This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/Yk84G4_UtPljECZcZxnAd8C6Dtw.roa File: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (raw, json) Hash identifier: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk= Subject key identifier: 62:4F:38:1B:8F:D4:B4:F9:63:10:26:5C:67:19:C0:77:C0:BA:0E:DC Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e Certificate serial: 019B7F14D65767EE2A8543F42D4560552BE9 Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/Yk84G4_UtPljECZcZxnAd8C6Dtw.roa Signing time: Fri 02 Jan 2026 14:20:30 +0000 ROA not before: Fri 02 Jan 2026 14:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210483 IP address blocks: 109.107.130.0/24 maxlen: 24 2a11:cd40::/48 maxlen: 48 2a11:cd40:1000::/48 maxlen: 48 2a11:cd40:2000::/48 maxlen: 48 2a11:cd40:f00d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d6:57:67:ee:2a:85:43:f4:2d:45:60:55:2b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e Validity Not Before: Jan 2 14:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=624f381b8fd4b4f96310265c6719c077c0ba0edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:db:d0:4e:6f:2e:d9:26:bf:4e:35:e7:e1: 9e:67:66:92:ad:d3:59:52:1a:d4:b8:8d:8f:6e:c7: 1d:a3:19:b2:bf:e4:c7:93:ac:c1:5a:c4:00:09:58: af:8d:f5:8d:22:cb:dc:86:b2:40:04:4e:23:39:96: e1:73:88:bb:4e:fb:52:02:5a:fc:36:76:9f:17:a5: bb:1b:20:9c:1d:34:9e:10:83:90:a9:a0:8e:d9:bd: 63:33:1d:e9:1e:c8:5a:9e:84:d7:71:0d:c2:17:53: 0a:9b:c7:8c:dc:c4:b7:7f:ab:2f:a2:c2:f1:51:da: bc:cf:e7:69:cb:7c:19:25:84:e3:de:6a:90:61:24: 13:79:2a:ce:c5:ee:24:a7:42:df:9c:b0:d5:4c:ac: db:33:15:1b:c8:86:e5:ee:2a:d3:9c:10:0c:51:ee: ce:fa:57:01:65:4f:7a:37:6f:22:a2:d9:06:54:e0: 6c:64:08:68:d8:f8:2d:0d:90:a0:4e:56:88:a5:02: 45:84:5f:ea:54:54:a8:39:ab:ae:81:ec:0f:0c:1a: 9c:c6:d9:46:f4:ba:f1:06:2b:0a:32:c7:c1:1f:1f: 9a:0a:cb:1a:97:62:11:f7:cc:2f:11:76:9d:4d:11: bd:01:bb:4c:96:1e:12:b8:c7:18:39:50:5f:f0:5c: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4F:38:1B:8F:D4:B4:F9:63:10:26:5C:67:19:C0:77:C0:BA:0E:DC X509v3 Authority Key Identifier: keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/Yk84G4_UtPljECZcZxnAd8C6Dtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.130.0/24 IPv6: 2a11:cd40::/48 2a11:cd40:1000::/48 2a11:cd40:2000::/48 2a11:cd40:f00d::/48 Signature Algorithm: sha256WithRSAEncryption 1e:04:34:d2:f8:0a:57:2b:40:9b:56:b9:42:05:7b:d7:ce:f5: 85:be:2c:39:f7:e2:4d:05:4d:78:a6:ee:ed:38:a7:8d:fa:4d: 06:2e:bf:4d:d8:45:0d:1d:e5:fe:4a:df:21:eb:45:ca:f1:3f: 0a:2c:07:d6:09:f0:66:d7:0a:e0:9e:7f:34:17:1e:0f:62:cd: 82:66:c7:45:2f:cf:5a:1a:b6:10:f4:b6:9e:d9:a7:34:28:a8: 6d:90:c6:1b:60:54:43:dd:05:c8:e6:57:19:a4:3b:3a:e1:22: cb:0c:02:4c:2f:b5:18:69:4e:96:2d:8a:25:c7:46:50:c4:36: 12:5c:23:2b:c3:b8:07:43:e5:f3:e2:51:ad:1f:9f:5f:3e:fe: 0c:cd:b9:b3:9e:ea:bd:54:15:5c:cc:0d:bd:07:e3:01:0b:ff: b3:a2:bb:72:16:a7:69:e9:77:07:ba:b4:fa:72:41:4f:3e:ef: 91:ba:95:31:f1:80:35:85:b5:9e:15:ea:5d:0f:4f:a7:ef:8a: c2:95:ee:30:9a:68:3a:f6:75:1c:76:1b:66:3b:df:2f:4b:d1: 9c:c1:a7:43:ea:e0:46:d7:06:57:f6:f7:16:45:2b:90:24:16: 5d:eb:ea:91:cd:bf:ab:56:4d:25:16:65:3b:77:6e:4a:6c:ce: 5a:ac:bf:79 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt/FNZXZ+4qhUP0LUVgVSvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0 ZWI4N2UwHhcNMjYwMTAyMTQyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjRmMzgxYjhmZDRiNGY5NjMxMDI2NWM2NzE5YzA3N2MwYmEwZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKvb0E5vLtkmv0415+GeZ2aSrdNZ UhrUuI2Pbscdoxmyv+THk6zBWsQACVivjfWNIsvchrJABE4jOZbhc4i7TvtSAlr8 NnafF6W7GyCcHTSeEIOQqaCO2b1jMx3pHshanoTXcQ3CF1MKm8eM3MS3f6svosLx Udq8z+dpy3wZJYTj3mqQYSQTeSrOxe4kp0LfnLDVTKzbMxUbyIbl7irTnBAMUe7O +lcBZU96N28iotkGVOBsZAho2PgtDZCgTlaIpQJFhF/qVFSoOauugewPDBqcxtlG 9LrxBisKMsfBHx+aCssal2IR98wvEXadTRG9AbtMlh4SuMcYOVBf8FxrewIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFGJPOBuP1LT5YxAmXGcZwHfAug7cMB8GA1UdIwQY MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt OTllY2E1NjUxMDIzLzEvWWs4NEc0X1V0UGxqRUNaY1p4bkFkOEM2RHR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAbWuCMCoE AgACMCQDBwAqEc1AAAADBwAqEc1AEAADBwAqEc1AIAADBwAqEc1A8A0wDQYJKoZI hvcNAQELBQADggEBAB4ENNL4ClcrQJtWuUIFe9fO9YW+LDn34k0FTXim7u04p436 TQYuv03YRQ0d5f5K3yHrRcrxPwosB9YJ8GbXCuCefzQXHg9izYJmx0Uvz1oathD0 tp7ZpzQoqG2QxhtgVEPdBcjmVxmkOzrhIssMAkwvtRhpTpYtiiXHRlDENhJcIyvD uAdD5fPiUa0fn18+/gzNubOe6r1UFVzMDb0H4wEL/7Oiu3IWp2npdwe6tPpyQU8+ 75G6lTHxgDWFtZ4V6l0PT6fvisKV7jCaaDr2dRx2G2Y73y9L0ZzBp0Pq4EbXBlf2 9xZFK5AkFl3r6pHNv6tWTSUWZTt3bkpszlqsv3k= -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:13 2026 by rpki-client