This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa File: YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa (raw, json) Hash identifier: 5033rgrhup6n7WpdXD6+8ygWTQrZT3eRPIezPH3qoAs= Subject key identifier: 60:B6:91:5F:E9:EC:A9:15:82:B4:F7:9C:D8:3B:F9:43:F9:39:3A:14 Certificate issuer: /CN=11d19f88b0dc1b890254db94a9b62046d6be794b Certificate serial: 019B7CEE17EBE76ECFC2844412EA4683DA49 Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa Signing time: Fri 02 Jan 2026 04:18:57 +0000 ROA not before: Fri 02 Jan 2026 04:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5598 IP address blocks: 176.101.96.0/19 maxlen: 24 176.101.96.96/27 maxlen: 27 176.101.97.128/28 maxlen: 28 176.101.97.144/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:17:eb:e7:6e:cf:c2:84:44:12:ea:46:83:da:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60b6915fe9eca91582b4f79cd83bf943f9393a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:be:d3:cc:eb:18:3f:94:82:aa:39:fe:4d: fc:66:a0:68:6e:24:9a:c4:ad:1f:3e:76:46:af:3f: 75:14:9b:72:4a:38:52:f2:2f:1d:57:61:44:a4:7e: ae:ec:d9:81:bc:1b:99:5e:1a:c3:3e:df:ce:37:cd: de:ac:96:fa:18:08:50:14:59:e4:0d:16:88:de:15: 2d:3d:5b:18:99:0c:5b:bf:26:72:bb:b6:cc:f1:3d: a7:b1:49:40:b5:33:13:c5:06:f6:aa:8d:3f:a2:86: 7c:4d:c9:f5:16:50:ab:35:a9:3e:e6:5b:1b:a1:98: f1:a1:52:4b:e5:d8:ac:db:60:63:84:e3:d6:59:63: e1:ed:c7:94:d0:d3:b4:c8:ea:49:85:15:49:d9:5e: 51:9b:43:57:06:d4:36:3a:c9:f7:72:58:6e:41:a0: cf:cf:90:0c:1c:c7:3a:70:61:02:b4:b5:14:22:6c: 3e:f6:77:f2:dd:4a:ec:03:76:56:f9:66:6b:25:78: 28:01:fd:ba:88:31:bc:1c:77:1b:00:2e:77:e1:42: fc:68:3b:cb:35:58:54:40:c8:75:27:8b:cd:f2:9d: a0:40:54:32:9c:b9:ca:42:60:6b:70:72:05:b0:5a: c3:ee:de:2f:a7:9a:19:5f:ed:75:17:be:75:c5:10: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B6:91:5F:E9:EC:A9:15:82:B4:F7:9C:D8:3B:F9:43:F9:39:3A:14 X509v3 Authority Key Identifier: keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.101.96.0/19 Signature Algorithm: sha256WithRSAEncryption a3:43:5a:6c:ce:1c:59:3e:e1:9d:3c:b7:7e:40:7e:ea:95:a1: 8e:93:03:d7:d6:90:84:5d:be:d7:3d:78:6d:dc:c6:35:f2:28: 93:cc:f2:8a:53:79:c9:6a:1f:5f:08:49:34:73:96:a3:1f:ea: 2e:ee:ce:e3:f4:0b:03:cd:99:0d:af:91:a1:a4:44:a1:5a:df: 7a:dd:18:09:1d:87:14:92:3f:a3:48:6b:38:c6:39:2d:ed:16: 3e:51:a3:fe:14:ea:e4:19:61:7a:ac:b1:a7:96:e0:59:6a:e0: 62:56:31:49:e8:ca:9b:6f:04:99:23:3d:27:bc:66:3d:f8:41: b3:61:17:0f:89:df:09:48:9d:ce:92:68:b0:65:fb:38:c8:c5: 05:81:5d:e1:9f:10:cd:db:34:a7:89:62:78:79:c4:56:75:72: ff:91:bc:e9:c8:5d:55:6c:c3:d1:77:db:49:15:e5:45:29:6f: a3:99:11:2d:e4:15:7a:82:66:25:42:09:4b:f3:98:60:bf:1e: ca:3f:0a:1b:fd:82:f8:7c:47:60:df:99:3a:68:9e:ba:5d:a5: 42:ac:1c:97:7c:c2:b4:bd:c2:15:56:0d:1f:10:cf:cc:fd:5f: bf:84:4a:7b:8b:9c:c0:e0:3c:94:f4:9a:34:43:f7:5f:a1:5c: 25:6d:33:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87hfr527PwoREEupGg9pJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDE5Zjg4YjBkYzFiODkwMjU0ZGI5NGE5YjYyMDQ2ZDZi ZTc5NGIwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGI2OTE1ZmU5ZWNhOTE1ODJiNGY3OWNkODNiZjk0M2Y5MzkzYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1u+08zrGD+Ugqo5/k38ZqBobiSa xK0fPnZGrz91FJtySjhS8i8dV2FEpH6u7NmBvBuZXhrDPt/ON83erJb6GAhQFFnk DRaI3hUtPVsYmQxbvyZyu7bM8T2nsUlAtTMTxQb2qo0/ooZ8Tcn1FlCrNak+5lsb oZjxoVJL5dis22BjhOPWWWPh7ceU0NO0yOpJhRVJ2V5Rm0NXBtQ2Osn3clhuQaDP z5AMHMc6cGECtLUUImw+9nfy3UrsA3ZW+WZrJXgoAf26iDG8HHcbAC534UL8aDvL NVhUQMh1J4vN8p2gQFQynLnKQmBrcHIFsFrD7t4vp5oZX+11F751xRCjlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGC2kV/p7KkVgrT3nNg7+UP5OToUMB8GA1UdIwQY MBaAFBHRn4iw3BuJAlTblKm2IEbWvnlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Yjc4M2MtOWY1OS00Njk2LTgyYzQt NDhiNDk1NWYwNjAwLzEvWUxhUlgtbnNxUldDdFBlYzJEdjVRX2s1T2hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85Yjc4M2MtOWY1OS00Njk2LTgyYzQtNDhiNDk1NWYwNjAw LzEvRWRHZmlMRGNHNGtDVk51VXFiWWdSdGEtZVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFsGVgMA0G CSqGSIb3DQEBCwUAA4IBAQCjQ1pszhxZPuGdPLd+QH7qlaGOkwPX1pCEXb7XPXht 3MY18iiTzPKKU3nJah9fCEk0c5ajH+ou7s7j9AsDzZkNr5GhpEShWt963RgJHYcU kj+jSGs4xjkt7RY+UaP+FOrkGWF6rLGnluBZauBiVjFJ6MqbbwSZIz0nvGY9+EGz YRcPid8JSJ3OkmiwZfs4yMUFgV3hnxDN2zSniWJ4ecRWdXL/kbzpyF1VbMPRd9tJ FeVFKW+jmREt5BV6gmYlQglL85hgvx7KPwob/YL4fEdg35k6aJ66XaVCrByXfMK0 vcIVVg0fEM/M/V+/hEp7i5zA4DyU9Jo0Q/dfoVwlbTNE -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:24 2026 by rpki-client