This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yBCBtDEgboCmKR8NYs6-G9EsXPU.roa File: yBCBtDEgboCmKR8NYs6-G9EsXPU.roa (raw, json) Hash identifier: dL0qCG/tuxkxboJYmbjt3hbU7TjpqaInBG54pKY6pLg= Subject key identifier: C8:10:81:B4:31:20:6E:80:A6:29:1F:0D:62:CE:BE:1B:D1:2C:5C:F5 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7585934342AE45B6748CF0A9DBCA8 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yBCBtDEgboCmKR8NYs6-G9EsXPU.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8675 IP address blocks: 212.12.0.0/19 maxlen: 24 212.12.4.0/24 maxlen: 24 212.12.21.0/24 maxlen: 24 212.35.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:58:59:34:34:2a:e4:5b:67:48:cf:0a:9d:bc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c81081b431206e80a6291f0d62cebe1bd12c5cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:66:c9:a2:46:93:68:8e:43:67:dc:80:ed: 12:d1:06:cb:d7:48:c2:0a:d5:d4:f5:be:49:b0:40: 5e:8c:4c:5f:7e:c9:97:f3:bd:93:d4:99:94:2b:74: 7e:bf:c3:84:e6:ba:fc:61:68:d4:03:e0:4d:e4:82: 3d:8c:95:54:33:97:7d:9f:03:71:ec:a7:b5:47:9b: 6c:7d:c3:2b:37:8d:29:53:e3:69:7d:ce:e7:4c:a9: eb:d4:23:0a:49:62:ac:dc:91:37:4a:91:49:4a:99: 4a:6e:59:20:15:ec:68:4f:96:b3:ab:69:bb:68:bf: 9e:8d:58:60:e2:ee:73:24:04:2b:e5:68:75:bc:7f: e2:70:4e:c2:dc:69:65:51:83:62:47:68:e5:df:0a: fa:56:7b:e1:40:53:03:bb:18:9c:05:18:9c:7a:6d: 50:e4:bd:7f:38:fc:bc:d3:3c:c5:45:b5:7c:7a:bb: 1d:b3:4c:c9:ab:2a:c3:65:03:8d:5d:a9:e0:2c:07: 4e:80:d6:9b:ae:9a:1a:a8:f2:ae:9d:b5:59:52:40: ce:ac:b2:f8:bf:8b:9c:1b:25:2d:9e:cf:15:f8:38: 78:b2:ec:55:cd:31:ab:36:1b:13:39:9b:b6:a9:90: 1e:30:05:66:cc:e8:76:f4:bd:3c:0e:cf:a4:15:57: 79:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:10:81:B4:31:20:6E:80:A6:29:1F:0D:62:CE:BE:1B:D1:2C:5C:F5 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yBCBtDEgboCmKR8NYs6-G9EsXPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.12.0.0/19 212.35.160.0/19 Signature Algorithm: sha256WithRSAEncryption 14:18:7a:9a:99:04:e2:37:6d:58:96:cb:50:3f:76:78:fe:39: 9c:84:b5:df:45:e6:d2:ca:28:2f:e1:d0:e5:86:35:f0:15:07: e2:67:63:43:c0:93:ac:14:8c:3b:f0:01:6f:8e:c4:39:f0:02: 4f:0d:10:71:c2:30:06:4d:e3:6f:16:f0:b2:46:3e:a4:90:82: b0:36:d5:66:5b:02:f6:66:d5:a3:5b:8c:66:9c:89:84:8e:c6: fc:0a:f2:96:c5:aa:fb:7e:14:bf:72:1a:78:ad:0c:1e:f1:92: ae:0f:84:61:b2:2b:c8:7d:fa:b1:5d:34:50:d9:66:85:db:7a: a9:e7:5d:5b:39:eb:fd:b4:4f:8e:76:ad:89:df:5a:2b:17:11: c0:70:5d:f6:39:0d:5e:b1:8e:d7:9b:48:1a:53:6d:5b:46:ab: 92:a4:90:23:23:af:25:d4:7a:de:c9:3d:ae:56:89:34:07:f7: 2e:26:b4:ca:6c:fd:98:f6:3d:c7:88:da:ee:1a:6d:71:ad:77: 07:6d:61:6c:da:1b:ff:f1:3b:a4:b8:89:ef:77:41:a3:71:ec: 69:a5:f7:07:09:c9:5a:4a:c1:e5:01:78:e8:62:5f:a4:c3:66: e7:d4:be:4d:0a:4e:b1:30:dd:4f:a4:97:e9:31:8e:cc:02:a2: 91:bd:b4:95 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p1hZNDQq5FtnSM8KnbyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODEwODFiNDMxMjA2ZTgwYTYyOTFmMGQ2MmNlYmUxYmQxMmM1Y2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrBmyaJGk2iOQ2fcgO0S0QbL10jC CtXU9b5JsEBejExffsmX872T1JmUK3R+v8OE5rr8YWjUA+BN5II9jJVUM5d9nwNx 7Ke1R5tsfcMrN40pU+Npfc7nTKnr1CMKSWKs3JE3SpFJSplKblkgFexoT5azq2m7 aL+ejVhg4u5zJAQr5Wh1vH/icE7C3GllUYNiR2jl3wr6VnvhQFMDuxicBRicem1Q 5L1/OPy80zzFRbV8ersds0zJqyrDZQONXangLAdOgNabrpoaqPKunbVZUkDOrLL4 v4ucGyUtns8V+Dh4suxVzTGrNhsTOZu2qZAeMAVmzOh29L08Ds+kFVd5wwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMgQgbQxIG6ApikfDWLOvhvRLFz1MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEveUJDQnRERWdib0NtS1I4TllzNi1HOUVzWFBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQF1AwAAwQF 1COgMA0GCSqGSIb3DQEBCwUAA4IBAQAUGHqamQTiN21YlstQP3Z4/jmchLXfRebS yigv4dDlhjXwFQfiZ2NDwJOsFIw78AFvjsQ58AJPDRBxwjAGTeNvFvCyRj6kkIKw NtVmWwL2ZtWjW4xmnImEjsb8CvKWxar7fhS/chp4rQwe8ZKuD4RhsivIffqxXTRQ 2WaF23qp511bOev9tE+Odq2J31orFxHAcF32OQ1esY7Xm0gaU21bRquSpJAjI68l 1HreyT2uVok0B/cuJrTKbP2Y9j3HiNruGm1xrXcHbWFs2hv/8TukuInvd0Gjcexp pfcHCclaSsHlAXjoYl+kw2bn1L5NCk6xMN1PpJfpMY7MAqKRvbSV -----END CERTIFICATE-----Generated at Mon Jan 26 11:40:08 2026 by rpki-client