This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa File: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (raw, json) Hash identifier: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0= Subject key identifier: C9:DC:F3:E2:A0:B8:20:74:C2:11:D0:2C:FE:C4:77:BB:C4:00:F9:4D Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Certificate serial: 019B7DC9E2A579687BB141BF40FFEC3B6E58 Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa Signing time: Fri 02 Jan 2026 08:19:01 +0000 ROA not before: Fri 02 Jan 2026 08:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201935 IP address blocks: 185.23.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e2:a5:79:68:7b:b1:41:bf:40:ff:ec:3b:6e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Validity Not Before: Jan 2 08:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9dcf3e2a0b82074c211d02cfec477bbc400f94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:06:ba:11:dd:26:9f:0e:cc:f2:95:bd:8a:ec: b5:16:c6:5e:ba:81:de:55:4e:aa:47:61:41:de:13: 99:23:6f:f9:c2:94:b3:79:bf:6c:fc:76:a2:37:04: cf:a9:af:f4:ab:27:f5:e7:13:4b:e7:49:e3:5a:fc: 88:6f:5b:c5:5c:68:20:25:5d:69:ca:86:93:a6:89: ff:f9:56:80:14:c6:1b:b4:19:6b:fc:cd:51:bf:5a: 06:84:6d:12:9f:f0:90:4d:91:7e:e2:b9:f0:60:a8: b5:f2:42:f4:8a:73:5f:b8:81:82:30:16:6d:84:5a: b0:52:0b:ec:21:1b:16:19:eb:20:e1:a4:3f:64:88: f4:14:24:d3:e8:68:11:a5:0d:d4:73:2f:ed:55:1d: 95:63:c1:16:4a:6f:5a:98:b1:7f:16:e1:2d:26:1b: fa:99:cf:9a:f3:d5:04:8f:fd:0f:b1:dc:e4:5a:83: 7a:63:db:02:e8:47:47:59:1e:dc:07:d8:fd:2d:91: 0a:16:a6:bb:8d:28:9a:5d:de:fe:43:a0:ea:67:b9: be:c1:cb:d1:f1:3f:48:92:9b:0e:1e:ac:fd:6b:db: 69:32:a4:a0:d9:81:5b:36:ac:e2:70:00:e8:17:64: 48:1d:55:09:a0:b3:b7:27:d8:60:b5:eb:e9:c4:ae: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DC:F3:E2:A0:B8:20:74:C2:11:D0:2C:FE:C4:77:BB:C4:00:F9:4D X509v3 Authority Key Identifier: keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.98.0/24 Signature Algorithm: sha256WithRSAEncryption 01:8c:d9:f0:35:4b:25:0c:cc:40:38:9e:c8:e1:44:77:8e:97: 78:e0:d4:a3:97:28:eb:ef:e1:5c:7e:eb:ef:c4:de:19:6b:fa: 8d:80:38:2a:eb:fa:15:f5:09:96:7a:b7:b5:a6:3b:88:a7:e1: 7e:21:9e:b3:fd:6f:66:23:27:d9:6e:5f:21:fc:0a:33:2e:c1: c4:e7:98:ee:4b:d7:c5:73:5d:01:b1:94:95:d4:69:ea:c6:5f: c2:8f:1c:c3:89:9c:2a:d9:3c:94:4f:7c:6a:23:ec:cd:c6:02: d4:bc:74:f1:ae:dd:a2:d9:92:d0:d5:ed:de:3b:54:99:ea:d1: 5c:7f:ca:5a:c5:4c:ec:a7:5e:8e:45:91:72:70:8d:de:5c:85: c9:2b:77:fc:92:eb:f5:e5:87:bb:52:89:18:de:76:59:66:49: 96:05:24:51:92:f1:13:95:4d:25:32:ed:06:e9:9e:ae:0a:21: b2:5a:64:0a:fd:39:f9:34:72:aa:35:62:95:bf:b6:5b:d8:64: 8c:47:5d:48:eb:87:51:c6:64:2b:a2:0d:fd:ca:f5:29:b3:10: 31:bb:0b:76:cd:0a:1a:9a:c0:8e:9f:b5:24:2c:d3:28:b4:0e: 19:1d:ab:b2:10:94:e5:49:d7:7a:ba:d8:e2:cd:05:c0:81:be: 01:d6:ea:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yeKleWh7sUG/QP/sO25YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl ZDhjMWMwHhcNMjYwMTAyMDgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWRjZjNlMmEwYjgyMDc0YzIxMWQwMmNmZWM0NzdiYmM0MDBmOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wa6Ed0mnw7M8pW9iuy1FsZeuoHe VU6qR2FB3hOZI2/5wpSzeb9s/HaiNwTPqa/0qyf15xNL50njWvyIb1vFXGggJV1p yoaTpon/+VaAFMYbtBlr/M1Rv1oGhG0Sn/CQTZF+4rnwYKi18kL0inNfuIGCMBZt hFqwUgvsIRsWGesg4aQ/ZIj0FCTT6GgRpQ3Ucy/tVR2VY8EWSm9amLF/FuEtJhv6 mc+a89UEj/0PsdzkWoN6Y9sC6EdHWR7cB9j9LZEKFqa7jSiaXd7+Q6DqZ7m+wcvR 8T9IkpsOHqz9a9tpMqSg2YFbNqzicADoF2RIHVUJoLO3J9hgtevpxK4ScQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnc8+KguCB0whHQLP7Ed7vEAPlNMB8GA1UdIwQY MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt YmQ5MGEzZjA2ZTE2LzEveWR6ejRxQzRJSFRDRWRBc19zUjN1OFFBLVUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2 LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRdiMA0G CSqGSIb3DQEBCwUAA4IBAQABjNnwNUslDMxAOJ7I4UR3jpd44NSjlyjr7+Fcfuvv xN4Za/qNgDgq6/oV9QmWere1pjuIp+F+IZ6z/W9mIyfZbl8h/AozLsHE55juS9fF c10BsZSV1Gnqxl/CjxzDiZwq2TyUT3xqI+zNxgLUvHTxrt2i2ZLQ1e3eO1SZ6tFc f8paxUzsp16ORZFycI3eXIXJK3f8kuv15Ye7UokY3nZZZkmWBSRRkvETlU0lMu0G 6Z6uCiGyWmQK/Tn5NHKqNWKVv7Zb2GSMR11I64dRxmQrog39yvUpsxAxuwt2zQoa msCOn7UkLNMotA4ZHauyEJTlSdd6utjizQXAgb4B1urF -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:21 2026 by rpki-client