This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/cyts1p2wCvnwn0Aiq887XNaaeB4.roa File: cyts1p2wCvnwn0Aiq887XNaaeB4.roa (raw, json) Hash identifier: 35IzE+3xgtlfUeRGehmvu6jrdJGF2F8RsbhMs7R8PLM= Subject key identifier: 73:2B:6C:D6:9D:B0:0A:F9:F0:9F:40:22:AB:CF:3B:5C:D6:9A:78:1E Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d Certificate serial: 019B7835556FAC14F4E50D26DC783E8ED5E1 Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/cyts1p2wCvnwn0Aiq887XNaaeB4.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48286 IP address blocks: 185.12.108.0/24 maxlen: 24 185.12.109.0/24 maxlen: 24 185.12.110.0/24 maxlen: 24 185.12.111.0/24 maxlen: 24 185.241.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:55:6f:ac:14:f4:e5:0d:26:dc:78:3e:8e:d5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=732b6cd69db00af9f09f4022abcf3b5cd69a781e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5c:03:ec:0f:e9:63:bd:7f:cb:07:9f:63:75: e4:a3:a8:0c:70:31:27:a4:b5:c1:bc:62:ed:e7:e8: 5e:5d:bc:b5:75:b0:db:4b:5a:7a:91:4f:94:6c:0e: 7b:dc:83:ae:51:c7:a6:1f:19:9a:62:cd:4a:13:cd: 91:56:90:40:e3:fc:05:4e:26:8c:57:36:30:10:27: 7e:c4:d2:cb:fa:e3:ff:b8:11:9a:ba:8b:28:fd:7f: e5:fc:54:61:53:cf:10:5e:59:6a:cc:48:11:88:d8: cb:33:80:83:41:c0:d0:64:e5:7f:ac:1f:c9:87:1f: c4:aa:6d:1d:8c:18:fd:9b:a9:46:5e:72:d8:9e:70: a6:39:20:f1:a1:38:8d:a4:01:7b:31:43:91:a8:b4: 6a:0e:4a:01:92:0f:8d:5b:70:5a:94:96:01:8f:19: 00:7c:07:d3:cb:8c:26:86:46:77:76:d6:77:e7:e7: fc:59:79:55:64:23:b4:1e:a9:70:cc:bd:df:f2:f0: 09:f3:39:77:cd:b0:a1:ee:b8:47:60:36:3b:37:90: 98:f4:a6:8e:dd:b8:35:57:09:c3:8a:f7:f8:29:32: ce:58:1b:df:cf:d3:db:3c:4b:ff:55:a3:e2:d5:78: e0:f7:d6:65:c8:4b:b2:a5:05:50:d1:9d:ce:e2:3d: 97:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2B:6C:D6:9D:B0:0A:F9:F0:9F:40:22:AB:CF:3B:5C:D6:9A:78:1E X509v3 Authority Key Identifier: keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/cyts1p2wCvnwn0Aiq887XNaaeB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.108.0/22 185.241.56.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b1:fb:4d:95:fd:61:c9:d9:b6:32:2c:cb:66:47:8b:58:1e: f5:9c:26:3f:90:d0:2f:1f:a2:a0:b6:18:46:9e:07:31:c7:8d: 49:dd:63:5d:94:b3:77:aa:27:42:79:89:c7:52:da:a6:9e:00: 03:89:71:0a:2d:e7:34:ea:42:71:45:f0:96:75:62:7e:a6:5f: 67:a0:9e:af:db:f4:cf:8a:54:8d:a4:d7:7f:5e:7f:4b:24:66: 75:ef:ae:10:cc:50:fc:78:56:74:cd:72:b1:f4:26:a2:33:a2: c0:a8:78:c6:50:38:c6:5c:d3:08:a6:02:42:83:b1:ce:a6:6c: f0:0d:61:05:34:74:cb:2e:00:30:67:33:e1:b1:18:6a:2e:e2: c7:f9:85:c9:b7:5c:0e:a3:84:d3:2f:e6:8c:f0:d4:5d:f0:e0: 47:d7:00:fb:e4:a7:d9:34:41:92:c1:1b:80:79:6c:2d:20:80: 1b:1d:f5:89:18:06:61:ba:76:93:6e:bb:c5:fc:62:a8:22:09: 86:c7:89:69:0b:59:b6:c1:ec:ae:07:e3:08:66:23:de:da:ae: 16:e2:dc:56:7b:3b:9f:4e:9b:02:38:51:a2:c3:c4:51:2a:f1: df:b8:1a:de:08:5c:ce:3c:05:cd:cf:c3:e1:75:d4:e3:66:c3: 94:e4:ab:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NVVvrBT05Q0m3Hg+jtXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMTAxMmVjODQ1NTAwNzE4Y2FiNzZjOWRkMGFmMDEwODkw ZGUyNmQwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzJiNmNkNjlkYjAwYWY5ZjA5ZjQwMjJhYmNmM2I1Y2Q2OWE3ODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlwD7A/pY71/ywefY3Xko6gMcDEn pLXBvGLt5+heXby1dbDbS1p6kU+UbA573IOuUcemHxmaYs1KE82RVpBA4/wFTiaM VzYwECd+xNLL+uP/uBGauoso/X/l/FRhU88QXllqzEgRiNjLM4CDQcDQZOV/rB/J hx/Eqm0djBj9m6lGXnLYnnCmOSDxoTiNpAF7MUORqLRqDkoBkg+NW3BalJYBjxkA fAfTy4wmhkZ3dtZ35+f8WXlVZCO0HqlwzL3f8vAJ8zl3zbCh7rhHYDY7N5CY9KaO 3bg1VwnDivf4KTLOWBvfz9PbPEv/VaPi1Xjg99ZlyEuypQVQ0Z3O4j2XyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHMrbNadsAr58J9AIqvPO1zWmngeMB8GA1UdIwQY MBaAFKAQEuyEVQBxjKt2yd0K8BCJDeJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAt N2FiYTU2OTY1OGQ1LzEvY3l0czFwMndDdm53bjBBaXE4ODdYTmFhZUI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAtN2FiYTU2OTY1OGQ1 LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQxsAwQA ufE4MA0GCSqGSIb3DQEBCwUAA4IBAQAksftNlf1hydm2MizLZkeLWB71nCY/kNAv H6KgthhGngcxx41J3WNdlLN3qidCeYnHUtqmngADiXEKLec06kJxRfCWdWJ+pl9n oJ6v2/TPilSNpNd/Xn9LJGZ1764QzFD8eFZ0zXKx9CaiM6LAqHjGUDjGXNMIpgJC g7HOpmzwDWEFNHTLLgAwZzPhsRhqLuLH+YXJt1wOo4TTL+aM8NRd8OBH1wD75KfZ NEGSwRuAeWwtIIAbHfWJGAZhunaTbrvF/GKoIgmGx4lpC1m2weyuB+MIZiPe2q4W 4txWezufTpsCOFGiw8RRKvHfuBreCFzOPAXNz8PhddTjZsOU5KvF -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:19 2026 by rpki-client