This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/yNy0skicOu-jP7QuUndLN23XtkI.roa File: yNy0skicOu-jP7QuUndLN23XtkI.roa (raw, json) Hash identifier: 7nJv9LS2/UNjtTcCddx53W0Ircu/lW8FXE5gpcJ1hyg= Subject key identifier: C8:DC:B4:B2:48:9C:3A:EF:A3:3F:B4:2E:52:77:4B:37:6D:D7:B6:42 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E3AFA54D70F74AE67D11C10250B1 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/yNy0skicOu-jP7QuUndLN23XtkI.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 178.251.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e3:af:a5:4d:70:f7:4a:e6:7d:11:c1:02:50:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8dcb4b2489c3aefa33fb42e52774b376dd7b642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:31:fb:5d:f5:d9:8f:94:c4:73:2c:da:d3: b7:81:2c:08:f0:ac:1c:cd:31:da:1e:95:e8:49:dd: 7c:e2:71:78:2b:c3:b9:3e:9b:24:a3:9f:6c:11:15: a6:ba:b0:bf:d8:c4:00:f5:d7:ba:7a:88:0c:61:0c: 04:ac:2e:04:3a:6e:15:25:f2:ba:a2:52:aa:a9:38: dc:74:b8:f6:b0:af:39:ff:18:fe:7b:95:88:79:cd: 32:9d:45:0f:9a:4a:e6:08:d3:90:37:b1:5c:69:2a: 58:7d:8f:86:4f:aa:1d:b7:44:bc:2f:63:9c:aa:4f: 95:81:b8:e1:a9:28:2d:f9:f9:d8:2b:68:1c:9f:dd: 91:c4:60:65:90:52:22:a6:1c:57:d9:84:2f:f1:d8: 93:5e:37:01:37:86:c3:91:7a:5c:0f:3b:5a:bc:04: 24:28:03:26:26:25:8d:3d:b3:80:43:cd:09:32:95: 42:ab:d8:e2:4b:2b:4b:14:cd:ff:a4:89:f3:f7:f2: fb:73:3c:90:22:21:7f:89:f1:ec:9c:9f:d1:9a:b5: db:11:c2:d1:0b:70:7d:5b:5a:69:40:91:6c:f3:ba: 43:e8:0c:8c:fa:e5:b5:e3:e1:bd:9b:ab:8f:8e:11: f5:65:70:8b:6a:d5:ec:2d:11:e9:d7:7b:d7:71:75: 3f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DC:B4:B2:48:9C:3A:EF:A3:3F:B4:2E:52:77:4B:37:6D:D7:B6:42 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/yNy0skicOu-jP7QuUndLN23XtkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.228.0/24 Signature Algorithm: sha256WithRSAEncryption b1:2c:04:e5:4f:78:ba:60:5e:94:47:77:a6:89:52:11:32:61: 24:83:9f:cd:f6:ac:a6:c6:4e:bf:ed:35:df:b0:15:ad:61:b6: fa:36:cb:13:95:a0:68:c2:50:a5:ec:0e:b3:92:3f:c5:6a:c8: 3e:3c:f7:f8:1e:90:e0:0b:f0:b3:dc:3b:7d:9b:4c:78:bc:30: d9:dd:fd:71:f1:04:61:27:7a:5f:b9:71:cd:d7:89:8b:57:2a: bb:e4:73:4e:75:e8:0a:17:e1:1e:11:16:fb:f8:d7:3d:6d:fb: fc:59:3c:d9:82:8d:0f:af:68:b2:f6:8a:fe:dc:ce:3b:f1:0a: ab:4e:8e:ff:1f:12:8e:b6:9d:31:c4:72:ac:d6:22:cf:a3:60: 19:ad:4d:1a:ad:df:04:49:db:37:99:21:27:11:92:aa:cc:52: b7:d6:67:30:d0:0c:dc:4f:f9:04:32:a5:a0:21:67:c1:d4:f5: 2f:78:bf:7f:c7:b3:e6:ea:4f:f5:a7:5f:cd:57:6f:76:38:cc: 06:62:a9:24:61:29:b7:90:ae:fa:2a:f2:97:f5:31:32:85:7b: d5:b7:05:9f:bc:e8:b6:78:3c:ca:5b:18:02:5c:60:4e:d6:2f: 9d:a6:8e:25:64:ef:14:fe:54:55:99:fa:8e:5f:2b:03:5a:26: 48:5e:de:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOOvpU1w90rmfRHBAlCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGRjYjRiMjQ4OWMzYWVmYTMzZmI0MmU1Mjc3NGIzNzZkZDdiNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuMx+1312Y+UxHMs2tO3gSwI8Kwc zTHaHpXoSd184nF4K8O5Ppsko59sERWmurC/2MQA9de6eogMYQwErC4EOm4VJfK6 olKqqTjcdLj2sK85/xj+e5WIec0ynUUPmkrmCNOQN7FcaSpYfY+GT6odt0S8L2Oc qk+VgbjhqSgt+fnYK2gcn92RxGBlkFIiphxX2YQv8diTXjcBN4bDkXpcDztavAQk KAMmJiWNPbOAQ80JMpVCq9jiSytLFM3/pInz9/L7czyQIiF/ifHsnJ/RmrXbEcLR C3B9W1ppQJFs87pD6AyM+uW14+G9m6uPjhH1ZXCLatXsLRHp13vXcXU/fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMjctLJInDrvoz+0LlJ3Szdt17ZCMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEveU55MHNraWNPdS1qUDdRdVVuZExOMjNYdGtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvvkMA0G CSqGSIb3DQEBCwUAA4IBAQCxLATlT3i6YF6UR3emiVIRMmEkg5/N9qymxk6/7TXf sBWtYbb6NssTlaBowlCl7A6zkj/Fasg+PPf4HpDgC/Cz3Dt9m0x4vDDZ3f1x8QRh J3pfuXHN14mLVyq75HNOdegKF+EeERb7+Nc9bfv8WTzZgo0Pr2iy9or+3M478Qqr To7/HxKOtp0xxHKs1iLPo2AZrU0ard8ESds3mSEnEZKqzFK31mcw0AzcT/kEMqWg IWfB1PUveL9/x7Pm6k/1p1/NV292OMwGYqkkYSm3kK76KvKX9TEyhXvVtwWfvOi2 eDzKWxgCXGBO1i+dpo4lZO8U/lRVmfqOXysDWiZIXt58 -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:48 2026 by rpki-client