This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/YDZJA4xJRSLLS_3caqEhOJ_3z1M.roa File: YDZJA4xJRSLLS_3caqEhOJ_3z1M.roa (raw, json) Hash identifier: v2F9ZSNvDEOEkn09bpTuxmjtHiwOPIKq7B7AJM2GesM= Subject key identifier: 60:36:49:03:8C:49:45:22:CB:4B:FD:DC:6A:A1:21:38:9F:F7:CF:53 Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c Certificate serial: 019B7CEDF9B1944A4BE12C926C505FDCD17C Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/YDZJA4xJRSLLS_3caqEhOJ_3z1M.roa Signing time: Fri 02 Jan 2026 04:18:49 +0000 ROA not before: Fri 02 Jan 2026 04:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215640 IP address blocks: 185.204.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f9:b1:94:4a:4b:e1:2c:92:6c:50:5f:dc:d1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=603649038c494522cb4bfddc6aa121389ff7cf53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:d4:4f:1f:3b:86:d0:51:85:7e:8e:7d:8c: aa:0f:80:d0:ef:f5:ba:9e:b6:ac:14:98:32:59:f3: 94:a0:7a:5a:38:03:d6:33:de:89:ad:96:38:0a:04: 9a:29:86:c6:c6:b3:24:9a:78:ee:d8:c1:57:14:9f: d7:2f:7e:10:17:6d:c2:d0:a7:f6:e1:de:45:b6:52: 38:6d:de:c0:94:4f:31:56:0c:13:ef:bb:4c:14:7c: dd:c9:da:07:41:3c:e1:f0:67:8b:e9:90:71:9b:f3: 77:24:47:9c:1f:88:c8:0e:38:b3:67:25:06:8a:b0: 3a:93:fc:70:4b:a4:fc:99:04:1e:68:a7:87:d2:f7: 94:5e:52:18:c4:4a:c3:f9:83:46:49:f7:2e:5b:dc: a4:ed:1b:4f:5a:a1:33:9c:6d:67:bb:ff:04:25:a5: 0d:e3:bc:8c:b4:a2:21:ea:19:09:f8:23:da:e7:ce: a6:c8:9d:e3:b0:39:0f:60:81:9a:11:23:a2:b5:1f: d0:50:62:54:db:d9:62:ca:e4:89:d9:11:da:34:21: 14:dd:b4:1f:f1:26:3e:fa:ea:c0:67:59:5f:59:12: f0:33:8a:0a:ad:be:c0:05:ce:86:b4:10:79:fd:6c: 93:5e:7a:10:1f:73:dd:dc:ca:dd:8d:91:7e:26:d7: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:36:49:03:8C:49:45:22:CB:4B:FD:DC:6A:A1:21:38:9F:F7:CF:53 X509v3 Authority Key Identifier: keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/YDZJA4xJRSLLS_3caqEhOJ_3z1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.196.0/24 Signature Algorithm: sha256WithRSAEncryption 89:70:74:3e:73:b5:ca:85:ed:aa:1f:a4:bb:72:28:d7:f5:88: 83:65:64:d3:ec:36:6a:03:b4:9d:ff:e6:00:70:0d:80:d9:18: 6c:50:e1:54:64:08:74:80:62:ba:9a:39:ff:5a:2c:0f:aa:19: de:51:9b:b6:46:33:25:7e:02:e3:67:7c:ad:f0:8f:61:91:b0: 0b:7e:5a:96:3e:21:05:d3:db:be:8d:ad:8c:87:c4:4f:67:e4: 7c:6b:0c:99:5d:91:3f:50:87:3a:b1:ff:cb:a0:7a:47:93:27: ea:f6:5d:d1:f6:9a:1b:9f:b7:e4:3d:0e:8f:25:dc:de:0c:7d: 31:0f:11:36:a4:4f:fe:18:8f:5e:90:01:4e:f7:d5:d7:48:1d: a4:f7:db:34:d3:53:a7:15:b1:56:03:96:c8:42:f1:21:ca:4d: 5b:a9:2e:5b:24:93:3b:22:ec:f7:d9:95:aa:67:ec:b3:4a:e0: 86:19:ba:4c:ad:d5:fd:b4:12:fa:84:51:f1:e4:b2:e3:77:c8: aa:9b:e3:6f:5a:2b:a7:bc:d7:6c:0a:f8:bb:7f:d2:f4:00:7f: 4f:e5:0d:5f:36:a2:97:e7:f4:3a:26:6d:be:20:cc:19:a2:18: 4d:af:53:96:3c:96:92:da:1a:09:02:8b:be:f5:85:2e:64:c1: 78:dd:91:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fmxlEpL4SySbFBf3NF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODRjYzdjMWIzM2QyNzk3N2ZjY2RiMzRiM2NjMjk0YTJh NDA4OGMwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDM2NDkwMzhjNDk0NTIyY2I0YmZkZGM2YWExMjEzODlmZjdjZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBfUTx87htBRhX6OfYyqD4DQ7/W6 nrasFJgyWfOUoHpaOAPWM96JrZY4CgSaKYbGxrMkmnju2MFXFJ/XL34QF23C0Kf2 4d5FtlI4bd7AlE8xVgwT77tMFHzdydoHQTzh8GeL6ZBxm/N3JEecH4jIDjizZyUG irA6k/xwS6T8mQQeaKeH0veUXlIYxErD+YNGSfcuW9yk7RtPWqEznG1nu/8EJaUN 47yMtKIh6hkJ+CPa586myJ3jsDkPYIGaESOitR/QUGJU29liyuSJ2RHaNCEU3bQf 8SY++urAZ1lfWRLwM4oKrb7ABc6GtBB5/WyTXnoQH3Pd3MrdjZF+JtfO5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGA2SQOMSUUiy0v93GqhITif989TMB8GA1UdIwQY MBaAFJeEzHwbM9J5d/zNs0s8wpSipAiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmIt Yzg4NmZiNmIzYmNkLzEvWURaSkE0eEpSU0xMU18zY2FxRWhPSl8zejFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmItYzg4NmZiNmIzYmNk LzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuczEMA0G CSqGSIb3DQEBCwUAA4IBAQCJcHQ+c7XKhe2qH6S7cijX9YiDZWTT7DZqA7Sd/+YA cA2A2RhsUOFUZAh0gGK6mjn/WiwPqhneUZu2RjMlfgLjZ3yt8I9hkbALflqWPiEF 09u+ja2Mh8RPZ+R8awyZXZE/UIc6sf/LoHpHkyfq9l3R9pobn7fkPQ6PJdzeDH0x DxE2pE/+GI9ekAFO99XXSB2k99s001OnFbFWA5bIQvEhyk1bqS5bJJM7Iuz32ZWq Z+yzSuCGGbpMrdX9tBL6hFHx5LLjd8iqm+NvWiunvNdsCvi7f9L0AH9P5Q1fNqKX 5/Q6Jm2+IMwZohhNr1OWPJaS2hoJAou+9YUuZMF43ZGp -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:43 2026 by rpki-client