This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YynkIBSddb37_jtyT2F1uYbJqRw.roa File: YynkIBSddb37_jtyT2F1uYbJqRw.roa (raw, json) Hash identifier: R9kryQDC7ExqGW8Ddj4PY4Bp8IOS3m/5jADrPT2o3Yg= Subject key identifier: 63:29:E4:20:14:9D:75:BD:FB:FE:3B:72:4F:61:75:B9:86:C9:A9:1C Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA550714FB54A4F08DAEBCC3F49A4A3 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YynkIBSddb37_jtyT2F1uYbJqRw.roa Signing time: Thu 01 Jan 2026 22:19:50 +0000 ROA not before: Thu 01 Jan 2026 22:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49544 IP address blocks: 45.84.218.0/24 maxlen: 24 2a0f:e382::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:50:71:4f:b5:4a:4f:08:da:eb:cc:3f:49:a4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6329e420149d75bdfbfe3b724f6175b986c9a91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:98:ea:52:36:bb:05:68:03:ed:19:8a:7e: 4c:ac:9d:65:26:b3:2c:ec:3a:e4:54:bf:cf:86:20: 60:57:4a:c6:96:7c:5d:4f:e2:05:2a:0b:25:7e:de: f5:25:f8:71:4d:51:c6:46:40:68:3f:17:16:7d:4b: f2:64:53:9c:ec:6d:88:7d:be:71:62:4d:f4:26:5f: 91:fc:7e:ee:4b:c2:5e:13:3e:38:6f:f4:5b:78:52: 92:38:2f:c7:a6:16:94:e1:0d:f9:e7:fd:a2:d6:5d: c0:d4:49:94:cf:5f:62:77:7c:cf:bd:c9:5f:cb:6c: d2:bd:e2:47:c2:b3:63:ed:97:c1:20:cf:e7:a7:c7: b2:d6:50:68:36:2c:89:60:1d:f7:6f:1e:21:1f:dd: 97:02:30:80:87:cd:eb:b1:ce:0c:56:ec:d2:71:1d: 59:95:9a:7a:b6:6a:ae:20:f6:11:30:33:de:a8:ba: 05:b8:48:0d:77:e3:d6:2e:14:08:4f:96:39:ef:52: c7:40:6f:de:11:ed:76:77:95:e4:75:66:0e:8c:9d: 10:2f:62:13:2b:71:ce:eb:a6:93:f8:0d:29:3c:81: a4:32:ea:3c:14:66:39:b8:81:45:34:72:7b:f7:48: 92:ae:84:21:02:cd:94:08:83:27:a3:68:f7:ea:69: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:29:E4:20:14:9D:75:BD:FB:FE:3B:72:4F:61:75:B9:86:C9:A9:1C X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/YynkIBSddb37_jtyT2F1uYbJqRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.218.0/24 IPv6: 2a0f:e382::/32 Signature Algorithm: sha256WithRSAEncryption 58:33:8e:fe:96:d3:40:01:72:6c:e6:69:3e:46:1c:99:9e:36: a3:23:c0:47:63:a7:f3:21:37:fc:db:68:c5:19:85:50:4e:db: 7e:a7:cc:32:1d:02:78:47:31:38:f8:84:09:79:9c:00:d7:17: 69:2e:ae:fd:e9:21:24:b1:0d:43:6b:c5:fe:ad:18:9d:89:6f: 4f:79:54:7c:5d:03:87:d5:20:99:71:b5:06:8e:4f:b0:d7:26: 14:f6:c9:b0:39:c1:ee:f8:ff:0b:00:df:e4:27:c9:8b:21:ac: fe:67:ef:41:bd:10:7c:3b:37:7f:20:8f:18:93:ac:fa:52:40: eb:0b:68:a4:a2:58:65:46:3d:73:08:e1:4b:fd:19:8a:7c:aa: ef:68:c1:28:c5:82:02:5e:cc:8c:b6:f2:f3:38:af:74:70:3f: 47:d0:04:7a:37:4d:a2:25:82:05:ce:26:37:7d:17:b3:8c:fe: a2:c9:25:37:f6:b9:26:33:41:0b:52:62:11:fb:64:c0:d1:f7: 2d:bd:6a:fc:dc:6b:65:c8:da:2c:98:db:95:c8:57:7e:ff:ac: 83:d6:64:dd:e2:23:b9:ee:7b:b1:cc:aa:01:71:aa:ff:75:64: d3:f2:20:14:6b:4e:df:2a:19:4c:8b:e9:08:5e:2a:15:b8:62: 8f:3b:6a:32 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pVBxT7VKTwja68w/SaSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzI5ZTQyMDE0OWQ3NWJkZmJmZTNiNzI0ZjYxNzViOTg2YzlhOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkWY6lI2uwVoA+0Zin5MrJ1lJrMs 7DrkVL/PhiBgV0rGlnxdT+IFKgslft71JfhxTVHGRkBoPxcWfUvyZFOc7G2Ifb5x Yk30Jl+R/H7uS8JeEz44b/RbeFKSOC/HphaU4Q355/2i1l3A1EmUz19id3zPvclf y2zSveJHwrNj7ZfBIM/np8ey1lBoNiyJYB33bx4hH92XAjCAh83rsc4MVuzScR1Z lZp6tmquIPYRMDPeqLoFuEgNd+PWLhQIT5Y571LHQG/eEe12d5XkdWYOjJ0QL2IT K3HO66aT+A0pPIGkMuo8FGY5uIFFNHJ790iSroQhAs2UCIMno2j36mmuzQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGMp5CAUnXW9+/47ck9hdbmGyakcMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvWXlua0lCU2RkYjM3X2p0eVQyRjF1WWJKcVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVTaMA0E AgACMAcDBQAqD+OCMA0GCSqGSIb3DQEBCwUAA4IBAQBYM47+ltNAAXJs5mk+RhyZ njajI8BHY6fzITf822jFGYVQTtt+p8wyHQJ4RzE4+IQJeZwA1xdpLq796SEksQ1D a8X+rRidiW9PeVR8XQOH1SCZcbUGjk+w1yYU9smwOcHu+P8LAN/kJ8mLIaz+Z+9B vRB8Ozd/II8Yk6z6UkDrC2ikolhlRj1zCOFL/RmKfKrvaMEoxYICXsyMtvLzOK90 cD9H0AR6N02iJYIFziY3fRezjP6iySU39rkmM0ELUmIR+2TA0fctvWr83GtlyNos mNuVyFd+/6yD1mTd4iO57nuxzKoBcar/dWTT8iAUa07fKhlMi+kIXioVuGKPO2oy -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:17 2026 by rpki-client