This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/yfiieDo9iLegYVxPGWv16UQ43As.roa File: yfiieDo9iLegYVxPGWv16UQ43As.roa (raw, json) Hash identifier: SYrqg0nXFiIlwOea5YRswLpoCOBeZ7BwjysKy4Ug6lk= Subject key identifier: C9:F8:A2:78:3A:3D:88:B7:A0:61:5C:4F:19:6B:F5:E9:44:38:DC:0B Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c Certificate serial: 019B7910E3F26CC947A2234DA7A0B608031B Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/yfiieDo9iLegYVxPGWv16UQ43As.roa Signing time: Thu 01 Jan 2026 10:18:28 +0000 ROA not before: Thu 01 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28746 IP address blocks: 185.104.20.0/24 maxlen: 24 185.104.21.0/24 maxlen: 24 185.104.22.0/24 maxlen: 24 185.104.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e3:f2:6c:c9:47:a2:23:4d:a7:a0:b6:08:03:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fd68f1b241423da97647b99224530386d25698c Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9f8a2783a3d88b7a0615c4f196bf5e94438dc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:7d:60:9c:04:62:27:c7:7a:f5:2f:98:e1: 23:fe:68:1c:39:e7:32:86:84:af:d7:a8:0f:5d:1d: cf:74:b2:13:2e:a6:3f:38:46:18:fb:ab:ae:8c:7f: 01:2d:ec:c5:d3:6f:c5:09:26:c6:6c:ee:49:38:ef: 93:45:42:c7:e3:66:44:1e:52:c1:e9:b5:85:e7:eb: 09:ca:64:3e:d1:c2:6f:14:db:07:a6:5b:a3:59:e0: 98:74:8c:5e:04:e0:2f:e3:65:70:66:7e:9f:35:1f: 46:2f:f3:f4:3f:32:a2:16:dc:8e:87:9a:d9:d2:4e: e2:1e:78:02:77:47:94:d9:da:9a:48:b9:52:ef:e1: 37:9e:c2:d6:0f:5e:56:84:04:39:26:94:45:06:0e: b9:c3:e1:aa:23:00:ec:cb:63:69:ec:32:10:77:26: 68:08:e9:7f:55:99:a8:10:74:f6:f4:86:e0:49:81: c2:c9:db:d8:66:9c:b5:05:e0:11:46:60:af:d0:10: 0a:3c:39:63:85:d6:c3:41:1d:c1:17:c1:ac:49:7a: 5a:48:9c:7f:64:62:1d:f2:1d:40:4f:80:fd:0a:86: 76:dc:37:44:e5:01:2e:80:ec:0f:12:10:21:9b:f8: a0:71:2a:56:ea:25:9b:cd:b8:b6:b6:38:08:4a:d4: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F8:A2:78:3A:3D:88:B7:A0:61:5C:4F:19:6B:F5:E9:44:38:DC:0B X509v3 Authority Key Identifier: keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/yfiieDo9iLegYVxPGWv16UQ43As.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.20.0/22 Signature Algorithm: sha256WithRSAEncryption 46:c5:59:df:f9:4e:47:3c:30:66:c1:4e:ac:8b:82:c6:5e:80: e8:6b:3c:eb:93:2d:3b:74:3e:53:88:28:9f:39:b2:65:f4:2f: 58:4b:c7:82:b0:c7:2a:d8:d2:aa:83:f2:96:46:b4:55:fc:0e: b9:8e:2b:4b:f9:fc:4b:72:69:c3:1d:6f:2c:a3:01:5d:ba:89: be:23:ce:87:70:18:6f:eb:63:f0:60:22:4b:81:71:ce:a8:3e: 11:50:08:bc:15:8a:4c:9c:e9:17:37:73:c7:41:1d:59:af:8c: a7:e3:31:47:cb:9e:62:a8:a0:5a:63:5f:0b:06:04:6c:ff:de: dd:17:17:d5:5a:7b:eb:39:2a:c9:dc:35:07:56:dd:b1:5f:eb: 47:1a:ec:69:fa:69:2a:f2:20:f9:d6:e2:df:54:a0:f8:a5:4e: db:f8:e4:bc:a2:a0:40:7b:df:b1:c3:6e:6e:fa:5f:1a:9b:59: 53:27:4d:66:ba:32:21:c1:e4:26:91:f4:8f:9b:72:31:b8:14: 0a:27:ed:14:d3:17:9d:cc:ff:49:bd:63:fb:91:b4:4c:96:1b: f2:a5:d4:ee:22:d7:cd:f4:ac:c2:de:96:b1:ab:85:4a:7c:94: 5b:1c:9c:54:b1:b1:06:52:8e:5d:f8:7d:41:94:c4:58:4a:a8: d8:1a:5b:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOPybMlHoiNNp6C2CAMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZDY4ZjFiMjQxNDIzZGE5NzY0N2I5OTIyNDUzMDM4NmQy NTY5OGMwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWY4YTI3ODNhM2Q4OGI3YTA2MTVjNGYxOTZiZjVlOTQ0MzhkYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfV9YJwEYifHevUvmOEj/mgcOecy hoSv16gPXR3PdLITLqY/OEYY+6uujH8BLezF02/FCSbGbO5JOO+TRULH42ZEHlLB 6bWF5+sJymQ+0cJvFNsHplujWeCYdIxeBOAv42VwZn6fNR9GL/P0PzKiFtyOh5rZ 0k7iHngCd0eU2dqaSLlS7+E3nsLWD15WhAQ5JpRFBg65w+GqIwDsy2Np7DIQdyZo COl/VZmoEHT29IbgSYHCydvYZpy1BeARRmCv0BAKPDljhdbDQR3BF8GsSXpaSJx/ ZGId8h1AT4D9CoZ23DdE5QEugOwPEhAhm/igcSpW6iWbzbi2tjgIStTXDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMn4ong6PYi3oGFcTxlr9elEONwLMB8GA1UdIwQY MBaAFJ/WjxskFCPal2R7mSJFMDhtJWmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmIt MDgxMGQxNmJjYzg3LzEveWZpaWVEbzlpTGVnWVZ4UEdXdjE2VVE0M0FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmItMDgxMGQxNmJjYzg3 LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWgUMA0G CSqGSIb3DQEBCwUAA4IBAQBGxVnf+U5HPDBmwU6si4LGXoDoazzrky07dD5TiCif ObJl9C9YS8eCsMcq2NKqg/KWRrRV/A65jitL+fxLcmnDHW8sowFduom+I86HcBhv 62PwYCJLgXHOqD4RUAi8FYpMnOkXN3PHQR1Zr4yn4zFHy55iqKBaY18LBgRs/97d FxfVWnvrOSrJ3DUHVt2xX+tHGuxp+mkq8iD51uLfVKD4pU7b+OS8oqBAe9+xw25u +l8am1lTJ01mujIhweQmkfSPm3IxuBQKJ+0U0xedzP9JvWP7kbRMlhvypdTuItfN 9KzC3paxq4VKfJRbHJxUsbEGUo5d+H1BlMRYSqjYGltr -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:23 2026 by rpki-client