This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/yck28xcl3jczXgwL4uHBsdkr9eA.roa File: yck28xcl3jczXgwL4uHBsdkr9eA.roa (raw, json) Hash identifier: e+2vyfKfLKulD+WhEKHkneTjPq/LBArHRIYQYPU8rjs= Subject key identifier: C9:C9:36:F3:17:25:DE:37:33:5E:0C:0B:E2:E1:C1:B1:D9:2B:F5:E0 Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528 Certificate serial: 019B7DCA7F4F6A0BE970A5FB2ECA19538800 Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/yck28xcl3jczXgwL4uHBsdkr9eA.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58088 IP address blocks: 85.116.140.0/22 maxlen: 22 185.184.136.0/22 maxlen: 22 2a0b:3580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7f:4f:6a:0b:e9:70:a5:fb:2e:ca:19:53:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528 Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9c936f31725de37335e0c0be2e1c1b1d92bf5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:4e:7d:33:c1:28:de:2b:34:6c:21:bf:1e: 6c:2c:47:c7:4e:f5:f6:a2:58:ef:ac:f9:af:5a:e2: fd:23:8e:38:d9:ea:23:3f:c0:29:63:b0:5f:b7:c6: c2:bd:9f:f9:a3:a3:16:be:3f:50:94:53:38:08:39: ef:a5:bb:08:42:10:4f:cc:72:42:33:0e:1f:46:9f: 3b:50:09:88:57:0d:29:f8:13:15:3a:9b:58:8b:d8: 75:4e:21:fe:12:20:42:c5:4e:d9:57:88:ae:96:04: a2:aa:5d:54:52:cb:f2:45:e3:32:6c:0d:61:0f:67: dd:f0:1f:8e:41:cf:a7:97:c2:17:0a:d6:be:84:1a: 21:88:50:06:16:55:91:4e:93:0c:76:50:30:96:30: c0:a8:20:03:69:38:24:5e:b2:5b:d5:a5:79:15:80: d6:78:f5:f9:47:bf:b6:5c:87:b0:12:0b:9e:e5:05: b0:78:63:4b:fa:29:69:d8:43:a3:c6:5f:ca:cd:93: 08:5a:86:91:43:38:4b:04:5f:b7:ed:d1:ac:74:3a: 59:ed:cf:53:12:0f:10:2b:bc:d3:3a:72:cc:39:4a: 8c:02:0b:1f:8a:95:64:ea:2a:48:3d:8f:69:cc:91: 6f:22:af:c4:b0:1c:0f:fc:5f:56:e3:c2:4e:ba:91: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C9:36:F3:17:25:DE:37:33:5E:0C:0B:E2:E1:C1:B1:D9:2B:F5:E0 X509v3 Authority Key Identifier: keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/yck28xcl3jczXgwL4uHBsdkr9eA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.140.0/22 185.184.136.0/22 IPv6: 2a0b:3580::/29 Signature Algorithm: sha256WithRSAEncryption 88:6d:f2:0b:d0:e8:5b:9d:83:7e:25:bc:b9:de:5e:7e:55:56: 9d:d3:13:84:61:8d:fb:ad:96:24:a9:75:46:c2:34:a5:5b:4d: dc:ba:65:9b:f2:e0:87:3f:3f:00:7b:55:8f:56:5a:15:92:cb: 6d:6c:df:ec:f9:96:da:a2:5b:70:79:d1:f2:c5:7f:8e:0c:5f: a6:ba:cb:06:9d:4c:13:ef:62:fd:97:ea:9b:03:56:7a:30:f8: 1c:53:cb:65:cb:21:57:c5:c6:e7:bc:57:1b:1e:ec:7b:f7:ef: 20:07:ce:9d:cc:6a:9e:bb:de:ef:b3:62:1f:e0:56:ed:be:66: 45:c7:7d:6f:60:11:fb:e7:b2:6e:b0:68:68:0d:9f:39:83:e2: 09:c7:7c:05:9c:f3:62:05:d8:95:1a:0a:f4:a7:e9:8f:ee:6c: 3b:61:ba:06:99:1d:58:6f:c6:24:e9:58:ea:e8:d5:78:e3:cf: 56:dc:ff:8a:f0:39:b8:aa:7c:01:b5:2a:9f:7a:c2:09:46:ca: 02:dc:0d:c1:2e:87:ed:a1:15:45:c2:7b:12:1a:30:eb:51:fd: 0b:c4:fc:3e:fe:c2:3f:89:60:3e:83:fa:6b:09:fd:9e:6d:84: 3e:7e:72:68:fd:a9:29:5f:61:ec:f1:dd:97:2f:84:08:86:02: 8c:63:b1:18 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yn9PagvpcKX7LsoZU4gAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODQyMjc0YjM3ODhiODBiMmZlZDkxNmRiMzg4MGZlMDhj Mzc1MjgwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWM5MzZmMzE3MjVkZTM3MzM1ZTBjMGJlMmUxYzFiMWQ5MmJmNWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjxOfTPBKN4rNGwhvx5sLEfHTvX2 oljvrPmvWuL9I4442eojP8ApY7Bft8bCvZ/5o6MWvj9QlFM4CDnvpbsIQhBPzHJC Mw4fRp87UAmIVw0p+BMVOptYi9h1TiH+EiBCxU7ZV4iulgSiql1UUsvyReMybA1h D2fd8B+OQc+nl8IXCta+hBohiFAGFlWRTpMMdlAwljDAqCADaTgkXrJb1aV5FYDW ePX5R7+2XIewEgue5QWweGNL+ilp2EOjxl/KzZMIWoaRQzhLBF+37dGsdDpZ7c9T Eg8QK7zTOnLMOUqMAgsfipVk6ipIPY9pzJFvIq/EsBwP/F9W48JOupEiqwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMnJNvMXJd43M14MC+LhwbHZK/XgMB8GA1UdIwQY MBaAFIaEInSzeIuAsv7ZFts4gP4Iw3UoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hZWJjZWYtNjI5Ni00YTMyLTg2M2Ut YWEzMTUyMGQzYTZiLzEveWNrMjh4Y2wzamN6WGd3TDR1SEJzZGtyOWVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hZWJjZWYtNjI5Ni00YTMyLTg2M2UtYWEzMTUyMGQzYTZi LzEvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCVXSMAwQC ubiIMA0EAgACMAcDBQMqCzWAMA0GCSqGSIb3DQEBCwUAA4IBAQCIbfIL0OhbnYN+ Jby53l5+VVad0xOEYY37rZYkqXVGwjSlW03cumWb8uCHPz8Ae1WPVloVksttbN/s +ZbaoltwedHyxX+ODF+mussGnUwT72L9l+qbA1Z6MPgcU8tlyyFXxcbnvFcbHux7 9+8gB86dzGqeu97vs2If4FbtvmZFx31vYBH757JusGhoDZ85g+IJx3wFnPNiBdiV Ggr0p+mP7mw7YboGmR1Yb8Yk6Vjq6NV4489W3P+K8Dm4qnwBtSqfesIJRsoC3A3B LoftoRVFwnsSGjDrUf0LxPw+/sI/iWA+g/prCf2ebYQ+fnJo/akpX2Hs8d2XL4QI hgKMY7EY -----END CERTIFICATE-----Generated at Tue Feb 10 07:10:52 2026 by rpki-client