This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/yKP2nA7yymgE29-Up47_8mTwpbs.roa File: yKP2nA7yymgE29-Up47_8mTwpbs.roa (raw, json) Hash identifier: /Z6lbsZFXfhtYtUn2xJeLeR9w1jkClj8BOOR/WhoB0w= Subject key identifier: C8:A3:F6:9C:0E:F2:CA:68:04:DB:DF:94:A7:8E:FF:F2:64:F0:A5:BB Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019C4EB9EE0B13E80520063DBBD712570A56 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/yKP2nA7yymgE29-Up47_8mTwpbs.roa Signing time: Wed 11 Feb 2026 22:02:13 +0000 ROA not before: Wed 11 Feb 2026 22:02:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20115 IP address blocks: 66.9.96.0/20 maxlen: 24 66.117.8.0/22 maxlen: 24 77.223.192.0/21 maxlen: 24 77.223.200.0/23 maxlen: 24 79.139.64.0/23 maxlen: 24 83.142.200.0/21 maxlen: 24 88.135.100.0/22 maxlen: 24 88.135.104.0/21 maxlen: 24 93.119.184.0/21 maxlen: 24 94.26.110.0/23 maxlen: 24 94.101.103.0/24 maxlen: 24 121.127.56.0/21 maxlen: 24 176.222.48.0/22 maxlen: 24 195.133.202.0/23 maxlen: 24 198.145.112.0/22 maxlen: 24 205.134.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:4e:b9:ee:0b:13:e8:05:20:06:3d:bb:d7:12:57:0a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Feb 11 22:02:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8a3f69c0ef2ca6804dbdf94a78efff264f0a5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:3d:16:d5:2a:84:22:44:93:c1:e3:b2:73: c1:a9:eb:96:8d:91:00:f7:ae:0d:e4:6a:70:89:b3: 45:df:06:65:91:45:d3:5a:a7:20:32:5f:71:ec:bf: ee:02:2f:f0:40:b9:52:5d:63:18:11:fd:18:13:79: 50:1d:3b:c8:9e:7a:5c:e6:79:47:7e:37:23:9e:84: 80:e7:b2:76:2f:7a:2d:62:ff:86:f9:7c:bd:84:75: f9:f9:be:16:57:01:dc:41:bb:36:b8:08:38:83:06: fc:8a:fb:77:bd:4a:70:58:e2:1e:cb:f6:2d:59:79: 5b:bc:47:af:bd:b7:54:aa:ee:24:06:95:e0:04:bd: 33:68:8c:ba:1c:83:cd:70:d2:6e:fa:e3:e1:53:a4: c5:e7:f9:df:05:fb:cd:a7:ed:70:70:5d:44:2d:e8: 0e:cc:f2:58:88:3a:1d:01:69:75:9f:1f:49:18:f7: 00:76:e2:87:ba:43:6f:80:d6:5d:73:b3:dd:2e:b8: 2b:10:53:07:25:68:69:a4:71:40:dc:1d:b6:2f:52: 71:a3:8e:e5:d3:04:2e:68:cc:93:c0:94:7c:42:ce: cb:d5:2e:33:50:3e:6c:fe:2d:ea:59:4c:03:e8:a2: 04:bd:b5:c5:df:72:47:c0:dd:24:da:ae:1c:8c:f1: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A3:F6:9C:0E:F2:CA:68:04:DB:DF:94:A7:8E:FF:F2:64:F0:A5:BB X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/yKP2nA7yymgE29-Up47_8mTwpbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.9.96.0/20 66.117.8.0/22 77.223.192.0-77.223.201.255 79.139.64.0/23 83.142.200.0/21 88.135.100.0-88.135.111.255 93.119.184.0/21 94.26.110.0/23 94.101.103.0/24 121.127.56.0/21 176.222.48.0/22 195.133.202.0/23 198.145.112.0/22 205.134.244.0/22 Signature Algorithm: sha256WithRSAEncryption 25:4b:5e:ed:36:0b:39:62:62:d1:86:53:83:c4:e7:35:97:f1: b1:8d:13:19:4d:bf:13:c2:34:23:8e:9d:ae:75:e9:a5:b7:c1: 4c:45:97:a7:4b:bc:79:d3:72:38:fb:d7:25:8b:4f:05:19:04: b4:c4:50:db:49:1a:e6:59:86:f4:74:e4:86:d1:fe:4f:a7:d9: 10:80:0d:ac:35:78:eb:59:43:9e:37:e1:26:78:40:ce:88:76: ef:44:14:bb:60:c2:98:91:74:9d:a8:29:f2:a3:bc:5b:6c:21: 8f:94:af:c8:63:0d:91:0f:4d:76:c2:68:d9:f0:50:16:5e:7e: 39:98:b6:1f:b7:5d:cf:1b:c0:2f:0b:8f:07:14:65:66:45:4b: 74:4c:6f:e6:49:8c:65:7b:8c:96:95:6f:cc:96:5b:b6:7e:40: 81:85:d0:9d:77:03:27:71:cb:4c:99:24:9b:0a:a0:7f:b8:0c: 36:35:66:6a:d2:b3:76:f7:53:e0:22:fe:cb:37:ad:df:b0:30: d4:a8:ba:a3:38:7d:8f:e6:4c:66:4e:f4:75:a7:29:dd:41:aa: a7:11:09:5f:30:88:80:c2:1c:ad:58:f2:31:25:dc:11:46:12: e8:69:75:a5:7f:cf:e2:ad:db:0e:cb:d4:f8:d6:2d:58:a4:0f: d9:ac:76:0c -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZxOue4LE+gFIAY9u9cSVwpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMjExMjIwMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGEzZjY5YzBlZjJjYTY4MDRkYmRmOTRhNzhlZmZmMjY0ZjBhNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yE9FtUqhCJEk8HjsnPBqeuWjZEA 964N5GpwibNF3wZlkUXTWqcgMl9x7L/uAi/wQLlSXWMYEf0YE3lQHTvInnpc5nlH fjcjnoSA57J2L3otYv+G+Xy9hHX5+b4WVwHcQbs2uAg4gwb8ivt3vUpwWOIey/Yt WXlbvEevvbdUqu4kBpXgBL0zaIy6HIPNcNJu+uPhU6TF5/nfBfvNp+1wcF1ELegO zPJYiDodAWl1nx9JGPcAduKHukNvgNZdc7PdLrgrEFMHJWhppHFA3B22L1Jxo47l 0wQuaMyTwJR8Qs7L1S4zUD5s/i3qWUwD6KIEvbXF33JHwN0k2q4cjPHMOQIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFMij9pwO8spoBNvflKeO//Jk8KW7MB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEveUtQMm5BN3l5bWdFMjktVXA0N184bVR3cGJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQEQglgAwQC QnUIMAwDBAZN38ADBAFN38gDBAFPi0ADBANTjsgwDAMEAliHZAMEBFiHYAMEA113 uAMEAV4abgMEAF5lZwMEA3l/OAMEArDeMAMEAcOFygMEAsaRcAMEAs2G9DANBgkq hkiG9w0BAQsFAAOCAQEAJUte7TYLOWJi0YZTg8TnNZfxsY0TGU2/E8I0I46drnXp pbfBTEWXp0u8edNyOPvXJYtPBRkEtMRQ20ka5lmG9HTkhtH+T6fZEIANrDV461lD njfhJnhAzoh270QUu2DCmJF0nagp8qO8W2whj5SvyGMNkQ9NdsJo2fBQFl5+OZi2 H7ddzxvALwuPBxRlZkVLdExv5kmMZXuMlpVvzJZbtn5AgYXQnXcDJ3HLTJkkmwqg f7gMNjVmatKzdvdT4CL+yzet37Aw1Ki6ozh9j+ZMZk70dacp3UGqpxEJXzCIgMIc rVjyMSXcEUYS6Gl1pX/P4q3bDsvU+NYtWKQP2ax2DA== -----END CERTIFICATE-----Generated at Thu Feb 12 17:24:40 2026 by rpki-client