This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Ycr5eDmoXoKre63x1KlyukqLT_s.roa File: Ycr5eDmoXoKre63x1KlyukqLT_s.roa (raw, json) Hash identifier: LEDpppqs2GWlveOlZ2lD1qVuhq3/oua5g9mSurvXBIE= Subject key identifier: 61:CA:F9:78:39:A8:5E:82:AB:7B:AD:F1:D4:A9:72:BA:4A:8B:4F:FB Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA52C1984E407D36253A92867600355 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Ycr5eDmoXoKre63x1KlyukqLT_s.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21415 IP address blocks: 109.121.192.0/24 maxlen: 24 109.121.202.0/24 maxlen: 24 109.121.203.0/24 maxlen: 24 109.121.254.0/24 maxlen: 24 109.121.255.0/24 maxlen: 24 178.169.142.0/24 maxlen: 24 178.169.143.0/24 maxlen: 24 178.169.162.0/24 maxlen: 24 178.169.165.0/24 maxlen: 24 178.169.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2c:19:84:e4:07:d3:62:53:a9:28:67:60:03:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61caf97839a85e82ab7badf1d4a972ba4a8b4ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:0a:46:61:05:9a:c1:fc:2a:59:e6:58:e7: 8f:34:3d:00:19:62:a7:7b:f7:d1:66:bb:eb:c8:e3: ad:c4:a2:09:db:1c:6a:3d:9b:69:ae:a3:30:61:c9: 4f:b2:61:bc:6d:cb:67:28:f7:eb:90:c6:28:cf:ba: 3a:7a:1d:c9:76:8c:a6:fd:a9:9d:c1:3a:db:09:24: 3a:df:da:d3:09:1a:7f:08:01:2c:5c:e0:27:98:f9: 18:af:4e:75:44:53:5c:f5:2c:4b:4c:27:44:28:c4: e6:3d:45:35:38:de:76:7e:05:7a:56:ce:1e:e1:6b: 83:8d:02:1f:79:ef:7c:9c:78:7b:c4:cf:c8:e2:a5: 59:62:e3:73:77:98:82:80:41:97:b7:2f:d9:d2:bf: 68:c4:7a:09:9a:dc:f1:2d:87:a5:22:19:8f:97:19: a5:6a:f0:23:19:e0:76:7c:60:f5:43:19:85:33:92: 8d:bd:cb:a4:a4:39:37:49:3f:67:29:e4:62:d7:ae: 09:3e:04:63:d7:65:aa:a4:00:91:10:0e:0b:67:72: c8:e0:57:29:33:39:5c:99:85:7d:74:63:25:7a:5e: 92:3f:e6:f4:80:41:6d:92:0f:55:14:61:00:74:30: a3:8c:67:09:47:18:ca:ee:80:0c:43:b6:1d:08:d8: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CA:F9:78:39:A8:5E:82:AB:7B:AD:F1:D4:A9:72:BA:4A:8B:4F:FB X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Ycr5eDmoXoKre63x1KlyukqLT_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.192.0/24 109.121.202.0/23 109.121.254.0/23 178.169.142.0/23 178.169.162.0/24 178.169.165.0/24 178.169.169.0/24 Signature Algorithm: sha256WithRSAEncryption 53:1e:f6:51:3d:e9:a1:8d:71:d9:b1:a7:90:33:44:25:c1:49: 77:2c:43:4e:dc:bc:39:62:27:f3:40:04:5e:57:54:0a:28:cc: 3a:58:74:fa:4b:a6:9f:d8:91:05:bc:ff:32:d0:b0:1b:ec:36: c0:f6:ab:27:22:a8:54:02:2e:45:9b:d4:6a:42:62:16:ad:f4: de:03:6e:bc:4b:8e:c5:40:b7:c7:06:d6:bc:ae:cf:84:00:5c: 7e:ae:31:f7:cd:54:71:f1:17:00:75:ef:ba:87:d6:4a:5a:31: 53:1f:bb:77:ef:d9:b6:9f:88:73:e3:1d:8c:c1:e2:bd:cf:eb: 45:fe:86:0f:6f:3f:ca:9e:57:07:b7:b3:15:ec:8f:69:dd:c9: 59:bb:0a:15:d7:59:bf:ed:8e:25:42:ab:3e:ef:b7:7c:a2:29: 07:e1:1e:a5:d2:75:b4:00:e6:16:0c:83:d2:ed:61:53:da:c6: ad:8c:45:6e:dd:36:75:48:54:0f:05:dd:d8:d3:9c:41:27:d9: dc:33:06:bd:d4:ea:c4:72:a7:2c:1a:f7:1f:ed:20:29:91:3d: b2:bf:22:bd:c6:b8:dc:23:87:5c:f1:41:e1:5a:5b:7c:bf:96: a3:9f:80:38:79:46:0d:da:10:f5:45:b6:e8:1f:8d:d9:e1:1b: bc:31:1f:14 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7pSwZhOQH02JTqShnYANVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWNhZjk3ODM5YTg1ZTgyYWI3YmFkZjFkNGE5NzJiYTRhOGI0ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV0KRmEFmsH8KlnmWOePND0AGWKn e/fRZrvryOOtxKIJ2xxqPZtprqMwYclPsmG8bctnKPfrkMYoz7o6eh3Jdoym/amd wTrbCSQ639rTCRp/CAEsXOAnmPkYr051RFNc9SxLTCdEKMTmPUU1ON52fgV6Vs4e 4WuDjQIfee98nHh7xM/I4qVZYuNzd5iCgEGXty/Z0r9oxHoJmtzxLYelIhmPlxml avAjGeB2fGD1QxmFM5KNvcukpDk3ST9nKeRi164JPgRj12WqpACREA4LZ3LI4Fcp MzlcmYV9dGMlel6SP+b0gEFtkg9VFGEAdDCjjGcJRxjK7oAMQ7YdCNgIKwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFGHK+Xg5qF6Cq3ut8dSpcrpKi0/7MB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvWWNyNWVEbW9Yb0tyZTYzeDFLbHl1a3FMVF9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAbXnAAwQB bXnKAwQBbXn+AwQBsqmOAwQAsqmiAwQAsqmlAwQAsqmpMA0GCSqGSIb3DQEBCwUA A4IBAQBTHvZRPemhjXHZsaeQM0QlwUl3LENO3Lw5YifzQAReV1QKKMw6WHT6S6af 2JEFvP8y0LAb7DbA9qsnIqhUAi5Fm9RqQmIWrfTeA268S47FQLfHBta8rs+EAFx+ rjH3zVRx8RcAde+6h9ZKWjFTH7t379m2n4hz4x2MweK9z+tF/oYPbz/KnlcHt7MV 7I9p3clZuwoV11m/7Y4lQqs+77d8oikH4R6l0nW0AOYWDIPS7WFT2satjEVu3TZ1 SFQPBd3Y05xBJ9ncMwa91OrEcqcsGvcf7SApkT2yvyK9xrjcI4dc8UHhWlt8v5aj n4A4eUYN2hD1RbboH43Z4Ru8MR8U -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:54 2026 by rpki-client