This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/YueSZbKV98CmzxsiRfWA83jDNEs.roa File: YueSZbKV98CmzxsiRfWA83jDNEs.roa (raw, json) Hash identifier: pu97V45FIqBvOF8XHHzv+H1DedOkRlyDXAiuHDoYLCw= Subject key identifier: 62:E7:92:65:B2:95:F7:C0:A6:CF:1B:22:45:F5:80:F3:78:C3:34:4B Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Certificate serial: 019B7AC87888FE15F59937CBC920105E317E Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/YueSZbKV98CmzxsiRfWA83jDNEs.roa Signing time: Thu 01 Jan 2026 18:18:37 +0000 ROA not before: Thu 01 Jan 2026 18:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206388 IP address blocks: 185.129.196.0/23 maxlen: 23 185.129.202.0/23 maxlen: 23 185.129.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:78:88:fe:15:f5:99:37:cb:c9:20:10:5e:31:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Validity Not Before: Jan 1 18:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62e79265b295f7c0a6cf1b2245f580f378c3344b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4f:fb:ca:c7:5c:31:c1:e2:fd:c6:78:cc:8e: 2d:3e:41:e8:91:c7:f6:80:3e:18:6b:86:5b:44:59: 1a:7d:54:e8:af:02:f7:41:0c:6e:48:31:d9:4c:79: 79:e6:48:01:39:2d:a8:15:f2:e7:c9:d6:8e:20:71: 29:30:28:ee:b2:8b:54:c7:28:93:21:80:54:3e:7d: 01:7d:96:5c:d7:5b:90:cc:1f:76:5b:76:83:8f:93: 40:5b:df:3c:29:5f:8c:99:85:26:6b:b0:4e:70:c4: 2e:f9:ef:a4:eb:9c:66:f9:3e:d7:93:2d:4b:9b:33: 37:53:ee:41:93:33:40:65:ab:b6:ea:5c:8f:ad:e8: c9:60:15:53:29:52:72:9a:9e:16:e4:00:61:6e:d2: 46:72:da:a3:b7:1f:bd:2c:ee:d9:5e:d5:94:89:df: 68:dd:dd:09:9e:ed:93:04:30:90:fc:de:45:ec:85: eb:2a:f1:d0:75:72:31:a9:db:84:fb:01:15:7b:38: f6:f9:01:36:9d:bd:89:12:98:57:b7:b4:21:ce:be: 9e:b1:29:4a:4f:6e:db:82:82:6e:8a:82:ce:29:64: 68:38:af:b7:cf:be:16:59:6c:30:c9:c2:8c:e7:dd: 8b:98:41:20:70:d8:03:f2:0c:76:35:07:fb:f2:14: 85:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E7:92:65:B2:95:F7:C0:A6:CF:1B:22:45:F5:80:F3:78:C3:34:4B X509v3 Authority Key Identifier: keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/YueSZbKV98CmzxsiRfWA83jDNEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.196.0/23 185.129.202.0/23 185.129.218.0/23 Signature Algorithm: sha256WithRSAEncryption 24:6c:fc:45:4b:89:b0:0b:c1:42:86:01:75:ec:84:93:ab:3b: f3:31:e5:01:ae:0a:ae:77:21:8a:d9:8b:46:db:75:25:8d:cf: d8:7e:61:08:af:fd:de:53:79:8d:8f:22:ce:50:2a:29:2a:22: a9:82:94:7d:6b:e2:3c:24:d5:5a:38:0f:b2:61:cb:24:aa:97: 6c:0c:25:c9:38:c9:4f:22:d4:c5:f5:c3:61:c3:13:9c:96:d2: 5f:99:17:df:37:bf:95:76:c7:0f:35:a3:ab:af:bc:7b:28:98: 8e:28:cc:45:88:bb:63:4e:2c:1a:95:aa:1d:d1:82:5b:41:84: 26:ae:57:1e:99:d6:45:ff:69:b3:54:3c:55:87:e4:dc:66:26: 0e:f3:01:23:0e:55:9d:2b:cd:14:fc:32:ad:1c:02:12:39:c5: e8:01:0b:a9:9c:4b:99:88:2a:78:79:75:bb:ea:c8:16:e5:b8: 21:31:f7:58:60:d3:5c:79:0d:51:ee:32:be:90:4b:6c:5f:ff: fe:b3:10:19:3b:c4:0a:4b:52:aa:ea:c3:42:ea:fb:b7:8f:e4: af:94:f1:ef:d1:9c:88:e6:32:c2:33:0b:df:38:f7:9c:9e:10: 58:69:b4:08:e4:57:63:99:47:64:6d:a5:80:fc:20:2c:5b:e8: 81:16:b0:47 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yHiI/hX1mTfLySAQXjF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh MjM4YzAwHhcNMjYwMTAxMTgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmU3OTI2NWIyOTVmN2MwYTZjZjFiMjI0NWY1ODBmMzc4YzMzNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40/7ysdcMcHi/cZ4zI4tPkHokcf2 gD4Ya4ZbRFkafVTorwL3QQxuSDHZTHl55kgBOS2oFfLnydaOIHEpMCjusotUxyiT IYBUPn0BfZZc11uQzB92W3aDj5NAW988KV+MmYUma7BOcMQu+e+k65xm+T7Xky1L mzM3U+5BkzNAZau26lyPrejJYBVTKVJymp4W5ABhbtJGctqjtx+9LO7ZXtWUid9o 3d0Jnu2TBDCQ/N5F7IXrKvHQdXIxqduE+wEVezj2+QE2nb2JEphXt7Qhzr6esSlK T27bgoJuioLOKWRoOK+3z74WWWwwycKM592LmEEgcNgD8gx2NQf78hSFMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGLnkmWylffAps8bIkX1gPN4wzRLMB8GA1UdIwQY MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt OTdjOWFhYjgyOGYyLzEvWXVlU1piS1Y5OENtenhzaVJmV0E4M2pETkVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuYHEAwQB uYHKAwQBuYHaMA0GCSqGSIb3DQEBCwUAA4IBAQAkbPxFS4mwC8FChgF17ISTqzvz MeUBrgqudyGK2YtG23Uljc/YfmEIr/3eU3mNjyLOUCopKiKpgpR9a+I8JNVaOA+y YcskqpdsDCXJOMlPItTF9cNhwxOcltJfmRffN7+VdscPNaOrr7x7KJiOKMxFiLtj Tiwalaod0YJbQYQmrlcemdZF/2mzVDxVh+TcZiYO8wEjDlWdK80U/DKtHAISOcXo AQupnEuZiCp4eXW76sgW5bghMfdYYNNceQ1R7jK+kEtsX//+sxAZO8QKS1Kq6sNC 6vu3j+SvlPHv0ZyI5jLCMwvfOPecnhBYabQI5FdjmUdkbaWA/CAsW+iBFrBH -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:04 2026 by rpki-client