This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/YykfUYmRRbTXt94f_g0l_IynvDo.roa File: YykfUYmRRbTXt94f_g0l_IynvDo.roa (raw, json) Hash identifier: pI8Hi2Q8oLa5BZOGg0QPtqf72tmXIsLTGFmFi6JksGg= Subject key identifier: 63:29:1F:51:89:91:45:B4:D7:B7:DE:1F:FE:0D:25:FC:8C:A7:BC:3A Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C6C74914C89CA61D08E4486B1070 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/YykfUYmRRbTXt94f_g0l_IynvDo.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216334 IP address blocks: 109.107.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c6:c7:49:14:c8:9c:a6:1d:08:e4:48:6b:10:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63291f51899145b4d7b7de1ffe0d25fc8ca7bc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:98:28:9d:e2:74:1a:eb:e4:b1:bc:dd:75:1a: 7d:1f:92:5e:8e:06:ce:50:3b:3d:da:27:97:5b:27: a2:53:d2:1f:c9:f5:98:6e:08:ee:0f:1e:43:1b:3f: 08:00:d6:f5:6e:b6:b4:f2:ab:2a:26:ba:7f:2c:d2: 9e:d5:b1:c1:03:a6:70:73:03:81:2a:4d:7a:5f:c8: 65:78:3a:bd:09:40:91:5e:9e:5e:99:ac:22:83:b2: fb:f6:ca:1b:c4:02:41:c8:44:8b:4a:c5:89:11:ef: 2a:35:cf:30:54:98:0c:07:81:c3:8d:e8:fc:fd:c7: e7:23:8a:ba:d3:4d:71:24:60:0d:56:61:f2:3e:bf: 06:3c:34:34:8d:f6:46:3c:69:fa:92:1e:4e:51:49: df:24:2d:77:39:60:72:72:7e:0c:2e:2e:39:29:78: e9:01:a2:54:b5:32:d0:0d:41:ea:7e:80:a9:fd:69: c8:32:15:01:c4:aa:11:b6:22:f3:5d:35:e1:27:c4: a4:8e:f5:3c:db:4b:11:9c:1d:60:d5:3c:c4:7a:8c: 26:54:0c:9f:6c:26:bc:69:b5:f2:5c:eb:73:23:7b: 72:d2:cf:dc:7a:e9:90:97:6f:3d:a3:27:97:52:62: 1c:04:c0:ea:ef:2b:ce:49:95:26:0d:7b:8b:29:18: 73:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:29:1F:51:89:91:45:B4:D7:B7:DE:1F:FE:0D:25:FC:8C:A7:BC:3A X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/YykfUYmRRbTXt94f_g0l_IynvDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.161.0/24 Signature Algorithm: sha256WithRSAEncryption a6:3a:15:02:d8:cc:e5:70:82:be:9c:fe:eb:28:e0:0a:8f:95: e7:0d:9b:6e:54:0a:24:c6:3d:95:95:1b:15:8c:89:97:56:46: 24:7a:45:74:53:28:17:d0:07:a2:19:3c:59:8d:36:b4:6a:d5: 47:9d:07:b8:23:ea:e8:08:a0:be:a9:0a:58:e8:be:6e:88:b9: 48:ff:30:45:eb:cd:d8:84:09:bf:7a:64:65:dd:f4:b6:28:4a: 1c:ef:58:72:39:2e:16:9c:d4:37:c0:2c:a3:8d:cd:98:7c:6b: 4d:9e:df:d8:be:8e:ce:c1:96:8c:ae:15:fa:61:c4:51:b0:27: 17:9a:6c:b7:80:a2:ff:03:2e:9c:49:b7:da:08:41:9a:78:43: 6d:51:c0:2b:c4:ba:20:6d:ca:a4:4c:a6:d6:4e:f3:39:73:f8: 37:5c:da:67:e4:0d:66:9d:76:7f:6b:99:bf:61:e6:41:7a:97: 51:e4:89:f3:dd:ea:bf:4f:ab:cc:f1:f7:76:e4:c1:ac:49:29: 15:3b:25:05:ee:ee:5d:2a:6a:16:f4:37:ae:95:b6:1a:c0:29: 42:4d:04:8b:3e:fc:08:d3:20:12:e7:be:87:2d:18:aa:b7:93: b7:cf:62:ee:4c:ad:25:b0:7d:83:a6:1a:0f:dd:58:eb:84:c9: 09:e2:71:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8bHSRTInKYdCORIaxBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzI5MWY1MTg5OTE0NWI0ZDdiN2RlMWZmZTBkMjVmYzhjYTdiYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JgoneJ0GuvksbzddRp9H5JejgbO UDs92ieXWyeiU9IfyfWYbgjuDx5DGz8IANb1bra08qsqJrp/LNKe1bHBA6ZwcwOB Kk16X8hleDq9CUCRXp5emawig7L79sobxAJByESLSsWJEe8qNc8wVJgMB4HDjej8 /cfnI4q6001xJGANVmHyPr8GPDQ0jfZGPGn6kh5OUUnfJC13OWBycn4MLi45KXjp AaJUtTLQDUHqfoCp/WnIMhUBxKoRtiLzXTXhJ8SkjvU820sRnB1g1TzEeowmVAyf bCa8abXyXOtzI3ty0s/ceumQl289oyeXUmIcBMDq7yvOSZUmDXuLKRhzTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMpH1GJkUW017feH/4NJfyMp7w6MB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvWXlrZlVZbVJSYlRYdDk0Zl9nMGxfSXludkRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuhMA0G CSqGSIb3DQEBCwUAA4IBAQCmOhUC2MzlcIK+nP7rKOAKj5XnDZtuVAokxj2VlRsV jImXVkYkekV0UygX0AeiGTxZjTa0atVHnQe4I+roCKC+qQpY6L5uiLlI/zBF683Y hAm/emRl3fS2KEoc71hyOS4WnNQ3wCyjjc2YfGtNnt/Yvo7OwZaMrhX6YcRRsCcX mmy3gKL/Ay6cSbfaCEGaeENtUcArxLogbcqkTKbWTvM5c/g3XNpn5A1mnXZ/a5m/ YeZBepdR5Inz3eq/T6vM8fd25MGsSSkVOyUF7u5dKmoW9DeulbYawClCTQSLPvwI 0yAS576HLRiqt5O3z2LuTK0lsH2DphoP3VjrhMkJ4nFk -----END CERTIFICATE-----Generated at Wed Jan 21 19:41:32 2026 by rpki-client