This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/yd8JpikDeAGL1RyToXLtaBhLXs0.roa
File: yd8JpikDeAGL1RyToXLtaBhLXs0.roa (raw, json)
Hash identifier: WUNVyCqCAPZ5sr2QAi48VB7rmkpIF+duLJ03LhF4Vtc=
Subject key identifier: C9:DF:09:A6:29:03:78:01:8B:D5:1C:93:A1:72:ED:68:18:4B:5E:CD
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 019B79ECAF7B027A1074AC3B1BCE4F715421
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/yd8JpikDeAGL1RyToXLtaBhLXs0.roa
Signing time: Thu 01 Jan 2026 14:18:33 +0000
ROA not before: Thu 01 Jan 2026 14:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202316
IP address blocks: 185.63.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:af:7b:02:7a:10:74:ac:3b:1b:ce:4f:71:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Jan 1 14:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9df09a6290378018bd51c93a172ed68184b5ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:5e:dc:25:62:8a:e3:e2:a0:4e:42:7e:1d:
4d:0b:c2:e8:4b:27:3f:e9:db:e8:7a:b2:d2:56:bf:
c9:41:4c:ed:ad:75:48:d9:5f:27:92:7e:56:1a:37:
d1:64:e4:ca:d4:87:96:78:c7:37:da:1c:b0:8e:f8:
5f:8f:38:13:f6:7d:10:ca:74:ac:d7:63:37:e9:8b:
b4:50:fd:67:64:6e:75:a2:e4:f3:16:c3:2f:39:30:
8f:de:4c:bf:2f:60:46:2c:f9:98:da:e4:ae:56:e6:
00:18:d6:1f:5b:89:e6:3d:80:f5:47:62:de:b8:28:
16:24:77:be:12:4e:b3:48:22:3a:d6:7a:9f:72:e9:
7d:43:4a:79:6f:20:7d:59:44:85:ce:3c:43:76:46:
bf:64:0f:50:12:50:7c:be:b2:bb:4d:b5:5d:79:ee:
4d:b0:ee:b2:f2:f7:99:7d:0e:52:53:23:6a:85:84:
e5:05:45:c7:3d:e3:d7:f3:5d:2e:56:88:7c:d7:e0:
2c:60:24:ce:4e:7f:e4:5b:d2:9b:84:65:9f:f9:b1:
be:3e:28:2a:66:44:26:c4:4c:41:f3:1a:96:6d:5a:
6b:c2:76:64:15:f4:3c:df:bb:33:fe:47:a2:cb:1e:
09:2a:e0:69:8c:49:47:d4:2f:e1:48:99:49:d5:32:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:09:A6:29:03:78:01:8B:D5:1C:93:A1:72:ED:68:18:4B:5E:CD
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/yd8JpikDeAGL1RyToXLtaBhLXs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1d:b5:26:a2:47:bb:e2:bf:8d:ec:15:5e:b8:94:fc:6e:f9:
df:30:71:49:7b:3f:96:a2:8a:c0:ed:55:f4:4a:fd:e1:8f:53:
36:c3:0e:2f:62:0c:72:23:7c:53:94:f0:e2:59:c9:a0:9b:e7:
a7:2d:8d:50:42:6f:f7:b5:92:3f:f4:9d:6b:4e:de:f7:6e:df:
eb:b2:5b:5d:29:47:da:23:af:0b:29:2c:0f:9c:a3:3a:e9:70:
ed:94:10:df:99:d5:75:6d:b8:5f:73:19:00:b3:e7:cc:f2:dd:
f0:d8:0d:16:63:57:9a:2d:58:31:47:69:3e:d5:71:f3:69:21:
ae:7d:60:f6:59:7b:56:19:a6:a3:a5:5b:14:d9:49:fb:47:43:
8e:db:83:24:c9:71:76:24:73:63:ba:63:7c:f3:25:06:88:fc:
e0:48:8f:91:28:a2:45:a0:95:06:fb:68:84:6b:45:ae:45:35:
2d:3c:64:e3:6c:15:33:55:c3:eb:67:71:06:14:8a:0e:09:c9:
b3:38:57:03:4e:52:07:d7:75:43:3d:e9:6f:33:e2:fc:12:d3:
a5:12:ef:73:ab:54:8f:f0:80:6e:09:50:0a:ae:85:b2:f9:b0:
af:65:77:06:a3:d9:aa:70:4e:c6:87:ce:7a:3d:9c:c7:79:f6:
be:12:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:10:43 2026 by rpki-client