This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yxn4EFE9CI-54BdJUHUMTYEm8Gc.roa File: yxn4EFE9CI-54BdJUHUMTYEm8Gc.roa (raw, json) Hash identifier: 01B0ZQ2JLCq70Ye+AUDkOmPYuXvd6z9iY7rBXCA3Z0M= Subject key identifier: CB:19:F8:10:51:3D:08:8F:B9:E0:17:49:50:75:0C:4D:81:26:F0:67 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37C6611ECE45017397CB4754F69910 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yxn4EFE9CI-54BdJUHUMTYEm8Gc.roa Signing time: Fri 02 Jan 2026 10:19:02 +0000 ROA not before: Fri 02 Jan 2026 10:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207044 IP address blocks: 45.89.44.0/22 maxlen: 24 66.56.88.0/21 maxlen: 24 155.2.196.0/22 maxlen: 24 155.2.200.0/21 maxlen: 24 185.145.80.0/22 maxlen: 24 185.243.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c6:61:1e:ce:45:01:73:97:cb:47:54:f6:99:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb19f810513d088fb9e0174950750c4d8126f067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:cc:a8:0d:be:bc:05:63:2d:c0:ef:83:42: 12:14:14:09:81:9d:ae:63:c8:a4:e2:13:2c:0c:05: 6b:57:f2:3d:be:61:12:cc:56:65:4d:09:15:de:ef: a7:7d:f9:25:91:45:97:9d:18:35:b3:2b:b9:7a:3d: 93:f9:bd:42:89:06:7c:c4:49:3f:32:95:65:d6:b0: df:6d:07:7f:d7:83:d4:a3:43:08:09:0a:14:cb:14: 35:ba:94:c9:3f:5b:22:da:a1:78:75:71:13:1c:fd: bb:e2:5f:d5:31:33:65:5d:0f:46:a4:99:38:a6:5c: 87:3c:4e:4a:84:a1:29:cf:b7:ad:3d:4c:50:5e:c1: 7b:67:b9:86:25:a4:c6:d1:a5:14:d6:ff:61:72:10: 25:47:76:43:7b:e9:00:3d:0d:c7:0d:d9:80:f9:7d: 01:08:00:b6:83:80:2e:6b:2c:09:e3:3a:cc:ad:7d: ea:4c:08:66:1c:15:3b:b2:d9:04:40:ad:d0:9b:65: 05:38:b7:28:b0:91:c4:a9:61:98:51:f5:7e:04:02: 57:b0:05:3c:19:56:6d:57:6b:c8:a8:3b:c7:4c:38: 7d:49:74:99:a7:ca:25:c1:98:15:31:8e:11:34:9a: 61:31:83:5a:ed:43:7a:56:90:78:11:e9:ff:73:c0: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:19:F8:10:51:3D:08:8F:B9:E0:17:49:50:75:0C:4D:81:26:F0:67 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yxn4EFE9CI-54BdJUHUMTYEm8Gc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.44.0/22 66.56.88.0/21 155.2.196.0-155.2.207.255 185.145.80.0/22 185.243.140.0/22 Signature Algorithm: sha256WithRSAEncryption 66:db:34:fc:1c:aa:02:b0:b0:12:f2:45:89:84:14:e9:55:66: 50:7c:3f:7d:5a:b4:f0:c5:45:7b:50:17:8f:44:89:9a:67:b6: b6:07:d8:04:00:7a:84:92:aa:51:ec:54:ec:c3:12:fa:24:e5: 6b:81:f9:6d:a4:b6:ba:f4:0c:0e:c6:7e:56:fa:02:74:55:51: 76:6c:7d:96:53:1d:4f:37:17:4f:a2:90:d1:d1:d6:b2:64:20: 10:eb:4c:a1:d8:d0:8c:ca:17:1f:73:73:69:cf:68:d4:49:a1: 10:da:5f:82:3c:45:f3:86:96:59:80:06:4a:14:f9:b2:1e:0b: 4e:50:13:ea:a9:bf:eb:ec:f7:c9:f4:d4:81:96:a4:0a:b3:34: a0:6b:cf:f2:fa:fc:43:bc:d6:b5:06:a0:46:dc:37:30:d4:2a: c3:ee:34:ee:12:d6:9e:1e:b1:30:7f:17:f1:7d:f0:09:07:04: 86:c6:54:03:27:55:e7:8b:10:ad:df:60:13:c4:62:d8:e4:54: 82:c0:07:b4:56:01:38:9c:4f:99:ae:80:75:22:3c:96:46:c2: 95:03:7a:62:b9:02:4c:d2:2c:e1:63:a3:43:dc:6e:2d:1b:d1: 9a:f2:4d:cd:d7:36:c6:79:19:15:3c:49:58:d6:1c:03:09:f1: 44:8d:99:63 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt+N8ZhHs5FAXOXy0dU9pkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjE5ZjgxMDUxM2QwODhmYjllMDE3NDk1MDc1MGM0ZDgxMjZmMDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5TMqA2+vAVjLcDvg0ISFBQJgZ2u Y8ik4hMsDAVrV/I9vmESzFZlTQkV3u+nffklkUWXnRg1syu5ej2T+b1CiQZ8xEk/ MpVl1rDfbQd/14PUo0MICQoUyxQ1upTJP1si2qF4dXETHP274l/VMTNlXQ9GpJk4 plyHPE5KhKEpz7etPUxQXsF7Z7mGJaTG0aUU1v9hchAlR3ZDe+kAPQ3HDdmA+X0B CAC2g4AuaywJ4zrMrX3qTAhmHBU7stkEQK3Qm2UFOLcosJHEqWGYUfV+BAJXsAU8 GVZtV2vIqDvHTDh9SXSZp8olwZgVMY4RNJphMYNa7UN6VpB4Een/c8Cv3wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFMsZ+BBRPQiPueAXSVB1DE2BJvBnMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEveXhuNEVGRTlDSS01NEJkSlVIVU1UWUVtOEdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCLVksAwQD QjhYMAwDBAKbAsQDBASbAsADBAK5kVADBAK584wwDQYJKoZIhvcNAQELBQADggEB AGbbNPwcqgKwsBLyRYmEFOlVZlB8P31atPDFRXtQF49EiZpntrYH2AQAeoSSqlHs VOzDEvok5WuB+W2ktrr0DA7Gflb6AnRVUXZsfZZTHU83F0+ikNHR1rJkIBDrTKHY 0IzKFx9zc2nPaNRJoRDaX4I8RfOGllmABkoU+bIeC05QE+qpv+vs98n01IGWpAqz NKBrz/L6/EO81rUGoEbcNzDUKsPuNO4S1p4esTB/F/F98AkHBIbGVAMnVeeLEK3f YBPEYtjkVILAB7RWATicT5mugHUiPJZGwpUDemK5AkzSLOFjo0Pcbi0b0ZryTc3X NsZ5GRU8SVjWHAMJ8USNmWM= -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:12 2026 by rpki-client