This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa File: ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa (raw, json) Hash identifier: nglQg5MmKlEjssrWx8wngl2AAIBCB6KoQKV4TEUoUr4= Subject key identifier: C9:C6:D0:4D:15:9D:8C:BF:50:BE:BD:F7:22:B9:DB:A9:71:F4:06:AB Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be Certificate serial: 019B77C67FC06EF7361B84E24525D9F2FEC3 Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17819 IP address blocks: 185.93.57.0/24 maxlen: 24 185.93.59.0/24 maxlen: 24 2a03:8fa0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7f:c0:6e:f7:36:1b:84:e2:45:25:d9:f2:fe:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9c6d04d159d8cbf50bebdf722b9dba971f406ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:d4:b4:49:a5:5f:6d:01:3b:48:a7:94:28: fa:73:cc:b0:5a:c6:4b:84:61:22:c0:76:85:1f:f6: 62:6c:ae:a5:6d:75:c3:00:9b:73:d1:94:6c:aa:06: 1d:f1:fa:5b:b3:6d:af:19:b6:8c:45:83:3c:79:a2: 2b:ad:f2:48:a3:2e:b5:55:a5:38:9f:33:ca:ac:f6: 53:22:7d:2f:d4:a2:9f:89:62:61:7a:c8:4d:4b:41: 07:1e:65:f0:bf:62:7a:25:59:1f:52:2e:fc:b3:f1: 95:df:93:94:ee:b0:2b:87:a8:b8:12:d2:e5:c5:63: 0c:ac:8a:3f:74:09:db:ac:a0:75:7a:62:a4:47:c4: f2:33:58:21:0b:80:3e:02:05:d2:5f:0c:77:b7:f4: 56:4b:c6:97:6e:a3:94:11:00:50:a3:96:24:65:87: 22:e8:0e:03:15:6d:98:21:ca:c4:c7:64:1a:60:4b: 80:39:48:37:19:d9:81:34:34:89:45:01:01:66:3f: 46:b0:df:a6:bd:e5:19:86:69:37:b3:68:b0:23:55: d6:96:74:05:ca:3d:0f:c1:2c:9c:55:6c:b6:4a:63: 8e:04:e7:68:a5:76:e7:bc:dc:ac:27:87:6a:6d:73: b6:20:d7:2e:7f:a3:f0:6b:be:bd:b5:5b:38:92:ab: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C6:D0:4D:15:9D:8C:BF:50:BE:BD:F7:22:B9:DB:A9:71:F4:06:AB X509v3 Authority Key Identifier: keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.57.0/24 185.93.59.0/24 IPv6: 2a03:8fa0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 51:5e:0c:92:eb:6d:e9:c6:e2:d7:0a:92:d5:12:cd:0d:b1:67: 35:06:e7:3c:e0:fb:cf:37:73:b6:39:7d:e8:a3:36:25:4d:27: cb:99:29:d2:91:3c:d3:15:31:89:e9:c0:3a:f3:37:02:8d:62: be:25:53:ca:17:61:43:5f:74:56:7f:00:70:ef:c5:bf:d9:8b: f9:9d:96:f2:de:59:93:b8:b7:49:4e:2d:2c:00:28:27:c1:3b: 5e:19:58:0f:d2:17:5c:0c:19:6e:a7:10:96:19:22:11:29:82: 72:17:51:8a:63:42:da:72:14:e2:c5:a0:51:c8:9e:d0:7f:4b: cc:dc:be:0f:61:3f:2c:70:bc:75:27:3b:3e:2d:fc:9f:c0:73: d3:57:4a:d3:5e:09:43:07:b3:1e:28:13:f6:e8:a0:7d:0d:9a: 55:4e:d4:7a:76:d8:c0:f3:04:76:8c:3d:82:3e:a6:20:26:4a: bc:eb:af:7e:24:b2:72:6c:9d:84:7b:ad:3b:41:74:02:32:bf: 4f:63:23:1e:2c:7a:49:cf:a5:94:e4:2c:b0:02:6e:14:18:d1: d4:6c:8a:3d:a7:b8:00:78:9f:6e:fd:b2:20:57:d1:a4:89:1d: db:ea:a4:a6:61:d0:ca:4c:f4:70:7e:03:e3:3f:08:78:93:c2: dd:a5:56:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3xn/Abvc2G4TiRSXZ8v7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMmQ3YzIzOGU4OWRjZDUyZjZmYjIyOTZkZmE0NzU4YzYx Yzk3YmUwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWM2ZDA0ZDE1OWQ4Y2JmNTBiZWJkZjcyMmI5ZGJhOTcxZjQwNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoPUtEmlX20BO0inlCj6c8ywWsZL hGEiwHaFH/ZibK6lbXXDAJtz0ZRsqgYd8fpbs22vGbaMRYM8eaIrrfJIoy61VaU4 nzPKrPZTIn0v1KKfiWJheshNS0EHHmXwv2J6JVkfUi78s/GV35OU7rArh6i4EtLl xWMMrIo/dAnbrKB1emKkR8TyM1ghC4A+AgXSXwx3t/RWS8aXbqOUEQBQo5YkZYci 6A4DFW2YIcrEx2QaYEuAOUg3GdmBNDSJRQEBZj9GsN+mveUZhmk3s2iwI1XWlnQF yj0PwSycVWy2SmOOBOdopXbnvNysJ4dqbXO2INcuf6Pwa769tVs4kqubmwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFMnG0E0VnYy/UL699yK526lx9AarMB8GA1UdIwQY MBaAFAwtfCOOidzVL2+yKW36R1jGHJe+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREMxOEk0NkozTlV2YjdJcGJmcEhXTVljbDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80NjkxNmUtZTg2Yy00NGE4LThhYjkt NTM4NDliYWYxYjQ1LzEveWNiUVRSV2RqTDlRdnIzM0lybmJxWEgwQnFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80NjkxNmUtZTg2Yy00NGE4LThhYjktNTM4NDliYWYxYjQ1 LzEvREMxOEk0NkozTlV2YjdJcGJmcEhXTVljbDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAuV05AwQA uV07MA4EAgACMAgDBgQqA4+gEDANBgkqhkiG9w0BAQsFAAOCAQEAUV4Mkutt6cbi 1wqS1RLNDbFnNQbnPOD7zzdztjl96KM2JU0ny5kp0pE80xUxienAOvM3Ao1iviVT yhdhQ190Vn8AcO/Fv9mL+Z2W8t5Zk7i3SU4tLAAoJ8E7XhlYD9IXXAwZbqcQlhki ESmCchdRimNC2nIU4sWgUcie0H9LzNy+D2E/LHC8dSc7Pi38n8Bz01dK014JQwez HigT9uigfQ2aVU7UenbYwPMEdow9gj6mICZKvOuvfiSycmydhHutO0F0AjK/T2Mj Hix6Sc+llOQssAJuFBjR1GyKPae4AHifbv2yIFfRpIkd2+qkpmHQykz0cH4D4z8I eJPC3aVWwQ== -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:49 2026 by rpki-client