This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/YrCSoDY2gBELylrBp80qKY1mLFw.roa File: YrCSoDY2gBELylrBp80qKY1mLFw.roa (raw, json) Hash identifier: n1TS2t+Errsfcdk3+b0U++Qmqd3Sf71dOOXviQAbSkY= Subject key identifier: 62:B0:92:A0:36:36:80:11:0B:CA:5A:C1:A7:CD:2A:29:8D:66:2C:5C Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E389D2697072FA92F699DD5F5BE50C7 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/YrCSoDY2gBELylrBp80qKY1mLFw.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 213.220.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9d:26:97:07:2f:a9:2f:69:9d:d5:f5:be:50:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62b092a0363680110bca5ac1a7cd2a298d662c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:84:cc:42:b6:2a:99:47:3f:dc:72:b2:27: 4f:45:be:d1:93:f5:cd:2b:ce:49:d3:38:a6:7f:19: 6f:d3:50:2a:d8:f1:ce:e5:87:42:4f:4f:de:7b:5f: c6:26:84:a2:3e:82:ad:64:19:8c:8b:af:90:fa:31: 8a:88:d4:e4:e3:16:3a:ae:43:30:a8:c2:2b:f1:fd: e8:bd:c1:89:f2:cc:f1:18:73:07:4b:aa:7a:43:da: a3:97:8d:86:cb:f6:c1:33:14:fb:09:59:f3:f2:2a: 50:38:60:25:64:36:d1:ea:55:1c:f8:45:44:2b:86: 4f:3e:40:f1:f9:01:2f:08:32:46:f8:ef:02:50:86: 47:ab:f2:fe:fb:fb:4d:ca:c8:4b:dd:b6:99:6b:d9: 1f:a8:87:df:7e:f4:5b:f1:b1:40:4d:f3:e6:c6:13: ae:72:e7:55:94:5a:f1:82:de:1b:cd:ae:86:6f:2b: b0:1c:17:55:01:8b:ad:a6:5d:e8:69:f8:b7:6f:6c: 4d:f4:aa:d5:d5:bf:33:f7:51:79:8d:a0:ad:eb:cc: 4c:ea:80:3e:13:db:93:d9:d6:4a:32:08:5b:d2:7f: 8f:4d:f4:85:a4:4b:a7:31:56:38:62:52:4c:a8:c7: 38:a3:ec:ac:e5:db:52:56:75:86:74:35:4e:9e:0c: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B0:92:A0:36:36:80:11:0B:CA:5A:C1:A7:CD:2A:29:8D:66:2C:5C X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/YrCSoDY2gBELylrBp80qKY1mLFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.220.8.0/24 Signature Algorithm: sha256WithRSAEncryption 11:d2:6d:4d:fe:c3:3f:20:f6:2f:a2:6a:30:ea:7b:e8:db:22: c6:01:a9:2b:3c:a5:33:30:77:51:94:2a:e4:56:34:c8:a9:0c: 60:ba:12:33:61:ae:c7:b1:c8:0f:b6:a1:d3:0c:bd:79:e3:ef: ed:e9:e5:f9:2a:3a:bc:d3:4e:dc:69:0f:4b:ce:0f:5c:7f:a9: e7:87:d3:52:f8:69:97:5a:46:d0:c9:b9:72:04:58:8a:fb:2d: 48:db:f7:43:ff:88:f2:fd:04:7b:f7:54:f8:f9:87:48:70:6d: 9b:f4:ea:4d:27:38:00:da:0f:1b:29:f1:a3:f8:e9:76:12:10: a0:02:4f:d1:36:8e:d5:46:2f:13:29:35:5f:0a:88:77:ef:e9: 5d:27:3d:65:ed:36:47:66:3d:81:6b:ab:73:b4:da:e3:e9:d2: 4f:fa:ae:4b:9d:65:7e:99:4c:8c:df:fe:e9:1e:ef:a8:40:77: 51:6e:0f:d8:aa:48:20:50:2a:0e:cd:be:20:32:30:7d:f8:eb: d6:97:f9:83:3f:d0:23:20:ad:95:67:a8:00:79:92:b0:d8:e6: a1:d2:98:57:45:42:3d:41:43:5d:6b:8e:49:17:c6:fd:e8:46: 76:0a:88:90:0d:b1:fc:1a:f5:29:65:e3:21:38:f2:46:4c:99: 30:b4:85:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJ0mlwcvqS9pndX1vlDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmIwOTJhMDM2MzY4MDExMGJjYTVhYzFhN2NkMmEyOThkNjYyYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi2EzEK2KplHP9xysidPRb7Rk/XN K85J0zimfxlv01Aq2PHO5YdCT0/ee1/GJoSiPoKtZBmMi6+Q+jGKiNTk4xY6rkMw qMIr8f3ovcGJ8szxGHMHS6p6Q9qjl42Gy/bBMxT7CVnz8ipQOGAlZDbR6lUc+EVE K4ZPPkDx+QEvCDJG+O8CUIZHq/L++/tNyshL3baZa9kfqIfffvRb8bFATfPmxhOu cudVlFrxgt4bza6GbyuwHBdVAYutpl3oafi3b2xN9KrV1b8z91F5jaCt68xM6oA+ E9uT2dZKMghb0n+PTfSFpEunMVY4YlJMqMc4o+ys5dtSVnWGdDVOngwzqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKwkqA2NoARC8pawafNKimNZixcMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvWXJDU29EWTJnQkVMeWxyQnA4MHFLWTFtTEZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dwIMA0G CSqGSIb3DQEBCwUAA4IBAQAR0m1N/sM/IPYvomow6nvo2yLGAakrPKUzMHdRlCrk VjTIqQxguhIzYa7HscgPtqHTDL154+/t6eX5Kjq8007caQ9Lzg9cf6nnh9NS+GmX WkbQyblyBFiK+y1I2/dD/4jy/QR791T4+YdIcG2b9OpNJzgA2g8bKfGj+Ol2EhCg Ak/RNo7VRi8TKTVfCoh37+ldJz1l7TZHZj2Ba6tztNrj6dJP+q5LnWV+mUyM3/7p Hu+oQHdRbg/YqkggUCoOzb4gMjB9+OvWl/mDP9AjIK2VZ6gAeZKw2Oah0phXRUI9 QUNda45JF8b96EZ2CoiQDbH8GvUpZeMhOPJGTJkwtIUn -----END CERTIFICATE-----Generated at Thu Jan 8 08:55:15 2026 by rpki-client