This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/Ycf_Y06UjGoaSKA2Mi8cdlKhH0w.roa File: Ycf_Y06UjGoaSKA2Mi8cdlKhH0w.roa (raw, json) Hash identifier: PJ5pEW7hVMx5LXqX0dgdRpy0KwoQ2BFXyFSUdRoukt4= Subject key identifier: 61:C7:FF:63:4E:94:8C:6A:1A:48:A0:36:32:2F:1C:76:52:A1:1F:4C Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Certificate serial: 019BB2A2867AA6A18230C6BF17D4AAB0A80E Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/Ycf_Y06UjGoaSKA2Mi8cdlKhH0w.roa Signing time: Mon 12 Jan 2026 14:35:54 +0000 ROA not before: Mon 12 Jan 2026 14:35:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 147.235.0.0/24 maxlen: 24 147.235.69.0/24 maxlen: 24 147.235.101.0/24 maxlen: 24 147.235.185.0/24 maxlen: 24 147.235.186.0/24 maxlen: 24 147.235.187.0/24 maxlen: 24 147.235.188.0/24 maxlen: 24 147.235.236.0/24 maxlen: 24 147.235.237.0/24 maxlen: 24 147.235.239.0/24 maxlen: 24 147.235.242.0/24 maxlen: 24 147.235.243.0/24 maxlen: 24 147.235.244.0/24 maxlen: 24 147.235.245.0/24 maxlen: 24 147.235.246.0/24 maxlen: 24 147.235.247.0/24 maxlen: 24 147.235.250.0/24 maxlen: 24 147.235.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:a2:86:7a:a6:a1:82:30:c6:bf:17:d4:aa:b0:a8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Validity Not Before: Jan 12 14:35:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61c7ff634e948c6a1a48a036322f1c7652a11f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:06:7b:84:ea:44:b2:a1:04:96:7c:0a:69: ac:af:60:75:bb:15:9c:39:c6:f2:e9:c6:e9:52:4b: 8e:59:0e:63:70:94:7d:c2:d7:18:f1:e1:5a:f0:93: 94:4d:1a:36:0e:2b:f9:ad:12:1f:60:fc:b8:de:18: 0f:92:8a:47:20:e3:63:2c:25:23:5c:c8:61:0a:a5: 37:3e:66:8d:be:18:81:7b:98:de:b0:65:92:c0:9e: 34:7f:f9:1b:f7:12:23:8c:bd:4e:a3:02:a9:19:f9: f3:66:92:a7:65:9c:28:b8:30:3a:38:ef:56:05:01: b7:18:43:00:c2:b9:c8:2a:76:57:ed:6e:2d:f1:5a: f0:e3:e4:5c:b7:2f:b6:42:f0:52:26:f7:89:b1:4a: f8:0c:ee:2f:6e:b0:e7:67:13:ff:99:d2:21:47:51: 9d:34:f6:16:c0:dd:64:78:fe:de:aa:1d:53:ef:94: 4e:66:11:d0:94:da:dd:5b:1d:5e:4e:1a:9e:a9:63: c3:63:23:34:9e:a9:65:05:5d:20:cc:8a:90:e3:c2: 6e:c0:2c:27:38:07:7d:ba:9a:15:d3:12:9d:99:d1: 62:86:8d:d1:d5:df:e1:f7:0c:67:a7:8e:f0:ce:9c: 83:41:58:2f:58:43:d6:3b:e8:87:dc:31:f6:4c:8d: d4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C7:FF:63:4E:94:8C:6A:1A:48:A0:36:32:2F:1C:76:52:A1:1F:4C X509v3 Authority Key Identifier: keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/Ycf_Y06UjGoaSKA2Mi8cdlKhH0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.235.0.0/24 147.235.69.0/24 147.235.101.0/24 147.235.185.0-147.235.188.255 147.235.236.0/23 147.235.239.0/24 147.235.242.0-147.235.247.255 147.235.250.0/23 Signature Algorithm: sha256WithRSAEncryption 37:2d:8d:8e:da:0b:cd:40:53:c3:76:37:f7:7d:f8:75:1f:95: 4f:ef:15:55:9f:42:5c:90:7e:0c:12:a3:7c:d1:2b:18:44:49: 0d:50:f6:1b:03:c6:01:08:09:e6:c5:48:ac:0a:1e:76:29:44: ae:fe:34:74:52:25:7c:df:79:f7:a0:31:8a:a2:91:c7:d6:e4: 2b:5d:4d:a8:8a:80:62:d0:dc:82:4a:7f:0e:95:89:ba:cf:e2: 38:07:a0:31:62:df:ba:b0:66:cc:3c:38:d7:a8:da:96:24:07: 41:44:07:dc:ca:0a:06:f0:6f:5c:b7:2e:cb:d0:82:ff:47:04: c5:00:58:7d:4a:20:fb:19:4e:2e:4d:35:b0:18:7c:e0:9e:5d: 44:c2:48:ae:d8:3f:39:31:ae:48:16:ec:67:5f:3d:e1:d7:bd: 9d:f1:ee:72:49:0c:df:c7:97:39:79:94:82:e4:f1:81:12:4d: 3c:25:3d:47:08:01:a4:f5:df:44:09:5f:0d:40:ae:a3:1b:e5: b7:11:fc:69:8c:4a:ab:3a:79:5a:55:25:87:b8:4d:6c:b9:84: 82:0a:d9:43:70:a2:ab:5e:fb:66:74:d3:8a:ae:28:87:70:c2: 0e:d3:6a:7c:da:87:c1:14:96:41:87:9e:0f:cf:9d:17:6b:dd: 7b:d0:45:f1 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZuyooZ6pqGCMMa/F9SqsKgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzQxMTU4ZjNlZDY1YmVlMWJkZTEyZjM0Zjg5NWFmYjBk ZDUwZDUwHhcNMjYwMTEyMTQzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWM3ZmY2MzRlOTQ4YzZhMWE0OGEwMzYzMjJmMWM3NjUyYTExZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6MGe4TqRLKhBJZ8Cmmsr2B1uxWc Ocby6cbpUkuOWQ5jcJR9wtcY8eFa8JOUTRo2Div5rRIfYPy43hgPkopHIONjLCUj XMhhCqU3PmaNvhiBe5jesGWSwJ40f/kb9xIjjL1OowKpGfnzZpKnZZwouDA6OO9W BQG3GEMAwrnIKnZX7W4t8Vrw4+Rcty+2QvBSJveJsUr4DO4vbrDnZxP/mdIhR1Gd NPYWwN1keP7eqh1T75ROZhHQlNrdWx1eThqeqWPDYyM0nqllBV0gzIqQ48JuwCwn OAd9upoV0xKdmdFiho3R1d/h9wxnp47wzpyDQVgvWEPWO+iH3DH2TI3UVwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFGHH/2NOlIxqGkigNjIvHHZSoR9MMB8GA1UdIwQY MBaAFFB0EVjz7WW+4b3hLzT4la+w3VDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQt MzU1M2I0ZWQ2Nzk0LzEvWWNmX1kwNlVqR29hU0tBMk1pOGNkbEtoSDB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQtMzU1M2I0ZWQ2Nzk0 LzEvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAk+sAAwQA k+tFAwQAk+tlMAwDBACT67kDBACT67wDBAGT6+wDBACT6+8wDAMEAZPr8gMEA5Pr 8AMEAZPr+jANBgkqhkiG9w0BAQsFAAOCAQEANy2NjtoLzUBTw3Y39334dR+VT+8V VZ9CXJB+DBKjfNErGERJDVD2GwPGAQgJ5sVIrAoedilErv40dFIlfN9596AxiqKR x9bkK11NqIqAYtDcgkp/DpWJus/iOAegMWLfurBmzDw416jaliQHQUQH3MoKBvBv XLcuy9CC/0cExQBYfUog+xlOLk01sBh84J5dRMJIrtg/OTGuSBbsZ1894de9nfHu ckkM38eXOXmUguTxgRJNPCU9RwgBpPXfRAlfDUCuoxvltxH8aYxKqzp5WlUlh7hN bLmEggrZQ3Ciq177ZnTTiq4oh3DCDtNqfNqHwRSWQYeeD8+dF2vde9BF8Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:51 2026 by rpki-client