This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/yALd4Mt6HE3dj2c5xLfJcrGYWWo.roa File: yALd4Mt6HE3dj2c5xLfJcrGYWWo.roa (raw, json) Hash identifier: 1lKxwhNATkAVqpc77ycYRa96oFT/1GMPUZCkZLj7654= Subject key identifier: C8:02:DD:E0:CB:7A:1C:4D:DD:8F:67:39:C4:B7:C9:72:B1:98:59:6A Certificate issuer: /CN=99ea05fe601cb6801af83793e063f79e3940f030 Certificate serial: 019B7C7F3ED00B1B35B1AA531FA4F2936878 Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/yALd4Mt6HE3dj2c5xLfJcrGYWWo.roa Signing time: Fri 02 Jan 2026 02:17:52 +0000 ROA not before: Fri 02 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58010 IP address blocks: 185.98.184.0/24 maxlen: 24 185.98.185.0/24 maxlen: 24 185.98.186.0/24 maxlen: 24 185.98.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:3e:d0:0b:1b:35:b1:aa:53:1f:a4:f2:93:68:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030 Validity Not Before: Jan 2 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c802dde0cb7a1c4ddd8f6739c4b7c972b198596a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:7b:36:ce:25:a1:b9:de:cb:48:c1:52:cb: 20:1f:44:3c:45:4e:14:57:cf:ba:01:d0:ca:b1:d4: 41:0b:f8:82:52:47:23:e7:78:33:c4:67:a7:b8:93: a6:b6:7c:c5:e7:1a:38:e2:b3:07:67:b9:8c:d8:07: 22:20:30:c2:40:88:29:a6:1f:b1:ae:dd:66:1e:93: 2a:60:ab:a6:03:fd:ed:ac:de:cd:0c:ba:b2:57:d1: ad:a8:d5:29:d6:a6:77:8e:08:ba:ad:ef:a5:97:3b: 52:1f:c2:20:86:88:65:58:90:64:bc:9d:d9:36:d5: f9:ec:7b:cc:e2:46:fb:45:90:0f:95:b7:45:7c:61: 32:4b:20:7b:ab:24:bf:0e:1c:f4:18:30:ca:4c:bc: 5f:98:de:16:06:da:e7:73:29:14:68:98:89:e9:4f: 2c:6c:96:00:86:8e:22:13:04:77:be:09:84:4b:7a: 47:ef:fd:64:ab:64:38:37:2b:6e:1f:1f:47:db:07: f5:ce:3d:ef:1b:b0:0d:5e:92:3d:84:3c:7b:d7:d8: 46:a7:15:58:26:9b:0b:15:76:89:d0:1d:13:71:c0: 21:03:7a:f4:af:f5:20:1d:6a:8d:57:5c:64:53:b3: b6:f0:92:31:9c:d4:7b:ba:10:da:95:73:dc:aa:0a: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:02:DD:E0:CB:7A:1C:4D:DD:8F:67:39:C4:B7:C9:72:B1:98:59:6A X509v3 Authority Key Identifier: keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/yALd4Mt6HE3dj2c5xLfJcrGYWWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.184.0/22 Signature Algorithm: sha256WithRSAEncryption 66:6c:c4:01:50:09:7d:7b:ad:c6:7d:fc:f3:83:af:74:ec:eb: f3:9a:80:b5:99:74:0e:2c:2c:63:14:02:83:cd:b1:50:e1:1a: 76:1e:50:d7:a5:cd:e5:e8:3d:de:41:b1:76:d3:65:b1:4c:ef: 4a:5b:d7:a7:f5:c8:a3:3a:0c:e8:a2:93:15:74:1f:cc:20:29: 93:01:8c:9c:52:b0:bc:64:b6:4b:9e:8c:72:2f:2b:e1:8e:7b: 07:60:9d:d6:53:68:0d:6b:14:ea:ce:86:df:2a:5a:c6:de:90: 93:3c:4d:9e:f0:ae:bf:4a:1f:92:1a:f9:61:3d:99:cf:79:6d: af:43:1a:a2:fc:7f:40:b0:b8:8a:60:7e:90:75:bc:8b:d2:65: 22:b4:79:dd:9a:be:fc:d3:ef:c5:f8:93:92:4f:4e:66:5a:55: 58:93:47:63:29:f4:4b:cd:db:91:2e:b3:80:d2:ff:fc:dc:2c: b4:79:39:a5:69:55:70:b7:44:e1:e3:4a:f8:4a:a6:3c:ec:7d: 14:7b:b4:0e:33:3b:e2:c7:86:7b:ca:65:2f:4b:e5:0d:1b:a9: ee:25:ff:d9:d0:41:43:81:19:fa:14:9d:f4:e5:b7:03:e3:00: 58:a3:a1:52:9b:f0:99:5d:1d:56:64:c7:1e:f6:66:7b:89:1b: fe:03:b0:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fz7QCxs1sapTH6Tyk2h4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZWEwNWZlNjAxY2I2ODAxYWY4Mzc5M2UwNjNmNzllMzk0 MGYwMzAwHhcNMjYwMTAyMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODAyZGRlMGNiN2ExYzRkZGQ4ZjY3MzljNGI3Yzk3MmIxOTg1OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufp7Ns4lobney0jBUssgH0Q8RU4U V8+6AdDKsdRBC/iCUkcj53gzxGenuJOmtnzF5xo44rMHZ7mM2AciIDDCQIgpph+x rt1mHpMqYKumA/3trN7NDLqyV9GtqNUp1qZ3jgi6re+llztSH8IghohlWJBkvJ3Z NtX57HvM4kb7RZAPlbdFfGEySyB7qyS/Dhz0GDDKTLxfmN4WBtrncykUaJiJ6U8s bJYAho4iEwR3vgmES3pH7/1kq2Q4NytuHx9H2wf1zj3vG7ANXpI9hDx719hGpxVY JpsLFXaJ0B0TccAhA3r0r/UgHWqNV1xkU7O28JIxnNR7uhDalXPcqgouTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgC3eDLehxN3Y9nOcS3yXKxmFlqMB8GA1UdIwQY MBaAFJnqBf5gHLaAGvg3k+Bj9545QPAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMt MzdjZmQ0YTY0ZmYxLzEveUFMZDRNdDZIRTNkajJjNXhMZkpjckdZV1dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMtMzdjZmQ0YTY0ZmYx LzEvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWK4MA0G CSqGSIb3DQEBCwUAA4IBAQBmbMQBUAl9e63Gffzzg6907OvzmoC1mXQOLCxjFAKD zbFQ4Rp2HlDXpc3l6D3eQbF202WxTO9KW9en9cijOgzoopMVdB/MICmTAYycUrC8 ZLZLnoxyLyvhjnsHYJ3WU2gNaxTqzobfKlrG3pCTPE2e8K6/Sh+SGvlhPZnPeW2v Qxqi/H9AsLiKYH6QdbyL0mUitHndmr780+/F+JOST05mWlVYk0djKfRLzduRLrOA 0v/83Cy0eTmlaVVwt0Th40r4SqY87H0Ue7QOMzvix4Z7ymUvS+UNG6nuJf/Z0EFD gRn6FJ305bcD4wBYo6FSm/CZXR1WZMce9mZ7iRv+A7CB -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:12 2026 by rpki-client