This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa File: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (raw, json) Hash identifier: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM= Subject key identifier: C9:C7:64:AB:02:94:66:BA:C0:A8:B1:EA:91:73:7B:52:94:21:85:C6 Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d Certificate serial: 019B7AC90BC0D1AAE914E112F44CA40E24C1 Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa Signing time: Thu 01 Jan 2026 18:19:14 +0000 ROA not before: Thu 01 Jan 2026 18:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202891 IP address blocks: 46.245.152.0/21 maxlen: 24 85.117.160.0/19 maxlen: 24 85.117.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0b:c0:d1:aa:e9:14:e1:12:f4:4c:a4:0e:24:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d Validity Not Before: Jan 1 18:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9c764ab029466bac0a8b1ea91737b52942185c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:69:5c:bb:2e:e2:73:49:ed:fb:c0:36:c0: c2:e4:f7:39:3b:cd:81:af:f3:ae:c0:fb:be:9c:42: 0a:57:b3:bd:6a:db:11:cc:d7:87:d3:a0:f3:4b:e8: 31:e8:13:d1:d0:b5:8e:bb:0c:71:3c:7a:00:03:44: 02:5d:82:e2:2f:c9:8c:66:fd:44:f9:9e:94:31:33: 79:d8:94:c1:f0:98:6b:b7:96:f6:71:55:b3:77:5a: dc:a2:63:74:73:47:cd:ba:ce:0f:ee:21:7b:03:04: 20:da:0a:7e:49:90:2d:3f:e4:8c:c4:db:b0:b8:ad: 5d:bf:69:8c:e8:8b:d9:9e:83:b3:99:91:1d:78:45: 53:d0:ab:a1:62:50:5c:ef:22:12:ae:c7:d5:a1:b8: e6:7c:7a:98:93:d8:74:30:ef:fb:08:cc:84:67:c5: 73:be:71:2c:34:d2:83:7f:1c:6c:0d:d6:25:a0:3f: 6e:b0:91:ea:90:e4:01:bc:16:ce:c8:8a:47:38:c5: 12:4b:48:b0:af:91:75:8c:80:48:fa:a1:5c:a5:69: 3b:d2:f0:ce:a3:72:f4:0f:70:64:95:dd:7c:fb:f9: fd:5b:46:a5:51:8a:0c:e0:c0:2e:5a:c4:bf:38:a6: 5b:fc:e4:33:f3:a8:ef:01:66:f9:49:45:49:35:5d: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C7:64:AB:02:94:66:BA:C0:A8:B1:EA:91:73:7B:52:94:21:85:C6 X509v3 Authority Key Identifier: keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.152.0/21 85.117.160.0-85.117.223.255 Signature Algorithm: sha256WithRSAEncryption 99:f2:22:8a:aa:49:de:10:4f:08:f4:01:23:ac:83:38:7a:4d: d5:54:6d:e4:fd:5d:15:19:97:48:75:0d:84:69:e5:75:2a:b6: 0c:47:1e:3d:cf:50:9e:47:1b:56:97:a9:62:7d:f6:73:d7:67: c0:6c:d5:40:e8:d5:a0:00:1a:68:c7:af:dc:47:1d:52:51:e7: cb:40:ef:5b:0d:1b:9b:35:df:f2:c6:6a:41:40:0f:41:bb:c4: fa:59:c0:36:bc:ce:da:28:a2:bb:0c:f5:f0:57:c3:93:d8:9e: 24:3d:0c:db:44:e6:1d:fd:fa:2c:f6:47:72:83:fa:5e:dc:09: ab:81:66:b0:df:9f:e1:b0:bf:8c:91:9a:f1:80:e4:23:97:54: 4d:18:df:8c:6a:65:c0:6b:a9:d7:ea:45:c2:ab:5a:1c:8b:9d: 8c:ed:7c:15:0c:7e:5f:ab:16:b8:ac:b8:7c:2b:81:ff:bb:38: 4d:f9:25:76:17:6b:1a:5f:a0:fd:13:3e:7f:5c:5e:61:7e:f2: 32:58:ff:d1:5c:f1:ed:e3:b9:e5:09:02:9b:90:c0:db:ce:1f: 81:ad:e6:c1:ef:77:c6:4c:c2:eb:9d:0d:c8:77:87:1e:45:c0: 7e:57:c9:68:29:bd:b5:8e:33:65:66:fc:27:75:7b:38:c8:94: 9f:9d:66:fa -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6yQvA0arpFOES9EykDiTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMmE4YWMzMDI4YjcwOTExY2I2MTExZmZkYTNhMmVmZTU1 ODg2MmQwHhcNMjYwMTAxMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWM3NjRhYjAyOTQ2NmJhYzBhOGIxZWE5MTczN2I1Mjk0MjE4NWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUFpXLsu4nNJ7fvANsDC5Pc5O82B r/OuwPu+nEIKV7O9atsRzNeH06DzS+gx6BPR0LWOuwxxPHoAA0QCXYLiL8mMZv1E +Z6UMTN52JTB8Jhrt5b2cVWzd1rcomN0c0fNus4P7iF7AwQg2gp+SZAtP+SMxNuw uK1dv2mM6IvZnoOzmZEdeEVT0KuhYlBc7yISrsfVobjmfHqYk9h0MO/7CMyEZ8Vz vnEsNNKDfxxsDdYloD9usJHqkOQBvBbOyIpHOMUSS0iwr5F1jIBI+qFcpWk70vDO o3L0D3Bkld18+/n9W0alUYoM4MAuWsS/OKZb/OQz86jvAWb5SUVJNV3hLQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMnHZKsClGa6wKix6pFze1KUIYXGMB8GA1UdIwQY MBaAFHsqisMCi3CRHLYRH/2jou/lWIYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEt ODU4ZGQxYjE2MTdmLzEveWNka3F3S1VacnJBcUxIcWtYTjdVcFFoaGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEtODU4ZGQxYjE2MTdm LzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDLvWYMAwD BAVVdaADBAVVdcAwDQYJKoZIhvcNAQELBQADggEBAJnyIoqqSd4QTwj0ASOsgzh6 TdVUbeT9XRUZl0h1DYRp5XUqtgxHHj3PUJ5HG1aXqWJ99nPXZ8Bs1UDo1aAAGmjH r9xHHVJR58tA71sNG5s13/LGakFAD0G7xPpZwDa8ztooorsM9fBXw5PYniQ9DNtE 5h39+iz2R3KD+l7cCauBZrDfn+Gwv4yRmvGA5COXVE0Y34xqZcBrqdfqRcKrWhyL nYztfBUMfl+rFrisuHwrgf+7OE35JXYXaxpfoP0TPn9cXmF+8jJY/9Fc8e3jueUJ ApuQwNvOH4Gt5sHvd8ZMwuudDch3hx5FwH5XyWgpvbWOM2Vm/Cd1ezjIlJ+dZvo= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:22 2026 by rpki-client