This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/yt_7T50IANQCtorHb2tBazjD69g.roa File: yt_7T50IANQCtorHb2tBazjD69g.roa (raw, json) Hash identifier: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU= Subject key identifier: CA:DF:FB:4F:9D:08:00:D4:02:B6:8A:C7:6F:6B:41:6B:38:C3:EB:D8 Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa Certificate serial: 019B7758D19E2FEB12D94BBE75E5B56B9834 Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/yt_7T50IANQCtorHb2tBazjD69g.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 77.245.96.0/20 maxlen: 20 93.185.64.0/20 maxlen: 20 95.141.128.0/20 maxlen: 20 217.196.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d1:9e:2f:eb:12:d9:4b:be:75:e5:b5:6b:98:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cadffb4f9d0800d402b68ac76f6b416b38c3ebd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:bd:eb:6a:71:ef:6a:71:37:d2:5a:a3:19: 41:99:51:a7:22:93:d1:7a:59:6a:e4:49:12:22:0a: ca:d4:38:69:c1:5b:13:98:ef:a9:02:d5:b8:5a:08: ed:75:b4:98:d6:ba:a7:4a:a6:56:ae:66:7d:20:50: c6:8c:4a:ec:a9:0e:46:05:bc:35:41:e2:51:3b:0a: b3:0c:8d:8a:3c:11:01:82:9b:3a:6d:bb:5d:dd:f1: e0:9b:e5:f5:f1:63:37:fa:52:8a:75:fd:79:9d:45: 32:8f:dc:a0:08:fe:03:36:99:86:77:ba:03:1b:a0: 30:9f:b2:11:75:39:06:de:32:e0:5c:a1:46:60:cc: c5:07:5d:49:f2:19:5b:f2:b9:f1:50:1a:9c:f3:72: 87:0a:32:d4:cb:74:c1:60:fc:35:af:0c:bc:36:1a: 06:7d:fe:bf:3e:db:e0:57:f2:60:92:e3:2d:f9:a3: cb:62:cc:d9:56:5a:63:ad:b9:80:76:bb:e6:b6:50: a8:c5:4a:ed:6c:14:6b:83:ca:f3:ff:f4:3f:35:b2: 63:36:7b:0f:f1:ed:26:62:ef:fe:8b:1d:aa:94:5d: d8:65:42:93:39:1c:66:03:55:ce:70:82:20:6a:9f: e6:24:35:70:90:c2:b5:fc:35:2b:d1:11:be:0e:85: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DF:FB:4F:9D:08:00:D4:02:B6:8A:C7:6F:6B:41:6B:38:C3:EB:D8 X509v3 Authority Key Identifier: keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/yt_7T50IANQCtorHb2tBazjD69g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.245.96.0/20 93.185.64.0/20 95.141.128.0/20 217.196.16.0/20 Signature Algorithm: sha256WithRSAEncryption 81:5f:86:14:81:d4:72:5c:14:47:ea:80:b0:31:5f:6d:2e:db: bb:07:1b:6b:b0:28:27:72:d1:d8:5a:41:9a:69:66:50:e5:f3: 3a:f5:43:09:74:df:95:8e:da:7d:d1:14:2e:55:96:05:4c:1b: 15:38:1e:f8:bc:79:7d:21:27:ce:c3:7e:75:43:bb:bc:31:0d: 05:f2:45:5c:5f:23:9f:3d:41:ad:97:64:f5:3d:70:83:ec:c5: 0b:23:a7:3a:b9:8a:8f:2a:67:cc:b5:fc:e8:a5:44:18:0d:fb: 5a:6e:40:e6:dc:04:b7:6d:72:77:7b:75:60:40:fd:c2:a9:55: 9e:64:90:0e:0d:fc:33:05:61:72:65:cf:0e:e5:2c:32:7b:a0: cc:8d:be:3c:7a:ff:d6:81:0e:ee:88:69:f8:67:26:ea:ce:8e: 52:17:5a:41:50:f3:6c:90:c4:c9:ec:9d:6f:d2:83:ec:a6:8d: c3:51:6e:41:4a:71:45:e1:13:4c:be:8f:bf:91:f9:a0:b2:72: 54:f8:36:50:73:28:2c:3b:71:62:41:b7:9b:09:b2:fe:0e:5d: 7c:64:79:82:61:82:02:9a:58:34:c3:39:c2:c4:b8:5a:ce:69: 34:8a:a9:99:18:90:28:2e:e0:8f:23:0f:95:ac:19:3f:37:d2: ec:4c:76:f2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WNGeL+sS2Uu+deW1a5g0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh YmE5ZmEwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWRmZmI0ZjlkMDgwMGQ0MDJiNjhhYzc2ZjZiNDE2YjM4YzNlYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRC962px72pxN9JaoxlBmVGnIpPR ellq5EkSIgrK1DhpwVsTmO+pAtW4WgjtdbSY1rqnSqZWrmZ9IFDGjErsqQ5GBbw1 QeJROwqzDI2KPBEBgps6bbtd3fHgm+X18WM3+lKKdf15nUUyj9ygCP4DNpmGd7oD G6Awn7IRdTkG3jLgXKFGYMzFB11J8hlb8rnxUBqc83KHCjLUy3TBYPw1rwy8NhoG ff6/PtvgV/JgkuMt+aPLYszZVlpjrbmAdrvmtlCoxUrtbBRrg8rz//Q/NbJjNnsP 8e0mYu/+ix2qlF3YZUKTORxmA1XOcIIgap/mJDVwkMK1/DUr0RG+DoVA6wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMrf+0+dCADUAraKx29rQWs4w+vYMB8GA1UdIwQY MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt NDM4NDNjMmU5NDNiLzEveXRfN1Q1MElBTlFDdG9ySGIydEJhempENjlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQETfVgAwQE XblAAwQEX42AAwQE2cQQMA0GCSqGSIb3DQEBCwUAA4IBAQCBX4YUgdRyXBRH6oCw MV9tLtu7BxtrsCgnctHYWkGaaWZQ5fM69UMJdN+Vjtp90RQuVZYFTBsVOB74vHl9 ISfOw351Q7u8MQ0F8kVcXyOfPUGtl2T1PXCD7MULI6c6uYqPKmfMtfzopUQYDfta bkDm3AS3bXJ3e3VgQP3CqVWeZJAODfwzBWFyZc8O5Swye6DMjb48ev/WgQ7uiGn4 Zybqzo5SF1pBUPNskMTJ7J1v0oPspo3DUW5BSnFF4RNMvo+/kfmgsnJU+DZQcygs O3FiQbebCbL+Dl18ZHmCYYICmlg0wznCxLhazmk0iqmZGJAoLuCPIw+VrBk/N9Ls THby -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:05 2026 by rpki-client