This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/ys1jUiFYdAsS75N4hQGVBwuZ6Ug.roa File: ys1jUiFYdAsS75N4hQGVBwuZ6Ug.roa (raw, json) Hash identifier: 6CDsrf9c3/gJRcfyyOm7TzYrVAd5utDrsPb/K0wVSTo= Subject key identifier: CA:CD:63:52:21:58:74:0B:12:EF:93:78:85:01:95:07:0B:99:E9:48 Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Certificate serial: 019B7E381FF6C2C522228E2DD9DF79E1883E Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/ys1jUiFYdAsS75N4hQGVBwuZ6Ug.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201026 IP address blocks: 91.240.34.0/24 maxlen: 24 185.85.220.0/22 maxlen: 24 185.85.220.0/23 maxlen: 23 185.85.220.0/24 maxlen: 24 185.85.221.0/24 maxlen: 24 185.85.222.0/24 maxlen: 24 185.85.223.0/24 maxlen: 24 2a05:aec0::/29 maxlen: 29 2a05:aec0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1f:f6:c2:c5:22:22:8e:2d:d9:df:79:e1:88:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cacd63522158740b12ef9378850195070b99e948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:e8:0d:68:18:09:42:8d:c3:9b:d8:ef:69: 4e:d6:a4:89:74:da:6a:cf:34:7f:6f:1a:6c:8d:fb: 29:cb:55:e9:7a:c2:b4:8c:3c:04:53:6b:86:cd:52: d4:3d:62:e5:db:a9:6c:e0:9f:71:44:cc:ea:7d:34: 0e:ed:59:9f:1d:8d:73:45:01:9d:c6:b8:d1:52:56: 27:45:ea:4a:ed:b0:e3:44:13:fa:ca:8a:78:cc:8e: 26:45:f0:b4:71:27:ea:17:b9:91:59:6a:49:8a:5a: 91:9c:7b:e6:51:8b:ef:fa:18:c0:e3:b4:1f:32:60: e4:70:fb:9e:af:2d:1f:cb:58:68:51:b3:5c:5b:ff: 37:8a:72:10:34:13:83:cf:2d:8f:15:2b:27:5f:11: b9:6f:02:2d:17:b1:88:e8:35:b9:c3:10:42:62:b2: e2:15:ea:52:9e:85:bc:e5:9b:19:fb:bd:6d:f1:22: 1b:95:5b:3f:14:41:ce:f2:61:b0:b0:94:9a:75:c4: 88:8c:73:b2:a1:2d:cf:33:40:ef:b1:52:6a:90:e1: c5:f9:d3:d2:96:69:9c:6b:37:24:ec:c3:b8:01:7e: 1b:c8:b4:80:9d:53:9f:a6:78:10:cd:dc:3e:7e:e7: f4:17:02:bc:45:4c:ad:68:bd:dd:9d:68:33:74:1e: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CD:63:52:21:58:74:0B:12:EF:93:78:85:01:95:07:0B:99:E9:48 X509v3 Authority Key Identifier: keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/ys1jUiFYdAsS75N4hQGVBwuZ6Ug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.34.0/24 185.85.220.0/22 IPv6: 2a05:aec0::/29 Signature Algorithm: sha256WithRSAEncryption 8b:d4:20:6a:46:19:1d:70:3e:9b:4d:71:a9:8c:4c:ef:b8:20: a6:64:f3:45:37:f9:e4:45:e2:c0:7f:bf:d7:2f:b7:de:3b:90: 59:a3:f4:3b:db:cf:91:ca:0f:cf:83:36:c9:9e:d6:4c:bb:c2: f8:d7:40:a3:44:d9:b1:83:06:5e:e6:90:cb:92:0e:1c:94:73: fa:e8:f9:cd:7f:b3:71:25:b3:2a:47:87:c9:7b:05:f6:38:5a: 12:ce:98:df:01:48:64:92:e9:c2:22:91:18:3a:00:10:15:d8: a2:4b:bd:48:2e:07:26:64:b7:df:c9:ef:cd:be:30:16:8b:c5: 55:86:3c:27:04:65:f0:31:22:51:50:6d:14:1d:df:4f:8b:04: f4:1d:ae:84:62:f9:82:b8:c6:56:8d:52:3b:67:f8:15:e8:41: 43:20:12:bc:66:fa:f2:2c:95:f4:8d:63:2f:89:5c:34:be:02: 8c:29:10:a3:f6:1f:f8:ec:9e:c7:9d:c6:42:94:0e:04:14:0d: a3:40:f4:3b:84:2b:5a:bb:98:15:60:f2:2b:18:24:52:f0:9a: 7b:54:aa:9d:d0:e5:4d:60:19:cc:45:40:c4:bf:17:55:64:6c: c9:80:b5:5e:29:7c:28:89:91:69:b7:4e:26:97:01:30:f6:f4: 70:62:30:5e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OB/2wsUiIo4t2d954Yg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODJiMTcxOWI0ZmVjNzA4YmE2NmIyOTdhYmUwZGIwOGZh ZDBlMWUwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWNkNjM1MjIxNTg3NDBiMTJlZjkzNzg4NTAxOTUwNzBiOTllOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr3oDWgYCUKNw5vY72lO1qSJdNpq zzR/bxpsjfspy1XpesK0jDwEU2uGzVLUPWLl26ls4J9xRMzqfTQO7VmfHY1zRQGd xrjRUlYnRepK7bDjRBP6yop4zI4mRfC0cSfqF7mRWWpJilqRnHvmUYvv+hjA47Qf MmDkcPuery0fy1hoUbNcW/83inIQNBODzy2PFSsnXxG5bwItF7GI6DW5wxBCYrLi FepSnoW85ZsZ+71t8SIblVs/FEHO8mGwsJSadcSIjHOyoS3PM0DvsVJqkOHF+dPS lmmcazck7MO4AX4byLSAnVOfpngQzdw+fuf0FwK8RUytaL3dnWgzdB7mowIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMrNY1IhWHQLEu+TeIUBlQcLmelIMB8GA1UdIwQY MBaAFEmCsXGbT+xwi6ZrKXq+DbCPrQ4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYt YWU2Yjg0YzI4MTk1LzEveXMxalVpRllkQXNTNzVONGhRR1ZCd3VaNlVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYtYWU2Yjg0YzI4MTk1 LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW/AiAwQC uVXcMA0EAgACMAcDBQMqBa7AMA0GCSqGSIb3DQEBCwUAA4IBAQCL1CBqRhkdcD6b TXGpjEzvuCCmZPNFN/nkReLAf7/XL7feO5BZo/Q728+Ryg/PgzbJntZMu8L410Cj RNmxgwZe5pDLkg4clHP66PnNf7NxJbMqR4fJewX2OFoSzpjfAUhkkunCIpEYOgAQ FdiiS71ILgcmZLffye/NvjAWi8VVhjwnBGXwMSJRUG0UHd9PiwT0Ha6EYvmCuMZW jVI7Z/gV6EFDIBK8ZvryLJX0jWMviVw0vgKMKRCj9h/47J7HncZClA4EFA2jQPQ7 hCtau5gVYPIrGCRS8Jp7VKqd0OVNYBnMRUDEvxdVZGzJgLVeKXwoiZFpt04mlwEw 9vRwYjBe -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:55 2026 by rpki-client