This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ytt2iIs36bszj8mftd5slrzDQco.roa File: ytt2iIs36bszj8mftd5slrzDQco.roa (raw, json) Hash identifier: YI/YKXK40yzzg8HNrk8zo8zko1P2F7J9FfpMEZCi7rY= Subject key identifier: CA:DB:76:88:8B:37:E9:BB:33:8F:C9:9F:B5:DE:6C:96:BC:C3:41:CA Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84EA33E1BB4DE86711113CCBB6C5EC Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ytt2iIs36bszj8mftd5slrzDQco.roa Signing time: Fri 02 Jan 2026 16:22:55 +0000 ROA not before: Fri 02 Jan 2026 16:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204168 IP address blocks: 92.52.204.0/22 maxlen: 24 185.38.124.0/22 maxlen: 24 185.93.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ea:33:e1:bb:4d:e8:67:11:11:3c:cb:b6:c5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cadb76888b37e9bb338fc99fb5de6c96bcc341ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:60:1c:a4:48:bf:2a:da:20:f9:7f:f8:3b: 0b:f5:9b:8a:bd:a4:e0:f1:0f:b4:b9:11:60:e2:b8: 33:94:bd:4e:62:03:a9:71:32:2a:6f:ad:a1:c3:0e: 64:9d:50:cd:33:69:c3:cb:b7:37:68:4b:78:b3:9c: f4:61:8b:0f:40:53:a6:81:1d:e6:f3:13:9a:21:01: ce:89:b1:17:cc:88:40:19:b3:58:52:9d:c5:aa:9b: ff:90:76:10:11:35:61:35:a7:ab:a0:a4:78:20:d6: 1d:74:e7:79:5e:57:1d:6c:31:05:0f:16:ed:59:5d: ae:cb:50:27:7b:3a:05:4c:00:7c:df:b7:7e:4a:d2: 6f:01:81:48:bc:f8:45:75:6b:83:e3:9f:19:bd:8b: 85:ac:da:4e:55:95:9a:f1:41:88:c2:fe:2e:87:9e: dc:24:f2:f3:4d:52:18:eb:7b:c5:ee:04:a7:ae:7d: 32:27:e1:cd:2e:fc:dc:ec:23:18:35:43:45:db:b5: ff:b5:c4:c7:1d:51:ba:bc:1c:6b:6f:f4:97:08:8d: f7:b4:4d:c5:ab:77:a8:5f:cf:1b:84:5d:d1:09:f1: 4b:56:25:8a:66:c2:ef:14:9f:a7:fd:16:07:b4:56: 6e:c8:aa:89:1b:c8:a4:51:34:5c:35:b7:e5:b6:a6: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DB:76:88:8B:37:E9:BB:33:8F:C9:9F:B5:DE:6C:96:BC:C3:41:CA X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ytt2iIs36bszj8mftd5slrzDQco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.52.204.0/22 185.38.124.0/22 185.93.64.0/22 Signature Algorithm: sha256WithRSAEncryption b4:59:31:5d:1f:ca:58:85:e4:7a:0f:a1:58:cf:87:58:5f:d7: 40:7c:31:ad:3e:34:7e:f2:35:28:be:7f:98:85:6e:b3:4d:3c: 5e:d3:c3:15:82:cb:fa:29:f7:b9:a4:9b:47:b3:1f:c2:5d:d2: 3c:f8:b3:99:9d:3d:00:8b:46:18:ba:c6:d2:6a:7b:34:8a:59: 29:be:dc:38:c9:b6:27:69:cd:c2:8e:84:43:40:90:2c:ca:9f: 94:e7:0b:cf:95:30:27:67:72:3e:3d:9c:c2:ac:1b:fb:46:ee: c3:66:8c:50:fc:30:1e:85:d8:2f:e2:a9:c4:e9:17:8a:5c:9a: f0:f0:37:fc:eb:ba:68:37:c6:c1:2b:b6:a8:29:27:6f:a6:c8: f0:b2:d2:10:f3:1e:91:81:65:1b:2b:62:e0:27:51:ee:1d:3c: fd:6b:1f:4d:f6:9b:90:b4:2b:3f:3d:11:c4:b8:4c:90:2f:3c: 5d:ac:f4:d4:13:ba:8c:32:0b:97:71:87:50:6f:99:68:4e:f9: 5d:ba:de:5a:af:03:8a:e9:c2:d7:7f:0d:a9:ab:62:fc:84:ed: c4:1e:4a:d1:67:5b:e3:d6:17:d5:18:31:e0:bd:70:0c:56:f4: 7b:04:5b:bd:1d:f2:56:0d:a0:a4:4c:22:f2:0f:ec:85:0a:6f: 7a:34:5c:30 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hOoz4btN6GcRETzLtsXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWRiNzY4ODhiMzdlOWJiMzM4ZmM5OWZiNWRlNmM5NmJjYzM0MWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwChgHKRIvyraIPl/+DsL9ZuKvaTg 8Q+0uRFg4rgzlL1OYgOpcTIqb62hww5knVDNM2nDy7c3aEt4s5z0YYsPQFOmgR3m 8xOaIQHOibEXzIhAGbNYUp3Fqpv/kHYQETVhNaeroKR4INYddOd5XlcdbDEFDxbt WV2uy1AnezoFTAB837d+StJvAYFIvPhFdWuD458ZvYuFrNpOVZWa8UGIwv4uh57c JPLzTVIY63vF7gSnrn0yJ+HNLvzc7CMYNUNF27X/tcTHHVG6vBxrb/SXCI33tE3F q3eoX88bhF3RCfFLViWKZsLvFJ+n/RYHtFZuyKqJG8ikUTRcNbfltqayCQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMrbdoiLN+m7M4/Jn7XebJa8w0HKMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEveXR0MmlJczM2YnN6ajhtZnRkNXNscnpEUWNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXDTMAwQC uSZ8AwQCuV1AMA0GCSqGSIb3DQEBCwUAA4IBAQC0WTFdH8pYheR6D6FYz4dYX9dA fDGtPjR+8jUovn+YhW6zTTxe08MVgsv6Kfe5pJtHsx/CXdI8+LOZnT0Ai0YYusbS ans0ilkpvtw4ybYnac3CjoRDQJAsyp+U5wvPlTAnZ3I+PZzCrBv7Ru7DZoxQ/DAe hdgv4qnE6ReKXJrw8Df867poN8bBK7aoKSdvpsjwstIQ8x6RgWUbK2LgJ1HuHTz9 ax9N9puQtCs/PRHEuEyQLzxdrPTUE7qMMguXcYdQb5loTvldut5arwOK6cLXfw2p q2L8hO3EHkrRZ1vj1hfVGDHgvXAMVvR7BFu9HfJWDaCkTCLyD+yFCm96NFww -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:56 2026 by rpki-client