This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/Yk7Zbmt1P-AiIfkBAo3jSWo7vlg.roa File: Yk7Zbmt1P-AiIfkBAo3jSWo7vlg.roa (raw, json) Hash identifier: GlJGpBWeWcsOeO74Qp/VHrmeF+iq8Z/F3boS8FvHYJQ= Subject key identifier: 62:4E:D9:6E:6B:75:3F:E0:22:21:F9:01:02:8D:E3:49:6A:3B:BE:58 Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1 Certificate serial: 019B77C6C7A6502216DF89758148127CFDB2 Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/Yk7Zbmt1P-AiIfkBAo3jSWo7vlg.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201704 IP address blocks: 37.98.200.0/22 maxlen: 22 89.42.164.0/22 maxlen: 22 185.65.184.0/22 maxlen: 22 212.63.96.0/21 maxlen: 21 2a03:1d20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c7:a6:50:22:16:df:89:75:81:48:12:7c:fd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=624ed96e6b753fe02221f901028de3496a3bbe58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:2a:cd:aa:76:ed:ba:6d:5c:0e:78:a3:9a: 40:a7:6d:92:c6:84:8b:6a:c3:34:3a:88:99:e3:25: 51:77:97:cf:8d:71:c3:d9:ca:cd:c0:b2:b0:fa:ad: 5a:bf:a5:2e:a2:68:c1:08:f7:80:ed:71:1a:43:d4: fd:6c:c6:15:60:5d:e9:75:8d:24:30:84:c8:38:e0: b7:fa:ff:79:78:c5:71:4c:55:e5:b1:c9:02:d5:44: ca:a5:05:23:46:e5:52:0f:89:b1:27:f7:26:70:b6: bd:f4:92:86:90:c3:b3:21:d2:77:a1:a3:2e:7e:25: d2:ed:c5:5b:83:28:ef:1c:8e:a5:71:fd:38:24:12: 02:bd:4c:76:5a:90:9d:c9:ad:99:11:81:c0:76:87: 04:b7:b9:ce:20:cc:c8:0b:75:43:4a:89:f7:f2:50: 3e:50:b3:03:05:83:01:03:82:58:cf:46:8b:3f:7b: 22:8c:b9:9c:09:53:dc:d3:03:10:a3:59:1e:2a:3a: 10:fe:3a:cd:dc:9e:26:1a:b3:1b:ab:77:b3:e8:30: 2b:62:92:21:0b:75:90:ed:e1:74:b3:d4:e8:9f:b7: cd:73:64:ed:a9:15:24:8f:7f:73:f8:9d:cc:7b:c1: 13:d9:c6:70:56:5f:e8:da:31:45:7c:17:fa:4f:10: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4E:D9:6E:6B:75:3F:E0:22:21:F9:01:02:8D:E3:49:6A:3B:BE:58 X509v3 Authority Key Identifier: keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/Yk7Zbmt1P-AiIfkBAo3jSWo7vlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.200.0/22 89.42.164.0/22 185.65.184.0/22 212.63.96.0/21 IPv6: 2a03:1d20::/32 Signature Algorithm: sha256WithRSAEncryption 7e:25:5c:22:90:92:90:69:4e:7d:fe:e2:d1:86:cb:71:19:0b: e4:2b:7e:ed:98:92:d8:08:ff:4c:a7:ba:27:0b:ab:f1:cd:81: 03:f3:86:65:d1:b7:10:29:e6:ba:40:36:7c:19:e7:33:07:ba: 56:02:4d:31:4c:bd:14:09:fa:0b:ad:c4:ee:8e:e9:2f:03:2f: ce:18:68:9f:a0:dc:fc:50:18:c5:3a:90:49:32:82:a1:f2:20: 20:99:b4:31:a4:4a:d6:52:74:a7:fe:de:bb:f8:e4:7f:56:0b: 28:4d:ea:c1:dd:fe:76:5d:5f:a7:a1:54:61:4a:bd:52:2a:c9: ef:9f:4e:43:c9:c8:8d:47:7c:7e:83:a9:4c:e5:f8:f6:f9:40: 1c:1c:25:43:9b:93:10:ae:00:61:b3:eb:7f:53:fe:e3:72:08: b7:1a:1f:89:1d:45:5c:c8:d2:03:eb:76:48:ac:41:cf:44:d9: 0e:fa:48:81:fa:46:03:0d:d1:68:1a:1f:eb:95:33:eb:76:64: ff:ee:c8:49:dd:b8:6d:82:80:68:86:d0:5d:78:ad:b5:35:f5: 42:c5:64:e4:e0:a0:9d:67:b3:b3:1f:13:d6:27:fc:35:c0:2a: f8:0d:84:6a:7b:4f:2d:c9:e6:1d:1d:f3:cd:87:59:c0:4a:1b: c3:ad:9d:10 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3xsemUCIW34l1gUgSfP2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTQyN2ZkNWQyMDU4NWU5N2MyZjI3NzFkNDgwOWJmNjM0 MWRhYTEwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjRlZDk2ZTZiNzUzZmUwMjIyMWY5MDEwMjhkZTM0OTZhM2JiZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1gqzap27bptXA54o5pAp22SxoSL asM0OoiZ4yVRd5fPjXHD2crNwLKw+q1av6UuomjBCPeA7XEaQ9T9bMYVYF3pdY0k MITIOOC3+v95eMVxTFXlsckC1UTKpQUjRuVSD4mxJ/cmcLa99JKGkMOzIdJ3oaMu fiXS7cVbgyjvHI6lcf04JBICvUx2WpCdya2ZEYHAdocEt7nOIMzIC3VDSon38lA+ ULMDBYMBA4JYz0aLP3sijLmcCVPc0wMQo1keKjoQ/jrN3J4mGrMbq3ez6DArYpIh C3WQ7eF0s9Ton7fNc2TtqRUkj39z+J3Me8ET2cZwVl/o2jFFfBf6TxAZYQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFGJO2W5rdT/gIiH5AQKN40lqO75YMB8GA1UdIwQY MBaAFMtUJ/1dIFhel8Lydx1ICb9jQdqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgt MWYwZGQ5ZmRmNWYzLzEvWWs3WmJtdDFQLUFpSWZrQkFvM2pTV283dmxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgtMWYwZGQ5ZmRmNWYz LzEveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCJWLIAwQC WSqkAwQCuUG4AwQD1D9gMA0EAgACMAcDBQAqAx0gMA0GCSqGSIb3DQEBCwUAA4IB AQB+JVwikJKQaU59/uLRhstxGQvkK37tmJLYCP9Mp7onC6vxzYED84Zl0bcQKea6 QDZ8GeczB7pWAk0xTL0UCfoLrcTujukvAy/OGGifoNz8UBjFOpBJMoKh8iAgmbQx pErWUnSn/t67+OR/VgsoTerB3f52XV+noVRhSr1SKsnvn05DyciNR3x+g6lM5fj2 +UAcHCVDm5MQrgBhs+t/U/7jcgi3Gh+JHUVcyNID63ZIrEHPRNkO+kiB+kYDDdFo Gh/rlTPrdmT/7shJ3bhtgoBohtBdeK21NfVCxWTk4KCdZ7OzHxPWJ/w1wCr4DYRq e08tyeYdHfPNh1nAShvDrZ0Q -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:02 2026 by rpki-client