This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/YG_wDFENOqVU5myZSFJwFFRQIGo.roa File: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (raw, json) Hash identifier: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4= Subject key identifier: 60:6F:F0:0C:51:0D:3A:A5:54:E6:6C:99:48:52:70:14:54:50:20:6A Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Certificate serial: 019B7DCA14AB5B3AD08B52B190353E16AF7F Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/YG_wDFENOqVU5myZSFJwFFRQIGo.roa Signing time: Fri 02 Jan 2026 08:19:14 +0000 ROA not before: Fri 02 Jan 2026 08:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208324 IP address blocks: 91.192.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:14:ab:5b:3a:d0:8b:52:b1:90:35:3e:16:af:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Validity Not Before: Jan 2 08:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=606ff00c510d3aa554e66c99485270145450206a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:4f:93:9c:7d:7b:23:6e:30:19:3e:93:8e: f4:68:a3:8d:c6:bd:3c:84:e9:03:44:9f:30:f4:9e: b2:0d:86:f1:75:7e:9d:9a:71:7a:97:03:da:e5:9f: 4f:ff:67:d3:a4:7f:3e:02:07:be:4a:33:0c:02:92: fe:98:fe:c5:95:8f:47:1e:5c:98:84:65:48:01:84: be:a9:b7:9d:1f:0d:1c:5b:a6:07:15:b2:d3:d3:7d: cf:f8:56:b3:78:41:02:9e:4a:fd:cd:79:08:af:d8: e3:de:c7:19:c2:4f:f8:dc:b5:af:51:38:12:90:d9: bf:1b:3e:f5:3b:09:db:8f:4d:34:7c:d9:f8:e4:5d: 04:c5:f4:9b:d3:c0:ef:21:b6:68:6c:ea:b3:9a:98: 9a:e4:7b:e3:ce:d4:9b:4b:72:07:ba:95:7b:ff:42: d1:bf:36:69:28:ed:e2:43:7f:2a:8b:e2:cf:a2:42: b6:db:8c:bf:d7:dc:51:bd:15:0a:84:84:3e:21:b9: e6:aa:43:03:28:2e:90:17:81:c7:37:0c:a2:f7:06: 04:a4:a5:b9:76:8c:6e:cc:f9:9e:a2:8d:8e:08:28: 87:e3:be:c3:54:f8:fe:93:99:70:84:86:a0:36:6c: 74:22:8b:6a:b9:15:d3:37:ea:c7:06:30:3a:32:99: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6F:F0:0C:51:0D:3A:A5:54:E6:6C:99:48:52:70:14:54:50:20:6A X509v3 Authority Key Identifier: keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/YG_wDFENOqVU5myZSFJwFFRQIGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.4.0/24 Signature Algorithm: sha256WithRSAEncryption bd:39:f9:fd:30:a8:0c:86:79:a0:09:ee:bf:f1:f0:df:6c:41: 3d:02:25:e3:5a:45:9d:de:d1:cc:b0:f9:7f:7b:97:e4:21:45: 3a:c5:c2:d7:e8:7a:e6:96:2d:52:32:0d:96:98:e0:5e:e8:f8: 76:f7:35:57:ba:78:17:39:3e:ef:82:5d:d7:b5:3a:e1:88:a1: 7d:7b:fa:4e:07:86:02:6e:91:76:b4:bc:82:73:14:49:b7:9a: 1c:51:3e:70:41:2e:66:3a:17:18:96:63:bb:75:3b:bd:26:fe: 14:2a:fe:08:7a:53:3b:3d:41:a4:4b:7d:01:57:bc:91:f5:ab: 3e:cd:b5:70:c1:19:a1:e2:e5:76:72:a4:4a:17:0e:7f:a0:bf: f2:50:a1:fc:83:0f:b8:90:59:0e:07:5b:47:76:97:aa:00:b1: e4:da:31:c6:ab:b9:a1:5a:5e:8c:bf:33:93:44:02:7f:55:66: 51:87:f0:d2:2e:5d:b9:cf:81:2b:c6:cb:63:f4:06:70:c1:1a: a2:29:75:f3:88:75:4c:03:6b:22:11:61:d5:26:74:4e:35:30: 88:7d:70:ba:f7:9c:91:41:a2:95:7c:83:ac:7b:5b:6c:98:b5: fc:6a:3d:74:bf:fd:c4:84:bf:34:6f:16:63:87:c4:97:db:52: 97:b1:41:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yhSrWzrQi1KxkDU+Fq9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx MjA2Y2UwHhcNMjYwMTAyMDgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDZmZjAwYzUxMGQzYWE1NTRlNjZjOTk0ODUyNzAxNDU0NTAyMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEJPk5x9eyNuMBk+k470aKONxr08 hOkDRJ8w9J6yDYbxdX6dmnF6lwPa5Z9P/2fTpH8+Age+SjMMApL+mP7FlY9HHlyY hGVIAYS+qbedHw0cW6YHFbLT033P+FazeEECnkr9zXkIr9jj3scZwk/43LWvUTgS kNm/Gz71Ownbj000fNn45F0ExfSb08DvIbZobOqzmpia5HvjztSbS3IHupV7/0LR vzZpKO3iQ38qi+LPokK224y/19xRvRUKhIQ+IbnmqkMDKC6QF4HHNwyi9wYEpKW5 doxuzPmeoo2OCCiH477DVPj+k5lwhIagNmx0IotquRXTN+rHBjA6MpmqJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBv8AxRDTqlVOZsmUhScBRUUCBqMB8GA1UdIwQY MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt NDc1ZGJiYjBjMDhjLzEvWUdfd0RGRU5PcVZVNW15WlNGSndGRlJRSUdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8AEMA0G CSqGSIb3DQEBCwUAA4IBAQC9Ofn9MKgMhnmgCe6/8fDfbEE9AiXjWkWd3tHMsPl/ e5fkIUU6xcLX6Hrmli1SMg2WmOBe6Ph29zVXungXOT7vgl3XtTrhiKF9e/pOB4YC bpF2tLyCcxRJt5ocUT5wQS5mOhcYlmO7dTu9Jv4UKv4IelM7PUGkS30BV7yR9as+ zbVwwRmh4uV2cqRKFw5/oL/yUKH8gw+4kFkOB1tHdpeqALHk2jHGq7mhWl6MvzOT RAJ/VWZRh/DSLl25z4Erxstj9AZwwRqiKXXziHVMA2siEWHVJnRONTCIfXC695yR QaKVfIOse1tsmLX8aj10v/3EhL80bxZjh8SX21KXsUH1 -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:20 2026 by rpki-client