This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ygz1ED_MhM-qKnAyvrJrZWYfwOQ.roa File: ygz1ED_MhM-qKnAyvrJrZWYfwOQ.roa (raw, json) Hash identifier: nqM01Os4WF/KfPymmHI9ypOAYNsFTChwN2AypvOl2Kg= Subject key identifier: CA:0C:F5:10:3F:CC:84:CF:AA:2A:70:32:BE:B2:6B:65:66:1F:C0:E4 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E2AE392D17C238A57001E7C4EA89A Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ygz1ED_MhM-qKnAyvrJrZWYfwOQ.roa Signing time: Thu 01 Jan 2026 12:17:50 +0000 ROA not before: Thu 01 Jan 2026 12:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 45.138.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2a:e3:92:d1:7c:23:8a:57:00:1e:7c:4e:a8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca0cf5103fcc84cfaa2a7032beb26b65661fc0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:83:13:16:ec:66:95:b8:32:3a:b0:cb:d9: cc:22:aa:38:d4:32:0e:ab:87:a6:02:1d:46:73:98: f8:92:a1:ef:5a:4e:18:af:f1:f1:65:18:1f:55:5b: 50:27:67:a8:d4:da:ac:93:28:33:80:b5:81:09:e8: f5:ce:98:4c:10:aa:f6:9e:db:ea:c4:bc:f8:23:99: 86:b9:35:aa:c7:ad:ab:16:06:4a:7b:9c:8d:20:2b: 75:d2:d8:87:a8:85:ad:4d:30:af:ba:a4:f5:15:ef: 1d:fc:ae:3b:b5:14:49:76:70:21:f9:ff:8e:1f:4d: 77:55:e5:c7:cc:97:dc:a2:68:bf:4a:b3:e1:c8:e7: d9:7b:14:b2:c8:69:17:1a:c6:56:86:93:41:a7:75: 7a:85:37:9d:a1:9e:b9:c9:01:dd:27:0d:98:d0:55: 3e:5d:7c:22:a1:06:a5:c5:61:82:c1:1f:eb:40:4f: d9:54:3e:d6:9f:9a:e0:e5:eb:6c:52:c0:ef:a2:52: b7:c9:c7:de:ab:78:f9:3b:08:13:bd:b8:28:dc:77: 93:0d:73:cb:26:01:0d:3b:07:92:b9:4d:a4:a8:ac: 63:9d:e6:78:f1:1e:f9:18:29:e9:f9:16:50:4f:04: 23:5b:b0:83:42:70:ae:a8:19:87:87:2b:2c:fb:6e: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0C:F5:10:3F:CC:84:CF:AA:2A:70:32:BE:B2:6B:65:66:1F:C0:E4 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ygz1ED_MhM-qKnAyvrJrZWYfwOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.210.0/23 Signature Algorithm: sha256WithRSAEncryption 05:0e:92:03:48:23:d4:5e:02:e7:eb:98:9d:98:9b:ab:fc:63: 1c:a4:44:7a:a3:d6:a8:60:d9:7e:69:7f:a7:58:c9:fb:a0:28: 08:dd:67:00:ff:ac:78:8a:c3:23:cd:4a:36:22:fd:10:cb:a4: 2a:12:da:16:ef:40:17:20:18:5d:b4:5c:df:04:71:2d:44:86: 05:fd:23:05:c5:6f:d1:8c:e0:e7:64:9c:e7:87:6f:e9:c7:97: c9:7e:f3:9e:56:d6:65:6e:58:f6:20:e1:3f:42:61:fd:01:f1: 11:a3:d6:36:ba:0b:c1:ef:d3:3f:0a:2d:e4:29:0a:c0:77:78: 06:60:69:50:38:d4:70:ad:03:50:90:c3:6c:60:61:92:cf:86: e7:63:25:dc:f5:19:02:2b:27:b8:57:18:3d:cf:c4:5f:ad:9f: 95:42:f9:37:f2:af:1a:c3:ac:65:51:01:f7:62:be:c2:ac:b9: 08:af:0f:6d:35:59:6a:23:90:a2:4b:17:07:93:cf:7c:55:07: 33:73:b3:f8:80:63:2a:e3:b2:08:68:e9:d1:7c:5a:95:96:38: 6b:f5:b0:d8:47:05:bb:f8:81:e3:14:57:91:ee:ef:dc:e3:ff: ff:c1:82:ef:5f:55:9e:f8:cf:28:ce:5e:7e:0d:5c:18:61:be: fb:c4:d4:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5firjktF8I4pXAB58TqiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTBjZjUxMDNmY2M4NGNmYWEyYTcwMzJiZWIyNmI2NTY2MWZjMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nqDExbsZpW4Mjqwy9nMIqo41DIO q4emAh1Gc5j4kqHvWk4Yr/HxZRgfVVtQJ2eo1NqskygzgLWBCej1zphMEKr2ntvq xLz4I5mGuTWqx62rFgZKe5yNICt10tiHqIWtTTCvuqT1Fe8d/K47tRRJdnAh+f+O H013VeXHzJfcomi/SrPhyOfZexSyyGkXGsZWhpNBp3V6hTedoZ65yQHdJw2Y0FU+ XXwioQalxWGCwR/rQE/ZVD7Wn5rg5etsUsDvolK3ycfeq3j5OwgTvbgo3HeTDXPL JgENOweSuU2kqKxjneZ48R75GCnp+RZQTwQjW7CDQnCuqBmHhyss+272oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMoM9RA/zITPqipwMr6ya2VmH8DkMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEveWd6MUVEX01oTS1xS25BeXZySnJaV1lmd09RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYrSMA0G CSqGSIb3DQEBCwUAA4IBAQAFDpIDSCPUXgLn65idmJur/GMcpER6o9aoYNl+aX+n WMn7oCgI3WcA/6x4isMjzUo2Iv0Qy6QqEtoW70AXIBhdtFzfBHEtRIYF/SMFxW/R jODnZJznh2/px5fJfvOeVtZlblj2IOE/QmH9AfERo9Y2ugvB79M/Ci3kKQrAd3gG YGlQONRwrQNQkMNsYGGSz4bnYyXc9RkCKye4Vxg9z8RfrZ+VQvk38q8aw6xlUQH3 Yr7CrLkIrw9tNVlqI5CiSxcHk898VQczc7P4gGMq47IIaOnRfFqVljhr9bDYRwW7 +IHjFFeR7u/c4///wYLvX1We+M8ozl5+DVwYYb77xNRu -----END CERTIFICATE-----Generated at Mon Jan 19 20:26:46 2026 by rpki-client