This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa File: YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa (raw, json) Hash identifier: t3YG10sy6vB+Qag/g3AGHLoljWVvm1G3KkmY9lIG3vE= Subject key identifier: 61:3B:F3:42:C1:41:5D:1C:69:66:3C:69:A6:A0:99:0B:19:91:3D:84 Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Certificate serial: 019B76EB0A00C3E67A40B5F1C8FBBD278B90 Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35179 IP address blocks: 213.109.46.0/24 maxlen: 24 213.109.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0a:00:c3:e6:7a:40:b5:f1:c8:fb:bd:27:8b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=613bf342c1415d1c69663c69a6a0990b19913d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:7e:d6:83:00:5e:15:88:1f:f8:ee:f3:e3: 0b:b8:bc:9a:a0:e0:f5:46:2e:8f:20:eb:64:48:32: 77:10:2a:8c:34:f5:15:32:ff:08:9b:de:1d:18:52: 93:40:3b:e6:08:36:f7:20:dc:a4:78:f3:89:d9:ba: 16:6a:0a:f0:a3:77:bf:a6:6a:d4:c0:42:85:de:bf: 95:bb:b8:49:dc:c9:a3:a7:cd:c9:f9:88:de:2d:0c: 60:23:ca:cb:87:27:bf:1b:81:20:fe:25:9b:27:9d: fa:49:cb:57:04:b0:8c:2a:db:9b:f5:3d:f8:48:8d: a5:0a:fd:b6:62:bd:db:bc:42:8e:17:e0:28:8b:97: b7:9a:f0:ac:ff:0f:76:8e:a9:bc:d8:79:a7:ca:2d: 13:e0:ca:03:12:52:c5:23:23:0f:b6:39:56:df:a6: 01:78:2a:a6:d2:f7:1d:74:fd:30:a2:93:06:97:d5: 73:3e:a7:a8:2e:90:77:83:a3:58:20:00:d9:5a:03: 85:1e:0f:0b:20:b6:dc:75:32:a3:d3:bc:a9:e5:94: f9:3f:75:18:93:5f:ab:d5:1d:e6:03:23:e6:20:85: c1:a5:c7:31:1a:b8:b8:3a:38:a0:ca:b0:dd:a6:1d: 49:29:15:f8:9b:ff:2d:ab:c9:62:cf:62:ed:8a:f2: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3B:F3:42:C1:41:5D:1C:69:66:3C:69:A6:A0:99:0B:19:91:3D:84 X509v3 Authority Key Identifier: keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/YTvzQsFBXRxpZjxppqCZCxmRPYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.46.0/23 Signature Algorithm: sha256WithRSAEncryption a7:83:63:ca:02:6e:ea:41:34:c8:4e:08:c6:af:5a:51:9d:e3: 7d:4b:ff:b4:46:08:2a:e2:8c:f0:5d:61:8f:3a:da:c9:e0:aa: 26:b0:98:59:e8:5f:b8:20:7f:91:29:b9:b1:a7:00:ce:c6:a6: 40:b0:30:52:0e:1c:45:aa:a4:b6:31:fb:03:19:69:04:9b:51: 3e:5f:fe:a5:3a:84:36:19:f5:da:31:e1:1a:83:42:af:98:25: c3:89:79:05:96:9e:83:38:11:a4:7a:d2:4d:55:ed:99:63:7b: d5:0c:b2:e0:62:63:06:9d:34:c3:cf:80:89:91:61:89:65:0b: bb:75:a2:c9:66:75:02:12:78:63:1f:ac:7c:b2:67:53:aa:f1: 0e:73:3a:65:e5:87:b1:de:c4:94:3f:c5:ea:b5:c8:7a:c2:d6: fd:cc:a3:77:1e:32:29:f6:09:69:58:a6:44:59:76:50:fb:81: 7e:08:72:44:72:78:3f:81:c5:18:60:fb:84:2a:61:c1:9d:15: bb:99:d2:be:d6:5a:2a:42:40:99:65:b3:b7:41:9d:52:e6:ec: 08:c1:72:c2:c6:22:80:65:ec:34:8e:ef:f5:62:c9:b0:82:1e: a2:a1:8b:47:8b:76:4d:30:b5:28:3f:ee:ec:8f:55:7d:11:79: 23:52:f9:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26woAw+Z6QLXxyPu9J4uQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw ZDVkZDkwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTNiZjM0MmMxNDE1ZDFjNjk2NjNjNjlhNmEwOTkwYjE5OTEzZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4V+1oMAXhWIH/ju8+MLuLyaoOD1 Ri6PIOtkSDJ3ECqMNPUVMv8Im94dGFKTQDvmCDb3INykePOJ2boWagrwo3e/pmrU wEKF3r+Vu7hJ3Mmjp83J+YjeLQxgI8rLhye/G4Eg/iWbJ536SctXBLCMKtub9T34 SI2lCv22Yr3bvEKOF+Aoi5e3mvCs/w92jqm82Hmnyi0T4MoDElLFIyMPtjlW36YB eCqm0vcddP0wopMGl9VzPqeoLpB3g6NYIADZWgOFHg8LILbcdTKj07yp5ZT5P3UY k1+r1R3mAyPmIIXBpccxGri4OjigyrDdph1JKRX4m/8tq8liz2LtivLnwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGE780LBQV0caWY8aaagmQsZkT2EMB8GA1UdIwQY MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt OTkzMGYyMTk0YTBlLzEvWVR2elFzRkJYUnhwWmp4cHBxQ1pDeG1SUFlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1W0uMA0G CSqGSIb3DQEBCwUAA4IBAQCng2PKAm7qQTTITgjGr1pRneN9S/+0Rggq4ozwXWGP OtrJ4KomsJhZ6F+4IH+RKbmxpwDOxqZAsDBSDhxFqqS2MfsDGWkEm1E+X/6lOoQ2 GfXaMeEag0KvmCXDiXkFlp6DOBGketJNVe2ZY3vVDLLgYmMGnTTDz4CJkWGJZQu7 daLJZnUCEnhjH6x8smdTqvEOczpl5Yex3sSUP8Xqtch6wtb9zKN3HjIp9glpWKZE WXZQ+4F+CHJEcng/gcUYYPuEKmHBnRW7mdK+1loqQkCZZbO3QZ1S5uwIwXLCxiKA Zew0ju/1Ysmwgh6ioYtHi3ZNMLUoP+7sj1V9EXkjUvm6 -----END CERTIFICATE-----Generated at Mon Jan 26 13:31:14 2026 by rpki-client