This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yfhn6fmgBU8YikpFzxR56mbTsWA.roa File: yfhn6fmgBU8YikpFzxR56mbTsWA.roa (raw, json) Hash identifier: do4KJcSKpoj5xNNas42Re3aNxsRw/SWOkoIQxpU1Yp8= Subject key identifier: C9:F8:67:E9:F9:A0:05:4F:18:8A:4A:45:CF:14:79:EA:66:D3:B1:60 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A1F5D69B4A7A37E707300D9AF736 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yfhn6fmgBU8YikpFzxR56mbTsWA.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41095 IP address blocks: 88.216.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a1:f5:d6:9b:4a:7a:37:e7:07:30:0d:9a:f7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9f867e9f9a0054f188a4a45cf1479ea66d3b160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:90:4a:f0:6a:29:27:44:19:84:fd:12:75: 9f:0c:27:0d:cb:a2:71:76:37:f2:e0:c7:75:c1:41: c7:86:a4:a3:e9:18:40:78:2e:62:45:3d:4b:0e:2b: 27:30:6b:d8:f6:7f:1c:ea:94:16:c5:da:0b:3b:46: 7c:70:a7:80:d2:8f:69:85:3b:a0:8e:fc:50:1e:d7: 7d:93:45:c0:e9:68:ad:3c:fb:7a:56:37:c1:68:b4: 5d:12:f8:9b:ac:a1:91:28:d5:c7:45:c6:d9:25:e0: c2:52:e2:2b:d2:17:4d:32:08:70:a9:22:a5:c4:09: d5:fd:16:53:4a:09:17:ab:5a:06:4d:6a:72:53:ee: 1a:c9:f7:85:f5:08:6e:eb:84:82:ab:7b:59:e0:84: ca:59:d9:d1:3f:70:52:ef:b8:e4:6c:ec:31:64:03: c5:8a:e9:91:f4:b8:5d:27:aa:57:46:19:c2:fc:8e: 20:b1:e1:e2:9d:84:9c:48:59:37:10:4b:56:2d:82: b1:c6:da:6d:6a:a6:d3:54:71:34:27:4e:a1:06:b1: 1c:ab:a5:66:c8:9f:cc:95:2b:6b:52:6a:af:01:15: f2:77:8f:23:70:6f:0f:1a:22:61:bb:ca:68:07:62: e6:cb:f6:76:88:a5:c2:b3:30:1d:04:bd:8d:50:97: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F8:67:E9:F9:A0:05:4F:18:8A:4A:45:CF:14:79:EA:66:D3:B1:60 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yfhn6fmgBU8YikpFzxR56mbTsWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.199.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2e:80:ab:3d:4e:23:c9:50:f8:52:d9:b3:70:cd:16:4d:bc: 47:22:d1:89:50:d2:cc:a0:64:d2:1c:95:c2:eb:5a:7f:1c:af: 86:94:c4:46:1f:e0:af:a4:11:bb:6a:93:cb:24:33:26:3e:81: 42:26:2f:68:b7:4f:10:fc:74:9e:70:33:ce:cf:dc:50:35:c0: 6a:32:9e:19:dd:8a:ce:61:ca:09:2f:f7:19:4a:29:c6:3c:de: 99:28:40:5e:e8:ff:54:e3:f1:8e:34:9d:e7:12:37:3f:1d:9f: a5:14:84:9d:f9:18:93:83:41:96:5e:e5:0e:f2:fa:bb:99:b1: de:dc:d3:b8:4a:44:f4:1b:7f:d9:6e:52:7b:d9:56:e9:5b:4c: ce:10:94:0a:8b:94:f2:1b:be:3c:98:88:d6:89:1a:37:48:26: 0e:ce:cb:2c:1a:3f:04:17:51:a2:fb:0c:48:4e:e0:83:99:76: 77:d9:9f:48:b9:cb:1b:82:92:06:b9:f3:a8:5a:f2:27:32:8e: 15:78:ac:dd:8c:8f:f3:c7:b0:8d:0f:3a:0d:23:ad:d2:d3:99: 6a:3b:e9:b5:d3:37:9f:f5:30:7a:f3:af:82:ee:b1:6d:db:51: df:ba:05:3b:75:ed:a1:4b:89:01:c6:10:a3:4b:97:80:f8:6c: a4:b9:3b:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKH11ptKejfnBzANmvc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWY4NjdlOWY5YTAwNTRmMTg4YTRhNDVjZjE0NzllYTY2ZDNiMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBiQSvBqKSdEGYT9EnWfDCcNy6Jx djfy4Md1wUHHhqSj6RhAeC5iRT1LDisnMGvY9n8c6pQWxdoLO0Z8cKeA0o9phTug jvxQHtd9k0XA6WitPPt6VjfBaLRdEvibrKGRKNXHRcbZJeDCUuIr0hdNMghwqSKl xAnV/RZTSgkXq1oGTWpyU+4ayfeF9Qhu64SCq3tZ4ITKWdnRP3BS77jkbOwxZAPF iumR9LhdJ6pXRhnC/I4gseHinYScSFk3EEtWLYKxxtptaqbTVHE0J06hBrEcq6Vm yJ/MlStrUmqvARXyd48jcG8PGiJhu8poB2Lmy/Z2iKXCszAdBL2NUJeexwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMn4Z+n5oAVPGIpKRc8Ueepm07FgMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEveWZobjZmbWdCVThZaWtwRnp4UjU2bWJUc1dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNjHMA0G CSqGSIb3DQEBCwUAA4IBAQAnLoCrPU4jyVD4UtmzcM0WTbxHItGJUNLMoGTSHJXC 61p/HK+GlMRGH+CvpBG7apPLJDMmPoFCJi9ot08Q/HSecDPOz9xQNcBqMp4Z3YrO YcoJL/cZSinGPN6ZKEBe6P9U4/GONJ3nEjc/HZ+lFISd+RiTg0GWXuUO8vq7mbHe 3NO4SkT0G3/ZblJ72VbpW0zOEJQKi5TyG748mIjWiRo3SCYOzsssGj8EF1Gi+wxI TuCDmXZ32Z9IucsbgpIGufOoWvInMo4VeKzdjI/zx7CNDzoNI63S05lqO+m10zef 9TB686+C7rFt21HfugU7de2hS4kBxhCjS5eA+GykuTuX -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:15 2026 by rpki-client