This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/YpBsHbpimwIlAlhChqTHWu0SrjE.roa File: YpBsHbpimwIlAlhChqTHWu0SrjE.roa (raw, json) Hash identifier: dfAnmwPEESyQsxLDnMoSSBvKQiPlbGyS6lnr8b8V888= Subject key identifier: 62:90:6C:1D:BA:62:9B:02:25:02:58:42:86:A4:C7:5A:ED:12:AE:31 Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Certificate serial: 019B7F1485B2012640EB71507E82CF9A8E84 Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/YpBsHbpimwIlAlhChqTHWu0SrjE.roa Signing time: Fri 02 Jan 2026 14:20:10 +0000 ROA not before: Fri 02 Jan 2026 14:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210676 IP address blocks: 185.87.168.0/24 maxlen: 24 185.87.169.0/24 maxlen: 24 185.87.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:85:b2:01:26:40:eb:71:50:7e:82:cf:9a:8e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b Validity Not Before: Jan 2 14:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62906c1dba629b022502584286a4c75aed12ae31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:d1:c7:4d:7b:40:2a:72:cb:0c:22:52:f0: bd:de:20:4c:31:73:21:2d:95:d7:42:2b:a4:74:60: f0:d6:ae:0a:bb:ce:51:03:b3:52:5b:f8:ae:88:80: 5e:99:c0:b8:66:40:9a:c9:a8:a1:29:d0:88:06:44: b4:be:98:22:d0:00:3e:c1:e6:5d:f1:bc:80:bc:91: 1a:86:ba:13:20:d0:7a:a8:cd:52:36:70:42:7e:79: 96:91:35:c2:09:e7:56:1d:fc:7c:e7:9d:a2:ae:c0: ba:26:5b:65:a1:94:0c:07:c3:02:4a:e0:47:cf:40: d6:12:18:f4:1f:12:e1:d3:86:aa:9f:5d:a0:7a:91: 46:8b:79:72:eb:0b:21:07:b6:71:c6:f9:01:3c:82: d7:7e:85:1d:8c:a6:e2:34:c8:3e:57:09:44:c8:39: da:5c:06:02:8e:bb:8a:98:cc:e5:20:e3:06:40:3d: 18:12:d4:f6:df:fe:cc:cb:fd:83:2d:e7:3f:9e:f0: 51:c3:18:c3:e0:25:87:f8:58:6d:0c:a6:a6:5b:47: b9:d3:88:48:5a:16:3d:08:b6:1b:dd:4f:99:2c:af: c1:81:ae:1c:45:cb:1a:df:29:28:cd:69:dd:b7:3d: 06:e5:25:77:8e:db:50:68:54:4b:cb:5f:25:f1:17: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:90:6C:1D:BA:62:9B:02:25:02:58:42:86:A4:C7:5A:ED:12:AE:31 X509v3 Authority Key Identifier: keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/YpBsHbpimwIlAlhChqTHWu0SrjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.168.0-185.87.170.255 Signature Algorithm: sha256WithRSAEncryption 58:ee:f2:92:1a:1c:28:c5:da:0b:55:4d:97:88:c6:72:28:46: 53:63:2b:95:cc:4b:08:d4:f1:ab:c8:98:5a:ce:60:4d:51:96: ed:a5:7d:52:eb:f4:7a:51:9f:a3:dd:6a:84:b1:60:62:0a:bd: 63:53:65:a2:9b:64:f7:55:87:b7:f0:c5:8a:a3:36:9b:69:57: 12:5f:f7:f9:e6:43:d0:7c:3a:2d:09:b0:19:ea:b2:ae:25:4e: ef:a2:53:22:6e:95:8e:5f:ea:39:82:d3:48:33:d1:51:83:20: ab:e1:e8:89:ac:92:7c:72:5e:be:81:bf:fb:56:66:4f:0b:0b: ca:5e:09:f4:cf:bb:df:c4:a5:7f:76:c6:df:2c:83:3c:60:cc: 83:fd:5b:f8:fc:98:50:b9:09:a2:a4:d7:5f:7b:c5:82:27:3a: 07:dd:e9:27:b1:ac:e1:ae:9a:d6:a1:4c:6f:4b:b2:d7:39:ea: 80:68:b1:7d:cf:d6:93:e3:a1:14:35:20:73:eb:17:8b:76:fd: 54:a4:65:6c:ae:5d:a4:46:75:7d:d1:74:0d:a3:07:a0:d6:5e: 6a:4e:ae:d7:b0:e1:9f:8f:42:86:71:ad:a3:36:f0:28:f2:87: 05:8a:4b:26:2c:fb:12:9a:c0:3b:a1:5e:8d:1f:e8:e0:70:9c: 8e:30:86:13 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FIWyASZA63FQfoLPmo6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmI3ZmVhOGFkMzUxMTFjYTY4N2E5Y2QwMGE0OWY5YTRm MDQ1OWIwHhcNMjYwMTAyMTQyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjkwNmMxZGJhNjI5YjAyMjUwMjU4NDI4NmE0Yzc1YWVkMTJhZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hHRx017QCpyywwiUvC93iBMMXMh LZXXQiukdGDw1q4Ku85RA7NSW/iuiIBemcC4ZkCayaihKdCIBkS0vpgi0AA+weZd 8byAvJEahroTINB6qM1SNnBCfnmWkTXCCedWHfx8552irsC6JltloZQMB8MCSuBH z0DWEhj0HxLh04aqn12gepFGi3ly6wshB7ZxxvkBPILXfoUdjKbiNMg+VwlEyDna XAYCjruKmMzlIOMGQD0YEtT23/7My/2DLec/nvBRwxjD4CWH+FhtDKamW0e504hI WhY9CLYb3U+ZLK/Bga4cRcsa3ykozWndtz0G5SV3jttQaFRLy18l8RdX5wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGKQbB26YpsCJQJYQoakx1rtEq4xMB8GA1UdIwQY MBaAFHBrf+qK01ERymh6nNAKSfmk8EWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4Mjct MjYwYzM3N2EzMTRhLzEvWXBCc0hicGltd0lsQWxoQ2hxVEhXdTBTcmpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4MjctMjYwYzM3N2EzMTRh LzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5V6gD BAC5V6owDQYJKoZIhvcNAQELBQADggEBAFju8pIaHCjF2gtVTZeIxnIoRlNjK5XM SwjU8avImFrOYE1Rlu2lfVLr9HpRn6PdaoSxYGIKvWNTZaKbZPdVh7fwxYqjNptp VxJf9/nmQ9B8Oi0JsBnqsq4lTu+iUyJulY5f6jmC00gz0VGDIKvh6ImsknxyXr6B v/tWZk8LC8peCfTPu9/EpX92xt8sgzxgzIP9W/j8mFC5CaKk1197xYInOgfd6Sex rOGumtahTG9Lstc56oBosX3P1pPjoRQ1IHPrF4t2/VSkZWyuXaRGdX3RdA2jB6DW XmpOrtew4Z+PQoZxraM28CjyhwWKSyYs+xKawDuhXo0f6OBwnI4whhM= -----END CERTIFICATE-----Generated at Mon Jan 26 05:34:09 2026 by rpki-client