This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa File: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (raw, json) Hash identifier: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g= Subject key identifier: 61:4F:9D:36:3D:0F:D5:14:97:36:98:2E:F8:D7:E3:7D:53:86:21:72 Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Certificate serial: 019B7BA37AC60383FC798046E6296FA9DD42 Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa Signing time: Thu 01 Jan 2026 22:17:49 +0000 ROA not before: Thu 01 Jan 2026 22:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 212.46.57.0/24 maxlen: 24 2a12:fc0::/48 maxlen: 48 2a12:fc0:20::/48 maxlen: 48 2a12:fc7:ffef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:7a:c6:03:83:fc:79:80:46:e6:29:6f:a9:dd:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Validity Not Before: Jan 1 22:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=614f9d363d0fd5149736982ef8d7e37d53862172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:37:9e:f0:ee:6f:43:30:b6:63:f9:72:a9: 11:33:e7:57:da:05:5a:ca:a5:8b:e9:cb:e5:f6:c2: 9b:e6:eb:79:82:aa:38:31:c7:d9:5d:ba:48:92:dc: 59:f3:ab:d8:a3:ee:64:b6:9c:fb:5e:74:16:50:b9: 18:7e:a2:0c:2b:83:96:a9:f9:b8:1a:fd:89:6c:77: 3f:d5:cb:f2:f1:bf:2b:99:88:d5:c4:34:63:01:1f: 6e:fc:25:de:23:c5:a1:e7:f9:23:38:de:c3:7c:cc: 4c:fd:7a:bd:a8:6d:7d:60:20:ed:ce:7f:2f:77:28: 04:27:51:29:95:39:a8:eb:aa:7a:61:40:b6:f6:2a: 4e:81:d9:26:bc:c7:cf:63:47:6a:5a:0f:0d:a2:13: 4b:8a:a3:59:39:2f:0f:03:e9:c5:d1:e4:77:2e:70: d2:d5:fe:41:6f:b7:3a:c3:8e:10:f7:b3:f3:ab:dd: 1d:1c:54:76:9b:5f:80:25:36:59:50:1c:05:f6:2f: 0a:4b:ac:cc:96:9f:b6:a8:5c:ed:0c:13:74:98:d0: e6:fa:ec:bc:ed:c4:6e:b1:58:de:68:a6:68:a1:bc: 6d:93:00:da:1a:6b:19:da:c1:0a:dd:45:78:ff:3a: 51:6a:9f:19:23:ce:be:db:8f:af:52:28:a9:9e:f0: 22:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4F:9D:36:3D:0F:D5:14:97:36:98:2E:F8:D7:E3:7D:53:86:21:72 X509v3 Authority Key Identifier: keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.57.0/24 IPv6: 2a12:fc0::/48 2a12:fc0:20::/48 2a12:fc7:ffef::/48 Signature Algorithm: sha256WithRSAEncryption 89:46:68:cb:fc:bf:8d:82:e1:2f:dc:84:47:c1:b4:a7:3b:c3: cc:3d:01:e3:0f:7a:6c:f6:1b:37:09:51:f4:6e:d5:fa:a3:d5: de:68:32:30:5a:a5:d3:0b:b5:38:7f:27:42:b4:e7:82:71:d1: e8:de:56:f6:00:56:6b:e5:95:59:6a:8d:49:15:5f:c5:ff:9a: b9:24:93:07:7a:33:f0:75:cd:58:54:c2:f3:67:6e:de:58:70: 5f:15:98:66:17:47:f2:d5:95:ee:da:8d:83:46:f5:78:c0:d5: 3f:7a:cc:1e:2c:a4:31:7e:44:39:fa:08:66:c5:23:0d:44:6c: df:20:4f:b8:f6:f5:a8:7d:fe:d2:fd:8d:8b:c7:9a:c8:44:4c: 0a:bf:a9:25:a9:5b:48:5d:11:6c:85:b7:74:a5:37:b5:8c:81: 9d:c9:f0:a4:c6:b9:e4:06:93:c8:bb:b7:fc:2f:b8:34:31:b4: a8:13:56:41:03:a7:51:1a:35:c8:94:8f:f8:ed:99:6c:98:e4: 58:5d:1f:b4:68:2d:c5:fe:46:a3:1c:84:db:fa:84:5d:98:1e: 88:7d:ac:9a:59:ae:86:bb:eb:cc:ac:e7:ac:4b:fe:e3:42:f0: 41:a4:0e:73:a8:10:c4:17:52:0d:4b:a7:61:43:d5:92:11:c3: cf:d5:47:1f -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7o3rGA4P8eYBG5ilvqd1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi NmJkY2MwHhcNMjYwMTAxMjIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTRmOWQzNjNkMGZkNTE0OTczNjk4MmVmOGQ3ZTM3ZDUzODYyMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwE3nvDub0MwtmP5cqkRM+dX2gVa yqWL6cvl9sKb5ut5gqo4McfZXbpIktxZ86vYo+5ktpz7XnQWULkYfqIMK4OWqfm4 Gv2JbHc/1cvy8b8rmYjVxDRjAR9u/CXeI8Wh5/kjON7DfMxM/Xq9qG19YCDtzn8v dygEJ1EplTmo66p6YUC29ipOgdkmvMfPY0dqWg8NohNLiqNZOS8PA+nF0eR3LnDS 1f5Bb7c6w44Q97Pzq90dHFR2m1+AJTZZUBwF9i8KS6zMlp+2qFztDBN0mNDm+uy8 7cRusVjeaKZoobxtkwDaGmsZ2sEK3UV4/zpRap8ZI86+24+vUiipnvAixwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFGFPnTY9D9UUlzaYLvjX431ThiFyMB8GA1UdIwQY MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct MjQ2NTRlOTQxYzEyLzEvWVUtZE5qMFAxUlNYTnBndS1OZmpmVk9HSVhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQA1C45MCEE AgACMBsDBwAqEg/AAAADBwAqEg/AACADBwAqEg/H/+8wDQYJKoZIhvcNAQELBQAD ggEBAIlGaMv8v42C4S/chEfBtKc7w8w9AeMPemz2GzcJUfRu1fqj1d5oMjBapdML tTh/J0K054Jx0ejeVvYAVmvllVlqjUkVX8X/mrkkkwd6M/B1zVhUwvNnbt5YcF8V mGYXR/LVle7ajYNG9XjA1T96zB4spDF+RDn6CGbFIw1EbN8gT7j29ah9/tL9jYvH mshETAq/qSWpW0hdEWyFt3SlN7WMgZ3J8KTGueQGk8i7t/wvuDQxtKgTVkEDp1Ea NciUj/jtmWyY5FhdH7RoLcX+RqMchNv6hF2YHoh9rJpZroa768ys56xL/uNC8EGk DnOoEMQXUg1Lp2FD1ZIRw8/VRx8= -----END CERTIFICATE-----Generated at Sat Jan 3 01:32:35 2026 by rpki-client