This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/YZJglGEU2Eglwipdf3BrI1nPGU8.roa File: YZJglGEU2Eglwipdf3BrI1nPGU8.roa (raw, json) Hash identifier: HvYFoJaRx3YivsI4P51tYw6KXpvSJjjP5d3EcujKEhY= Subject key identifier: 61:92:60:94:61:14:D8:48:25:C2:2A:5D:7F:70:6B:23:59:CF:19:4F Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74 Certificate serial: 019B7B35BEABE657EC5B2874BFA6CC1487C7 Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/YZJglGEU2Eglwipdf3BrI1nPGU8.roa Signing time: Thu 01 Jan 2026 20:17:58 +0000 ROA not before: Thu 01 Jan 2026 20:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207096 IP address blocks: 185.166.40.0/23 maxlen: 23 185.166.42.0/23 maxlen: 23 185.176.204.0/23 maxlen: 23 185.176.206.0/23 maxlen: 23 2a0a:7600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:be:ab:e6:57:ec:5b:28:74:bf:a6:cc:14:87:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74 Validity Not Before: Jan 1 20:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=619260946114d84825c22a5d7f706b2359cf194f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:a3:92:f5:57:61:52:ec:84:c4:8d:fb:23: f4:8b:31:7e:6e:14:c9:7e:9d:1d:c3:f2:3b:60:62: 96:08:e7:b2:44:fe:c2:e7:d3:7c:cc:b7:7d:e0:82: 5d:79:0c:a0:16:02:bf:d9:f2:da:a1:b1:a7:1a:d0: f4:55:d5:04:d1:2a:29:e2:7b:a2:fc:07:e3:95:8e: cf:aa:29:47:ed:fb:6b:4c:80:d4:a8:d2:85:5a:de: e3:c7:98:4a:eb:52:49:ee:60:83:0e:ed:a5:39:c3: ae:f8:8f:16:0d:79:94:de:df:d1:be:5c:ca:c3:6d: f9:1d:97:f5:b3:91:74:a1:e3:ea:62:2e:e8:91:d9: ca:64:ac:e5:ba:e2:05:6b:34:d6:4f:2d:0c:67:6b: 42:54:6d:d5:12:62:a0:72:6c:25:3d:14:bd:09:d4: 6a:9d:2b:8e:b7:c8:98:5e:e5:9b:9e:18:8a:44:99: d0:c5:e3:f8:83:4f:ec:b6:b3:0f:4a:2a:71:b8:a5: cc:7b:be:7c:d5:65:99:e6:f0:10:1b:3a:ee:ee:11: fa:10:bc:eb:64:d6:69:61:83:34:b7:ff:41:b3:84: 75:bc:9e:85:c7:d5:c0:82:c2:f4:00:39:c0:78:a1: e0:90:71:22:cc:2c:80:57:5d:c7:69:11:87:75:65: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:92:60:94:61:14:D8:48:25:C2:2A:5D:7F:70:6B:23:59:CF:19:4F X509v3 Authority Key Identifier: keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/YZJglGEU2Eglwipdf3BrI1nPGU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.40.0/22 185.176.204.0/22 IPv6: 2a0a:7600::/29 Signature Algorithm: sha256WithRSAEncryption 76:4d:9e:fc:fa:cb:39:72:2b:fc:b5:2e:07:b3:e4:d8:d9:a4: 31:40:9f:a9:5a:81:a9:77:fa:5f:12:21:fc:40:bc:bf:b5:c3: fe:28:ee:24:00:ec:3c:eb:18:f3:ca:45:8f:18:ba:ca:0e:22: f3:1c:20:d4:f0:73:92:00:9a:83:8f:61:6a:10:cc:b8:2b:03: df:40:72:72:41:2e:81:af:b6:2e:14:ff:87:ec:48:eb:7e:9d: f3:fa:bf:ea:32:ac:42:d4:39:26:26:78:7c:71:55:39:da:6f: be:17:a5:21:ea:d7:ab:f0:ef:22:96:c9:63:82:83:58:4f:40: 36:76:7d:0a:dc:df:f8:e5:5a:dd:60:b3:d0:a7:43:d7:82:b3: 73:d5:2c:1f:eb:a9:60:ea:92:9b:99:65:a8:70:f1:07:ac:c7: a7:39:05:94:86:26:51:3a:c4:53:f2:2a:00:81:00:42:20:37: 3f:53:f7:3e:0e:02:93:3b:55:46:15:90:b4:c7:18:9b:e0:b1: d9:32:b4:42:22:30:ad:9a:17:7c:f4:82:76:d0:72:ff:9b:e5: 1f:cd:f1:dd:06:bc:f2:90:a9:11:3b:f3:05:07:70:5e:ea:ff: 5f:05:70:f7:68:63:ec:1d:f9:64:8f:ad:c9:46:b9:37:25:34: 95:b1:6d:a0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nb6r5lfsWyh0v6bMFIfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZDAzNTlmOWY4YjIwODE1Y2U0ZDk4OGUxMDliZjgyMzA2 ZTRjNzQwHhcNMjYwMTAxMjAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTkyNjA5NDYxMTRkODQ4MjVjMjJhNWQ3ZjcwNmIyMzU5Y2YxOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmmjkvVXYVLshMSN+yP0izF+bhTJ fp0dw/I7YGKWCOeyRP7C59N8zLd94IJdeQygFgK/2fLaobGnGtD0VdUE0Sop4nui /AfjlY7PqilH7ftrTIDUqNKFWt7jx5hK61JJ7mCDDu2lOcOu+I8WDXmU3t/RvlzK w235HZf1s5F0oePqYi7okdnKZKzluuIFazTWTy0MZ2tCVG3VEmKgcmwlPRS9CdRq nSuOt8iYXuWbnhiKRJnQxeP4g0/strMPSipxuKXMe7581WWZ5vAQGzru7hH6ELzr ZNZpYYM0t/9Bs4R1vJ6Fx9XAgsL0ADnAeKHgkHEizCyAV13HaRGHdWWK7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGGSYJRhFNhIJcIqXX9wayNZzxlPMB8GA1UdIwQY MBaAFFPQNZ+fiyCBXOTZiOEJv4Iwbkx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTkt YTZjNDljZTkwNzU2LzEvWVpKZ2xHRVUyRWdsd2lwZGYzQnJJMW5QR1U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTktYTZjNDljZTkwNzU2 LzEvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuaYoAwQC ubDMMA0EAgACMAcDBQMqCnYAMA0GCSqGSIb3DQEBCwUAA4IBAQB2TZ78+ss5civ8 tS4Hs+TY2aQxQJ+pWoGpd/pfEiH8QLy/tcP+KO4kAOw86xjzykWPGLrKDiLzHCDU 8HOSAJqDj2FqEMy4KwPfQHJyQS6Br7YuFP+H7Ejrfp3z+r/qMqxC1DkmJnh8cVU5 2m++F6Uh6ter8O8ilsljgoNYT0A2dn0K3N/45VrdYLPQp0PXgrNz1Swf66lg6pKb mWWocPEHrMenOQWUhiZROsRT8ioAgQBCIDc/U/c+DgKTO1VGFZC0xxib4LHZMrRC IjCtmhd89IJ20HL/m+UfzfHdBrzykKkRO/MFB3Be6v9fBXD3aGPsHflkj63JRrk3 JTSVsW2g -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:22 2026 by rpki-client