This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa File: ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa (raw, json) Hash identifier: JhVcV+03zxVD2R4ZSByn4pLYKVYrGi9gl0bLGuBHrWE= Subject key identifier: C9:B2:73:ED:B9:CA:1A:40:41:C6:23:0E:6E:5E:68:F9:09:9D:E1:21 Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Certificate serial: 019B79111D9FD4FD2FB457203952A349CC83 Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 5.61.113.0/24 maxlen: 24 5.61.115.0/24 maxlen: 24 5.61.117.0/24 maxlen: 24 5.61.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1d:9f:d4:fd:2f:b4:57:20:39:52:a3:49:cc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9b273edb9ca1a4041c6230e6e5e68f9099de121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:ce:c1:dd:8e:8d:78:8b:23:06:2d:4d:26: 10:ed:76:da:25:66:59:46:b5:02:6e:ce:b7:eb:d2: 20:88:6d:78:b6:3a:b3:bc:c7:51:de:61:a4:80:d7: 18:5f:64:0d:53:72:8e:38:1a:c9:a2:ac:b5:67:fe: eb:1b:49:4d:4d:b4:8e:2c:0c:1e:08:21:07:b5:09: fa:a2:46:31:f1:05:42:b5:00:46:b4:e8:e0:1f:71: 85:12:c6:33:b3:69:d6:55:06:aa:70:be:29:d1:af: 87:5b:70:5e:3b:86:6d:84:81:b4:30:7a:51:13:a1: b0:12:c4:e5:e5:51:47:39:c7:1e:33:f6:e3:2b:99: f2:1a:ec:94:32:3c:b8:ee:b5:51:2a:2f:25:f5:6e: 90:aa:18:15:00:6d:24:0b:48:2e:e0:52:0f:92:6f: a2:7f:36:bc:45:28:5e:26:16:0d:6f:46:a1:12:76: 28:c5:11:0e:16:f9:da:78:c1:5c:3f:b8:dc:44:d5: d3:62:7a:c3:98:55:8a:c5:09:78:ea:98:3d:fc:6a: 92:e2:4e:d9:03:5c:1f:ba:43:f8:b6:6a:21:d8:3f: 53:1d:ff:ac:a4:0f:42:66:77:b6:6e:e2:2e:f5:48: 44:3a:86:94:a1:a3:f4:d7:d1:9f:54:00:64:89:51: 29:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:73:ED:B9:CA:1A:40:41:C6:23:0E:6E:5E:68:F9:09:9D:E1:21 X509v3 Authority Key Identifier: keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.113.0/24 5.61.115.0/24 5.61.117.0/24 5.61.119.0/24 Signature Algorithm: sha256WithRSAEncryption 06:48:09:65:aa:45:8d:9e:55:41:92:68:1a:21:9f:a6:6d:ab: ac:a8:1e:94:4e:0a:ee:a5:d7:6d:fb:2b:ab:ce:88:49:0e:21: 7d:ab:51:74:b4:66:28:a0:28:8a:07:26:6c:a3:b5:05:f5:e4: d6:f2:ad:bd:ff:4d:f1:32:e2:32:a2:64:0d:c2:52:ba:8d:44: 55:8c:a4:8b:be:75:e4:c6:f1:92:46:73:bc:da:9b:e5:9e:74: 91:12:f3:c7:f5:ad:b7:80:a8:0f:23:61:b1:ca:17:a5:38:57: 7a:f8:a9:84:b9:c4:9b:a1:f3:83:e2:da:40:8f:b6:02:10:00: 75:02:30:03:b8:42:5d:a4:04:f6:00:75:da:f3:95:c5:81:8b: a6:23:ce:df:6a:52:49:fa:36:9b:9f:5f:67:1c:e4:f9:ca:08: 9d:b2:d9:3b:91:9d:5e:31:91:85:0f:80:f6:8e:14:97:b3:89: 51:f5:28:19:18:fc:f8:17:49:4e:37:8c:4c:0e:68:05:a4:87: 86:00:7d:d4:27:21:ac:a7:c2:8a:42:4d:2c:a2:cc:d5:27:1e: 4e:6e:d0:b4:0a:c0:10:0c:3c:f7:81:e8:87:f5:93:b3:14:18: 86:db:63:bc:a2:87:4a:c4:26:7b:12:8f:8d:8b:db:a0:7d:bc: ea:61:a6:64 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5ER2f1P0vtFcgOVKjScyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy N2FlZGYwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWIyNzNlZGI5Y2ExYTQwNDFjNjIzMGU2ZTVlNjhmOTA5OWRlMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmHOwd2OjXiLIwYtTSYQ7XbaJWZZ RrUCbs6369IgiG14tjqzvMdR3mGkgNcYX2QNU3KOOBrJoqy1Z/7rG0lNTbSOLAwe CCEHtQn6okYx8QVCtQBGtOjgH3GFEsYzs2nWVQaqcL4p0a+HW3BeO4ZthIG0MHpR E6GwEsTl5VFHOcceM/bjK5nyGuyUMjy47rVRKi8l9W6QqhgVAG0kC0gu4FIPkm+i fza8RSheJhYNb0ahEnYoxREOFvnaeMFcP7jcRNXTYnrDmFWKxQl46pg9/GqS4k7Z A1wfukP4tmoh2D9THf+spA9CZne2buIu9UhEOoaUoaP019GfVABkiVEp1wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMmyc+25yhpAQcYjDm5eaPkJneEhMB8GA1UdIwQY MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct ZmM2ZTc3ODg0MDU0LzEveWJKejdibktHa0JCeGlNT2JsNW8tUW1kNFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0 LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABT1xAwQA BT1zAwQABT11AwQABT13MA0GCSqGSIb3DQEBCwUAA4IBAQAGSAllqkWNnlVBkmga IZ+mbausqB6UTgrupddt+yurzohJDiF9q1F0tGYooCiKByZso7UF9eTW8q29/03x MuIyomQNwlK6jURVjKSLvnXkxvGSRnO82pvlnnSREvPH9a23gKgPI2GxyhelOFd6 +KmEucSbofOD4tpAj7YCEAB1AjADuEJdpAT2AHXa85XFgYumI87falJJ+jabn19n HOT5ygidstk7kZ1eMZGFD4D2jhSXs4lR9SgZGPz4F0lON4xMDmgFpIeGAH3UJyGs p8KKQk0soszVJx5ObtC0CsAQDDz3geiH9ZOzFBiG22O8oodKxCZ7Eo+Ni9ugfbzq YaZk -----END CERTIFICATE-----Generated at Fri Jan 2 09:26:55 2026 by rpki-client