This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/yIi_9pn2RiEfjk2wP_JBX7exLC8.roa File: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (raw, json) Hash identifier: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE= Subject key identifier: C8:88:BF:F6:99:F6:46:21:1F:8E:4D:B0:3F:F2:41:5F:B7:B1:2C:2F Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 019B7F1367F64D3181A7FDC0AB07A1D97776 Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/yIi_9pn2RiEfjk2wP_JBX7exLC8.roa Signing time: Fri 02 Jan 2026 14:18:56 +0000 ROA not before: Fri 02 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216084 IP address blocks: 185.211.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:67:f6:4d:31:81:a7:fd:c0:ab:07:a1:d9:77:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Jan 2 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c888bff699f646211f8e4db03ff2415fb7b12c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:f4:69:3d:3c:a5:5d:fd:d2:0d:19:54:2d: 8c:a2:53:cf:70:92:0b:03:58:0f:0c:a2:ee:5f:d5: 51:13:fa:c6:42:f6:ac:bc:d3:5b:66:d7:94:27:1f: 94:0d:f3:30:44:11:2b:63:fe:a5:19:04:51:72:9c: ad:39:fa:b4:03:c3:f9:e7:69:ae:9c:26:07:a6:c4: e8:c1:5f:48:67:86:7d:cd:0c:96:e0:48:f3:57:0d: f4:86:24:32:0a:87:75:f9:57:09:6a:ec:f3:06:09: dd:9c:af:0e:38:96:9a:52:ad:0a:f2:f3:03:14:3f: 4c:23:90:82:e1:1a:cd:17:57:58:05:e4:51:3d:3c: 39:47:12:d3:6b:f2:34:8f:5e:34:88:ba:70:06:43: 68:60:5a:a1:a9:6b:6f:12:6d:b9:4d:ee:bc:a9:3f: d4:62:21:0b:c9:34:e6:95:04:15:1b:42:61:4c:50: dd:16:3f:a0:24:83:18:ee:6f:8b:0c:8a:f2:c4:75: 8b:30:8d:0c:b5:2e:16:4a:af:80:46:18:cb:47:49: bb:65:c6:ca:85:4a:cb:ab:a9:83:ed:71:4b:49:5b: 66:24:4a:24:1c:82:be:5d:d7:93:15:d4:e2:38:33: 0a:0c:1e:0b:e3:67:f2:58:76:35:83:b2:61:7d:3f: 9b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:88:BF:F6:99:F6:46:21:1F:8E:4D:B0:3F:F2:41:5F:B7:B1:2C:2F X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/yIi_9pn2RiEfjk2wP_JBX7exLC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.100.0/24 Signature Algorithm: sha256WithRSAEncryption 00:24:27:4d:7d:18:05:41:a9:dc:69:65:c5:37:98:0c:16:fb: 55:b8:c1:a1:93:49:6b:ef:a6:ba:d5:2a:44:32:1c:e9:ee:46: e3:71:22:61:74:d9:1a:4a:f0:31:28:74:b6:b0:07:71:a9:00: e4:29:01:12:39:30:8f:59:a8:40:a9:1a:4c:0d:e4:e5:e8:52: 8b:b4:ee:4b:63:33:d8:6d:c5:9f:b8:4e:b6:13:23:5e:dd:68: 67:4f:70:ee:a7:4e:af:93:81:8a:dd:68:13:f3:59:ba:d9:09: 3a:bf:61:ec:b7:ae:14:a9:5f:35:54:dc:62:ad:74:e9:00:27: e2:ac:7c:55:af:41:51:b0:d8:bc:29:51:77:9c:8a:22:06:69: e5:99:57:b6:f1:c7:04:af:2a:89:8f:f8:56:aa:3c:01:eb:35: c2:c7:e9:2c:db:69:37:1e:c5:08:30:91:4d:f0:55:1e:a2:59: b5:9d:0b:c3:ee:c2:83:ef:ec:06:20:5d:ac:be:09:89:cd:e0: 87:fc:72:9d:e4:10:e0:03:87:44:24:56:18:46:f4:32:47:57: 01:70:87:e4:5a:3e:49:49:de:2b:89:53:44:23:1e:bf:d6:fe: f7:45:25:a4:cb:8b:81:97:38:b0:44:1c:d0:01:1b:58:a0:85: 27:40:6a:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E2f2TTGBp/3Aqweh2Xd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjYwMTAyMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODg4YmZmNjk5ZjY0NjIxMWY4ZTRkYjAzZmYyNDE1ZmI3YjEyYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwST0aT08pV390g0ZVC2MolPPcJIL A1gPDKLuX9VRE/rGQvasvNNbZteUJx+UDfMwRBErY/6lGQRRcpytOfq0A8P552mu nCYHpsTowV9IZ4Z9zQyW4EjzVw30hiQyCod1+VcJauzzBgndnK8OOJaaUq0K8vMD FD9MI5CC4RrNF1dYBeRRPTw5RxLTa/I0j140iLpwBkNoYFqhqWtvEm25Te68qT/U YiELyTTmlQQVG0JhTFDdFj+gJIMY7m+LDIryxHWLMI0MtS4WSq+ARhjLR0m7ZcbK hUrLq6mD7XFLSVtmJEokHIK+XdeTFdTiODMKDB4L42fyWHY1g7JhfT+bTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMiIv/aZ9kYhH45NsD/yQV+3sSwvMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEveUlpXzlwbjJSaUVmamsyd1BfSkJYN2V4TEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudNkMA0G CSqGSIb3DQEBCwUAA4IBAQAAJCdNfRgFQancaWXFN5gMFvtVuMGhk0lr76a61SpE Mhzp7kbjcSJhdNkaSvAxKHS2sAdxqQDkKQESOTCPWahAqRpMDeTl6FKLtO5LYzPY bcWfuE62EyNe3WhnT3Dup06vk4GK3WgT81m62Qk6v2Hst64UqV81VNxirXTpACfi rHxVr0FRsNi8KVF3nIoiBmnlmVe28ccEryqJj/hWqjwB6zXCx+ks22k3HsUIMJFN 8FUeolm1nQvD7sKD7+wGIF2svgmJzeCH/HKd5BDgA4dEJFYYRvQyR1cBcIfkWj5J Sd4riVNEIx6/1v73RSWky4uBlziwRBzQARtYoIUnQGrf -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:28 2026 by rpki-client