This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/yggEv9ui6ICKlWbapXbZI_19UxI.roa File: yggEv9ui6ICKlWbapXbZI_19UxI.roa (raw, json) Hash identifier: wbaiUJKmCM34k4K4JfRSlpVn14tN3ETSC3SnnG+xIY0= Subject key identifier: CA:08:04:BF:DB:A2:E8:80:8A:95:66:DA:A5:76:D9:23:FD:7D:53:12 Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30 Certificate serial: 019B7F8515DEC12D5060DB438B16A0362F3C Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/yggEv9ui6ICKlWbapXbZI_19UxI.roa Signing time: Fri 02 Jan 2026 16:23:06 +0000 ROA not before: Fri 02 Jan 2026 16:23:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42008 IP address blocks: 212.8.192.0/19 maxlen: 24 212.15.192.0/19 maxlen: 24 2001:ae0::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:15:de:c1:2d:50:60:db:43:8b:16:a0:36:2f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30 Validity Not Before: Jan 2 16:23:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca0804bfdba2e8808a9566daa576d923fd7d5312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:ee:6e:ec:bc:f6:2c:ff:79:78:b1:65:49: 7e:13:34:67:77:e9:f3:c7:ac:ac:85:b7:2d:42:a6: 02:c1:5c:52:2d:c9:14:d2:59:f5:42:2e:cc:f1:95: 17:89:e7:2d:2a:de:e7:47:01:92:40:f8:ca:95:e4: db:79:a1:e0:27:0f:54:23:07:97:06:f0:5f:4d:4b: 80:09:12:81:7c:a5:52:15:21:0c:3f:03:ba:80:75: fd:aa:b8:58:0a:8d:82:1a:2f:d2:74:6c:f3:e1:76: 3e:89:c3:6a:a2:e6:8f:88:65:66:f1:de:32:29:48: 2c:1c:5f:8a:29:7c:30:f2:d8:92:d8:a8:6a:d0:df: 16:79:8a:f9:be:8f:af:e5:48:24:14:fd:aa:96:1a: 9a:d2:77:49:b8:6b:69:f8:59:10:1b:0f:a7:ed:e6: 8e:f2:2d:2d:cc:1e:40:33:5a:37:81:08:3f:02:a7: 74:46:32:32:d7:ca:4f:53:63:fd:38:45:32:ae:44: 6e:35:40:2a:1c:6c:a0:ed:f3:9d:40:e3:68:b1:ba: 22:7e:66:b1:03:50:90:65:39:51:ab:cc:1a:3f:87: d8:be:5e:7d:d7:52:03:54:32:d0:00:12:a9:f1:36: 5b:72:ab:6a:66:6c:98:4f:ab:5a:1c:2b:45:72:fb: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:04:BF:DB:A2:E8:80:8A:95:66:DA:A5:76:D9:23:FD:7D:53:12 X509v3 Authority Key Identifier: keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/yggEv9ui6ICKlWbapXbZI_19UxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.8.192.0/19 212.15.192.0/19 IPv6: 2001:ae0::/30 Signature Algorithm: sha256WithRSAEncryption 88:bb:9f:b3:10:5c:0a:2e:08:5c:67:5c:51:6b:fc:bf:02:1f: 08:da:22:ea:d8:ef:55:7f:56:0a:7c:ef:41:3b:a5:f2:e2:53: bf:8e:6a:58:80:c2:41:d7:bc:c9:ff:41:6f:d6:fb:fa:10:be: e7:37:f2:d7:d4:a9:bf:66:28:8c:dd:78:0f:75:bd:c7:6e:26: c1:fb:67:3d:e0:86:62:39:33:36:22:ae:eb:d3:4c:18:f8:e3: 43:58:63:1c:a5:43:76:8d:bc:0b:10:55:94:90:7f:e7:38:8d: d7:0e:83:b9:c2:da:2b:17:3c:43:e7:02:e5:f0:73:c2:32:6d: b5:da:a5:25:12:63:a8:16:e4:1a:06:fd:9d:e9:0d:cc:36:12: a7:d5:52:58:db:01:1e:9a:e4:2e:f0:dc:27:70:bc:4b:c0:13: bf:aa:3d:4a:69:69:4c:96:a4:18:ba:b1:3e:09:70:e1:90:14: 56:0e:dd:e5:18:e8:6f:59:33:23:e7:7b:bf:57:8d:4e:e6:f7: 72:1f:d3:50:76:81:7d:82:e5:f4:66:31:5f:a2:21:f7:37:06: 2b:64:cf:96:c9:9e:ef:05:b6:49:58:c9:c3:56:17:62:a7:ed: 85:92:2b:8e:e6:a4:5e:cc:93:21:78:ea:b6:76:ed:6e:6a:6c: 7a:5a:78:48 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/hRXewS1QYNtDixagNi88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwY2M5NWZjNDJmM2Q4MTkyMGY0NjRiMGYyMGM4YTUyMDNm MjFlMzAwHhcNMjYwMTAyMTYyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTA4MDRiZmRiYTJlODgwOGE5NTY2ZGFhNTc2ZDkyM2ZkN2Q1MzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q3ubuy89iz/eXixZUl+EzRnd+nz x6yshbctQqYCwVxSLckU0ln1Qi7M8ZUXiectKt7nRwGSQPjKleTbeaHgJw9UIweX BvBfTUuACRKBfKVSFSEMPwO6gHX9qrhYCo2CGi/SdGzz4XY+icNqouaPiGVm8d4y KUgsHF+KKXww8tiS2Khq0N8WeYr5vo+v5UgkFP2qlhqa0ndJuGtp+FkQGw+n7eaO 8i0tzB5AM1o3gQg/Aqd0RjIy18pPU2P9OEUyrkRuNUAqHGyg7fOdQONosboifmax A1CQZTlRq8waP4fYvl5911IDVDLQABKp8TZbcqtqZmyYT6taHCtFcvsbXQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMoIBL/bouiAipVm2qV22SP9fVMSMB8GA1UdIwQY MBaAFLDMlfxC89gZIPRksPIMilID8h4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc015Vl9FTHoyQmtnOUdTdzhneUtVZ1B5SGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lOTY4NzctMTEzMy00YjI5LWE2YmEt ODQ1M2MwZjEzNWQ2LzEveWdnRXY5dWk2SUNLbFdiYXBYYlpJXzE5VXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9lOTY4NzctMTEzMy00YjI5LWE2YmEtODQ1M2MwZjEzNWQ2 LzEvc015Vl9FTHoyQmtnOUdTdzhneUtVZ1B5SGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQF1AjAAwQF 1A/AMA0EAgACMAcDBQIgAQrgMA0GCSqGSIb3DQEBCwUAA4IBAQCIu5+zEFwKLghc Z1xRa/y/Ah8I2iLq2O9Vf1YKfO9BO6Xy4lO/jmpYgMJB17zJ/0Fv1vv6EL7nN/LX 1Km/ZiiM3XgPdb3HbibB+2c94IZiOTM2Iq7r00wY+ONDWGMcpUN2jbwLEFWUkH/n OI3XDoO5wtorFzxD5wLl8HPCMm212qUlEmOoFuQaBv2d6Q3MNhKn1VJY2wEemuQu 8NwncLxLwBO/qj1KaWlMlqQYurE+CXDhkBRWDt3lGOhvWTMj53u/V41O5vdyH9NQ doF9guX0ZjFfoiH3NwYrZM+WyZ7vBbZJWMnDVhdip+2FkiuO5qRezJMheOq2du1u amx6WnhI -----END CERTIFICATE-----Generated at Tue Feb 10 08:41:26 2026 by rpki-client