This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yZypMalDZN_1H34j86whs9HOsns.roa File: yZypMalDZN_1H34j86whs9HOsns.roa (raw, json) Hash identifier: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g= Subject key identifier: C9:9C:A9:31:A9:43:64:DF:F5:1F:7E:23:F3:AC:21:B3:D1:CE:B2:7B Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb Certificate serial: 019B7D5BF761E937333D189A7A9E0A7A0520 Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yZypMalDZN_1H34j86whs9HOsns.roa Signing time: Fri 02 Jan 2026 06:18:57 +0000 ROA not before: Fri 02 Jan 2026 06:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12941 IP address blocks: 185.104.204.0/22 maxlen: 22 2a06:3380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f7:61:e9:37:33:3d:18:9a:7a:9e:0a:7a:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb Validity Not Before: Jan 2 06:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c99ca931a94364dff51f7e23f3ac21b3d1ceb27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c9:ad:50:54:07:83:a2:b1:4f:3c:b0:9f:af: da:77:c3:bc:0d:87:49:17:5a:03:04:2d:59:d4:2a: fb:37:e4:a7:28:23:1f:c9:13:5b:a3:1a:35:10:7f: 41:65:03:61:72:a4:2b:d1:f3:0c:54:5d:64:c9:00: 78:ec:d3:e5:a2:25:87:da:1b:eb:a4:85:9f:3e:75: 27:c1:f3:68:cb:5c:0a:eb:50:b8:ef:6c:45:59:01: 1b:11:20:da:14:94:b6:21:97:3a:64:a9:e5:40:3c: f1:c4:c1:b7:a8:dd:44:12:73:a7:47:28:0d:e7:4d: 7c:4f:c6:f6:8a:d6:e8:20:34:13:43:85:bf:17:a5: 50:7d:6b:ec:ef:32:77:ae:d6:b1:3c:50:a1:06:91: 1f:1f:db:d7:f2:6b:20:f1:8e:85:a1:75:49:93:62: 22:d4:fe:48:bb:f5:2e:b8:ef:7d:6f:0b:ed:8e:66: 88:48:ac:04:73:46:4b:df:e5:d3:ac:f7:96:d9:04: 39:3d:4e:1b:5c:b4:3f:08:c6:bf:65:49:73:09:c6: d8:5a:de:20:9f:84:de:63:37:b3:a9:30:b8:b4:ec: a1:78:db:42:4d:d6:e9:c5:6b:ea:e4:df:06:8c:16: 7a:f2:57:9f:b6:5d:85:90:08:2a:03:34:f7:82:ed: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9C:A9:31:A9:43:64:DF:F5:1F:7E:23:F3:AC:21:B3:D1:CE:B2:7B X509v3 Authority Key Identifier: keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yZypMalDZN_1H34j86whs9HOsns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.204.0/22 IPv6: 2a06:3380::/29 Signature Algorithm: sha256WithRSAEncryption 52:44:3e:92:a2:68:cb:05:28:cb:b8:b2:82:6e:0b:21:16:8d: a1:99:64:f0:66:a5:a7:e1:9d:2d:00:ab:78:e8:28:80:73:a3: 6a:91:11:18:fb:e0:4b:3d:21:62:7c:21:b3:b3:43:0b:ab:32: 2b:25:74:9b:ef:ed:a1:f4:04:79:f9:25:9d:cc:a4:2b:e8:1a: fc:9b:8e:2f:b1:1f:d8:c7:dd:b4:70:d8:c0:18:bf:ce:14:0b: 63:96:9a:59:22:26:8b:13:3c:b3:33:ea:33:d4:f2:08:ac:c1: 4a:ae:27:4b:7e:99:ee:df:dd:57:a0:66:46:e5:a4:1f:d0:6e: c5:4e:6d:7c:d0:ff:7a:f7:99:5e:e5:3c:31:ab:c3:c7:49:92: 9d:5e:0c:bf:cd:8f:28:51:fa:4e:1b:aa:2f:6e:89:fd:13:a4: be:09:c4:03:40:49:da:cf:96:b4:8a:dc:20:b8:3f:40:3e:5d: d7:ee:9d:60:88:b0:c0:b2:90:c5:9c:76:9b:17:af:32:7b:c5: 88:d0:68:d6:aa:31:aa:23:a2:9b:e8:65:be:11:b5:ae:16:f8: de:cc:c0:7e:20:b3:2e:22:3a:74:b9:d0:90:a0:d6:33:cf:2d: e2:bd:00:a8:95:5b:2d:22:f7:5e:cd:0e:e9:d7:4f:cd:80:d4: 42:90:82:7a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W/dh6TczPRiaep4KegUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5N2VkY2VkZWMzMjU0YjM1N2IwOTYxNWEwMmIxNmUwNmVi ZTYzZWIwHhcNMjYwMTAyMDYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTljYTkzMWE5NDM2NGRmZjUxZjdlMjNmM2FjMjFiM2QxY2ViMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMmtUFQHg6KxTzywn6/ad8O8DYdJ F1oDBC1Z1Cr7N+SnKCMfyRNboxo1EH9BZQNhcqQr0fMMVF1kyQB47NPloiWH2hvr pIWfPnUnwfNoy1wK61C472xFWQEbESDaFJS2IZc6ZKnlQDzxxMG3qN1EEnOnRygN 5018T8b2itboIDQTQ4W/F6VQfWvs7zJ3rtaxPFChBpEfH9vX8msg8Y6FoXVJk2Ii 1P5Iu/UuuO99bwvtjmaISKwEc0ZL3+XTrPeW2QQ5PU4bXLQ/CMa/ZUlzCcbYWt4g n4TeYzezqTC4tOyheNtCTdbpxWvq5N8GjBZ68leftl2FkAgqAzT3gu3oKwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMmcqTGpQ2Tf9R9+I/OsIbPRzrJ7MB8GA1UdIwQY MBaAFMl+3O3sMlSzV7CWFaArFuBuvmPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgt MzIzOWE4MWM5ZmM4LzEveVp5cE1hbERaTl8xSDM0ajg2d2hzOUhPc25zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgtMzIzOWE4MWM5ZmM4 LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWjMMA0E AgACMAcDBQMqBjOAMA0GCSqGSIb3DQEBCwUAA4IBAQBSRD6SomjLBSjLuLKCbgsh Fo2hmWTwZqWn4Z0tAKt46CiAc6NqkREY++BLPSFifCGzs0MLqzIrJXSb7+2h9AR5 +SWdzKQr6Br8m44vsR/Yx920cNjAGL/OFAtjlppZIiaLEzyzM+oz1PIIrMFKridL fpnu391XoGZG5aQf0G7FTm180P9695le5Twxq8PHSZKdXgy/zY8oUfpOG6ovbon9 E6S+CcQDQEnaz5a0itwguD9APl3X7p1giLDAspDFnHabF68ye8WI0GjWqjGqI6Kb 6GW+EbWuFvjezMB+ILMuIjp0udCQoNYzzy3ivQColVstIvdezQ7p10/NgNRCkIJ6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:07 2026 by rpki-client