This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/YZbCezesixGK-5MW0VqY6oAGzr8.roa File: YZbCezesixGK-5MW0VqY6oAGzr8.roa (raw, json) Hash identifier: LnOZHLS4IEDjVPpbQKeCImMc1ehQ/d37mLM38R6989s= Subject key identifier: 61:96:C2:7B:37:AC:8B:11:8A:FB:93:16:D1:5A:98:EA:80:06:CE:BF Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B3696CD20D3A7B4C216B8B204A88498 Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/YZbCezesixGK-5MW0VqY6oAGzr8.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 85.203.45.0/24 maxlen: 24 85.203.54.0/24 maxlen: 24 85.203.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:96:cd:20:d3:a7:b4:c2:16:b8:b2:04:a8:84:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6196c27b37ac8b118afb9316d15a98ea8006cebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:4b:6c:de:13:0e:4c:69:25:92:fa:ef:bc: 99:be:70:6b:c4:dd:a1:a9:fe:94:a0:6a:f9:a7:ce: a4:c5:32:c3:5a:09:56:fc:4a:53:14:b4:07:c9:c4: fe:a4:54:c7:ca:85:60:f3:cc:88:dd:51:48:62:73: b1:df:53:ef:98:20:ae:c4:0b:0f:29:7f:67:7a:47: aa:b7:84:7e:01:dd:7c:32:fb:29:1d:19:01:ce:d4: 48:63:b6:35:0b:af:e9:7c:99:b3:0c:0d:7b:62:c9: f9:1d:76:36:a6:37:71:98:c2:f1:67:b2:c6:39:27: 90:3d:ba:58:a1:5f:48:8b:2e:4a:df:6b:55:5c:fe: 26:e9:41:5d:1a:53:f3:36:3b:7d:d3:6d:5b:c2:73: 90:94:72:1c:99:0b:3a:91:9b:bc:50:8f:8e:f2:e0: 6a:ed:2e:e4:e9:f2:47:6a:43:29:b7:a2:16:fc:26: 6f:47:37:c9:50:fa:37:d3:c6:26:48:19:8a:5c:88: 55:4f:71:36:4c:65:c5:90:9d:da:06:46:16:16:51: b2:6e:c2:f5:ee:87:45:d8:15:74:ae:96:b4:f7:14: bc:0e:18:8c:f8:e0:57:0a:f6:bc:15:28:81:6e:4c: 7c:44:85:cd:e7:1b:56:05:9e:46:84:bb:ef:30:9e: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:96:C2:7B:37:AC:8B:11:8A:FB:93:16:D1:5A:98:EA:80:06:CE:BF X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/YZbCezesixGK-5MW0VqY6oAGzr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.45.0/24 85.203.54.0/23 Signature Algorithm: sha256WithRSAEncryption b0:23:df:42:15:3e:67:78:94:2c:37:9a:c6:4a:ad:9d:20:42: b9:20:8b:64:49:64:43:5a:8d:42:08:94:3e:21:a1:1e:cd:1f: 63:5c:6a:ff:1a:ed:62:05:9e:08:b1:af:de:e2:e4:56:b1:d7: f4:aa:63:1b:df:d6:04:61:12:22:91:5b:c0:85:97:91:d7:e9: bd:4c:f9:68:28:e5:1e:f1:7a:22:07:49:71:a9:c7:95:d7:93: 5a:90:75:71:68:72:01:bf:45:cc:02:1e:9d:56:30:96:1d:92: 3f:7e:4b:82:76:8a:2e:ba:eb:2e:63:04:44:0c:ae:d3:d4:13: c5:67:ea:22:af:86:71:18:75:de:c7:76:0d:71:5b:5a:bd:28: 60:c1:8c:db:03:f8:a6:8c:51:8c:66:a3:bd:01:8f:51:f6:40: 85:1e:6f:04:61:77:84:92:92:68:75:39:0d:77:91:9d:5d:26: dc:bc:c6:d5:59:d4:85:8e:26:32:ca:b4:f0:f3:d1:ba:9b:e3: 37:cd:f4:d2:07:1c:06:aa:99:4a:d7:a5:e2:02:6f:84:f2:89: 26:23:ea:51:58:d2:66:16:ff:96:b4:aa:9c:b6:b0:06:77:4f: 45:5a:dd:2c:d6:8a:f9:10:44:83:e8:1b:74:7d:4e:f4:9a:36: 07:bc:79:3b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NpbNINOntMIWuLIEqISYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTk2YzI3YjM3YWM4YjExOGFmYjkzMTZkMTVhOThlYTgwMDZjZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsBLbN4TDkxpJZL677yZvnBrxN2h qf6UoGr5p86kxTLDWglW/EpTFLQHycT+pFTHyoVg88yI3VFIYnOx31PvmCCuxAsP KX9nekeqt4R+Ad18MvspHRkBztRIY7Y1C6/pfJmzDA17Ysn5HXY2pjdxmMLxZ7LG OSeQPbpYoV9Iiy5K32tVXP4m6UFdGlPzNjt9021bwnOQlHIcmQs6kZu8UI+O8uBq 7S7k6fJHakMpt6IW/CZvRzfJUPo308YmSBmKXIhVT3E2TGXFkJ3aBkYWFlGybsL1 7odF2BV0rpa09xS8DhiM+OBXCva8FSiBbkx8RIXN5xtWBZ5GhLvvMJ4t2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGGWwns3rIsRivuTFtFamOqABs6/MB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvWVpiQ2V6ZXNpeEdLLTVNVzBWcVk2b0FHenI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcstAwQB Vcs2MA0GCSqGSIb3DQEBCwUAA4IBAQCwI99CFT5neJQsN5rGSq2dIEK5IItkSWRD Wo1CCJQ+IaEezR9jXGr/Gu1iBZ4Isa/e4uRWsdf0qmMb39YEYRIikVvAhZeR1+m9 TPloKOUe8XoiB0lxqceV15NakHVxaHIBv0XMAh6dVjCWHZI/fkuCdoouuusuYwRE DK7T1BPFZ+oir4ZxGHXex3YNcVtavShgwYzbA/imjFGMZqO9AY9R9kCFHm8EYXeE kpJodTkNd5GdXSbcvMbVWdSFjiYyyrTw89G6m+M3zfTSBxwGqplK16XiAm+E8okm I+pRWNJmFv+WtKqctrAGd09FWt0s1or5EESD6Bt0fU70mjYHvHk7 -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:45 2026 by rpki-client