This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/YpSZhok7D_iJk1qiU7Mu_hY8E3Q.roa File: YpSZhok7D_iJk1qiU7Mu_hY8E3Q.roa (raw, json) Hash identifier: NxSxMzYasyCjB5BO8JzAFcBo/KBnMoapQAl4A8Q+rNU= Subject key identifier: 62:94:99:86:89:3B:0F:F8:89:93:5A:A2:53:B3:2E:FE:16:3C:13:74 Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809 Certificate serial: 019B7EA4A767C29A181B19F30E2303A174EE Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/YpSZhok7D_iJk1qiU7Mu_hY8E3Q.roa Signing time: Fri 02 Jan 2026 12:17:58 +0000 ROA not before: Fri 02 Jan 2026 12:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200607 IP address blocks: 185.101.180.0/24 maxlen: 24 185.101.181.0/24 maxlen: 24 185.101.182.0/24 maxlen: 24 185.101.183.0/24 maxlen: 24 2a06:2040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:a7:67:c2:9a:18:1b:19:f3:0e:23:03:a1:74:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809 Validity Not Before: Jan 2 12:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62949986893b0ff889935aa253b32efe163c1374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5b:6d:ea:2e:8e:86:24:04:a6:dd:c5:4f:8e: ad:cc:02:a0:7e:97:0d:da:30:47:8b:20:f1:bc:9e: 05:31:b6:96:bd:16:41:7e:92:be:66:7e:85:66:12: 2c:7c:cd:e0:4e:44:f4:d4:59:56:8c:da:da:d7:ee: 7f:76:41:81:be:7a:e3:6c:9d:21:4e:10:62:76:7c: 4f:6a:9f:5f:2f:77:68:28:23:c2:65:79:91:86:e5: b6:62:05:81:d1:92:65:74:e8:b2:95:91:e8:d2:d3: f0:8a:b2:4a:76:3f:6a:a1:d1:d0:f2:32:01:56:aa: 52:0b:da:aa:f0:36:eb:c5:a2:da:e4:cc:3c:b9:fe: 4b:29:ea:fc:3e:4e:86:3d:da:43:7c:32:60:8d:e5: 10:a4:79:c1:42:91:91:bc:32:de:61:4a:3c:7f:bb: 13:85:17:15:d1:e9:b6:97:f0:68:68:90:4e:fe:4c: 43:aa:9e:30:9d:74:49:bd:ee:16:ef:f9:3c:14:2b: 51:a6:0d:08:eb:87:eb:a2:86:4d:37:37:74:4f:bd: 63:ef:3f:91:44:b0:9f:66:cb:8a:a1:78:eb:32:26: 7d:cb:05:5d:b6:a5:ed:4a:2c:2e:79:3d:25:a1:9e: f5:37:10:70:69:32:21:af:8e:fb:06:16:62:ab:c4: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:94:99:86:89:3B:0F:F8:89:93:5A:A2:53:B3:2E:FE:16:3C:13:74 X509v3 Authority Key Identifier: keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/YpSZhok7D_iJk1qiU7Mu_hY8E3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.180.0/22 IPv6: 2a06:2040::/29 Signature Algorithm: sha256WithRSAEncryption 6f:23:25:bc:cd:98:04:4e:48:08:73:af:c3:f7:c9:cb:4c:d7: 0d:7b:e2:66:75:5d:19:46:b8:fc:85:36:4c:40:4d:9b:2b:4e: 2c:52:72:db:35:64:c1:50:bb:20:cc:53:95:9d:a9:af:d7:0e: 96:1a:76:98:44:24:f6:2f:85:40:7d:c0:87:c1:43:d2:30:df: f4:32:c9:da:de:bd:3d:f4:21:b9:1f:75:67:84:b6:79:74:b6: a2:cb:d7:fd:2c:83:81:c6:cd:c5:e8:d3:80:14:74:13:d9:8f: cb:9d:68:37:db:16:79:9b:2c:45:9c:9b:76:41:92:e9:51:39: fb:3c:39:26:2a:1e:eb:77:d0:75:19:9f:d7:ef:92:7d:35:74: 30:58:94:14:19:b4:56:22:25:fe:73:f0:46:61:dd:a2:31:ab: 38:d6:70:a8:97:ce:10:71:bd:79:64:d4:e3:e0:c1:1b:71:d2: 6a:3c:8f:57:cb:fd:02:cf:b4:b7:25:a1:e2:5a:a8:ff:4f:68: 5c:85:df:39:27:49:64:ca:f5:2e:00:43:7b:07:76:e9:ab:8b: 4e:95:d5:e8:f7:30:86:a3:78:59:cf:d7:03:9f:a8:68:c0:75: a0:3b:da:f4:cb:f1:2a:92:01:12:a8:b6:c0:de:60:a2:23:37: 8a:80:e7:8b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pKdnwpoYGxnzDiMDoXTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2 NWE4MDkwHhcNMjYwMTAyMTIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjk0OTk4Njg5M2IwZmY4ODk5MzVhYTI1M2IzMmVmZTE2M2MxMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vtt6i6OhiQEpt3FT46tzAKgfpcN 2jBHiyDxvJ4FMbaWvRZBfpK+Zn6FZhIsfM3gTkT01FlWjNra1+5/dkGBvnrjbJ0h ThBidnxPap9fL3doKCPCZXmRhuW2YgWB0ZJldOiylZHo0tPwirJKdj9qodHQ8jIB VqpSC9qq8DbrxaLa5Mw8uf5LKer8Pk6GPdpDfDJgjeUQpHnBQpGRvDLeYUo8f7sT hRcV0em2l/BoaJBO/kxDqp4wnXRJve4W7/k8FCtRpg0I64frooZNNzd0T71j7z+R RLCfZsuKoXjrMiZ9ywVdtqXtSiwueT0loZ71NxBwaTIhr477BhZiq8TTkQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGKUmYaJOw/4iZNaolOzLv4WPBN0MB8GA1UdIwQY MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt YmU5MGIwZmQxZjc4LzEvWXBTWmhvazdEX2lKazFxaVU3TXVfaFk4RTNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4 LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWW0MA0E AgACMAcDBQMqBiBAMA0GCSqGSIb3DQEBCwUAA4IBAQBvIyW8zZgETkgIc6/D98nL TNcNe+JmdV0ZRrj8hTZMQE2bK04sUnLbNWTBULsgzFOVnamv1w6WGnaYRCT2L4VA fcCHwUPSMN/0Msna3r099CG5H3VnhLZ5dLaiy9f9LIOBxs3F6NOAFHQT2Y/LnWg3 2xZ5myxFnJt2QZLpUTn7PDkmKh7rd9B1GZ/X75J9NXQwWJQUGbRWIiX+c/BGYd2i Mas41nCol84Qcb15ZNTj4MEbcdJqPI9Xy/0Cz7S3JaHiWqj/T2hchd85J0lkyvUu AEN7B3bpq4tOldXo9zCGo3hZz9cDn6howHWgO9r0y/EqkgESqLbA3mCiIzeKgOeL -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:50 2026 by rpki-client