This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/YW79Yef_XcQH-yQeSEH6dsBEV58.roa File: YW79Yef_XcQH-yQeSEH6dsBEV58.roa (raw, json) Hash identifier: OnfUE3JgvIAolLyP0DJV9UMqit9OdFdesv9RsZ2Z4TI= Subject key identifier: 61:6E:FD:61:E7:FF:5D:C4:07:FB:24:1E:48:41:FA:76:C0:44:57:9F Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516 Certificate serial: 019B79ED1B19C4B600AD798572249122189F Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/YW79Yef_XcQH-yQeSEH6dsBEV58.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212409 IP address blocks: 213.232.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1b:19:c4:b6:00:ad:79:85:72:24:91:22:18:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=616efd61e7ff5dc407fb241e4841fa76c044579f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:9b:b2:eb:d9:7b:70:00:be:b6:cc:00:59: 73:7c:f2:13:78:3b:ac:78:62:cf:18:a0:af:17:f6: 63:24:50:c3:f6:92:bf:a3:b3:93:e7:e5:e9:73:5d: a9:58:1a:a4:8c:b2:0d:88:3d:c1:24:13:82:72:f3: 84:3c:be:aa:77:c5:3d:d3:16:33:cd:3f:9f:22:0b: 29:21:ab:66:75:8b:f1:52:7f:9f:98:5c:3e:d2:e1: eb:1f:54:40:c9:08:b3:85:2d:18:9d:21:39:50:3d: 4e:48:e8:22:af:86:ff:29:5a:7b:38:83:27:58:be: 89:a8:b3:28:bd:88:19:f4:97:ee:68:a5:a9:7c:c6: f9:eb:7a:ec:cd:00:45:cc:ab:66:70:4a:21:b9:a3: 32:44:db:01:5a:7a:3b:9a:b7:fd:76:10:eb:fb:4d: e1:5b:a6:61:cb:f3:60:4b:d7:70:41:36:60:40:b2: e5:c1:eb:93:86:d0:7f:09:50:6f:00:5a:2d:a6:b6: 2c:a1:56:14:73:b9:8e:60:64:07:a7:14:f8:34:c9: c9:b6:a4:a2:ec:47:a1:4a:09:bd:dc:5f:75:8b:0e: c2:c0:4d:e4:e8:fd:67:97:14:e7:27:4d:a0:0c:86: 12:46:00:af:c5:c6:e2:ec:25:9f:79:26:d7:07:97: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6E:FD:61:E7:FF:5D:C4:07:FB:24:1E:48:41:FA:76:C0:44:57:9F X509v3 Authority Key Identifier: keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/YW79Yef_XcQH-yQeSEH6dsBEV58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.200.0/24 Signature Algorithm: sha256WithRSAEncryption 00:43:65:0c:fa:e2:e7:fb:2f:ce:fe:83:e5:c5:4c:20:03:9b: 9d:7b:e8:c2:6d:c2:1c:2c:a9:88:ac:c6:c6:44:b5:3c:0b:37: 25:e3:0c:ad:4a:dd:0e:a5:fa:41:24:f1:6b:dc:89:5d:1d:8a: 48:02:ee:2f:9e:ff:34:2a:31:89:5e:a5:08:21:0a:e5:a5:5f: f5:8d:da:31:0c:c5:c1:06:4b:77:59:8a:fd:5c:e8:4a:fb:2f: 5c:96:08:7a:63:35:cc:18:70:84:dd:96:62:33:a9:d6:00:bc: 1e:8b:9f:16:aa:23:ac:53:b5:5a:15:70:c1:77:2d:db:d5:78: 49:da:c4:97:b5:49:6f:9e:55:bd:1f:b5:b4:3f:0a:51:a6:59: 2c:b1:0e:98:c0:04:3a:cf:45:e2:62:d6:36:4c:10:38:d8:9d: 7e:f0:65:17:19:f8:3e:a6:52:2b:21:bc:cb:ae:f4:77:9b:cd: 7d:6a:7a:c7:7c:ce:39:c1:01:72:aa:d1:fe:68:1e:90:32:6e: 1f:df:9e:12:6e:d7:7f:76:4f:ef:1b:d5:bf:4e:b8:ab:71:e4: 30:93:fb:5b:e5:0a:da:af:33:36:b2:1e:05:c7:85:fe:88:1e: 10:72:41:bd:c1:c3:16:68:26:2e:d9:df:63:ed:e7:38:a2:96: f8:7c:0a:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RsZxLYArXmFciSRIhifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDE3MTcxYWVhODU3NmM0MzFjNjM3NDE4NjkxYzljMWY1 NTc1MTYwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTZlZmQ2MWU3ZmY1ZGM0MDdmYjI0MWU0ODQxZmE3NmMwNDQ1NzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47KbsuvZe3AAvrbMAFlzfPITeDus eGLPGKCvF/ZjJFDD9pK/o7OT5+Xpc12pWBqkjLINiD3BJBOCcvOEPL6qd8U90xYz zT+fIgspIatmdYvxUn+fmFw+0uHrH1RAyQizhS0YnSE5UD1OSOgir4b/KVp7OIMn WL6JqLMovYgZ9JfuaKWpfMb563rszQBFzKtmcEohuaMyRNsBWno7mrf9dhDr+03h W6Zhy/NgS9dwQTZgQLLlweuThtB/CVBvAFotprYsoVYUc7mOYGQHpxT4NMnJtqSi 7EehSgm93F91iw7CwE3k6P1nlxTnJ02gDIYSRgCvxcbi7CWfeSbXB5fGhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFu/WHn/13EB/skHkhB+nbARFefMB8GA1UdIwQY MBaAFErRcXGuqFdsQxxjdBhpHJwfVXUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQt NDgyOGQ2NTEwNGUxLzEvWVc3OVllZl9YY1FILXlRZVNFSDZkc0JFVjU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQtNDgyOGQ2NTEwNGUx LzEvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ejIMA0G CSqGSIb3DQEBCwUAA4IBAQAAQ2UM+uLn+y/O/oPlxUwgA5ude+jCbcIcLKmIrMbG RLU8Czcl4wytSt0OpfpBJPFr3IldHYpIAu4vnv80KjGJXqUIIQrlpV/1jdoxDMXB Bkt3WYr9XOhK+y9clgh6YzXMGHCE3ZZiM6nWALwei58WqiOsU7VaFXDBdy3b1XhJ 2sSXtUlvnlW9H7W0PwpRplkssQ6YwAQ6z0XiYtY2TBA42J1+8GUXGfg+plIrIbzL rvR3m819anrHfM45wQFyqtH+aB6QMm4f354Sbtd/dk/vG9W/TrirceQwk/tb5Qra rzM2sh4Fx4X+iB4QckG9wcMWaCYu2d9j7ec4opb4fAom -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:28 2026 by rpki-client