This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/ylHeIsFZMO0gbIKdKEHYveA-bkE.roa File: ylHeIsFZMO0gbIKdKEHYveA-bkE.roa (raw, json) Hash identifier: Q+/UUAinchPplGksAEDnZd30sKpg597qJT9SsZ+CONo= Subject key identifier: CA:51:DE:22:C1:59:30:ED:20:6C:82:9D:28:41:D8:BD:E0:3E:6E:41 Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538 Certificate serial: 019B79ECBA416D30418C6B6C8A520D50BBB1 Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/ylHeIsFZMO0gbIKdKEHYveA-bkE.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51184 IP address blocks: 5.180.152.0/22 maxlen: 24 91.206.8.0/23 maxlen: 24 116.204.196.0/22 maxlen: 24 178.251.64.0/21 maxlen: 24 185.17.12.0/22 maxlen: 24 185.68.248.0/22 maxlen: 24 185.128.244.0/22 maxlen: 24 185.129.172.0/22 maxlen: 24 193.238.236.0/22 maxlen: 24 217.116.176.0/20 maxlen: 24 2001:1b98::/32 maxlen: 48 2a02:1748::/32 maxlen: 48 2a06:d180::/29 maxlen: 48 2a06:d500::/29 maxlen: 48 2a0c:ad40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ba:41:6d:30:41:8c:6b:6c:8a:52:0d:50:bb:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c77013e488a09c709b632246d9405da458c5538 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca51de22c15930ed206c829d2841d8bde03e6e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:08:fd:a6:0c:6b:bf:df:40:fc:ff:46:8b: ae:96:01:2d:2c:da:d9:a1:bd:91:42:48:82:20:a6: 15:e7:52:72:8c:67:75:91:a4:40:4d:a4:9b:2c:19: 84:5e:79:50:ca:18:ad:fd:dc:78:bc:a2:c5:0f:b4: 43:df:bc:f0:d0:f0:52:f3:14:29:ad:3b:06:ae:3d: 05:82:ef:24:8b:eb:8c:10:8a:7b:ce:9c:e2:39:1a: 75:0e:e1:a4:d6:e2:1c:99:f9:79:fa:11:bc:e9:10: fa:93:fb:50:28:a3:60:cc:61:98:a5:59:0f:4b:17: 3b:02:81:93:b4:6d:97:3b:51:0f:50:85:f6:2b:a0: 5d:a6:05:68:24:45:bb:36:72:b3:ae:a7:20:76:9f: 08:85:90:03:cb:18:81:1a:20:77:9e:d6:e8:b0:3e: 30:ec:3d:2d:e1:be:1f:59:c1:cd:64:38:97:de:df: c5:87:06:ad:10:9d:25:af:31:26:cc:b3:aa:fa:57: e8:d8:e2:aa:c9:57:37:52:bc:76:72:f0:41:c2:d9: ae:2b:82:67:07:b0:91:79:6d:c0:e8:45:fa:02:1a: 4b:d1:db:5b:ae:4d:40:41:bb:7b:76:9f:3a:5f:ba: 81:d0:6b:e4:46:9b:61:37:f3:e4:4f:0d:51:f8:af: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:51:DE:22:C1:59:30:ED:20:6C:82:9D:28:41:D8:BD:E0:3E:6E:41 X509v3 Authority Key Identifier: keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/ylHeIsFZMO0gbIKdKEHYveA-bkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.152.0/22 91.206.8.0/23 116.204.196.0/22 178.251.64.0/21 185.17.12.0/22 185.68.248.0/22 185.128.244.0/22 185.129.172.0/22 193.238.236.0/22 217.116.176.0/20 IPv6: 2001:1b98::/32 2a02:1748::/32 2a06:d180::/29 2a06:d500::/29 2a0c:ad40::/29 Signature Algorithm: sha256WithRSAEncryption b2:97:a1:4f:6d:e1:60:e7:1f:e3:8b:28:4a:c1:cf:ac:49:79: c1:8d:f0:fe:26:2d:bc:58:9e:fa:32:02:28:10:11:1d:e3:f7: c0:ec:1d:b1:df:2e:bb:76:fc:4f:1d:88:09:c6:56:f7:02:80: fb:91:42:23:0d:2d:59:77:c2:a0:ae:6a:3c:80:53:48:e0:cc: d6:78:68:b1:32:c3:95:cc:dc:a5:dd:76:d2:47:ff:3a:3c:de: d6:08:ae:f5:1c:f6:6d:4e:f9:67:6c:28:e5:6f:35:84:32:d5: a5:47:52:9a:4e:77:b9:43:52:ee:f4:27:c1:b4:b3:6f:e8:21: a2:bf:2e:fb:cf:10:6b:85:f0:a8:94:6e:b6:bd:30:26:ca:e3: 65:04:3f:09:ae:e3:0e:bf:5e:b1:b8:7f:34:93:e4:20:a3:af: 41:51:6e:eb:0c:ce:b2:c8:7f:9e:1e:41:27:4d:8a:79:74:dd: 3c:5d:47:c0:c1:8d:8b:b3:05:cf:b0:34:a6:14:c5:ba:55:9f: 41:d6:e7:4e:53:2d:0c:98:93:ca:ba:f1:c4:f0:e0:9c:da:aa: 9d:08:96:48:17:ed:21:20:d1:3b:76:6b:b7:69:33:f6:4a:f3: be:ea:36:84:e8:b7:a3:25:89:30:96:47:0c:3f:34:b3:40:a6: 1b:28:bf:eb -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZt57LpBbTBBjGtsilINULuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNzcwMTNlNDg4YTA5YzcwOWI2MzIyNDZkOTQwNWRhNDU4 YzU1MzgwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTUxZGUyMmMxNTkzMGVkMjA2YzgyOWQyODQxZDhiZGUwM2U2ZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxoI/aYMa7/fQPz/RouulgEtLNrZ ob2RQkiCIKYV51JyjGd1kaRATaSbLBmEXnlQyhit/dx4vKLFD7RD37zw0PBS8xQp rTsGrj0Fgu8ki+uMEIp7zpziORp1DuGk1uIcmfl5+hG86RD6k/tQKKNgzGGYpVkP Sxc7AoGTtG2XO1EPUIX2K6BdpgVoJEW7NnKzrqcgdp8IhZADyxiBGiB3ntbosD4w 7D0t4b4fWcHNZDiX3t/FhwatEJ0lrzEmzLOq+lfo2OKqyVc3Urx2cvBBwtmuK4Jn B7CReW3A6EX6AhpL0dtbrk1AQbt7dp86X7qB0GvkRpthN/PkTw1R+K+D+wIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFMpR3iLBWTDtIGyCnShB2L3gPm5BMB8GA1UdIwQY MBaAFIx3AT5IignHCbYyJG2UBdpFjFU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgt MDIxMjk1MzNhMzNkLzEveWxIZUlzRlpNTzBnYklLZEtFSFl2ZUEtYmtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgtMDIxMjk1MzNhMzNk LzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wQgQCAAEwPAMEAgW0mAME AVvOCAMEAnTMxAMEA7L7QAMEArkRDAMEArlE+AMEArmA9AMEArmBrAMEAsHu7AME BNl0sDApBAIAAjAjAwUAIAEbmAMFACoCF0gDBQMqBtGAAwUDKgbVAAMFAyoMrUAw DQYJKoZIhvcNAQELBQADggEBALKXoU9t4WDnH+OLKErBz6xJecGN8P4mLbxYnvoy AigQER3j98DsHbHfLrt2/E8diAnGVvcCgPuRQiMNLVl3wqCuajyAU0jgzNZ4aLEy w5XM3KXddtJH/zo83tYIrvUc9m1O+WdsKOVvNYQy1aVHUppOd7lDUu70J8G0s2/o IaK/LvvPEGuF8KiUbra9MCbK42UEPwmu4w6/XrG4fzST5CCjr0FRbusMzrLIf54e QSdNinl03TxdR8DBjYuzBc+wNKYUxbpVn0HW505TLQyYk8q68cTw4Jzaqp0IlkgX 7SEg0Tt2a7dpM/ZK877qNoTot6MliTCWRww/NLNAphsov+s= -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:50 2026 by rpki-client