This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ycxuhFqo23xpZqGb2nAGDjdjYTo.roa File: ycxuhFqo23xpZqGb2nAGDjdjYTo.roa (raw, json) Hash identifier: FEWr4LHfzTVnObNOwuF0NK+TFrgG/o92BWNH8wvnxsM= Subject key identifier: C9:CC:6E:84:5A:A8:DB:7C:69:66:A1:9B:DA:70:06:0E:37:63:61:3A Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C692208E2DA2BF81B7CFC58F0D45A0 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ycxuhFqo23xpZqGb2nAGDjdjYTo.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201343 IP address blocks: 89.46.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:92:20:8e:2d:a2:bf:81:b7:cf:c5:8f:0d:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9cc6e845aa8db7c6966a19bda70060e3763613a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:fa:e5:70:ac:d9:20:06:1f:40:54:a9:ce: 56:19:9c:60:1a:24:48:f8:50:4b:bc:9e:03:1f:04: 9b:5f:75:22:81:ec:a8:76:e1:ec:e0:20:1a:e6:38: ea:9a:1d:7d:b1:ae:02:e7:9d:d4:76:4e:5f:d3:d6: 65:84:37:66:b4:3b:f9:11:73:be:ba:04:7b:1f:cb: c6:5f:fa:6b:38:ee:fb:f4:6d:33:d3:21:fe:01:a7: ea:ff:ce:b4:85:3e:6f:51:ce:a8:91:93:73:32:da: a8:2b:93:9a:d5:87:f0:35:8a:25:ed:24:0e:b8:f6: 61:fb:69:9c:0c:0f:57:06:f9:51:b3:94:b2:59:73: 6f:0a:48:75:f0:ed:2e:e5:53:c1:1e:8e:fa:e3:93: ee:2b:bb:10:d4:e5:dd:a4:50:2a:d6:35:c6:84:5a: 84:54:ff:0d:0f:06:1f:11:24:e2:5e:78:98:fa:62: 32:29:5c:96:11:21:07:44:5b:f9:43:86:7f:b1:0c: 90:2f:db:4e:40:fe:f3:6a:b2:d3:98:85:31:b7:6e: 30:7f:bc:c0:7e:8c:84:d7:9e:32:47:8d:aa:6a:bc: fa:c3:75:6a:ba:50:d2:c8:96:47:57:c0:c0:12:3d: 61:e8:98:5e:06:97:f9:13:5e:e1:20:db:4a:db:97: 5f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CC:6E:84:5A:A8:DB:7C:69:66:A1:9B:DA:70:06:0E:37:63:61:3A X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ycxuhFqo23xpZqGb2nAGDjdjYTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.46.136.0/21 Signature Algorithm: sha256WithRSAEncryption 56:06:01:a6:7b:64:0d:04:60:6c:4a:cd:f3:90:9b:b3:90:66: 41:13:29:64:ea:f2:62:38:c6:8a:11:b1:64:c0:81:e2:60:38: 14:c8:e5:42:22:14:d6:85:4d:99:80:50:8e:7f:29:4c:0c:a5: b8:2a:9d:01:a0:b7:3d:11:66:4b:13:56:fd:25:44:cb:4a:79: 1f:67:9a:1e:99:ad:5c:fd:d4:e8:69:c4:08:13:28:69:70:e4: d1:95:52:f7:97:7b:bc:9d:90:83:8f:40:38:46:bb:a3:f1:8a: df:4f:6e:7d:ea:a0:d4:65:cb:0b:e3:aa:f1:50:91:e9:92:c5: 16:17:63:0c:8a:0f:b4:35:fe:b9:d6:38:76:fe:92:8c:08:fc: 26:c1:ee:eb:99:41:8e:d0:77:c9:c8:05:9a:eb:64:2c:9a:6f: 4d:9c:0a:7a:38:12:0c:27:17:d6:53:de:f3:82:cf:a0:10:54: 47:ca:e5:cc:b2:5e:ff:3a:dd:ff:c6:cb:5c:ac:4b:9c:4f:d6: 7d:8c:f9:85:5b:30:20:89:05:18:49:aa:75:6c:a7:e1:60:7c: 9d:3d:70:1e:68:44:e5:8a:5a:6b:f6:9d:a0:d8:ab:e5:53:63: 66:2c:67:f0:97:d1:79:55:b6:34:19:06:f8:c7:8a:0d:d0:5a: bc:b4:97:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpIgji2iv4G3z8WPDUWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWNjNmU4NDVhYThkYjdjNjk2NmExOWJkYTcwMDYwZTM3NjM2MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaL65XCs2SAGH0BUqc5WGZxgGiRI +FBLvJ4DHwSbX3UigeyoduHs4CAa5jjqmh19sa4C553Udk5f09ZlhDdmtDv5EXO+ ugR7H8vGX/prOO779G0z0yH+Aafq/860hT5vUc6okZNzMtqoK5Oa1YfwNYol7SQO uPZh+2mcDA9XBvlRs5SyWXNvCkh18O0u5VPBHo7645PuK7sQ1OXdpFAq1jXGhFqE VP8NDwYfESTiXniY+mIyKVyWESEHRFv5Q4Z/sQyQL9tOQP7zarLTmIUxt24wf7zA foyE154yR42qarz6w3VqulDSyJZHV8DAEj1h6JheBpf5E17hINtK25dfBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnMboRaqNt8aWahm9pwBg43Y2E6MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEveWN4dWhGcW8yM3hwWnFHYjJuQUdEamRqWVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWS6IMA0G CSqGSIb3DQEBCwUAA4IBAQBWBgGme2QNBGBsSs3zkJuzkGZBEylk6vJiOMaKEbFk wIHiYDgUyOVCIhTWhU2ZgFCOfylMDKW4Kp0BoLc9EWZLE1b9JUTLSnkfZ5oema1c /dToacQIEyhpcOTRlVL3l3u8nZCDj0A4Rruj8YrfT2596qDUZcsL46rxUJHpksUW F2MMig+0Nf651jh2/pKMCPwmwe7rmUGO0HfJyAWa62Qsmm9NnAp6OBIMJxfWU97z gs+gEFRHyuXMsl7/Ot3/xstcrEucT9Z9jPmFWzAgiQUYSap1bKfhYHydPXAeaETl ilpr9p2g2KvlU2NmLGfwl9F5VbY0GQb4x4oN0Fq8tJcP -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:52 2026 by rpki-client