This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/yBju9251opQb0e4SsoLoTlY7kVM.roa File: yBju9251opQb0e4SsoLoTlY7kVM.roa (raw, json) Hash identifier: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI= Subject key identifier: C8:18:EE:F7:6E:75:A2:94:1B:D1:EE:12:B2:82:E8:4E:56:3B:91:53 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED507E18368020C88366F669982C89 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/yBju9251opQb0e4SsoLoTlY7kVM.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203866 IP address blocks: 185.118.76.0/24 maxlen: 24 193.68.67.0/24 maxlen: 24 213.21.195.0/24 maxlen: 24 213.21.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:7e:18:36:80:20:c8:83:66:f6:69:98:2c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c818eef76e75a2941bd1ee12b282e84e563b9153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:39:84:57:a5:df:96:ba:8f:67:a1:9e:54: 7f:40:8d:8c:30:5c:6e:f0:44:2f:2c:f4:7d:ce:b2: d0:14:99:c6:59:50:2b:dd:ec:20:35:a4:4f:a9:ba: 4d:e6:05:af:06:d6:d6:6c:0b:49:b9:c7:8f:ad:07: a0:cd:37:30:89:b0:72:df:9a:3f:c6:6a:10:d0:e5: af:2b:1a:a7:11:c8:3e:d7:c6:01:41:8d:0f:b2:62: 32:ee:8e:24:d8:9f:ff:0c:d5:7f:ea:bf:2c:c4:cc: f7:3a:cb:b2:0a:54:c7:fd:d5:17:0e:76:c3:5c:62: ec:17:31:e3:fe:d4:16:49:2f:20:6a:67:f0:f5:ef: 56:58:f4:e3:29:0c:86:84:98:ec:38:ba:bf:27:b8: bf:dd:37:dd:a1:9f:80:72:70:93:dd:60:28:b9:b9: 08:83:d7:e7:a7:31:f7:f6:18:1f:b9:8c:0f:16:5b: ec:34:23:33:f7:02:5f:fe:e7:33:ed:af:8c:69:64: 39:fa:35:7d:7f:5a:1a:dd:9e:e4:71:50:dd:a5:39: ca:02:5d:a4:8c:a1:c2:82:ac:50:6e:2a:5f:b3:a9: 34:de:13:b2:db:96:21:ba:c8:82:5c:0f:aa:10:43: a7:db:a1:cc:6a:6d:4f:2f:1e:83:44:46:72:04:d4: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:18:EE:F7:6E:75:A2:94:1B:D1:EE:12:B2:82:E8:4E:56:3B:91:53 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/yBju9251opQb0e4SsoLoTlY7kVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.76.0/24 193.68.67.0/24 213.21.195.0/24 213.21.218.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:0a:1c:75:a0:f1:4c:7c:8e:64:c7:2b:2e:6b:2d:eb:2a:04: 1a:fd:fc:79:c2:05:e5:aa:fa:df:ff:92:dc:e8:8c:94:83:b1: a5:db:b3:7c:ef:b6:93:4d:45:65:d0:b6:f1:b6:cb:06:36:b7: fb:7e:7f:52:74:19:54:5a:c7:a8:06:b7:9c:35:c6:a8:c5:75: 20:9d:de:d1:3d:0f:d2:be:ec:5d:84:63:d4:b6:ad:99:0f:7f: fa:a6:04:ba:26:f7:74:06:29:96:37:6f:85:16:59:c1:3e:9e: e3:d8:4b:f7:59:47:70:57:5a:1f:14:a5:87:9f:6f:31:04:93: 34:6a:4e:bb:d4:91:42:f4:bd:a8:65:f3:f0:16:14:ba:0e:95: 4a:26:4d:30:f3:be:ad:10:13:98:17:57:6c:eb:5a:f2:70:61: dd:73:ae:37:8a:92:76:ea:38:ae:43:b0:70:90:21:c0:49:c1: 61:61:2f:13:bf:66:ed:e2:c4:5c:f4:f6:aa:e6:8b:1a:bb:a3: 30:cd:c9:4d:5a:7d:57:f1:2f:b9:5f:b2:24:b3:dd:df:2f:7f: e6:ec:ff:de:b1:34:79:31:78:a3:e6:ee:ed:4b:5b:fc:0d:12: b5:eb:a8:56:8c:11:02:57:4d:be:94:77:88:62:c7:6c:42:7e: 11:90:35:f8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57VB+GDaAIMiDZvZpmCyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODE4ZWVmNzZlNzVhMjk0MWJkMWVlMTJiMjgyZTg0ZTU2M2I5MTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKc5hFel35a6j2ehnlR/QI2MMFxu 8EQvLPR9zrLQFJnGWVAr3ewgNaRPqbpN5gWvBtbWbAtJucePrQegzTcwibBy35o/ xmoQ0OWvKxqnEcg+18YBQY0PsmIy7o4k2J//DNV/6r8sxMz3OsuyClTH/dUXDnbD XGLsFzHj/tQWSS8gamfw9e9WWPTjKQyGhJjsOLq/J7i/3TfdoZ+AcnCT3WAoubkI g9fnpzH39hgfuYwPFlvsNCMz9wJf/ucz7a+MaWQ5+jV9f1oa3Z7kcVDdpTnKAl2k jKHCgqxQbipfs6k03hOy25YhusiCXA+qEEOn26HMam1PLx6DREZyBNTnDQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMgY7vdudaKUG9HuErKC6E5WO5FTMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEveUJqdTkyNTFvcFFiMGU0U3NvTG9UbFk3a1ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuXZMAwQA wURDAwQA1RXDAwQA1RXaMA0GCSqGSIb3DQEBCwUAA4IBAQBqChx1oPFMfI5kxysu ay3rKgQa/fx5wgXlqvrf/5Lc6IyUg7Gl27N877aTTUVl0LbxtssGNrf7fn9SdBlU WseoBrecNcaoxXUgnd7RPQ/SvuxdhGPUtq2ZD3/6pgS6Jvd0BimWN2+FFlnBPp7j 2Ev3WUdwV1ofFKWHn28xBJM0ak671JFC9L2oZfPwFhS6DpVKJk0w876tEBOYF1ds 61rycGHdc643ipJ26jiuQ7BwkCHAScFhYS8Tv2bt4sRc9Paq5osau6MwzclNWn1X 8S+5X7Iks93fL3/m7P/esTR5MXij5u7tS1v8DRK166hWjBECV02+lHeIYsdsQn4R kDX4 -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:49 2026 by rpki-client