This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ypl2xwZ4a13Bhd-xkmyRdgaGhS0.roa File: Ypl2xwZ4a13Bhd-xkmyRdgaGhS0.roa (raw, json) Hash identifier: vM2x7YuVwFLP24SGRsKa5AxeLkiP9gJUkmgCmMV/jOg= Subject key identifier: 62:99:76:C7:06:78:6B:5D:C1:85:DF:B1:92:6C:91:76:06:86:85:2D Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED821C2624E4E5A516A2A3DB229C64 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ypl2xwZ4a13Bhd-xkmyRdgaGhS0.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45007 IP address blocks: 85.187.45.0/24 maxlen: 24 185.242.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:82:1c:26:24:e4:e5:a5:16:a2:a3:db:22:9c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=629976c706786b5dc185dfb1926c91760686852d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:36:1d:1e:a7:81:93:dc:4b:5d:73:39:44: 3f:42:ec:89:12:88:cd:9a:e3:eb:b5:4b:71:c8:a2: 95:a2:a2:45:5a:fd:9d:7d:21:b7:42:a8:91:74:83: ce:74:8b:e0:75:ad:82:67:fc:2f:f1:e3:9d:de:da: 17:1f:56:8a:e1:97:8f:1d:f4:3e:1e:0f:e7:ba:93: b7:8c:e0:a1:75:62:39:34:32:ae:35:d2:94:91:fd: 38:11:30:6e:7f:53:08:e7:99:26:98:49:05:94:0e: 62:b7:f3:fe:9e:00:d1:5f:df:4d:84:73:55:6c:ce: d2:05:64:97:8a:22:75:9e:ae:db:73:ef:44:78:0b: bb:e3:aa:55:9e:e1:36:5b:cb:fb:81:06:c7:b0:f1: 8c:77:2a:03:9b:d5:a1:9e:42:a3:0c:22:f1:d6:a7: 1a:97:c1:21:92:2a:c9:47:d6:fb:e2:05:5c:9e:f1: f9:1b:8b:09:b4:3c:e9:96:64:1e:02:7e:e2:1e:1f: a0:43:e9:56:55:a1:46:f3:24:c3:7f:6a:0b:23:45: 3f:60:c6:cb:ee:45:9a:20:1e:d6:83:11:c2:85:6c: be:ea:50:5e:4e:d9:e9:ec:0e:f8:1d:62:09:c0:8d: bf:8f:aa:e4:73:08:12:fc:7e:4b:c4:be:af:c8:a3: 45:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:99:76:C7:06:78:6B:5D:C1:85:DF:B1:92:6C:91:76:06:86:85:2D X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ypl2xwZ4a13Bhd-xkmyRdgaGhS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.45.0/24 185.242.171.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:83:ad:a7:e6:87:8d:9f:6e:41:4e:2c:dc:ef:f1:5a:07:a9: 88:33:17:9f:38:4c:fa:c4:97:91:5b:6c:c6:d9:07:10:8a:cf: db:42:ab:aa:9c:18:c2:ef:49:bb:c7:44:22:33:10:a1:4d:ea: 15:61:7e:67:37:e2:df:0a:37:be:7e:4e:fe:a5:ef:e7:8d:d0: 65:1e:f1:f7:cd:48:67:ef:63:4f:78:6f:9c:d5:ad:1d:19:24: 63:f5:13:6e:ee:5a:53:e0:c9:a1:3e:9b:cd:1b:7e:1e:f1:aa: 05:d3:12:6f:bd:50:ca:ef:92:b5:f8:65:b4:b0:e5:4f:c4:12: 91:00:ce:73:34:0a:a3:bd:16:71:65:ae:a7:13:7c:50:dc:9e: 74:76:59:e1:f3:c2:d1:2b:3d:7b:b2:86:d3:f0:c6:dc:1a:c9: 32:b7:ca:72:76:fc:97:f9:bf:59:02:31:2a:ec:ce:c7:39:14: 21:99:6a:c4:fb:49:5f:fa:fd:ae:bb:d5:b5:c6:80:35:72:91: 11:41:97:40:e4:81:34:27:33:fc:59:7e:ad:66:4b:66:e6:d3: 33:41:b7:0d:8a:bf:c8:93:d4:97:b5:d9:d3:37:70:37:d4:45: 06:99:df:da:d2:6f:5f:06:7f:93:97:3d:af:ec:0f:54:4e:05: cd:8a:38:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87YIcJiTk5aUWoqPbIpxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjk5NzZjNzA2Nzg2YjVkYzE4NWRmYjE5MjZjOTE3NjA2ODY4NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7s2HR6ngZPcS11zOUQ/QuyJEojN muPrtUtxyKKVoqJFWv2dfSG3QqiRdIPOdIvgda2CZ/wv8eOd3toXH1aK4ZePHfQ+ Hg/nupO3jOChdWI5NDKuNdKUkf04ETBuf1MI55kmmEkFlA5it/P+ngDRX99NhHNV bM7SBWSXiiJ1nq7bc+9EeAu746pVnuE2W8v7gQbHsPGMdyoDm9WhnkKjDCLx1qca l8EhkirJR9b74gVcnvH5G4sJtDzplmQeAn7iHh+gQ+lWVaFG8yTDf2oLI0U/YMbL 7kWaIB7WgxHChWy+6lBeTtnp7A74HWIJwI2/j6rkcwgS/H5LxL6vyKNFRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGKZdscGeGtdwYXfsZJskXYGhoUtMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvWXBsMnh3WjRhMTNCaGQteGtteVJkZ2FHaFMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVbstAwQA ufKrMA0GCSqGSIb3DQEBCwUAA4IBAQBeg62n5oeNn25BTizc7/FaB6mIMxefOEz6 xJeRW2zG2QcQis/bQquqnBjC70m7x0QiMxChTeoVYX5nN+LfCje+fk7+pe/njdBl HvH3zUhn72NPeG+c1a0dGSRj9RNu7lpT4MmhPpvNG34e8aoF0xJvvVDK75K1+GW0 sOVPxBKRAM5zNAqjvRZxZa6nE3xQ3J50dlnh88LRKz17sobT8MbcGskyt8pydvyX +b9ZAjEq7M7HORQhmWrE+0lf+v2uu9W1xoA1cpERQZdA5IE0JzP8WX6tZktm5tMz QbcNir/Ik9SXtdnTN3A31EUGmd/a0m9fBn+Tlz2v7A9UTgXNijgw -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:41 2026 by rpki-client