09:f0: 8a:c9:c4:3f:f0:55:4a:17:c0:7e:61:76:07:9b:f0: c7:70:4c:cd:f2:3a:7d:f4:27:9e:47:a0:c0:80:3a: 66:68:d5:c2:0a:5e:b8:89:4f:2a:ce:98:f2:9a:cf: 46:2b:f9:98:2d:b0:2c:82:12:29:7a:63:62:90:1e: 87:c5:4a:03:06:84:dc:9b:46:7f:ad:6a:e0:10:3f: ee:b8:2f:43:85:39:94:70:ae:de:71:03:5b:ba:dc: a5:e3:e5:87:fb:0d:4a:47:82:6a:a1:ee:f4:b9:de: b3:63:70:57:59:59:81:51:69:9b:86:a7:86:6e:0c: a8:b6:7e:13:c9:65:a2:13:87:34:36:07:9e:74:3c: db:b9:a3:c5:d2:26:94:8c:c3:f6:19:01:a1:be:39: 3a:d2:1d:ff:55:b6:ca:51:80:a0:24:58:9a:8b:02: 47:7a:0d:7f:99:4c:de:ab:b9:73:e3:a9:67:91:8c: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1F:E4:27:9E:B6:CC:E0:34:24:AC:0E:F2:B2:2C:24:C4:7C:5C:5D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YB_kJ562zOA0JKwO8rIsJMR8XF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.130.0/23 Signature Algorithm: sha256WithRSAEncryption 90:69:f2:6d:4c:b5:a1:86:6a:2b:7c:15:30:d4:98:b0:3b:bf: 39:d4:d7:e9:26:53:ea:01:12:9f:be:65:7e:43:af:8b:de:6a: e7:b6:ef:6b:25:3a:c5:10:f2:ce:44:7f:9c:f6:5d:4a:3f:4c: 53:15:65:fe:83:40:10:c4:99:50:b0:c5:5a:2e:56:de:4b:47: 6d:07:d8:ac:50:c1:b2:6b:fd:ea:ab:09:75:87:4a:cc:45:af: ed:c1:5a:7a:d4:4d:47:bb:1d:d7:ef:d5:aa:9a:9d:0a:cf:b2: b7:f5:6d:51:21:ff:76:a7:14:59:cd:06:a9:2c:e7:ba:ca:81: 5e:52:6b:21:35:78:a2:45:f6:4b:8a:8b:b8:73:64:7a:7f:4e: 39:a1:ee:81:44:45:14:1b:01:68:71:54:00:45:4f:45:31:af: a2:4f:ef:e8:87:92:4b:7b:4a:1a:93:1e:a0:a4:6a:06:ce:a7: b2:31:c6:bc:bc:64:3c:23:8c:c4:72:c0:0b:34:40:dd:8a:ff: 86:fa:98:13:a1:a2:80:13:5d:72:52:dd:0e:28:97:e4:08:c0: 22:c5:34:65:ab:c4:2f:75:ab:54:d3:a2:70:b8:3c:7d:fb:8e: eb:e7:84:cd:93:f1:dd:73:6c:a8:f9:9e:5a:b2:62:a9:16:e9: 5e:d4:b2:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0oZ5kUlRWFv0IAOLFutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDFmZTQyNzllYjZjY2UwMzQyNGFjMGVmMmIyMmMyNGM0N2M1YzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymNpGjXCwfL9cjmxVE/oAeIBsSZg skAB2wH7itD7pd6beqp6/OqWPyulcyNWt4EDbMGdJ/ubOo3xk9x+pHy/CTBwft+B PasiCfCKycQ/8FVKF8B+YXYHm/DHcEzN8jp99CeeR6DAgDpmaNXCCl64iU8qzpjy ms9GK/mYLbAsghIpemNikB6HxUoDBoTcm0Z/rWrgED/uuC9DhTmUcK7ecQNbutyl 4+WH+w1KR4Jqoe70ud6zY3BXWVmBUWmbhqeGbgyotn4TyWWiE4c0NgeedDzbuaPF 0iaUjMP2GQGhvjk60h3/VbbKUYCgJFiaiwJHeg1/mUzeq7lz46lnkYxqFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGAf5CeetszgNCSsDvKyLCTEfFxdMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWUJfa0o1NjJ6T0EwSkt3TzhySXNKTVI4WEYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/KCMA0G CSqGSIb3DQEBCwUAA4IBAQCQafJtTLWhhmorfBUw1JiwO7851NfpJlPqARKfvmV+ Q6+L3mrntu9rJTrFEPLORH+c9l1KP0xTFWX+g0AQxJlQsMVaLlbeS0dtB9isUMGy a/3qqwl1h0rMRa/twVp61E1Hux3X79Wqmp0Kz7K39W1RIf92pxRZzQapLOe6yoFe UmshNXiiRfZLiou4c2R6f045oe6BREUUGwFocVQARU9FMa+iT+/oh5JLe0oakx6g pGoGzqeyMca8vGQ8I4zEcsALNEDdiv+G+pgToaKAE11yUt0OKJfkCMAixTRlq8Qv datU06JwuDx9+47r54TNk/Hdc2yo+Z5asmKpFule1LIf -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:10 2026 by rpki-client