This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/yCy_86dbJqoexnTrD2dlicXc2yE.roa File: yCy_86dbJqoexnTrD2dlicXc2yE.roa (raw, json) Hash identifier: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38= Subject key identifier: C8:2C:BF:F3:A7:5B:26:AA:1E:C6:74:EB:0F:67:65:89:C5:DC:DB:21 Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Certificate serial: 019B76EB1291179BD1633BAD76B1786E7846 Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/yCy_86dbJqoexnTrD2dlicXc2yE.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201841 IP address blocks: 185.63.156.0/24 maxlen: 24 185.63.157.0/24 maxlen: 24 185.63.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:12:91:17:9b:d1:63:3b:ad:76:b1:78:6e:78:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c82cbff3a75b26aa1ec674eb0f676589c5dcdb21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:40:10:4f:05:89:af:c0:44:93:75:1e:9f: a1:fd:18:f8:07:0c:78:52:5e:16:6c:d4:72:d7:77: d9:59:1a:ed:2d:ea:42:4e:cb:33:df:d5:24:78:d7: 5c:b9:bd:9b:ba:d0:80:1b:bc:e3:e2:2d:50:6d:fe: 37:3b:84:71:ea:0c:fe:ad:d5:c5:ad:68:ab:9f:bd: 2e:c3:86:e0:75:41:07:8f:a3:46:69:9c:ca:37:7f: 78:22:f8:ae:a6:9e:be:b7:ee:fb:62:e4:6c:1d:05: 11:34:94:0e:e8:94:c2:46:5f:56:37:a0:e1:76:3e: d1:dc:f8:56:ef:ff:83:1f:08:d4:b9:5f:d9:f4:30: a9:76:85:cb:93:02:a0:25:2e:33:2d:ee:4a:bf:19: d2:10:c6:56:db:1c:1e:56:5d:af:93:55:f4:4e:4a: a8:bb:a2:42:53:94:be:f0:b4:91:8f:93:07:01:c9: 11:68:cd:f1:74:49:14:6f:2f:c2:d9:f8:3d:3d:e2: 4d:71:9c:75:67:d9:c2:ae:5a:26:a5:57:bb:7e:0a: d6:9f:02:37:61:47:c2:ba:a7:40:4d:fd:5d:60:64: 7c:1d:bc:49:90:6d:d7:17:2b:8d:a2:ae:1e:a8:96: 18:39:fb:24:b1:1f:44:76:92:ea:f0:2f:b6:99:1c: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2C:BF:F3:A7:5B:26:AA:1E:C6:74:EB:0F:67:65:89:C5:DC:DB:21 X509v3 Authority Key Identifier: keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/yCy_86dbJqoexnTrD2dlicXc2yE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.156.0/22 Signature Algorithm: sha256WithRSAEncryption 09:52:3c:a6:d0:22:db:4a:de:39:cc:73:37:f4:e5:85:ba:4e: b8:6d:76:45:ea:23:c8:fa:03:63:4a:54:4f:a8:f3:b8:93:73: fc:47:b2:0b:35:56:52:90:a3:e3:70:d2:61:b4:88:34:98:58: 32:11:e1:a4:47:7d:e8:25:6d:37:c2:48:51:7e:99:a5:64:ff: 0c:0b:b5:75:a0:23:42:ee:14:62:34:6a:35:fd:ab:ad:4d:9e: a9:ce:dc:fa:60:ed:9f:7b:91:9e:e6:5b:e3:f9:68:aa:f9:07: 05:cd:7e:c2:b1:7c:e5:e6:36:10:f2:1d:fc:f1:d7:8c:32:09: db:bb:e1:f7:ed:7d:c4:71:70:d3:73:92:9c:75:5f:8d:c0:7c: ca:d2:74:0b:c2:c0:f5:9b:71:3c:2e:26:4a:62:54:61:f8:5a: 98:c5:06:f4:53:e8:cc:c7:39:e7:fc:ee:9f:64:15:11:80:93: 34:3a:3b:1d:48:05:d1:ce:81:c3:9f:1d:40:80:df:ec:be:81: 70:5d:ee:45:6b:07:4b:d5:12:19:26:72:c3:b4:fc:43:c4:60: 31:ce:01:34:de:aa:6c:05:e6:dd:47:76:2f:64:4a:8f:8c:eb: 40:00:bb:f2:be:07:83:93:1e:35:d0:ec:0f:30:44:67:af:c3: 7d:da:e6:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xKRF5vRYzutdrF4bnhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky NzkyNGIwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODJjYmZmM2E3NWIyNmFhMWVjNjc0ZWIwZjY3NjU4OWM1ZGNkYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J9AEE8Fia/ARJN1Hp+h/Rj4Bwx4 Ul4WbNRy13fZWRrtLepCTssz39UkeNdcub2butCAG7zj4i1Qbf43O4Rx6gz+rdXF rWirn70uw4bgdUEHj6NGaZzKN394Iviupp6+t+77YuRsHQURNJQO6JTCRl9WN6Dh dj7R3PhW7/+DHwjUuV/Z9DCpdoXLkwKgJS4zLe5KvxnSEMZW2xweVl2vk1X0Tkqo u6JCU5S+8LSRj5MHAckRaM3xdEkUby/C2fg9PeJNcZx1Z9nCrlompVe7fgrWnwI3 YUfCuqdATf1dYGR8HbxJkG3XFyuNoq4eqJYYOfsksR9EdpLq8C+2mRwzuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgsv/OnWyaqHsZ06w9nZYnF3NshMB8GA1UdIwQY MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt OTRjNmY3NDRkZTQ2LzEveUN5Xzg2ZGJKcW9leG5UckQyZGxpY1hjMnlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2 LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT+cMA0G CSqGSIb3DQEBCwUAA4IBAQAJUjym0CLbSt45zHM39OWFuk64bXZF6iPI+gNjSlRP qPO4k3P8R7ILNVZSkKPjcNJhtIg0mFgyEeGkR33oJW03wkhRfpmlZP8MC7V1oCNC 7hRiNGo1/autTZ6pztz6YO2fe5Ge5lvj+Wiq+QcFzX7CsXzl5jYQ8h388deMMgnb u+H37X3EcXDTc5KcdV+NwHzK0nQLwsD1m3E8LiZKYlRh+FqYxQb0U+jMxznn/O6f ZBURgJM0OjsdSAXRzoHDnx1AgN/svoFwXe5FawdL1RIZJnLDtPxDxGAxzgE03qps BebdR3YvZEqPjOtAALvyvgeDkx410OwPMERnr8N92ubf -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:33 2026 by rpki-client