This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/YULCpOumCcaSyfzWLqiybn55DJo.roa File: YULCpOumCcaSyfzWLqiybn55DJo.roa (raw, json) Hash identifier: QqgNpqpYOYrlthUjrFepUeY1QEKfywcOCCPQwf/U0Xc= Subject key identifier: 61:42:C2:A4:EB:A6:09:C6:92:C9:FC:D6:2E:A8:B2:6E:7E:79:0C:9A Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Certificate serial: 019C0EAD1941E9FE2F7E0F2A43338AFBFA86 Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/YULCpOumCcaSyfzWLqiybn55DJo.roa Signing time: Fri 30 Jan 2026 11:32:31 +0000 ROA not before: Fri 30 Jan 2026 11:32:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398704 IP address blocks: 185.199.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:ad:19:41:e9:fe:2f:7e:0f:2a:43:33:8a:fb:fa:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Validity Not Before: Jan 30 11:32:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6142c2a4eba609c692c9fcd62ea8b26e7e790c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:ca:b1:50:7f:9d:96:53:c3:f0:06:bb:e2: 9a:27:0f:97:af:9f:1b:49:8b:85:47:87:f4:13:bd: e0:00:8a:15:a9:31:39:ae:7f:5f:bd:1b:e4:37:92: 34:4f:37:d7:f5:b9:95:26:4e:f5:aa:51:9f:be:e4: e9:e0:0b:4a:ae:22:9b:1c:3d:f0:91:0a:84:34:e1: fd:6e:22:47:f9:19:32:04:07:7f:ef:9f:29:68:b2: 8e:df:0c:be:e6:7a:5a:17:7b:d4:20:2f:49:cf:97: bc:17:90:65:35:98:22:8d:f9:30:ee:72:d5:7d:3a: fb:72:73:da:db:92:4a:bd:2e:8e:be:8c:6d:ae:66: 88:31:0f:f4:c1:32:9a:3c:f2:43:37:a7:20:44:aa: 86:35:5b:50:7b:1b:05:2f:d0:54:27:30:5f:9b:f3: 82:e2:8c:3b:76:ef:fb:b4:41:f8:8c:83:7e:55:37: fe:3f:44:88:7e:26:dd:ed:19:f3:cf:79:a6:9b:49: b3:84:9c:da:51:55:b4:ed:11:5e:00:82:71:24:c6: 80:d6:69:b3:d4:04:12:2c:52:bf:2d:81:fe:0f:03: ff:c4:4a:d0:30:b4:0e:9d:e1:34:75:4b:08:ce:39: 9b:ba:a9:76:ca:ef:6c:27:9b:e8:52:27:06:9e:d7: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:42:C2:A4:EB:A6:09:C6:92:C9:FC:D6:2E:A8:B2:6E:7E:79:0C:9A X509v3 Authority Key Identifier: keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/YULCpOumCcaSyfzWLqiybn55DJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.196.0/22 Signature Algorithm: sha256WithRSAEncryption c5:6d:0e:c5:e2:c3:db:50:07:7d:be:36:3d:27:74:a9:3e:0e: 4c:02:49:bb:28:db:b0:02:ec:cd:52:92:a5:c6:e8:98:7f:1a: c3:d7:f3:e1:72:7d:d3:67:58:c5:51:48:85:23:86:d3:0a:fa: 49:d5:52:e0:24:2f:0b:f3:ed:fd:06:17:9c:03:4c:18:2e:38: 46:da:e0:8b:5c:72:ac:fe:bd:e2:7c:71:87:70:8e:80:40:13: 19:1c:fa:93:10:5e:d8:f8:b8:08:e4:b0:91:51:55:31:d9:b6: 9f:b8:25:d8:4c:57:d9:6b:33:49:b7:82:28:b3:fd:6c:1e:bf: 83:20:72:a3:3f:d6:1b:18:04:b3:c8:20:60:75:93:94:9d:00: 4e:ce:0e:a5:61:0f:0a:39:ce:1c:c1:b3:8f:fc:76:3a:78:dd: 83:94:a7:59:c3:a6:fb:f7:c2:3f:b6:86:86:a2:f4:cf:36:7e: 32:85:7c:3b:e8:42:a8:89:03:7c:8f:50:41:a4:f5:b8:ac:40: 83:30:8e:25:7c:3a:b9:7b:6a:ec:81:46:20:d1:35:c4:82:4f: 20:a2:99:29:33:79:9f:4a:80:a5:7b:43:79:7f:da:06:bf:e6: d6:78:0e:9c:cb:be:f7:af:0f:33:81:6f:fc:2c:49:1f:2d:be: 9b:8f:65:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwOrRlB6f4vfg8qQzOK+/qGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw YTFhNjYwHhcNMjYwMTMwMTEzMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTQyYzJhNGViYTYwOWM2OTJjOWZjZDYyZWE4YjI2ZTdlNzkwYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUnKsVB/nZZTw/AGu+KaJw+Xr58b SYuFR4f0E73gAIoVqTE5rn9fvRvkN5I0TzfX9bmVJk71qlGfvuTp4AtKriKbHD3w kQqENOH9biJH+RkyBAd/758paLKO3wy+5npaF3vUIC9Jz5e8F5BlNZgijfkw7nLV fTr7cnPa25JKvS6OvoxtrmaIMQ/0wTKaPPJDN6cgRKqGNVtQexsFL9BUJzBfm/OC 4ow7du/7tEH4jIN+VTf+P0SIfibd7Rnzz3mmm0mzhJzaUVW07RFeAIJxJMaA1mmz 1AQSLFK/LYH+DwP/xErQMLQOneE0dUsIzjmbuql2yu9sJ5voUicGntd4bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFCwqTrpgnGksn81i6osm5+eQyaMB8GA1UdIwQY MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct ZGU5YjJmOGY3ZTI5LzEvWVVMQ3BPdW1DY2FTeWZ6V0xxaXlibjU1REpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5 LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucfEMA0G CSqGSIb3DQEBCwUAA4IBAQDFbQ7F4sPbUAd9vjY9J3SpPg5MAkm7KNuwAuzNUpKl xuiYfxrD1/Phcn3TZ1jFUUiFI4bTCvpJ1VLgJC8L8+39BhecA0wYLjhG2uCLXHKs /r3ifHGHcI6AQBMZHPqTEF7Y+LgI5LCRUVUx2bafuCXYTFfZazNJt4Ios/1sHr+D IHKjP9YbGASzyCBgdZOUnQBOzg6lYQ8KOc4cwbOP/HY6eN2DlKdZw6b798I/toaG ovTPNn4yhXw76EKoiQN8j1BBpPW4rECDMI4lfDq5e2rsgUYg0TXEgk8gopkpM3mf SoCle0N5f9oGv+bWeA6cy773rw8zgW/8LEkfLb6bj2WP -----END CERTIFICATE-----Generated at Wed Feb 4 12:31:13 2026 by rpki-client