This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/yfVS_2kk-uHktNjsFEZtdVuHL48.roa File: yfVS_2kk-uHktNjsFEZtdVuHL48.roa (raw, json) Hash identifier: G0Cy8TBWtX3HCmdmOFr3FXRyCZ+xdfsoAZfGcB4o49c= Subject key identifier: C9:F5:52:FF:69:24:FA:E1:E4:B4:D8:EC:14:46:6D:75:5B:87:2F:8F Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Certificate serial: 019B7C1332032B5D3A9C1D88BF180A354171 Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/yfVS_2kk-uHktNjsFEZtdVuHL48.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197740 IP address blocks: 185.246.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:32:03:2b:5d:3a:9c:1d:88:bf:18:0a:35:41:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9f552ff6924fae1e4b4d8ec14466d755b872f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4b:d7:53:0a:4a:ad:5c:1f:8b:6f:8a:56:22: 20:36:0d:4f:12:8a:7e:af:1e:fa:15:f6:44:74:1d: 7e:c4:b3:3a:8f:19:bf:32:08:7e:05:aa:77:68:27: b8:e8:66:3c:f2:e1:3b:de:8c:61:6b:65:b7:8f:c7: 7c:7c:0a:62:bd:f4:71:31:ab:bb:a7:bf:40:a5:d2: 55:0f:bf:89:ff:33:a7:89:0f:cb:26:83:47:49:d7: 2c:ed:85:97:40:c4:b7:6a:d1:ae:88:a2:d7:09:fd: da:9d:ca:6c:57:b4:ff:3c:d1:07:04:43:aa:e1:18: 29:48:06:2e:31:c6:26:72:34:c6:3c:a9:97:26:2a: f6:9d:82:38:ff:92:ef:6c:ba:9b:c0:23:05:db:21: 3d:db:91:9e:16:40:53:b9:39:54:70:0d:9d:7d:2c: 78:87:06:69:2b:d9:06:6a:ad:67:44:f1:49:c4:ee: 43:72:ef:c1:65:7c:45:70:d3:fb:09:aa:b6:ff:a3: f1:d4:2c:3f:9f:0a:fb:b7:60:56:5b:a9:84:db:6f: d8:79:dd:58:8c:5e:31:08:76:04:a0:3b:7f:fd:d0: 0f:82:7f:77:18:00:29:a6:c1:18:73:30:bf:0d:40: c7:6e:34:3e:21:5a:2b:d8:41:6a:9e:b4:a7:6b:9f: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F5:52:FF:69:24:FA:E1:E4:B4:D8:EC:14:46:6D:75:5B:87:2F:8F X509v3 Authority Key Identifier: keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/yfVS_2kk-uHktNjsFEZtdVuHL48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.199.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ca:a5:d6:ba:ff:67:84:ad:0e:af:09:eb:67:8a:00:b0:32: 3c:14:41:96:42:98:ef:88:d6:29:50:cb:14:94:cc:93:51:8e: 06:de:fe:38:f3:bc:96:2c:aa:0d:e1:02:3a:8d:2f:c1:bf:85: de:ea:ce:af:e9:84:21:3e:28:6e:ac:3d:a5:56:c4:36:7a:00: 06:39:a3:48:95:f8:53:bb:49:61:6d:f1:27:8d:3a:2d:b5:b8: c7:81:df:7c:a2:0b:e2:8e:1c:4d:46:ca:48:ca:b5:5e:74:79: 38:5a:80:1d:c3:56:eb:0a:42:94:85:22:da:15:f9:86:a4:e4: 18:60:f6:98:6c:73:d8:1d:d8:61:64:9b:43:96:21:8e:b8:58: 40:39:df:9f:76:fa:54:80:53:6f:85:f2:3a:1a:89:8c:91:13: 59:6b:a4:60:e7:70:27:ad:b4:7b:bf:d0:a5:9f:4a:5a:5c:19: 91:d2:42:df:95:80:51:ba:0b:dd:f1:47:61:1d:5c:6e:3f:14: 0e:75:d6:dd:6d:53:9f:ef:9f:87:ba:71:dc:7e:f8:4a:45:8f: d9:fe:19:cc:a9:6a:ea:33:33:b5:79:82:ef:53:89:bd:6f:bc: dd:b5:58:ee:9d:a7:bd:fb:34:71:cb:7f:95:f7:ca:6f:b1:53: a7:04:0d:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzIDK106nB2IvxgKNUFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3 MDJmNGEwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWY1NTJmZjY5MjRmYWUxZTRiNGQ4ZWMxNDQ2NmQ3NTViODcyZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UvXUwpKrVwfi2+KViIgNg1PEop+ rx76FfZEdB1+xLM6jxm/Mgh+Bap3aCe46GY88uE73oxha2W3j8d8fApivfRxMau7 p79ApdJVD7+J/zOniQ/LJoNHSdcs7YWXQMS3atGuiKLXCf3ancpsV7T/PNEHBEOq 4RgpSAYuMcYmcjTGPKmXJir2nYI4/5LvbLqbwCMF2yE925GeFkBTuTlUcA2dfSx4 hwZpK9kGaq1nRPFJxO5Dcu/BZXxFcNP7Caq2/6Px1Cw/nwr7t2BWW6mE22/Yed1Y jF4xCHYEoDt//dAPgn93GAAppsEYczC/DUDHbjQ+IVor2EFqnrSna58QWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMn1Uv9pJPrh5LTY7BRGbXVbhy+PMB8GA1UdIwQY MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt MmM0OGNiMjk4NjQ2LzEveWZWU18ya2stdUhrdE5qc0ZFWnRkVnVITDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2 LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufbHMA0G CSqGSIb3DQEBCwUAA4IBAQAHyqXWuv9nhK0OrwnrZ4oAsDI8FEGWQpjviNYpUMsU lMyTUY4G3v4487yWLKoN4QI6jS/Bv4Xe6s6v6YQhPihurD2lVsQ2egAGOaNIlfhT u0lhbfEnjTottbjHgd98ogvijhxNRspIyrVedHk4WoAdw1brCkKUhSLaFfmGpOQY YPaYbHPYHdhhZJtDliGOuFhAOd+fdvpUgFNvhfI6GomMkRNZa6Rg53AnrbR7v9Cl n0paXBmR0kLflYBRugvd8UdhHVxuPxQOddbdbVOf75+HunHcfvhKRY/Z/hnMqWrq MzO1eYLvU4m9b7zdtVjunae9+zRxy3+V98pvsVOnBA2j -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:47 2026 by rpki-client