This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa File: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (raw, json) Hash identifier: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI= Subject key identifier: 60:95:41:83:AC:A2:F2:B8:5B:04:9B:B1:58:A2:7B:BF:95:E2:6A:DD Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0 Certificate serial: 019B7AC90EE9FAFCBE8A933AFCC520D9053D Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa Signing time: Thu 01 Jan 2026 18:19:15 +0000 ROA not before: Thu 01 Jan 2026 18:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203137 IP address blocks: 185.130.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0e:e9:fa:fc:be:8a:93:3a:fc:c5:20:d9:05:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0 Validity Not Before: Jan 1 18:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60954183aca2f2b85b049bb158a27bbf95e26add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:9c:e0:f6:fa:f0:c6:fb:38:cf:b8:13:1d: aa:cd:2d:fb:af:b5:09:98:d8:bd:3b:90:aa:dd:29: d6:71:2b:9d:1a:50:47:22:6c:c4:b8:5f:cc:4e:24: 5d:30:37:35:1c:d1:be:87:6b:31:a7:45:ae:44:92: 3f:09:8b:e9:3d:bf:22:36:5b:0f:30:49:31:e3:9e: 7a:da:51:bc:b2:48:54:40:d9:67:9f:57:4a:56:77: bf:c3:29:df:70:61:87:5b:49:2b:6a:9f:d3:f1:bb: 68:0e:23:83:86:1c:82:ec:84:19:d6:5d:79:f9:c5: b1:74:53:8d:4d:5f:35:11:90:7f:40:4a:5a:37:41: df:a8:86:09:0d:a1:a1:10:de:51:a3:ea:8a:30:a8: ac:cf:b0:51:bf:9e:7a:60:bd:f6:69:d5:43:9e:b9: 97:e1:68:48:db:77:f9:cc:5b:6a:1a:d7:69:2b:c5: 8c:37:a8:7a:b8:a3:4d:54:9e:f5:5a:5c:0f:3e:f5: 18:1e:c5:7e:f4:d1:00:d2:a8:03:0f:f9:87:d8:43: 12:fa:9e:fd:e6:d8:6b:bb:1f:e1:00:6e:61:42:fc: 49:f9:94:27:dd:4f:92:32:90:81:ef:98:77:ff:42: 99:01:16:b7:69:58:05:25:56:28:0a:4c:ce:08:9f: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:95:41:83:AC:A2:F2:B8:5B:04:9B:B1:58:A2:7B:BF:95:E2:6A:DD X509v3 Authority Key Identifier: keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.179.0/24 Signature Algorithm: sha256WithRSAEncryption 29:8a:07:18:06:2f:3e:aa:a2:5a:a9:58:c2:09:6b:c6:fd:62: d2:89:1c:77:5c:06:14:c4:dc:96:ca:7e:54:93:5d:c3:cc:31: 8a:bd:ae:ff:67:ff:0e:a7:05:83:76:fe:22:cb:ef:e4:a0:93: 03:21:d4:13:a7:6b:d9:d3:df:8b:04:28:14:6c:58:17:3e:76: c5:e7:1e:eb:40:bf:5b:05:2c:42:27:7c:73:79:4a:52:73:10: e4:cd:ba:58:62:30:e2:ed:30:b3:19:54:59:ef:e3:56:a0:c4: ce:9f:6c:94:f9:1c:f9:da:af:df:a3:d6:9b:13:d4:28:3c:a6: e6:87:a6:2a:3b:c7:de:23:ba:00:fb:18:2f:7a:97:66:8e:34: b9:08:01:cd:5d:5b:57:45:98:c0:4f:b2:b9:16:a9:be:6f:76: ef:93:97:56:0e:c4:17:a6:bf:1a:94:b5:0b:db:1e:e4:2f:06: 53:4f:77:29:a8:65:f7:0d:ec:fa:4d:a9:38:96:f0:ce:05:8f: 34:39:7c:bb:e4:d7:98:76:91:30:ce:ac:3f:37:43:dd:59:81: c7:cf:5c:f2:43:67:eb:1b:9f:7d:99:be:d5:40:0f:95:ef:d0: 8a:02:0e:29:4d:bd:7c:ee:e2:23:81:42:29:05:3d:e6:7d:48: 72:9e:61:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yQ7p+vy+ipM6/MUg2QU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0 YTM4ZTAwHhcNMjYwMTAxMTgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDk1NDE4M2FjYTJmMmI4NWIwNDliYjE1OGEyN2JiZjk1ZTI2YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y6c4Pb68Mb7OM+4Ex2qzS37r7UJ mNi9O5Cq3SnWcSudGlBHImzEuF/MTiRdMDc1HNG+h2sxp0WuRJI/CYvpPb8iNlsP MEkx45562lG8skhUQNlnn1dKVne/wynfcGGHW0krap/T8btoDiODhhyC7IQZ1l15 +cWxdFONTV81EZB/QEpaN0HfqIYJDaGhEN5Ro+qKMKisz7BRv556YL32adVDnrmX 4WhI23f5zFtqGtdpK8WMN6h6uKNNVJ71WlwPPvUYHsV+9NEA0qgDD/mH2EMS+p79 5thrux/hAG5hQvxJ+ZQn3U+SMpCB75h3/0KZARa3aVgFJVYoCkzOCJ8WsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGCVQYOsovK4WwSbsViie7+V4mrdMB8GA1UdIwQY MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt MmRiMjI0NWYyOTg1LzEvWUpWQmc2eWk4cmhiQkp1eFdLSjd2NVhpYXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1 LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYKzMA0G CSqGSIb3DQEBCwUAA4IBAQApigcYBi8+qqJaqVjCCWvG/WLSiRx3XAYUxNyWyn5U k13DzDGKva7/Z/8OpwWDdv4iy+/koJMDIdQTp2vZ09+LBCgUbFgXPnbF5x7rQL9b BSxCJ3xzeUpScxDkzbpYYjDi7TCzGVRZ7+NWoMTOn2yU+Rz52q/fo9abE9QoPKbm h6YqO8feI7oA+xgvepdmjjS5CAHNXVtXRZjAT7K5Fqm+b3bvk5dWDsQXpr8alLUL 2x7kLwZTT3cpqGX3Dez6Tak4lvDOBY80OXy75NeYdpEwzqw/N0PdWYHHz1zyQ2fr G599mb7VQA+V79CKAg4pTb187uIjgUIpBT3mfUhynmFT -----END CERTIFICATE-----Generated at Tue Feb 3 06:42:08 2026 by rpki-client