This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/ycQ9UZI7n07LVhcSojHNBe-1YKE.roa File: ycQ9UZI7n07LVhcSojHNBe-1YKE.roa (raw, json) Hash identifier: lff+KvYO2g0/AePrhAZf5pu7/6YYDH+6BXgpxI3UwiA= Subject key identifier: C9:C4:3D:51:92:3B:9F:4E:CB:56:17:12:A2:31:CD:05:EF:B5:60:A1 Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc Certificate serial: 019B7AC91F48D14C05A65D374AB679E5F417 Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/ycQ9UZI7n07LVhcSojHNBe-1YKE.roa Signing time: Thu 01 Jan 2026 18:19:19 +0000 ROA not before: Thu 01 Jan 2026 18:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62336 IP address blocks: 185.99.56.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1f:48:d1:4c:05:a6:5d:37:4a:b6:79:e5:f4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9c43d51923b9f4ecb561712a231cd05efb560a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:dd:42:1f:dd:1b:c6:e6:f5:e6:76:11:17: 7a:59:07:c2:1b:75:00:e5:35:70:8d:95:0e:07:85: bd:57:11:4b:38:3d:25:cf:27:31:9e:40:97:dd:71: a1:51:31:bd:81:25:2d:0a:9e:e1:08:bb:e8:f5:ea: 02:cd:45:d4:f9:64:8a:36:ba:4a:fa:06:9c:bf:db: 42:a2:0a:44:ed:e6:01:b8:8a:6a:b3:49:6e:47:7f: a1:fa:fe:96:ad:70:2f:2b:29:01:b1:b8:90:b6:77: 84:5f:88:19:a8:34:63:59:21:f4:97:2e:04:8e:2c: b6:fd:ce:4f:6b:be:9a:4c:cf:cd:90:b3:f8:2c:64: a8:52:9d:96:05:ae:31:e0:a5:a1:6a:f6:78:04:90: df:f3:61:7e:3f:f6:f4:81:d9:ad:c3:25:cd:c0:23: 1e:32:0b:3f:8e:f9:db:88:a0:68:29:23:f2:03:74: d1:fd:9d:04:dd:6c:01:cd:51:c1:dd:c1:e4:db:ba: f1:e0:69:50:25:5f:21:86:0b:43:ce:ba:b2:3e:f6: 4a:64:f6:a1:55:00:30:7f:06:6c:c9:4a:fc:75:2d: 46:df:10:46:71:3f:b0:c7:22:b2:95:28:d3:d7:65: 08:67:fa:43:5c:fe:41:5e:c8:16:fd:de:55:02:98: 00:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C4:3D:51:92:3B:9F:4E:CB:56:17:12:A2:31:CD:05:EF:B5:60:A1 X509v3 Authority Key Identifier: keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/ycQ9UZI7n07LVhcSojHNBe-1YKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.56.0/22 Signature Algorithm: sha256WithRSAEncryption 61:b6:d9:de:65:9c:6f:a3:68:93:e3:d2:35:1a:d9:c7:c9:24: 4c:47:5a:9f:6c:d5:ac:7f:19:2b:e2:63:bc:2e:28:6a:b0:c7: 74:89:5f:cb:dd:9b:c9:5b:cd:20:3d:da:25:c3:6e:ab:78:27: 55:37:3f:39:75:4f:14:90:34:ef:27:22:d2:88:e7:a9:b5:07: c3:00:8c:db:b2:da:29:6a:92:18:69:25:9d:76:a1:d2:c7:be: e5:3a:38:91:d0:95:b5:91:0b:eb:23:26:11:e6:c9:1b:96:8d: e4:f7:eb:6a:ed:32:d5:3b:b1:d6:7f:d1:52:1c:0a:36:45:96: 6a:08:1b:d6:01:1d:f6:da:70:81:14:c0:7e:f9:21:3d:ca:2f: 34:53:e6:52:5c:52:03:8a:6b:ff:ba:67:3c:c1:fa:3b:45:35: 47:9a:cc:42:10:c9:97:b3:85:43:f3:45:d6:85:6f:92:31:01: 44:fe:c5:0a:19:c1:2b:67:93:54:a7:00:24:2f:f1:0d:eb:ab: 91:bf:32:ad:2d:26:68:48:de:8b:c9:71:cb:c1:26:af:fb:39: 90:08:c7:a1:d4:9a:a7:08:f2:54:01:3d:57:2d:8b:ef:d9:16: 8f:df:45:85:d3:2f:f8:bb:45:bf:c4:ba:86:f2:44:5f:45:fc: 38:06:3d:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yR9I0UwFpl03SrZ55fQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj MjI5Y2MwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWM0M2Q1MTkyM2I5ZjRlY2I1NjE3MTJhMjMxY2QwNWVmYjU2MGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuerdQh/dG8bm9eZ2ERd6WQfCG3UA 5TVwjZUOB4W9VxFLOD0lzycxnkCX3XGhUTG9gSUtCp7hCLvo9eoCzUXU+WSKNrpK +gacv9tCogpE7eYBuIpqs0luR3+h+v6WrXAvKykBsbiQtneEX4gZqDRjWSH0ly4E jiy2/c5Pa76aTM/NkLP4LGSoUp2WBa4x4KWhavZ4BJDf82F+P/b0gdmtwyXNwCMe Mgs/jvnbiKBoKSPyA3TR/Z0E3WwBzVHB3cHk27rx4GlQJV8hhgtDzrqyPvZKZPah VQAwfwZsyUr8dS1G3xBGcT+wxyKylSjT12UIZ/pDXP5BXsgW/d5VApgA+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnEPVGSO59Oy1YXEqIxzQXvtWChMB8GA1UdIwQY MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt NGRiNDBhMzY1NjNlLzEveWNROVVaSTduMDdMVmhjU29qSE5CZS0xWUtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWM4MA0G CSqGSIb3DQEBCwUAA4IBAQBhttneZZxvo2iT49I1GtnHySRMR1qfbNWsfxkr4mO8 LihqsMd0iV/L3ZvJW80gPdolw26reCdVNz85dU8UkDTvJyLSiOeptQfDAIzbstop apIYaSWddqHSx77lOjiR0JW1kQvrIyYR5skblo3k9+tq7TLVO7HWf9FSHAo2RZZq CBvWAR322nCBFMB++SE9yi80U+ZSXFIDimv/umc8wfo7RTVHmsxCEMmXs4VD80XW hW+SMQFE/sUKGcErZ5NUpwAkL/EN66uRvzKtLSZoSN6LyXHLwSav+zmQCMeh1Jqn CPJUAT1XLYvv2RaP30WF0y/4u0W/xLqG8kRfRfw4Bj0j -----END CERTIFICATE-----Generated at Mon Jan 26 21:05:33 2026 by rpki-client