This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YSAbCMjKr6TBBuhgbM3jpCzINeg.roa File: YSAbCMjKr6TBBuhgbM3jpCzINeg.roa (raw, json) Hash identifier: BBf8JaX9DTuu/r53bDUAzP81SKh2aFBorHSzjxz/G8I= Subject key identifier: 61:20:1B:08:C8:CA:AF:A4:C1:06:E8:60:6C:CD:E3:A4:2C:C8:35:E8 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC81CBD6FDFBB8A9BECC9B4A2A5457 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YSAbCMjKr6TBBuhgbM3jpCzINeg.roa Signing time: Thu 01 Jan 2026 14:18:20 +0000 ROA not before: Thu 01 Jan 2026 14:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215728 IP address blocks: 144.31.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:81:cb:d6:fd:fb:b8:a9:be:cc:9b:4a:2a:54:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61201b08c8caafa4c106e8606ccde3a42cc835e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d0:a5:9d:90:16:2b:65:2f:7a:ad:f3:56:81: 81:36:08:87:ed:a0:cf:d2:cc:9e:02:62:f7:59:d4: 47:a5:51:bd:11:1c:0d:ec:94:df:69:1e:2d:2d:4c: cb:30:d1:b2:84:43:02:fc:eb:47:e2:da:b1:a2:1a: 51:91:38:d0:bb:de:5b:14:5c:dc:7a:f1:60:71:44: 41:c8:4a:5c:96:75:7f:ef:f9:4c:3a:e2:f8:f6:4e: 3a:5f:04:cd:aa:15:d4:49:ca:ca:f3:c2:fd:41:35: 92:c7:5d:ef:64:d2:9b:e9:69:a4:92:4b:c5:64:0f: e1:1c:c7:98:72:68:2a:f2:9b:58:f7:69:49:88:ef: 88:66:90:08:06:4e:a1:73:bc:1f:a9:35:d8:71:84: 8f:54:c8:28:08:0e:e1:80:36:a4:e2:fc:34:80:4e: d8:d3:6e:87:5a:aa:f6:27:70:df:14:79:9f:06:92: b2:7b:82:54:c9:c5:3c:d8:35:6e:a9:ec:9d:88:ed: 76:9b:ae:c5:bc:6d:43:e7:13:30:7d:36:c6:ba:ca: a3:4a:05:93:80:81:e2:cf:16:4e:c1:bd:09:82:20: 9f:d4:96:43:df:50:16:be:25:87:7d:b9:3a:39:38: 69:a2:bb:ac:1f:07:c5:01:13:0a:85:56:40:d9:d4: 10:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:20:1B:08:C8:CA:AF:A4:C1:06:E8:60:6C:CD:E3:A4:2C:C8:35:E8 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YSAbCMjKr6TBBuhgbM3jpCzINeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.206.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:69:de:d4:b4:f0:00:09:d7:da:cf:46:3b:44:ce:fb:05:e9: 78:0b:16:5e:4e:6a:07:2e:b5:3e:44:77:70:df:3e:18:a0:f1: df:2e:17:58:3e:c1:12:56:b4:4c:ad:2a:8e:78:d1:61:21:74: 36:84:47:c7:c9:0b:7d:c0:71:f4:dc:90:24:ca:54:53:fe:34: e4:10:7b:bf:52:c1:7f:6d:f3:28:06:c2:5e:4f:c2:f4:e2:de: 5a:ac:b6:ad:00:8b:5a:05:66:9e:0c:33:f9:b3:5e:a7:2b:64: 56:ec:17:1b:13:79:02:74:38:38:61:8c:63:89:1b:7d:49:3d: cd:bc:dd:13:de:b3:e1:31:35:04:b1:52:48:e1:d7:f0:ec:fb: be:76:17:a4:8e:69:04:28:af:07:12:8c:7c:37:df:85:ea:16: 5a:d7:9a:8f:55:fc:0e:33:d8:8d:91:04:a6:a4:66:89:5a:40: a5:18:af:aa:35:b1:6d:54:d1:91:ee:aa:24:c9:b6:96:4f:1f: 9a:e5:01:25:7f:30:da:20:94:cf:90:5b:1f:86:0c:0e:0d:7f: f2:f2:03:4c:7f:0f:58:fd:e9:76:f9:07:54:88:9b:a9:56:1f: 9b:fd:f1:14:c4:3e:52:fc:36:ff:c9:f4:f7:7d:d5:ed:74:7e: 64:0e:d4:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57IHL1v37uKm+zJtKKlRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTIwMWIwOGM4Y2FhZmE0YzEwNmU4NjA2Y2NkZTNhNDJjYzgzNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ClnZAWK2Uveq3zVoGBNgiH7aDP 0syeAmL3WdRHpVG9ERwN7JTfaR4tLUzLMNGyhEMC/OtH4tqxohpRkTjQu95bFFzc evFgcURByEpclnV/7/lMOuL49k46XwTNqhXUScrK88L9QTWSx13vZNKb6WmkkkvF ZA/hHMeYcmgq8ptY92lJiO+IZpAIBk6hc7wfqTXYcYSPVMgoCA7hgDak4vw0gE7Y 026HWqr2J3DfFHmfBpKye4JUycU82DVuqeydiO12m67FvG1D5xMwfTbGusqjSgWT gIHizxZOwb0JgiCf1JZD31AWviWHfbk6OThporusHwfFARMKhVZA2dQQxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGEgGwjIyq+kwQboYGzN46QsyDXoMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvWVNBYkNNaktyNlRCQnVoZ2JNM2pwQ3pJTmVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB/OMA0G CSqGSIb3DQEBCwUAA4IBAQCMad7UtPAACdfaz0Y7RM77Bel4CxZeTmoHLrU+RHdw 3z4YoPHfLhdYPsESVrRMrSqOeNFhIXQ2hEfHyQt9wHH03JAkylRT/jTkEHu/UsF/ bfMoBsJeT8L04t5arLatAItaBWaeDDP5s16nK2RW7BcbE3kCdDg4YYxjiRt9ST3N vN0T3rPhMTUEsVJI4dfw7Pu+dhekjmkEKK8HEox8N9+F6hZa15qPVfwOM9iNkQSm pGaJWkClGK+qNbFtVNGR7qokybaWTx+a5QElfzDaIJTPkFsfhgwODX/y8gNMfw9Y /el2+QdUiJupVh+b/fEUxD5S/Db/yfT3fdXtdH5kDtQz -----END CERTIFICATE-----Generated at Sun Jan 11 15:24:49 2026 by rpki-client