This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/yncM80S6bhOyfcIc9bG9ql3nGdU.roa File: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (raw, json) Hash identifier: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U= Subject key identifier: CA:77:0C:F3:44:BA:6E:13:B2:7D:C2:1C:F5:B1:BD:AA:5D:E7:19:D5 Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779 Certificate serial: 019B77C6ED7B675F353F228EAA81388C641A Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/yncM80S6bhOyfcIc9bG9ql3nGdU.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 85.204.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ed:7b:67:5f:35:3f:22:8e:aa:81:38:8c:64:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca770cf344ba6e13b27dc21cf5b1bdaa5de719d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:bc:ae:f7:bd:e0:0d:98:89:d0:65:f1:d1: ea:6e:d9:21:af:7a:e7:27:1f:1b:56:7f:9a:32:6f: 11:75:63:a2:04:2f:c2:19:b6:12:6e:e2:a3:17:c3: e5:3e:c5:f6:28:7d:cd:91:6f:a3:a9:d0:ff:de:0e: 5a:dc:88:18:3d:f9:03:25:72:d4:a4:1b:da:c5:e1: 40:27:31:0b:4f:69:8c:80:fe:9a:5f:d4:73:d7:51: 35:a6:fe:90:af:eb:54:b7:98:83:f0:2b:f0:71:72: 06:ab:81:57:e2:cc:b8:ec:5e:1b:e2:61:27:ac:2d: ac:a3:af:a9:de:f4:2d:be:9d:56:f7:3f:79:43:26: ea:f0:a5:3c:41:fc:0f:3f:e7:d3:b7:d3:0b:87:58: 5d:86:f8:e1:a1:98:de:46:f5:25:4e:ae:bf:54:32: ca:11:a5:1c:ec:34:7f:c9:e1:aa:17:12:ea:3f:ee: 50:f1:5f:1d:b7:55:28:d1:5e:8f:2f:28:a2:10:10: b5:38:90:b2:7b:3a:3c:c5:a3:cc:3a:67:d1:45:f8: 82:76:6f:0e:1f:b8:de:3c:b3:23:d6:25:dc:d4:0d: 54:8e:f9:9f:5c:56:f4:71:3f:fc:13:4e:8c:df:fb: 4c:6f:ee:73:d5:87:2e:bc:9c:3d:0a:23:20:61:c0: 7c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:77:0C:F3:44:BA:6E:13:B2:7D:C2:1C:F5:B1:BD:AA:5D:E7:19:D5 X509v3 Authority Key Identifier: keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/yncM80S6bhOyfcIc9bG9ql3nGdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.120.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:aa:31:0f:9b:ce:03:73:62:9e:9b:c1:b4:a9:ea:bd:de:19: 73:8e:08:76:de:de:a6:ea:58:87:f7:7a:9c:e7:1b:c3:42:5f: bc:f4:44:ba:24:cc:9a:91:e7:c5:c3:f4:fd:25:14:38:02:18: d2:2d:ae:fa:46:5e:4b:37:eb:31:9e:1b:1e:2a:ff:b1:cc:d0: db:fe:3c:74:e0:09:eb:a3:1c:2d:b0:6c:53:7c:c6:7f:ec:a6: 6b:df:51:41:9d:fc:29:a8:60:fe:4e:1d:2d:6e:c9:cb:ba:d0: b8:a3:7c:45:17:a2:b3:e4:44:ea:ba:ce:18:6a:bb:4d:e4:7a: 1e:93:73:77:79:45:b7:d5:3a:4e:d6:57:57:1e:f8:87:af:14: 6f:7d:7c:3f:b6:7f:a8:31:b6:75:c8:29:35:38:0a:97:c1:76: a8:9e:c8:30:e5:d8:a0:67:a5:13:7e:f3:8a:d5:f7:16:56:a5: 90:ab:bd:79:40:b1:c3:62:0d:e8:7a:47:dc:6e:3b:26:c0:11: d2:b9:61:4c:54:9c:8a:3e:cb:eb:eb:48:21:59:23:5e:90:c7: 6c:ed:b5:1b:2e:d1:06:a7:5b:72:6a:d2:52:e9:e5:62:91:a6: c4:86:f3:78:b1:ca:3b:b5:8e:59:ea:2d:1c:18:1f:04:d5:9b: bb:5a:e9:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xu17Z181PyKOqoE4jGQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNDZlZTQ3NTkyNzA0ODA0NWEyZDY2Y2ZiMWM5MjllZGYx YzU3NzkwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTc3MGNmMzQ0YmE2ZTEzYjI3ZGMyMWNmNWIxYmRhYTVkZTcxOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9e8rve94A2YidBl8dHqbtkhr3rn Jx8bVn+aMm8RdWOiBC/CGbYSbuKjF8PlPsX2KH3NkW+jqdD/3g5a3IgYPfkDJXLU pBvaxeFAJzELT2mMgP6aX9Rz11E1pv6Qr+tUt5iD8CvwcXIGq4FX4sy47F4b4mEn rC2so6+p3vQtvp1W9z95Qybq8KU8QfwPP+fTt9MLh1hdhvjhoZjeRvUlTq6/VDLK EaUc7DR/yeGqFxLqP+5Q8V8dt1Uo0V6PLyiiEBC1OJCyezo8xaPMOmfRRfiCdm8O H7jePLMj1iXc1A1UjvmfXFb0cT/8E06M3/tMb+5z1YcuvJw9CiMgYcB89QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMp3DPNEum4Tsn3CHPWxvapd5xnVMB8GA1UdIwQY MBaAFP1G7kdZJwSARaLWbPsckp7fHFd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAt MjFmMTVlYWY1ZWUwLzEveW5jTTgwUzZiaE95ZmNJYzliRzlxbDNuR2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAtMjFmMTVlYWY1ZWUw LzEvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVcx4MA0G CSqGSIb3DQEBCwUAA4IBAQAKqjEPm84Dc2Kem8G0qeq93hlzjgh23t6m6liH93qc 5xvDQl+89ES6JMyakefFw/T9JRQ4AhjSLa76Rl5LN+sxnhseKv+xzNDb/jx04Anr oxwtsGxTfMZ/7KZr31FBnfwpqGD+Th0tbsnLutC4o3xFF6Kz5ETqus4YartN5Hoe k3N3eUW31TpO1ldXHviHrxRvfXw/tn+oMbZ1yCk1OAqXwXaonsgw5digZ6UTfvOK 1fcWVqWQq715QLHDYg3oekfcbjsmwBHSuWFMVJyKPsvr60ghWSNekMds7bUbLtEG p1tyatJS6eVikabEhvN4sco7tY5Z6i0cGB8E1Zu7Wuku -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:26 2026 by rpki-client