This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/YPgZRfV6AFhzXbq4m6XNav-mmCg.roa File: YPgZRfV6AFhzXbq4m6XNav-mmCg.roa (raw, json) Hash identifier: Cv05LpDEhrVT+401TQ+oT7WhxjJeD9EoisiqskaJyag= Subject key identifier: 60:F8:19:45:F5:7A:00:58:73:5D:BA:B8:9B:A5:CD:6A:FF:A6:98:28 Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46 Certificate serial: 019B78A2812AC132369BA92AFF1725455318 Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/YPgZRfV6AFhzXbq4m6XNav-mmCg.roa Signing time: Thu 01 Jan 2026 08:17:54 +0000 ROA not before: Thu 01 Jan 2026 08:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8937 IP address blocks: 212.18.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 17:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:81:2a:c1:32:36:9b:a9:2a:ff:17:25:45:53:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46 Validity Not Before: Jan 1 08:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60f81945f57a0058735dbab89ba5cd6affa69828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:1e:53:8f:28:f2:ab:a9:f7:c4:3f:04:41: ff:d2:82:fb:8f:4a:08:13:12:1d:fc:24:b7:dc:59: 80:22:40:8b:e9:4e:25:1f:7e:1e:bd:c3:02:5a:de: 96:44:e6:0c:d8:3a:05:92:7b:09:7d:26:3b:35:a9: 56:b3:0d:74:d4:31:5e:fd:49:0a:73:d6:6b:1a:d8: a5:38:6d:be:69:4c:0e:86:5d:2b:b9:bf:1f:5c:e4: 7f:48:49:a9:33:5e:2a:90:41:f5:45:17:4c:7b:f8: b5:e8:6f:a8:7c:82:52:a3:96:46:cb:14:2d:b8:78: 22:08:65:71:13:76:90:17:c8:ba:8a:96:0b:d5:d7: eb:8b:61:ff:81:fa:14:96:d4:dc:d1:1e:80:8d:f6: 0b:61:85:92:1a:f8:32:3b:42:b2:be:21:41:a7:21: 6e:63:2f:f2:fa:9b:dc:fc:d0:4f:3b:cd:96:62:d5: fa:b5:13:0f:11:df:23:1c:eb:4c:1a:78:9d:d6:57: b0:33:6d:48:eb:8a:c4:c7:d7:27:8b:5c:d2:a5:03: ac:65:dc:fa:01:97:b1:f7:98:a9:4c:03:d7:17:24: c7:f0:d3:ca:db:f7:7f:0f:90:49:aa:66:59:02:62: 4a:0f:ff:5d:6b:82:3d:e6:bd:fc:63:71:ec:a8:06: 26:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F8:19:45:F5:7A:00:58:73:5D:BA:B8:9B:A5:CD:6A:FF:A6:98:28 X509v3 Authority Key Identifier: keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/YPgZRfV6AFhzXbq4m6XNav-mmCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.18.192.0/19 Signature Algorithm: sha256WithRSAEncryption 46:9d:e9:65:3a:b1:1a:e1:cd:4f:c3:c6:2e:d4:37:33:83:03: 88:87:28:53:62:97:bd:6d:ee:b1:20:90:36:98:87:94:ff:80: 1f:48:a9:ae:37:63:10:76:9c:fe:3c:0e:d0:b2:4c:84:d2:9c: fa:a1:e7:c9:6c:3c:0e:ac:ed:ee:b6:96:a5:cb:c9:2c:9f:e4: b1:1a:b8:c1:a6:ab:43:af:40:34:df:77:d2:a7:19:2a:f9:5d: 08:cd:5f:85:cd:e5:a2:c5:de:fe:65:4c:b8:43:bf:73:88:60: 3b:e2:4d:9b:a5:f8:86:43:ae:5e:d3:22:a6:3a:da:e1:3d:28: 80:0a:f4:d4:ee:42:3d:e4:15:e5:58:d1:53:6d:8a:d2:af:5c: 1a:ca:1b:94:eb:77:f5:b5:c1:86:81:4e:ab:cc:a0:ca:96:b1: 28:15:b6:e5:f3:08:99:48:db:a5:ce:c7:8f:4c:0d:1d:0d:28: fe:37:78:ad:29:de:d4:64:68:4c:37:4f:ea:4c:77:48:b9:59: 75:78:6f:9b:4e:fe:ff:e2:d1:a8:cd:75:46:99:f2:b6:a4:c5: eb:44:41:7d:be:54:14:79:b8:26:76:fc:64:75:0b:a4:9b:7d: 69:e0:8b:7f:8f:4f:f0:a3:9b:9a:33:5a:b8:17:ed:0a:c3:03: 12:b9:af:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ooEqwTI2m6kq/xclRVMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMmJlMGVhNzFjZjQzN2UwOGVmZGYzZmU3OThlYWY5ODQx MzFjNDYwHhcNMjYwMTAxMDgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGY4MTk0NWY1N2EwMDU4NzM1ZGJhYjg5YmE1Y2Q2YWZmYTY5ODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbseU48o8qup98Q/BEH/0oL7j0oI ExId/CS33FmAIkCL6U4lH34evcMCWt6WROYM2DoFknsJfSY7NalWsw101DFe/UkK c9ZrGtilOG2+aUwOhl0rub8fXOR/SEmpM14qkEH1RRdMe/i16G+ofIJSo5ZGyxQt uHgiCGVxE3aQF8i6ipYL1dfri2H/gfoUltTc0R6AjfYLYYWSGvgyO0KyviFBpyFu Yy/y+pvc/NBPO82WYtX6tRMPEd8jHOtMGnid1lewM21I64rEx9cni1zSpQOsZdz6 AZex95ipTAPXFyTH8NPK2/d/D5BJqmZZAmJKD/9da4I95r38Y3HsqAYmRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGD4GUX1egBYc126uJulzWr/ppgoMB8GA1UdIwQY MBaAFCEr4Opxz0N+CO/fP+eY6vmEExxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAt NzI1NjhmMDZmZTEwLzEvWVBnWlJmVjZBRmh6WGJxNG02WE5hdi1tbUNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAtNzI1NjhmMDZmZTEw LzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1BLAMA0G CSqGSIb3DQEBCwUAA4IBAQBGnellOrEa4c1Pw8Yu1DczgwOIhyhTYpe9be6xIJA2 mIeU/4AfSKmuN2MQdpz+PA7QskyE0pz6oefJbDwOrO3utpaly8ksn+SxGrjBpqtD r0A033fSpxkq+V0IzV+FzeWixd7+ZUy4Q79ziGA74k2bpfiGQ65e0yKmOtrhPSiA CvTU7kI95BXlWNFTbYrSr1wayhuU63f1tcGGgU6rzKDKlrEoFbbl8wiZSNulzseP TA0dDSj+N3itKd7UZGhMN0/qTHdIuVl1eG+bTv7/4tGozXVGmfK2pMXrREF9vlQU ebgmdvxkdQukm31p4It/j0/wo5uaM1q4F+0KwwMSua+R -----END CERTIFICATE-----Generated at Thu Jan 1 19:50:35 2026 by rpki-client