This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa File: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (raw, json) Hash identifier: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM= Subject key identifier: C9:DD:15:36:50:0E:87:51:0D:BB:4C:B5:A4:10:05:0F:CB:A3:6E:FC Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5 Certificate serial: 019B77C68E40439D513A83C217075039B6EE Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 91.244.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8e:40:43:9d:51:3a:83:c2:17:07:50:39:b6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9dd1536500e87510dbb4cb5a410050fcba36efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:73:c8:b4:46:e0:d6:6d:8a:f0:cc:44:10: f4:5e:06:5a:75:19:d1:ee:11:8c:4a:8f:40:55:d7: 43:42:08:a0:1b:1e:05:9d:d7:ef:1d:05:25:ec:4a: b1:34:55:e9:a6:b9:33:57:d6:3b:a2:3d:a5:80:ae: 44:a4:6a:d8:96:36:e6:84:35:2a:08:c8:64:91:e1: fb:97:85:0d:9a:1d:20:a8:f0:e0:91:2b:ba:e7:44: a4:8d:01:f6:0c:b9:5c:3d:a8:8c:50:a3:01:bb:64: 41:7b:9d:60:23:1d:b1:61:43:fe:ed:bd:5b:eb:e3: 0b:c0:1e:3c:d2:49:fb:58:91:16:14:0b:07:21:98: a0:19:de:cb:f2:d4:9d:7b:5e:50:c1:48:5c:af:85: da:e0:4b:be:f3:4f:98:6c:a7:13:cb:0c:a6:88:64: a3:db:48:01:ea:df:fa:52:1b:ba:75:d2:dc:95:e2: c5:e2:1f:35:8c:8d:18:cd:2c:6d:d4:8b:24:49:5c: e3:8a:e4:e1:81:93:13:92:a5:e0:bd:f3:da:07:9e: bb:81:27:7b:88:bc:14:d9:4a:5e:59:c0:9d:95:0b: 5d:f5:f5:91:4f:9c:e7:09:a7:7a:b9:4b:25:77:35: 2d:d2:3c:ec:df:ca:57:e4:99:e1:99:5d:86:16:61: d9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DD:15:36:50:0E:87:51:0D:BB:4C:B5:A4:10:05:0F:CB:A3:6E:FC X509v3 Authority Key Identifier: keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.239.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:7c:d8:6d:a8:92:93:d5:3d:dc:81:fd:25:86:3c:05:3a:f3: 3c:39:ec:2b:a9:02:90:dc:51:6d:a9:71:be:90:a2:bf:41:16: 0d:87:9b:ca:37:35:f3:78:c3:1d:37:2e:8e:fa:38:6f:ed:08: 06:77:e4:64:38:e3:5f:bd:48:23:3d:3b:89:10:13:59:38:20: 2c:4c:33:99:76:fd:3e:5f:3c:27:31:72:26:90:95:bf:1e:d2: ae:c3:e5:0f:c0:01:51:1f:ee:88:f8:22:c2:f9:1c:44:ef:a9: f2:2a:e4:51:f5:14:70:cc:00:d6:5f:c2:80:44:b0:33:a1:bb: cd:f9:5a:3b:7b:12:f8:a0:e6:e4:80:b9:d5:d7:19:97:12:b3: 5a:16:30:06:2d:99:33:37:b6:82:17:34:4d:13:a5:69:3d:b2: f6:11:20:38:39:9f:24:45:40:39:51:d1:21:9c:e4:23:49:ca: 51:8c:75:a3:4c:1b:59:93:31:69:52:18:1a:c9:81:18:95:dc: b2:1f:6c:41:60:ae:d3:e5:47:67:ef:8d:1e:0c:35:7b:e2:44: 8b:8f:31:48:f6:33:05:e5:ba:48:cc:89:48:00:70:a4:e3:7e: 40:37:a1:70:12:73:e8:ea:fe:dc:c6:3f:d4:35:b1:53:f2:3c: b4:e3:25:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xo5AQ51ROoPCFwdQObbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ODNiNjJhYjhhZWE1MjA3NzBjNTc0MDRiZTc3NzFmNjc5 ZWMwYjUwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWRkMTUzNjUwMGU4NzUxMGRiYjRjYjVhNDEwMDUwZmNiYTM2ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsVzyLRG4NZtivDMRBD0XgZadRnR 7hGMSo9AVddDQgigGx4FndfvHQUl7EqxNFXpprkzV9Y7oj2lgK5EpGrYljbmhDUq CMhkkeH7l4UNmh0gqPDgkSu650SkjQH2DLlcPaiMUKMBu2RBe51gIx2xYUP+7b1b 6+MLwB480kn7WJEWFAsHIZigGd7L8tSde15QwUhcr4Xa4Eu+80+YbKcTywymiGSj 20gB6t/6Uhu6ddLcleLF4h81jI0YzSxt1IskSVzjiuThgZMTkqXgvfPaB567gSd7 iLwU2UpeWcCdlQtd9fWRT5znCad6uUsldzUt0jzs38pX5JnhmV2GFmHZ/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMndFTZQDodRDbtMtaQQBQ/Lo278MB8GA1UdIwQY MBaAFOeDtiq4rqUgdwxXQEvndx9nnsC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWIt MTlkZjViNGQxMDE0LzEveWQwVk5sQU9oMUVOdTB5MXBCQUZEOHVqYnZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWItMTlkZjViNGQxMDE0 LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/TvMA0G CSqGSIb3DQEBCwUAA4IBAQBefNhtqJKT1T3cgf0lhjwFOvM8OewrqQKQ3FFtqXG+ kKK/QRYNh5vKNzXzeMMdNy6O+jhv7QgGd+RkOONfvUgjPTuJEBNZOCAsTDOZdv0+ XzwnMXImkJW/HtKuw+UPwAFRH+6I+CLC+RxE76nyKuRR9RRwzADWX8KARLAzobvN +Vo7exL4oObkgLnV1xmXErNaFjAGLZkzN7aCFzRNE6VpPbL2ESA4OZ8kRUA5UdEh nOQjScpRjHWjTBtZkzFpUhgayYEYldyyH2xBYK7T5Udn740eDDV74kSLjzFI9jMF 5bpIzIlIAHCk435AN6FwEnPo6v7cxj/UNbFT8jy04yWs -----END CERTIFICATE-----Generated at Sun Jan 25 10:30:10 2026 by rpki-client