This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/Yqw8nqYWjqFUz5Vz5_cXTd2EZJE.roa File: Yqw8nqYWjqFUz5Vz5_cXTd2EZJE.roa (raw, json) Hash identifier: c6hadjikHVcvC+Q5pJmMMnFQCoRVJRf9GgAQl95ZwLY= Subject key identifier: 62:AC:3C:9E:A6:16:8E:A1:54:CF:95:73:E7:F7:17:4D:DD:84:64:91 Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7 Certificate serial: 019B7A5B9272A3421DDC07D92184F3A38E25 Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/Yqw8nqYWjqFUz5Vz5_cXTd2EZJE.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34183 IP address blocks: 185.117.40.0/22 maxlen: 22 194.48.236.0/22 maxlen: 22 2a00:1610::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:92:72:a3:42:1d:dc:07:d9:21:84:f3:a3:8e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62ac3c9ea6168ea154cf9573e7f7174ddd846491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:15:b0:74:3c:1d:05:a4:5a:47:41:4b:a5: 38:ea:7b:1e:11:a6:86:8f:d5:50:56:a3:09:2e:6f: 90:29:6b:cc:04:ba:9a:f6:72:21:9e:4b:46:8a:d4: 40:ca:7f:da:0f:b1:83:87:32:81:c5:b7:bd:38:7a: df:55:6a:8c:1d:16:b7:fc:76:e3:4c:25:cf:74:40: a3:0d:4f:38:44:18:66:b3:0e:46:58:4a:b2:37:7a: ff:24:82:07:9c:4a:94:a3:88:9a:43:00:d6:a2:06: 11:c8:c5:b2:7b:02:d9:58:52:38:ec:33:d3:96:e0: 08:00:56:38:b9:3a:2a:83:17:f7:06:05:ad:d1:ae: 76:45:f0:b6:8d:58:71:2c:d3:0d:35:62:a9:49:9a: bb:fd:9f:9a:21:56:60:66:3e:5b:52:f8:e4:ac:e5: 24:1e:0b:3b:49:5f:46:cf:5a:9b:47:21:bb:ee:89: 32:70:52:80:d1:0c:4d:02:6b:98:75:66:17:df:52: f7:1d:a1:f5:27:87:d3:a7:26:0e:d2:ef:af:39:87: ab:f7:44:0a:9b:68:d8:b6:d7:b6:b4:79:43:4b:30: 84:19:92:cf:e9:87:b4:2e:0f:66:38:43:9c:a1:1c: 93:85:7d:d2:dd:ca:f6:90:1e:f1:7b:dc:ff:a0:ef: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AC:3C:9E:A6:16:8E:A1:54:CF:95:73:E7:F7:17:4D:DD:84:64:91 X509v3 Authority Key Identifier: keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/Yqw8nqYWjqFUz5Vz5_cXTd2EZJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.40.0/22 194.48.236.0/22 IPv6: 2a00:1610::/29 Signature Algorithm: sha256WithRSAEncryption 7d:0f:a8:96:2b:f4:64:cf:5e:d8:47:c5:be:a5:46:13:54:04: df:e7:20:fc:8c:67:83:46:cf:1a:b1:33:70:f1:12:00:46:33: db:c1:97:7d:f4:35:61:4e:a6:7b:ca:73:88:56:93:e5:21:1f: f6:03:23:7d:58:9f:28:66:59:48:3e:3b:02:1b:56:4d:e8:cb: 88:98:9e:ce:89:13:19:f0:14:eb:e8:81:13:33:2d:91:f4:c8: eb:c6:a7:1a:d9:7b:31:70:f3:67:54:69:39:a4:6d:ca:e4:68: e9:63:b5:fd:8f:c3:ae:47:64:ce:06:0f:ed:cc:65:6e:d8:22: 24:00:0b:0b:6f:3b:39:5a:0f:df:43:11:84:72:09:da:e4:66: 3b:24:c5:f6:99:f9:4b:0e:0b:3f:b5:77:8f:3c:e9:f3:a8:0a: cd:4d:c0:55:be:7f:ef:8d:3b:60:2e:8b:77:ee:5b:c2:da:6d: 47:f4:01:2d:88:da:14:f5:cb:cb:48:69:6a:b2:27:28:fa:55: 7d:22:1a:62:3f:8b:4f:38:48:ea:3e:f8:c5:5e:b6:24:24:3c: 22:2c:7a:7b:f1:7a:c9:31:18:6c:1a:22:69:7d:51:27:b3:b6: af:fe:ae:0c:d4:77:fd:d5:c4:1c:74:3a:81:53:20:a6:d8:08: 91:c9:06:a3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W5Jyo0Id3AfZIYTzo44lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjk0YTJjMGM0OWRjOTM2Y2I5ODhiNjg1YjNhN2Q5NWM4 ZmUwYjcwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmFjM2M5ZWE2MTY4ZWExNTRjZjk1NzNlN2Y3MTc0ZGRkODQ2NDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswgVsHQ8HQWkWkdBS6U46nseEaaG j9VQVqMJLm+QKWvMBLqa9nIhnktGitRAyn/aD7GDhzKBxbe9OHrfVWqMHRa3/Hbj TCXPdECjDU84RBhmsw5GWEqyN3r/JIIHnEqUo4iaQwDWogYRyMWyewLZWFI47DPT luAIAFY4uToqgxf3BgWt0a52RfC2jVhxLNMNNWKpSZq7/Z+aIVZgZj5bUvjkrOUk Hgs7SV9Gz1qbRyG77okycFKA0QxNAmuYdWYX31L3HaH1J4fTpyYO0u+vOYer90QK m2jYtte2tHlDSzCEGZLP6Ye0Lg9mOEOcoRyThX3S3cr2kB7xe9z/oO8/eQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGKsPJ6mFo6hVM+Vc+f3F03dhGSRMB8GA1UdIwQY MBaAFMgpSiwMSdyTbLmItoWzp9lcj+C3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQt OWNlZjc5MmE1ZjZiLzEvWXF3OG5xWVdqcUZVejVWejVfY1hUZDJFWkpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQtOWNlZjc5MmE1ZjZi LzEveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuXUoAwQC wjDsMA0EAgACMAcDBQMqABYQMA0GCSqGSIb3DQEBCwUAA4IBAQB9D6iWK/Rkz17Y R8W+pUYTVATf5yD8jGeDRs8asTNw8RIARjPbwZd99DVhTqZ7ynOIVpPlIR/2AyN9 WJ8oZllIPjsCG1ZN6MuImJ7OiRMZ8BTr6IETMy2R9Mjrxqca2XsxcPNnVGk5pG3K 5GjpY7X9j8OuR2TOBg/tzGVu2CIkAAsLbzs5Wg/fQxGEcgna5GY7JMX2mflLDgs/ tXePPOnzqArNTcBVvn/vjTtgLot37lvC2m1H9AEtiNoU9cvLSGlqsico+lV9Ihpi P4tPOEjqPvjFXrYkJDwiLHp78XrJMRhsGiJpfVEns7av/q4M1Hf91cQcdDqBUyCm 2AiRyQaj -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:08 2026 by rpki-client