This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YpPZsKLRnZs1gt0LDq2c5zZJero.roa File: YpPZsKLRnZs1gt0LDq2c5zZJero.roa (raw, json) Hash identifier: 88QSixd/qH8UACeTFCQhWBwUS7tovKjaLEghji83yMs= Subject key identifier: 62:93:D9:B0:A2:D1:9D:9B:35:82:DD:0B:0E:AD:9C:E7:36:49:7A:BA Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA55311E7C0247C2CDD0A41841AB831 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YpPZsKLRnZs1gt0LDq2c5zZJero.roa Signing time: Thu 01 Jan 2026 22:19:50 +0000 ROA not before: Thu 01 Jan 2026 22:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215888 IP address blocks: 213.91.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:53:11:e7:c0:24:7c:2c:dd:0a:41:84:1a:b8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6293d9b0a2d19d9b3582dd0b0ead9ce736497aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a3:30:fb:ac:b4:f4:dd:2e:6a:6e:47:63:59: 2c:66:06:1c:4b:a3:76:a1:5e:07:f1:da:50:39:f0: fd:dc:e4:e4:eb:f3:dd:7e:97:c3:22:62:36:12:c1: eb:41:4c:fa:0f:ce:86:bc:2e:0a:90:5a:25:29:05: cd:52:61:d8:50:1b:3f:5a:a9:95:dd:88:86:4f:e2: e6:7c:29:0b:39:55:39:f4:f0:f5:6a:02:37:4b:4e: 3e:99:01:b7:38:34:7d:32:63:00:a4:05:e3:7d:85: 85:92:f3:fc:16:d0:48:3b:81:24:b2:06:9e:c4:54: 27:a7:f3:e2:36:40:9a:77:74:db:57:06:ff:d0:70: 5a:1b:51:12:ac:a0:e8:97:2e:d4:79:b5:20:f3:75: c4:81:99:c3:44:4d:3a:0f:78:09:04:46:3c:ed:72: 47:d9:a8:73:5f:da:92:56:44:ab:8f:23:b8:b5:71: 0e:22:0e:55:4c:3f:70:fb:b8:de:0d:94:82:5a:62: fd:05:59:b4:a6:c8:e8:f5:40:f2:c6:eb:13:c6:45: af:a8:99:53:c6:d0:d6:31:f4:a4:4a:58:b0:6f:03: 53:ce:ad:0a:bc:b8:91:aa:25:9f:5c:aa:aa:cf:b3: 98:5b:d7:51:9e:84:31:93:5f:bb:34:6d:ff:35:04: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:93:D9:B0:A2:D1:9D:9B:35:82:DD:0B:0E:AD:9C:E7:36:49:7A:BA X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/YpPZsKLRnZs1gt0LDq2c5zZJero.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.91.156.0/24 Signature Algorithm: sha256WithRSAEncryption a3:d4:b9:71:6a:2c:0a:71:ce:1b:86:be:fd:bd:51:02:89:e6: b4:3c:30:7e:ea:76:01:6c:0e:9f:70:4f:98:34:25:8b:ca:72: 16:3d:56:00:1b:26:e8:36:7d:f7:5b:2a:47:fb:47:c9:ed:9f: 72:32:b1:4a:8c:d1:15:33:41:00:72:06:e1:cb:e0:89:9f:a2: 9f:70:c6:1e:20:97:54:5b:30:13:de:5f:d9:40:84:84:28:85: 19:90:8e:e4:3f:67:d0:f0:55:d1:83:1a:11:20:e5:47:03:a2: 3a:9c:b6:7b:34:07:29:e6:3b:7e:ce:60:34:d4:7c:42:c9:8c: f0:0d:c8:82:39:93:dc:62:e6:f9:16:b3:d4:a6:7e:ee:1a:1e: b1:57:4b:b0:f7:12:f7:48:ed:fc:ab:2e:4b:d3:00:5d:f0:a8: 1f:de:80:6f:16:45:71:b0:0d:fe:a7:4a:b9:bf:48:03:f7:56: f4:43:0c:ee:76:49:2a:09:39:13:3f:00:27:91:ce:c6:90:2f: 6a:07:91:97:77:d3:dc:82:7c:e5:f9:69:4a:a7:2f:ab:5b:d0: 2c:98:34:b6:8e:3d:83:57:e3:d3:3b:30:a0:96:3b:94:94:0c: 97:31:9c:33:0e:ba:82:1b:07:65:f4:b3:05:6f:38:2e:6c:ff: 4f:9d:65:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pVMR58AkfCzdCkGEGrgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjkzZDliMGEyZDE5ZDliMzU4MmRkMGIwZWFkOWNlNzM2NDk3YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Mw+6y09N0uam5HY1ksZgYcS6N2 oV4H8dpQOfD93OTk6/PdfpfDImI2EsHrQUz6D86GvC4KkFolKQXNUmHYUBs/WqmV 3YiGT+LmfCkLOVU59PD1agI3S04+mQG3ODR9MmMApAXjfYWFkvP8FtBIO4Eksgae xFQnp/PiNkCad3TbVwb/0HBaG1ESrKDoly7UebUg83XEgZnDRE06D3gJBEY87XJH 2ahzX9qSVkSrjyO4tXEOIg5VTD9w+7jeDZSCWmL9BVm0psjo9UDyxusTxkWvqJlT xtDWMfSkSliwbwNTzq0KvLiRqiWfXKqqz7OYW9dRnoQxk1+7NG3/NQTOywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKT2bCi0Z2bNYLdCw6tnOc2SXq6MB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvWXBQWnNLTFJuWnMxZ3QwTERxMmM1elpKZXJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VucMA0G CSqGSIb3DQEBCwUAA4IBAQCj1LlxaiwKcc4bhr79vVECiea0PDB+6nYBbA6fcE+Y NCWLynIWPVYAGyboNn33WypH+0fJ7Z9yMrFKjNEVM0EAcgbhy+CJn6KfcMYeIJdU WzAT3l/ZQISEKIUZkI7kP2fQ8FXRgxoRIOVHA6I6nLZ7NAcp5jt+zmA01HxCyYzw DciCOZPcYub5FrPUpn7uGh6xV0uw9xL3SO38qy5L0wBd8Kgf3oBvFkVxsA3+p0q5 v0gD91b0QwzudkkqCTkTPwAnkc7GkC9qB5GXd9Pcgnzl+WlKpy+rW9AsmDS2jj2D V+PTOzCgljuUlAyXMZwzDrqCGwdl9LMFbzgubP9PnWW5 -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:50 2026 by rpki-client