This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/YkEyg_A4RCxlooAeWv5ZJPH2A1Y.roa File: YkEyg_A4RCxlooAeWv5ZJPH2A1Y.roa (raw, json) Hash identifier: K3fgnAoZceixe7We+rqUGvm6jyCRg/IVzQi2Nq8nqZU= Subject key identifier: 62:41:32:83:F0:38:44:2C:65:A2:80:1E:5A:FE:59:24:F1:F6:03:56 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758F7CEB2437A828BF0B4D54752B174 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/YkEyg_A4RCxlooAeWv5ZJPH2A1Y.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56324 IP address blocks: 185.244.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f7:ce:b2:43:7a:82:8b:f0:b4:d5:47:52:b1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62413283f038442c65a2801e5afe5924f1f60356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:30:70:d2:82:ae:fe:c0:e6:5b:57:f0:29: 97:c8:6a:f7:c3:d5:64:63:f0:32:c3:34:c3:27:c1: e9:0a:29:3d:06:b5:9b:96:58:30:9a:92:28:a1:28: d7:59:8f:96:63:49:82:bd:6d:1d:9a:ee:53:9d:25: d8:cd:1d:f0:07:4c:ed:18:1b:c9:29:4d:81:74:2f: 9f:bc:96:5a:4d:20:23:2b:1a:4f:d4:c2:a8:fd:ef: 35:64:f6:c8:7a:b7:60:f1:cf:83:1b:d4:94:e6:a9: 1f:8b:96:b1:f4:11:f5:93:81:6a:30:51:4c:69:4b: a5:eb:b4:9b:10:23:06:18:84:8a:31:5b:4b:7f:45: 3a:9a:30:c2:7c:49:39:61:89:ae:6d:41:ef:ce:09: b3:2c:10:cd:03:b5:f7:5c:2e:db:28:b8:24:70:30: bc:6b:d6:1b:d6:a4:c5:9a:23:5e:b7:7e:9e:6b:c4: bb:c1:b1:00:34:d0:66:96:cd:9e:ef:e2:c2:4f:26: 84:e3:74:93:4f:b3:a1:06:b7:54:99:ba:7f:d0:14: 85:f9:4d:29:6b:64:db:14:f9:a8:2a:3a:ed:32:45: 32:2c:1d:df:22:e0:f1:8c:7b:e0:0f:04:52:61:5b: 63:4f:be:66:f9:27:4f:76:1a:78:a5:c0:2b:30:d9: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:41:32:83:F0:38:44:2C:65:A2:80:1E:5A:FE:59:24:F1:F6:03:56 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/YkEyg_A4RCxlooAeWv5ZJPH2A1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.96.0/22 Signature Algorithm: sha256WithRSAEncryption 74:ea:77:12:c4:4a:19:00:82:cc:fd:20:a8:5c:4b:3b:60:8b: fc:8a:85:f2:44:ae:79:ee:d1:cc:86:be:ff:26:e7:e5:f9:61: 39:6f:6b:0c:28:d4:9a:4e:aa:a3:fd:e4:00:63:df:ec:95:34: aa:61:bd:4b:24:e9:20:14:a1:39:30:33:98:aa:26:03:41:ef: f2:43:0f:f8:e0:87:55:d7:cb:a1:0a:65:87:cb:6f:b3:36:8a: 04:4a:28:c9:07:be:28:b6:a2:17:85:dd:87:48:18:1e:88:f3: e4:3f:1e:8b:37:9f:61:ea:74:2c:16:e4:4b:5e:8d:4e:d6:9e: b2:aa:62:ff:c4:8f:d2:0f:fb:f4:dc:5a:50:40:ba:79:22:6f: 0e:b6:5f:cc:75:d2:23:43:ed:ad:09:cc:9e:84:01:49:47:a0: fa:7f:2c:95:78:78:51:13:58:e7:ef:49:e8:c4:64:b4:05:07: be:44:c7:87:91:97:19:1e:1e:70:12:d2:51:e6:07:34:48:08: e9:6c:80:a8:a8:d8:82:35:e1:83:47:47:a3:3f:b4:c7:a4:67: 29:37:e6:35:63:6d:19:2a:18:fe:bf:18:05:bf:fa:01:c3:89: e7:bf:1a:43:4e:78:5b:4e:b8:4c:92:e1:b1:5f:f0:c6:e8:cc: 07:96:ad:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPfOskN6govwtNVHUrF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjQxMzI4M2YwMzg0NDJjNjVhMjgwMWU1YWZlNTkyNGYxZjYwMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8wwcNKCrv7A5ltX8CmXyGr3w9Vk Y/AywzTDJ8HpCik9BrWbllgwmpIooSjXWY+WY0mCvW0dmu5TnSXYzR3wB0ztGBvJ KU2BdC+fvJZaTSAjKxpP1MKo/e81ZPbIerdg8c+DG9SU5qkfi5ax9BH1k4FqMFFM aUul67SbECMGGISKMVtLf0U6mjDCfEk5YYmubUHvzgmzLBDNA7X3XC7bKLgkcDC8 a9Yb1qTFmiNet36ea8S7wbEANNBmls2e7+LCTyaE43STT7OhBrdUmbp/0BSF+U0p a2TbFPmoKjrtMkUyLB3fIuDxjHvgDwRSYVtjT75m+SdPdhp4pcArMNlsFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGJBMoPwOEQsZaKAHlr+WSTx9gNWMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvWWtFeWdfQTRSQ3hsb29BZVd2NVpKUEgyQTFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufRgMA0G CSqGSIb3DQEBCwUAA4IBAQB06ncSxEoZAILM/SCoXEs7YIv8ioXyRK557tHMhr7/ Jufl+WE5b2sMKNSaTqqj/eQAY9/slTSqYb1LJOkgFKE5MDOYqiYDQe/yQw/44IdV 18uhCmWHy2+zNooESijJB74otqIXhd2HSBgeiPPkPx6LN59h6nQsFuRLXo1O1p6y qmL/xI/SD/v03FpQQLp5Im8Otl/MddIjQ+2tCcyehAFJR6D6fyyVeHhRE1jn70no xGS0BQe+RMeHkZcZHh5wEtJR5gc0SAjpbICoqNiCNeGDR0ejP7THpGcpN+Y1Y20Z Khj+vxgFv/oBw4nnvxpDTnhbTrhMkuGxX/DG6MwHlq0o -----END CERTIFICATE-----Generated at Sun Jan 25 20:28:59 2026 by rpki-client