This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/yl_8RQWT42NWgczzOlDn0gK7u0w.roa File: yl_8RQWT42NWgczzOlDn0gK7u0w.roa (raw, json) Hash identifier: AZgf7E7lVvGrL5j+ea4NwUOdqabLA6/5isp7lMtBrHY= Subject key identifier: CA:5F:FC:45:05:93:E3:63:56:81:CC:F3:3A:50:E7:D2:02:BB:BB:4C Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900 Certificate serial: 019B7E383B407F8F6E427338875CD942BBD1 Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/yl_8RQWT42NWgczzOlDn0gK7u0w.roa Signing time: Fri 02 Jan 2026 10:19:32 +0000 ROA not before: Fri 02 Jan 2026 10:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208221 IP address blocks: 185.84.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3b:40:7f:8f:6e:42:73:38:87:5c:d9:42:bb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900 Validity Not Before: Jan 2 10:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca5ffc450593e3635681ccf33a50e7d202bbbb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:03:c6:9e:a9:e2:c0:60:00:e4:3a:18:99: 7f:38:0b:24:27:88:aa:e5:04:be:ad:62:dc:28:40: 91:66:8a:89:95:90:2c:fb:21:a1:55:bb:6d:f9:c6: 2a:29:8c:50:ec:0e:b9:49:49:da:f5:2e:ea:7e:ab: 6d:42:4b:66:9d:0d:80:77:e1:59:c9:e1:bb:e2:75: 68:ee:11:34:6f:79:bc:fd:48:17:fb:e9:1d:fa:9f: 0f:e2:16:d0:4a:ac:35:fb:49:d0:56:6d:89:c7:d0: 2a:e4:fb:43:ae:dc:34:ba:36:77:85:15:8c:9e:f5: 28:80:60:ff:ee:9c:6f:3b:bd:30:d8:45:18:5d:a1: 6e:f7:c8:00:fa:08:bd:80:af:06:72:5c:bb:cc:26: dc:12:66:8b:27:bb:5d:db:2b:af:29:1f:3d:95:71: 16:42:6e:f7:ba:89:a1:f9:4f:e2:81:6c:c6:6a:0c: eb:d4:68:29:ad:55:92:aa:48:a0:a4:99:56:e4:87: 09:62:5f:1c:22:e7:71:a4:50:6c:ec:23:3d:87:df: d6:46:31:07:fe:9c:73:ee:47:8f:41:82:81:08:fa: 25:d2:fb:91:7b:95:fb:cd:df:5f:fa:98:96:22:3d: 50:d3:fd:12:0a:33:ff:77:5e:a5:9b:09:3d:ce:b8: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5F:FC:45:05:93:E3:63:56:81:CC:F3:3A:50:E7:D2:02:BB:BB:4C X509v3 Authority Key Identifier: keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/yl_8RQWT42NWgczzOlDn0gK7u0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.172.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:d8:a1:d8:1d:b7:26:7c:22:33:ff:dd:5c:7a:69:c1:44:3c: 57:08:c2:53:f0:28:31:97:b5:99:b8:ba:02:56:6f:39:d3:ec: fa:5a:53:a7:da:ab:9a:5c:e0:77:bc:5c:5e:e6:41:fd:b3:34: 98:9f:00:fa:cd:4c:42:c2:06:b0:5f:92:5f:56:d6:16:d1:4c: ff:09:64:d3:84:2c:af:c8:ad:2e:81:73:58:97:cf:56:3f:5a: e6:77:39:7b:f8:df:55:f4:88:9b:83:34:f1:40:04:db:1f:d3: a3:87:ce:a8:8c:ee:08:1c:e6:a5:51:81:5c:30:97:81:06:ce: 90:e5:95:33:44:a0:5f:89:7b:9d:63:5e:29:25:26:8f:db:8d: 00:c1:e2:b1:f1:8e:1e:04:a6:2d:fa:ca:b7:13:76:4d:f2:c8: 92:f3:cc:ae:52:8e:b0:7c:94:60:84:95:29:6c:c7:cf:c8:8c: b8:96:e6:af:e3:9b:80:6f:ab:5c:df:b5:36:bc:33:57:2e:55: 19:4e:82:da:49:56:ee:6f:39:77:99:59:29:54:92:f4:8e:40: 3f:8b:65:16:0b:03:f2:55:fe:f5:29:93:58:97:13:59:59:e7: a2:64:16:a6:19:e8:ab:58:0c:be:85:b8:7e:57:34:c2:06:49: d8:9e:df:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODtAf49uQnM4h1zZQrvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlN2Y3NDdkZjVmMjQzNTMxNTRkYzRkNGJmNzBkMmRkY2I1 M2U5MDAwHhcNMjYwMTAyMTAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTVmZmM0NTA1OTNlMzYzNTY4MWNjZjMzYTUwZTdkMjAyYmJiYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQcDxp6p4sBgAOQ6GJl/OAskJ4iq 5QS+rWLcKECRZoqJlZAs+yGhVbtt+cYqKYxQ7A65SUna9S7qfqttQktmnQ2Ad+FZ yeG74nVo7hE0b3m8/UgX++kd+p8P4hbQSqw1+0nQVm2Jx9Aq5PtDrtw0ujZ3hRWM nvUogGD/7pxvO70w2EUYXaFu98gA+gi9gK8Gcly7zCbcEmaLJ7td2yuvKR89lXEW Qm73uomh+U/igWzGagzr1GgprVWSqkigpJlW5IcJYl8cIudxpFBs7CM9h9/WRjEH /pxz7kePQYKBCPol0vuRe5X7zd9f+piWIj1Q0/0SCjP/d16lmwk9zrh4hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMpf/EUFk+NjVoHM8zpQ59ICu7tMMB8GA1UdIwQY MBaAFK5/dH318kNTFU3E1L9w0t3LU+kAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2Et YzZmMWU2YWM5YmE5LzEveWxfOFJRV1Q0Mk5XZ2N6ek9sRG4wZ0s3dTB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2EtYzZmMWU2YWM5YmE5 LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVSsMA0G CSqGSIb3DQEBCwUAA4IBAQB92KHYHbcmfCIz/91cemnBRDxXCMJT8Cgxl7WZuLoC Vm850+z6WlOn2quaXOB3vFxe5kH9szSYnwD6zUxCwgawX5JfVtYW0Uz/CWTThCyv yK0ugXNYl89WP1rmdzl7+N9V9IibgzTxQATbH9Ojh86ojO4IHOalUYFcMJeBBs6Q 5ZUzRKBfiXudY14pJSaP240AweKx8Y4eBKYt+sq3E3ZN8siS88yuUo6wfJRghJUp bMfPyIy4luav45uAb6tc37U2vDNXLlUZToLaSVbubzl3mVkpVJL0jkA/i2UWCwPy Vf71KZNYlxNZWeeiZBamGeirWAy+hbh+VzTCBknYnt/w -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:43 2026 by rpki-client