This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yyHCGsXDUPnVtBHPRPboM31Xff4.roa File: yyHCGsXDUPnVtBHPRPboM31Xff4.roa (raw, json) Hash identifier: Jc6WR4RpUbLk+U0vWhrAX/MYvjvy+viiWMrZKy3AV4A= Subject key identifier: CB:21:C2:1A:C5:C3:50:F9:D5:B4:11:CF:44:F6:E8:33:7D:57:7D:FE Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758B757B7AD7209D6A09606C120351F Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yyHCGsXDUPnVtBHPRPboM31Xff4.roa Signing time: Thu 01 Jan 2026 02:17:41 +0000 ROA not before: Thu 01 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209474 IP address blocks: 185.254.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b7:57:b7:ad:72:09:d6:a0:96:06:c1:20:35:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb21c21ac5c350f9d5b411cf44f6e8337d577dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:ab:ee:50:84:e3:84:78:1f:5e:b2:19:84: ce:a5:25:80:4e:2f:ef:6d:74:18:dc:d0:2b:c8:16: 88:1b:5a:04:45:a1:f2:fd:ea:f8:3c:c4:c8:ec:ed: 9b:2b:bc:1d:59:eb:9b:65:75:f9:a6:2a:36:55:1a: e2:e6:b5:f9:11:ca:55:f1:6d:57:7c:d5:e7:34:b4: ae:f7:f8:70:fa:25:83:91:2c:e5:54:6f:db:89:47: 03:9c:be:d8:77:5d:0a:14:5d:82:43:c4:f0:60:04: d5:1b:d4:dc:76:b6:99:8d:fe:67:e9:26:e3:db:3b: 76:3b:2c:03:d2:bc:01:c8:6e:a7:d8:5f:32:2e:83: c4:ae:98:7d:35:37:27:d3:b1:27:99:35:81:66:eb: 7c:f8:4d:a0:df:ed:ee:c9:e8:eb:69:7e:60:68:72: d6:98:54:0f:95:e7:ba:f6:72:db:e3:33:35:70:a6: 4a:d7:81:7e:72:b3:25:00:bc:4a:d6:90:33:e7:da: d3:75:1a:f3:39:42:96:ef:8b:dc:2c:bb:a9:51:10: 98:7c:d0:1c:54:23:14:98:d1:32:11:98:ba:82:c4: 55:73:fa:92:d2:9d:21:d2:78:2c:8f:9d:ba:17:5f: 0f:bc:b1:bf:d3:2a:9f:74:84:d0:ee:01:f4:94:6f: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:21:C2:1A:C5:C3:50:F9:D5:B4:11:CF:44:F6:E8:33:7D:57:7D:FE X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yyHCGsXDUPnVtBHPRPboM31Xff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.239.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b6:a9:21:e2:c2:a0:89:0c:ae:02:af:fc:dc:bf:4a:d0:50: e3:ce:ec:d5:10:e6:36:d9:eb:7f:86:02:dc:54:3d:01:30:f3: 75:30:73:89:5e:23:c6:aa:c0:17:8d:22:2f:b2:02:fb:c1:2d: cd:e9:c3:01:8f:bc:59:04:1f:d7:03:0a:c1:51:e6:e4:e6:66: 9b:f0:73:43:92:2f:90:5b:34:34:56:83:31:ea:da:25:76:e2: 05:88:f8:7e:b7:17:03:6a:8d:41:f1:45:84:98:7e:81:66:ab: fc:aa:60:06:44:f1:d9:da:f8:37:01:d1:f4:95:04:5e:36:96: 40:c3:b8:02:32:34:87:10:72:90:2d:ff:03:64:57:fa:2e:f6: a1:4f:59:e9:bb:65:fd:d5:eb:27:8c:bc:50:3b:53:4a:c6:c6: c9:71:12:7d:08:92:59:f7:54:9a:92:e0:ca:78:73:0e:21:74: 1b:9d:c8:10:27:63:8c:4f:52:c4:70:bf:e2:c2:22:1d:7a:d5: 79:0d:44:3b:da:15:dc:be:50:65:27:38:41:7c:c1:8d:2c:49: 32:20:f5:0d:96:df:25:7b:7d:47:64:f5:83:f8:fc:12:00:81: ea:7f:e5:20:40:37:40:94:26:a2:da:1e:a6:d5:17:f0:10:bd: b2:c7:98:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLdXt61yCdaglgbBIDUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjIxYzIxYWM1YzM1MGY5ZDViNDExY2Y0NGY2ZTgzMzdkNTc3ZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHCr7lCE44R4H16yGYTOpSWATi/v bXQY3NAryBaIG1oERaHy/er4PMTI7O2bK7wdWeubZXX5pio2VRri5rX5EcpV8W1X fNXnNLSu9/hw+iWDkSzlVG/biUcDnL7Yd10KFF2CQ8TwYATVG9TcdraZjf5n6Sbj 2zt2OywD0rwByG6n2F8yLoPErph9NTcn07EnmTWBZut8+E2g3+3uyejraX5gaHLW mFQPlee69nLb4zM1cKZK14F+crMlALxK1pAz59rTdRrzOUKW74vcLLupURCYfNAc VCMUmNEyEZi6gsRVc/qS0p0h0ngsj526F18PvLG/0yqfdITQ7gH0lG9fmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMshwhrFw1D51bQRz0T26DN9V33+MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEveXlIQ0dzWERVUG5WdEJIUFJQYm9NMzFYZmY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf7vMA0G CSqGSIb3DQEBCwUAA4IBAQB+tqkh4sKgiQyuAq/83L9K0FDjzuzVEOY22et/hgLc VD0BMPN1MHOJXiPGqsAXjSIvsgL7wS3N6cMBj7xZBB/XAwrBUebk5mab8HNDki+Q WzQ0VoMx6tolduIFiPh+txcDao1B8UWEmH6BZqv8qmAGRPHZ2vg3AdH0lQReNpZA w7gCMjSHEHKQLf8DZFf6LvahT1npu2X91esnjLxQO1NKxsbJcRJ9CJJZ91SakuDK eHMOIXQbncgQJ2OMT1LEcL/iwiIdetV5DUQ72hXcvlBlJzhBfMGNLEkyIPUNlt8l e31HZPWD+PwSAIHqf+UgQDdAlCai2h6m1RfwEL2yx5hp -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:54 2026 by rpki-client