This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa File: ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa (raw, json) Hash identifier: eJsgTWOdAhxNxeLst/bLBwWiWh2T18RO5lJ0bMj06p8= Subject key identifier: C9:BB:C1:77:32:FB:58:E1:E8:D9:14:C4:A4:A3:C1:24:37:DB:AB:45 Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Certificate serial: 019B77C68206AD093B99848E8BD338FBC503 Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 46.229.243.0/24 maxlen: 24 46.229.251.0/24 maxlen: 24 46.229.253.0/24 maxlen: 24 76.164.200.0/24 maxlen: 24 76.164.201.0/24 maxlen: 24 76.164.202.0/24 maxlen: 24 76.164.203.0/24 maxlen: 24 77.74.123.0/24 maxlen: 24 83.229.61.0/24 maxlen: 24 85.204.107.0/24 maxlen: 24 92.42.100.0/24 maxlen: 24 95.133.244.0/24 maxlen: 24 95.133.245.0/24 maxlen: 24 103.112.171.0/24 maxlen: 24 103.121.48.0/24 maxlen: 24 103.121.49.0/24 maxlen: 24 103.126.50.0/24 maxlen: 24 103.126.51.0/24 maxlen: 24 103.244.144.0/24 maxlen: 24 103.244.145.0/24 maxlen: 24 103.246.248.0/24 maxlen: 24 162.249.124.0/24 maxlen: 24 162.249.125.0/24 maxlen: 24 162.249.126.0/24 maxlen: 24 162.249.127.0/24 maxlen: 24 185.104.63.0/24 maxlen: 24 195.74.93.0/24 maxlen: 24 203.14.32.0/24 maxlen: 24 203.25.108.0/24 maxlen: 24 205.237.109.0/24 maxlen: 24 205.237.110.0/24 maxlen: 24 205.237.111.0/24 maxlen: 24 2a12:3200::/36 maxlen: 36 2a12:3200:1000::/36 maxlen: 36 2a12:3200:2000::/36 maxlen: 36 2a12:3200:3000::/36 maxlen: 36 2a12:3200:4000::/36 maxlen: 36 2a12:3200:5000::/36 maxlen: 36 2a12:3200:6000::/36 maxlen: 36 2a12:3200:7000::/36 maxlen: 36 2a12:3200:8000::/36 maxlen: 36 2a12:3200:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:82:06:ad:09:3b:99:84:8e:8b:d3:38:fb:c5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9bbc17732fb58e1e8d914c4a4a3c12437dbab45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:8d:bc:5a:49:45:e2:81:e3:53:ea:41:f5: 04:f7:b0:e9:fe:56:a7:70:a1:f0:ec:81:5e:f5:94: d2:ad:ee:af:af:fa:4e:c7:85:99:46:ea:48:fa:ce: 8a:24:ad:5d:36:2f:d6:3a:23:91:ca:67:0c:c3:b7: 6a:79:3a:5c:68:a4:b5:8b:16:2b:4b:81:7b:c3:12: 9b:2e:da:31:57:e4:cf:66:aa:bc:61:79:85:59:2a: 6e:75:4f:6a:e5:8d:04:f3:ea:ee:16:79:5d:39:23: 03:a6:23:59:57:d0:fc:37:2e:73:1b:21:7c:0e:84: a5:dc:44:7b:af:e7:82:84:45:d7:4b:ce:23:b0:7d: 19:dd:e2:3b:89:7f:bb:a4:0a:fd:eb:47:f0:90:36: 2e:57:5d:45:3a:7d:49:67:82:71:78:ee:4d:ad:18: 59:56:67:93:d8:65:48:e5:6b:2f:05:9e:f8:90:c9: 1f:2f:9b:14:09:15:7a:d5:ee:fd:1b:cd:ca:2e:a6: da:42:05:1b:b9:e8:95:99:e9:3c:ad:f1:39:c6:d1: 71:a4:5f:2c:fa:82:1a:3d:a1:be:4b:6c:62:40:ff: 59:94:21:26:60:8f:c4:80:32:1f:9b:24:1d:10:3d: 13:ff:89:86:0d:f8:c1:e0:f3:f1:c2:55:0e:6c:b4: 4f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BB:C1:77:32:FB:58:E1:E8:D9:14:C4:A4:A3:C1:24:37:DB:AB:45 X509v3 Authority Key Identifier: keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.243.0/24 46.229.251.0/24 46.229.253.0/24 76.164.200.0/22 77.74.123.0/24 83.229.61.0/24 85.204.107.0/24 92.42.100.0/24 95.133.244.0/23 103.112.171.0/24 103.121.48.0/23 103.126.50.0/23 103.244.144.0/23 103.246.248.0/24 162.249.124.0/22 185.104.63.0/24 195.74.93.0/24 203.14.32.0/24 203.25.108.0/24 205.237.109.0-205.237.111.255 IPv6: 2a12:3200::-2a12:3200:9000:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 16:f5:9d:55:5e:32:c5:f6:84:1c:b9:38:c2:b1:36:96:00:cc: 41:97:7d:c8:80:7f:b5:40:a7:99:28:a3:62:ae:d2:f5:f4:4a: 4e:13:72:a4:a8:72:7f:24:47:81:f6:24:3e:fa:d3:ef:6a:20: 7d:7e:c4:53:f6:f1:22:7a:7a:4f:f3:02:6b:c2:a6:b3:74:d6: 3a:62:77:02:0c:85:89:e8:7d:6e:50:ed:8d:43:52:ca:8b:82: 21:cb:b5:85:95:3c:1c:21:9f:5b:28:33:b6:1e:f4:36:bf:21: 5f:55:b1:41:20:08:9a:96:ce:ee:c5:a4:96:e1:64:5b:fd:bd: f5:8c:d5:47:d9:d9:a2:8f:a8:c3:50:8f:98:8d:5c:e0:1e:54: 09:54:a3:5a:db:fb:d6:5f:1f:d7:95:bd:e7:a2:dd:08:b0:4f: 81:31:ac:8e:41:1e:a4:8e:92:61:e9:6a:b1:56:8b:07:ef:c0: d1:10:c0:ad:ca:67:cf:3b:7b:0a:e7:86:a8:07:11:98:28:8d: 40:95:65:60:be:2c:96:d1:b0:5d:c1:22:2b:8b:5d:1c:d4:ae: 5b:c1:6b:25:58:fa:8f:9b:6f:df:93:75:c4:85:dd:40:ca:7d: 9c:8b:0f:d2:89:78:fb:cf:01:00:ce:94:c3:fe:89:7a:b7:7d: 73:3c:3a:12 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt3xoIGrQk7mYSOi9M4+8UDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1 MWRlZDAwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWJiYzE3NzMyZmI1OGUxZThkOTE0YzRhNGEzYzEyNDM3ZGJhYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySiNvFpJReKB41PqQfUE97Dp/lan cKHw7IFe9ZTSre6vr/pOx4WZRupI+s6KJK1dNi/WOiORymcMw7dqeTpcaKS1ixYr S4F7wxKbLtoxV+TPZqq8YXmFWSpudU9q5Y0E8+ruFnldOSMDpiNZV9D8Ny5zGyF8 DoSl3ER7r+eChEXXS84jsH0Z3eI7iX+7pAr960fwkDYuV11FOn1JZ4JxeO5NrRhZ VmeT2GVI5WsvBZ74kMkfL5sUCRV61e79G83KLqbaQgUbueiVmek8rfE5xtFxpF8s +oIaPaG+S2xiQP9ZlCEmYI/EgDIfmyQdED0T/4mGDfjB4PPxwlUObLRPwQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFMm7wXcy+1jh6NkUxKSjwSQ326tFMB8GA1UdIwQY MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt MWNhZGE2ZThiMWE5LzEveWJ2QmR6TDdXT0hvMlJURXBLUEJKRGZicTBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5 LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG2BggrBgEFBQcBBwEB/wSBpjCBozCBhwQCAAEwgYADBAAu 5fMDBAAu5fsDBAAu5f0DBAJMpMgDBABNSnsDBABT5T0DBABVzGsDBABcKmQDBAFf hfQDBABncKsDBAFneTADBAFnfjIDBAFn9JADBABn9vgDBAKi+XwDBAC5aD8DBADD Sl0DBADLDiADBADLGWwwDAMEAM3tbQMEBM3tYDAXBAIAAjARMA8DBAEqEjIDBwAq EjIAkAAwDQYJKoZIhvcNAQELBQADggEBABb1nVVeMsX2hBy5OMKxNpYAzEGXfciA f7VAp5koo2Ku0vX0Sk4TcqSocn8kR4H2JD760+9qIH1+xFP28SJ6ek/zAmvCprN0 1jpidwIMhYnofW5Q7Y1DUsqLgiHLtYWVPBwhn1soM7Ye9Da/IV9VsUEgCJqWzu7F pJbhZFv9vfWM1UfZ2aKPqMNQj5iNXOAeVAlUo1rb+9ZfH9eVveei3QiwT4ExrI5B HqSOkmHparFWiwfvwNEQwK3KZ887ewrnhqgHEZgojUCVZWC+LJbRsF3BIiuLXRzU rlvBayVY+o+bb9+TdcSF3UDKfZyLD9KJePvPAQDOlMP+iXq3fXM8OhI= -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:56 2026 by rpki-client