This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YIY7y8ADWSjeiFl7AH17zP9OD10.roa File: YIY7y8ADWSjeiFl7AH17zP9OD10.roa (raw, json) Hash identifier: 9Pl43ZlRGE6/YdSKEJeZ/TAVkTJ+XGoI92CXddGpcAw= Subject key identifier: 60:86:3B:CB:C0:03:59:28:DE:88:59:7B:00:7D:7B:CC:FF:4E:0F:5D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB3D44836ACD0715FB72A5872BB4F5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YIY7y8ADWSjeiFl7AH17zP9OD10.roa Signing time: Fri 02 Jan 2026 08:20:30 +0000 ROA not before: Fri 02 Jan 2026 08:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56683 IP address blocks: 151.243.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3d:44:83:6a:cd:07:15:fb:72:a5:87:2b:b4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60863bcbc0035928de88597b007d7bccff4e0f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:40:dc:cf:9e:ab:76:16:0c:dd:ce:fc:16: f7:fc:d0:e0:0f:51:81:fa:33:f6:91:db:2d:d5:a9: 6c:c8:e2:bf:73:e2:2c:2c:3c:5e:70:17:cf:f0:cc: 3b:10:60:8a:d5:39:ff:93:22:72:9a:a4:7d:a2:7f: 3b:6a:d1:b0:be:2d:58:22:5d:3b:63:e2:25:4e:18: c3:19:93:b1:42:e0:dd:1b:61:37:c0:a0:ef:fc:60: 97:2d:5e:27:c1:09:dd:5d:e0:e8:41:7a:8b:89:95: 3f:eb:e8:3b:19:9c:39:f6:f4:58:e4:49:29:51:30: aa:6d:c6:9f:e8:dd:62:b3:f2:88:35:e4:8d:1d:01: e6:97:a6:b1:d9:db:d3:1e:63:8a:d1:35:67:55:1b: 27:ad:6f:46:7f:77:b2:5b:a5:c1:b9:f3:3d:1e:30: ac:28:d4:b6:2c:73:d0:49:4e:65:af:a7:01:45:64: 70:cf:0c:ee:30:2f:95:2a:65:76:a7:15:c4:b4:ac: 4e:f5:56:8e:f2:5a:7f:6d:59:1f:8c:6b:05:85:65: 50:42:b6:b7:cb:0a:6f:52:41:bb:aa:c5:0a:a4:40: 97:a0:e1:41:34:96:13:b6:85:9c:86:e2:ac:56:c8: d8:f9:65:43:ca:98:68:99:81:08:8d:1a:bf:1f:a6: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:86:3B:CB:C0:03:59:28:DE:88:59:7B:00:7D:7B:CC:FF:4E:0F:5D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YIY7y8ADWSjeiFl7AH17zP9OD10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.233.0/24 Signature Algorithm: sha256WithRSAEncryption 74:51:19:a6:b3:51:45:a3:7a:e8:0c:21:06:9f:ef:5e:ff:c0: 27:af:3a:ef:07:dc:b6:e2:28:89:df:4e:cd:9f:92:c9:82:f2: f7:67:89:46:11:58:02:03:4a:76:15:40:41:58:4e:61:84:04: 1d:97:b8:27:3a:54:f7:b8:37:1a:ba:4c:fc:b6:72:3f:ad:73: c5:8b:15:6f:08:3d:4b:51:78:75:c4:02:b5:f9:bc:c2:12:dc: 58:75:b1:e0:84:8e:24:3a:20:64:2e:63:27:f1:ed:ae:72:f0: 71:01:0a:85:38:4e:06:d7:78:52:f5:18:a7:d8:d7:7f:12:2f: d7:2c:25:fc:21:39:7c:33:b7:fb:19:03:8d:0c:59:f7:d5:9e: 54:ec:c2:7e:fb:13:30:74:f6:aa:06:fe:0a:10:f1:fb:05:99: 83:9c:7f:4f:a6:bc:ec:64:7a:b8:c8:07:47:6c:bb:91:bf:54: f3:f3:1e:e0:8e:75:e0:81:d7:23:ca:9f:28:46:ba:74:64:41: 2b:ab:22:d5:d8:1e:e7:2d:b4:7b:eb:05:f9:bd:ef:c4:fe:81: 13:b0:97:d7:07:dc:04:10:18:a8:31:15:0e:b8:e0:9d:52:f5: c7:b1:75:93:2c:ae:26:46:81:0c:b6:b6:35:c8:1f:29:d9:14: 18:e3:3c:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yz1Eg2rNBxX7cqWHK7T1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDg2M2JjYmMwMDM1OTI4ZGU4ODU5N2IwMDdkN2JjY2ZmNGUwZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgRA3M+eq3YWDN3O/Bb3/NDgD1GB +jP2kdst1alsyOK/c+IsLDxecBfP8Mw7EGCK1Tn/kyJymqR9on87atGwvi1YIl07 Y+IlThjDGZOxQuDdG2E3wKDv/GCXLV4nwQndXeDoQXqLiZU/6+g7GZw59vRY5Ekp UTCqbcaf6N1is/KINeSNHQHml6ax2dvTHmOK0TVnVRsnrW9Gf3eyW6XBufM9HjCs KNS2LHPQSU5lr6cBRWRwzwzuMC+VKmV2pxXEtKxO9VaO8lp/bVkfjGsFhWVQQra3 ywpvUkG7qsUKpECXoOFBNJYTtoWchuKsVsjY+WVDyphomYEIjRq/H6bZrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCGO8vAA1ko3ohZewB9e8z/Tg9dMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWUlZN3k4QURXU2plaUZsN0FIMTd6UDlPRDEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PpMA0G CSqGSIb3DQEBCwUAA4IBAQB0URmms1FFo3roDCEGn+9e/8AnrzrvB9y24iiJ307N n5LJgvL3Z4lGEVgCA0p2FUBBWE5hhAQdl7gnOlT3uDcaukz8tnI/rXPFixVvCD1L UXh1xAK1+bzCEtxYdbHghI4kOiBkLmMn8e2ucvBxAQqFOE4G13hS9Rin2Nd/Ei/X LCX8ITl8M7f7GQONDFn31Z5U7MJ++xMwdPaqBv4KEPH7BZmDnH9PprzsZHq4yAdH bLuRv1Tz8x7gjnXggdcjyp8oRrp0ZEErqyLV2B7nLbR76wX5ve/E/oETsJfXB9wE EBioMRUOuOCdUvXHsXWTLK4mRoEMtrY1yB8p2RQY4zyA -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:48 2026 by rpki-client