This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/ybMcWkLmcKGrecOMczmgrtllpYA.roa File: ybMcWkLmcKGrecOMczmgrtllpYA.roa (raw, json) Hash identifier: /LlmH80hsPOGveHK8dWADRNnUaas8Cieno6pBZCIL8w= Subject key identifier: C9:B3:1C:5A:42:E6:70:A1:AB:79:C3:8C:73:39:A0:AE:D9:65:A5:80 Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Certificate serial: 019B7C1261264206CD535473CEB76B5B9501 Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/ybMcWkLmcKGrecOMczmgrtllpYA.roa Signing time: Fri 02 Jan 2026 00:18:57 +0000 ROA not before: Fri 02 Jan 2026 00:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48847 IP address blocks: 185.176.208.0/22 maxlen: 22 185.176.208.0/24 maxlen: 24 185.176.208.0/27 maxlen: 27 185.176.209.0/24 maxlen: 24 185.176.210.0/24 maxlen: 24 185.176.210.48/29 maxlen: 29 185.176.210.104/29 maxlen: 29 185.176.211.0/24 maxlen: 24 185.176.211.224/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:61:26:42:06:cd:53:54:73:ce:b7:6b:5b:95:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0 Validity Not Before: Jan 2 00:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9b31c5a42e670a1ab79c38c7339a0aed965a580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:ff:35:a6:a4:b2:09:d6:83:1c:c5:5d:22: 70:36:a1:e5:0b:0b:1e:47:76:da:b1:11:48:cd:18: c2:29:fb:89:1a:c9:50:74:61:e4:27:f2:f8:12:79: 25:42:e7:86:b8:b3:6d:99:d4:99:0c:46:c8:cd:11: 50:aa:cf:89:62:02:3b:9a:fb:c1:56:40:ed:c3:37: 8e:26:25:da:7f:0d:65:e8:24:a3:82:94:0e:09:10: 4e:c4:17:c4:c1:ff:78:e2:c6:3b:2a:24:6c:d0:e6: 75:50:eb:81:32:1e:f7:3b:5d:1e:28:c5:d1:65:01: ae:5a:60:c6:ed:cf:32:d1:a0:c0:7f:66:93:97:cc: 78:75:1b:e8:ea:ae:86:c2:90:08:dd:61:0a:24:dc: ea:7f:7c:80:2a:c6:2f:1b:a6:1f:a7:41:84:4e:51: ed:34:40:11:97:a3:39:20:33:61:e1:a1:df:00:cc: 15:db:00:1c:00:36:f6:b2:24:30:bb:bd:48:56:60: bb:86:f4:89:c3:18:31:f6:50:ac:9a:55:08:4d:94: ba:91:c5:94:1e:9f:28:24:07:7e:84:d2:bd:e3:4a: 4b:c4:9a:0e:9b:63:3e:aa:ae:99:dc:4e:42:d3:d7: a5:99:c6:1a:64:44:f2:70:ad:9a:ce:f5:9a:bb:20: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B3:1C:5A:42:E6:70:A1:AB:79:C3:8C:73:39:A0:AE:D9:65:A5:80 X509v3 Authority Key Identifier: keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/ybMcWkLmcKGrecOMczmgrtllpYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.208.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:65:f1:d5:bf:98:bd:33:e9:b4:db:56:fb:6c:65:82:e1:20: 13:3d:c8:78:ee:6c:45:68:fb:24:19:ae:81:a1:7d:fa:76:c1: 80:38:11:fe:e6:b7:4b:5e:7a:e1:8c:c2:13:b1:43:46:31:ae: e9:64:9c:7f:2f:ec:f1:a7:ab:67:c7:ef:41:53:7f:40:d2:a0: 4f:2d:72:e5:4f:ee:46:25:b5:7f:24:ca:24:c8:2b:15:05:65: ec:c6:04:7c:39:61:41:79:8b:fe:ca:29:ff:99:c4:a9:5c:a4: 3c:5b:3c:fe:ab:9a:8f:ca:42:2c:04:f9:a4:d0:f7:b5:cb:21: ad:f3:cb:ce:01:6d:8a:c4:fa:da:40:71:9b:5b:fd:9d:17:20: 45:b1:78:1e:5b:6b:e8:56:1e:f5:26:2d:bd:11:57:b9:ac:b6: db:ae:a8:0e:21:7f:aa:af:6a:1c:aa:a5:7a:25:02:0d:21:59: c3:05:d1:ff:35:26:25:4d:6e:04:2b:d4:a1:f9:00:6b:9a:e6: ed:d7:65:ea:b4:dc:d6:0d:2b:38:e1:f2:d3:b8:1b:de:fc:e0: e4:6f:6b:54:6f:3a:f7:18:92:59:58:22:88:c7:07:7d:3f:80: 92:b5:ce:f5:e2:14:c4:a1:5f:13:d5:25:44:18:56:6d:e9:82: 69:4a:e9:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EmEmQgbNU1RzzrdrW5UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNjliNmIyYTBhNzI4MThkMWZhOWE0NmVmMmFkNzgxMmI5 NWJjYzAwHhcNMjYwMTAyMDAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWIzMWM1YTQyZTY3MGExYWI3OWMzOGM3MzM5YTBhZWQ5NjVhNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo//NaaksgnWgxzFXSJwNqHlCwse R3basRFIzRjCKfuJGslQdGHkJ/L4EnklQueGuLNtmdSZDEbIzRFQqs+JYgI7mvvB VkDtwzeOJiXafw1l6CSjgpQOCRBOxBfEwf944sY7KiRs0OZ1UOuBMh73O10eKMXR ZQGuWmDG7c8y0aDAf2aTl8x4dRvo6q6GwpAI3WEKJNzqf3yAKsYvG6Yfp0GETlHt NEARl6M5IDNh4aHfAMwV2wAcADb2siQwu71IVmC7hvSJwxgx9lCsmlUITZS6kcWU Hp8oJAd+hNK940pLxJoOm2M+qq6Z3E5C09elmcYaZETycK2azvWauyBvgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmzHFpC5nChq3nDjHM5oK7ZZaWAMB8GA1UdIwQY MBaAFJ1ptrKgpygY0fqaRu8q14ErlbzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzkt Mzk2MDc4MjFhMDlhLzEveWJNY1drTG1jS0dyZWNPTWN6bWdydGxscFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82MzNhZjItNWI0ZS00YTRjLWIxMzktMzk2MDc4MjFhMDlh LzEvbldtMnNxQ25LQmpSLXBwRzd5clhnU3VWdk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubDQMA0G CSqGSIb3DQEBCwUAA4IBAQAcZfHVv5i9M+m021b7bGWC4SATPch47mxFaPskGa6B oX36dsGAOBH+5rdLXnrhjMITsUNGMa7pZJx/L+zxp6tnx+9BU39A0qBPLXLlT+5G JbV/JMokyCsVBWXsxgR8OWFBeYv+yin/mcSpXKQ8Wzz+q5qPykIsBPmk0Pe1yyGt 88vOAW2KxPraQHGbW/2dFyBFsXgeW2voVh71Ji29EVe5rLbbrqgOIX+qr2ocqqV6 JQINIVnDBdH/NSYlTW4EK9Sh+QBrmubt12XqtNzWDSs44fLTuBve/ODkb2tUbzr3 GJJZWCKIxwd9P4CStc714hTEoV8T1SVEGFZt6YJpSuk4 -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:39 2026 by rpki-client