This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa File: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (raw, json) Hash identifier: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0= Subject key identifier: 63:97:39:B4:73:02:45:F4:ED:3E:EC:67:56:F0:31:C2:95:D2:97:6F Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250 Certificate serial: 019B7F12890CA1F510307234679EF90372D0 Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa Signing time: Fri 02 Jan 2026 14:17:59 +0000 ROA not before: Fri 02 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43905 IP address blocks: 93.91.96.0/21 maxlen: 21 93.91.110.0/24 maxlen: 24 185.85.130.0/23 maxlen: 23 213.234.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:89:0c:a1:f5:10:30:72:34:67:9e:f9:03:72:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250 Validity Not Before: Jan 2 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=639739b4730245f4ed3eec6756f031c295d2976f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:6e:54:67:f2:cd:74:e1:fc:fa:f4:47:5f: 18:ee:8f:fc:da:18:c0:07:97:8d:e6:1c:e4:15:b8: 5a:4a:32:13:7e:a1:d1:e5:3d:d4:85:ac:49:b2:47: 06:86:06:c1:04:37:25:9f:42:f1:08:4d:7a:4e:93: db:e3:5b:66:d7:7c:8d:be:f1:02:9a:5d:1d:d0:bb: c9:a2:6b:a5:16:48:94:85:9e:b1:5a:a9:b2:6d:2a: 86:5d:40:e4:17:f6:ca:92:85:ca:1d:87:7d:f1:44: a6:0b:7b:20:ef:e5:1f:30:3d:1e:07:f6:9f:58:6c: 36:02:c9:05:80:13:79:3a:7b:3e:0a:bd:5b:d4:10: 15:fd:22:b7:95:db:7c:5c:4f:16:82:c6:c0:9c:33: 70:7e:bc:92:e4:31:e8:23:95:cc:12:d7:40:e3:31: a2:ab:aa:7b:5b:dc:96:74:33:af:e5:00:4c:f0:31: fe:7f:8e:e1:da:97:1b:4c:c4:9c:29:8c:35:62:0b: 88:65:d7:30:2a:0d:dc:4c:71:7b:31:00:28:20:95: 17:39:21:9a:ac:05:00:03:c7:f2:28:f3:3a:51:c4: b2:71:66:ac:51:c9:e8:9a:2f:42:1e:23:8f:72:82: 4d:39:42:62:08:f0:76:ee:bf:f6:ae:5f:52:a4:4c: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:97:39:B4:73:02:45:F4:ED:3E:EC:67:56:F0:31:C2:95:D2:97:6F X509v3 Authority Key Identifier: keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.91.96.0/21 93.91.110.0/24 185.85.130.0/23 213.234.64.0/18 Signature Algorithm: sha256WithRSAEncryption 2e:60:47:4a:8a:7f:d2:9c:63:e5:4d:b2:7a:21:29:c7:91:ba: ef:4d:fa:56:09:f4:e1:03:9f:00:e1:23:f4:c1:6d:b2:c7:9f: 4c:a2:81:89:7d:56:55:0e:17:f9:e7:8e:6a:0b:1c:50:96:ce: 0d:4d:41:20:f2:9f:88:8c:f3:cb:d0:ca:f7:98:00:ce:b5:03: 78:2c:29:4b:44:bb:19:11:f3:78:a4:29:cb:b5:80:41:f9:a0: d0:91:ce:cb:29:37:6c:d6:ef:4a:fd:ae:c6:84:e3:82:88:05: f4:c5:70:03:c4:e8:08:4f:a6:a6:9e:33:42:6c:51:29:83:1d: df:fb:23:f8:c8:78:11:98:87:5f:9d:f2:af:1c:99:35:9f:25: 61:2e:22:a0:d4:12:ef:51:6a:ec:e4:5e:d2:7d:cd:71:59:a4: 85:7d:82:89:94:93:e2:f1:38:82:c7:8d:48:b8:21:d7:55:bd: 49:2a:b2:f9:31:90:ff:20:c2:cf:99:92:b8:dc:c1:2e:59:3b: 0d:4b:fe:b5:71:5f:76:0d:d0:08:f1:f0:51:82:5d:e7:15:6c: 6b:6d:5e:a4:4f:5d:d4:a1:9a:e9:2e:9c:dd:0c:5a:ab:5b:38: 5f:61:3c:11:f8:97:c3:d3:17:ef:bc:69:b8:d8:0d:7d:1e:88: f7:2c:5e:ab -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/EokMofUQMHI0Z575A3LQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzQwNjk5YzhlZDk3MGE4YzllZDhjMTYyMDg4ZjIwNjdj MzMyNTAwHhcNMjYwMTAyMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzk3MzliNDczMDI0NWY0ZWQzZWVjNjc1NmYwMzFjMjk1ZDI5NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NZuVGfyzXTh/Pr0R18Y7o/82hjA B5eN5hzkFbhaSjITfqHR5T3UhaxJskcGhgbBBDcln0LxCE16TpPb41tm13yNvvEC ml0d0LvJomulFkiUhZ6xWqmybSqGXUDkF/bKkoXKHYd98USmC3sg7+UfMD0eB/af WGw2AskFgBN5Ons+Cr1b1BAV/SK3ldt8XE8WgsbAnDNwfryS5DHoI5XMEtdA4zGi q6p7W9yWdDOv5QBM8DH+f47h2pcbTMScKYw1YguIZdcwKg3cTHF7MQAoIJUXOSGa rAUAA8fyKPM6UcSycWasUcnomi9CHiOPcoJNOUJiCPB27r/2rl9SpEzYwwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGOXObRzAkX07T7sZ1bwMcKV0pdvMB8GA1UdIwQY MBaAFJs0BpnI7ZcKjJ7YwWIIjyBnwzJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDct ZTA4YmUwZWRhZjc2LzEvWTVjNXRITUNSZlR0UHV4blZ2QXh3cFhTbDI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDctZTA4YmUwZWRhZjc2 LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDXVtgAwQA XVtuAwQBuVWCAwQG1epAMA0GCSqGSIb3DQEBCwUAA4IBAQAuYEdKin/SnGPlTbJ6 ISnHkbrvTfpWCfThA58A4SP0wW2yx59MooGJfVZVDhf5545qCxxQls4NTUEg8p+I jPPL0Mr3mADOtQN4LClLRLsZEfN4pCnLtYBB+aDQkc7LKTds1u9K/a7GhOOCiAX0 xXADxOgIT6amnjNCbFEpgx3f+yP4yHgRmIdfnfKvHJk1nyVhLiKg1BLvUWrs5F7S fc1xWaSFfYKJlJPi8TiCx41IuCHXVb1JKrL5MZD/IMLPmZK43MEuWTsNS/61cV92 DdAI8fBRgl3nFWxrbV6kT13UoZrpLpzdDFqrWzhfYTwR+JfD0xfvvGm42A19Hoj3 LF6r -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:11 2026 by rpki-client