This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/yKo-4icwyEpIS-Zvd5t9wSgTaEc.roa File: yKo-4icwyEpIS-Zvd5t9wSgTaEc.roa (raw, json) Hash identifier: f8cW6zKbbrWGdT4UYGeMYoJzkCOMROgC8fVMGAq5axA= Subject key identifier: C8:AA:3E:E2:27:30:C8:4A:48:4B:E6:6F:77:9B:7D:C1:28:13:68:47 Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec Certificate serial: 019B7BA433E90A2D73F5B515B29F34735516 Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/yKo-4icwyEpIS-Zvd5t9wSgTaEc.roa Signing time: Thu 01 Jan 2026 22:18:37 +0000 ROA not before: Thu 01 Jan 2026 22:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 159.253.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:33:e9:0a:2d:73:f5:b5:15:b2:9f:34:73:55:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d894365b28a082834a751a97771b791124524dec Validity Not Before: Jan 1 22:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8aa3ee22730c84a484be66f779b7dc128136847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:7b:86:5f:5e:23:e3:95:36:31:94:f8:5f: 7a:47:ee:95:b1:4b:13:39:f5:e6:ff:7c:61:16:6b: 48:66:55:0c:7e:a5:c1:67:cf:f8:b2:68:0f:ed:4e: d3:a7:9f:02:a8:3a:e7:0a:00:a7:45:bf:01:b4:e0: 4b:19:87:cc:33:d4:cc:4c:6d:20:44:55:1f:4e:00: dd:68:6c:0e:76:28:41:a7:fb:0f:bf:e7:81:db:82: d2:37:65:a5:fa:8e:cd:f4:5e:00:35:3f:30:7f:c2: ca:e2:69:5b:6a:b5:b3:f0:5e:ca:8e:ca:07:2e:91: 9d:8d:15:70:45:ac:8b:01:50:a8:c9:22:c3:d1:e2: 2c:19:99:a6:9d:fd:d2:40:0a:5a:f5:1f:13:1d:06: e1:09:45:7a:14:69:33:06:8b:f3:36:f2:de:b9:ae: 3c:43:3d:ba:03:48:54:7c:c1:02:29:17:55:b8:b4: ec:1f:95:91:27:19:78:f1:d5:f2:60:3d:5e:88:14: 30:8e:de:25:78:fa:9f:0a:c7:0b:11:92:dd:80:55: ce:c4:af:b7:bd:14:de:48:f8:c1:24:0f:c1:37:e1: 20:60:00:19:ad:11:95:b5:70:0f:9b:f6:43:e6:d3: 3d:aa:84:b4:3f:a1:40:b8:28:71:cd:a4:40:d6:02: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:3E:E2:27:30:C8:4A:48:4B:E6:6F:77:9B:7D:C1:28:13:68:47 X509v3 Authority Key Identifier: keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/yKo-4icwyEpIS-Zvd5t9wSgTaEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.253.164.0/24 Signature Algorithm: sha256WithRSAEncryption 22:12:32:3c:5d:bd:2e:22:e3:cf:d5:aa:86:87:f1:4d:e6:31: 72:26:4c:66:8b:ef:2a:79:3a:7c:1e:8a:0c:bc:2b:96:ca:ff: bc:b7:0f:00:6c:d1:9e:9f:e5:3c:7f:26:f9:11:79:9e:58:01: 0a:60:29:c6:41:22:9c:a2:58:13:6b:7f:c8:96:03:e4:b6:f7: 03:11:34:f4:79:86:3f:41:1d:ae:b9:9c:aa:e0:dc:70:b8:f2: a3:e6:bf:6f:be:a3:e5:e8:df:67:41:b1:6a:cc:5c:c4:7a:35: ff:29:b7:f8:21:e2:97:a6:5d:08:6c:fc:29:17:53:c6:e2:44: e9:e6:20:68:30:3b:57:a8:a3:9a:bb:00:68:29:67:09:1f:55: bf:f8:98:4c:0e:cd:61:a9:ec:41:fc:5d:f8:a2:ff:68:47:26: f7:4f:11:f9:01:ad:56:96:21:31:c9:a5:68:66:0c:52:6b:be: 22:50:ba:05:88:78:1a:0f:4e:26:29:9a:b0:79:e2:7a:c1:78: f5:e5:3d:35:a1:24:42:b2:dc:90:17:df:69:7d:99:8a:47:6e: 59:2a:b5:6f:30:dd:64:a8:0c:93:86:bf:cc:e8:2b:e9:77:f0: 11:6c:52:f3:67:91:a8:d9:c6:55:48:41:40:fc:26:14:70:be: 63:53:88:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pDPpCi1z9bUVsp80c1UWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1 MjRkZWMwHhcNMjYwMTAxMjIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGFhM2VlMjI3MzBjODRhNDg0YmU2NmY3NzliN2RjMTI4MTM2ODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+17hl9eI+OVNjGU+F96R+6VsUsT OfXm/3xhFmtIZlUMfqXBZ8/4smgP7U7Tp58CqDrnCgCnRb8BtOBLGYfMM9TMTG0g RFUfTgDdaGwOdihBp/sPv+eB24LSN2Wl+o7N9F4ANT8wf8LK4mlbarWz8F7KjsoH LpGdjRVwRayLAVCoySLD0eIsGZmmnf3SQApa9R8THQbhCUV6FGkzBovzNvLeua48 Qz26A0hUfMECKRdVuLTsH5WRJxl48dXyYD1eiBQwjt4lePqfCscLEZLdgFXOxK+3 vRTeSPjBJA/BN+EgYAAZrRGVtXAPm/ZD5tM9qoS0P6FAuChxzaRA1gLCQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMiqPuInMMhKSEvmb3ebfcEoE2hHMB8GA1UdIwQY MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt MjE0NjE3OWQ4ZTJiLzEveUtvLTRpY3d5RXBJUy1admQ1dDl3U2dUYUVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn/2kMA0G CSqGSIb3DQEBCwUAA4IBAQAiEjI8Xb0uIuPP1aqGh/FN5jFyJkxmi+8qeTp8HooM vCuWyv+8tw8AbNGen+U8fyb5EXmeWAEKYCnGQSKcolgTa3/IlgPktvcDETT0eYY/ QR2uuZyq4NxwuPKj5r9vvqPl6N9nQbFqzFzEejX/Kbf4IeKXpl0IbPwpF1PG4kTp 5iBoMDtXqKOauwBoKWcJH1W/+JhMDs1hqexB/F34ov9oRyb3TxH5Aa1WliExyaVo ZgxSa74iULoFiHgaD04mKZqweeJ6wXj15T01oSRCstyQF99pfZmKR25ZKrVvMN1k qAyThr/M6Cvpd/ARbFLzZ5Go2cZVSEFA/CYUcL5jU4hF -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:26 2026 by rpki-client