This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa File: Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa (raw, json) Hash identifier: K9yqS9A7xFeAsAleB3jRUr3PxaQlF2IYyX8ECmCgYiQ= Subject key identifier: 63:FB:D4:6F:BC:71:9C:42:7F:B9:B5:28:FF:97:5D:B5:56:05:72:A1 Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322 Certificate serial: 019B7D5C9A7AB2969B93A8E9E450059452A3 Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa Signing time: Fri 02 Jan 2026 06:19:39 +0000 ROA not before: Fri 02 Jan 2026 06:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135074 IP address blocks: 91.192.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9a:7a:b2:96:9b:93:a8:e9:e4:50:05:94:52:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63fbd46fbc719c427fb9b528ff975db5560572a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:ee:35:6f:75:93:28:90:f2:c2:e0:cf:35: df:5e:21:8e:8b:41:b0:eb:f2:1a:a5:10:1b:32:4d: 7c:c3:f7:7b:95:2f:a4:10:4e:20:4e:12:d9:e9:09: f7:45:03:2f:9d:29:1b:48:15:13:14:47:61:6e:20: 68:1e:b4:4c:8c:c3:92:0f:17:b3:3c:95:ae:d0:76: 53:44:47:b7:1d:f4:c4:b7:3c:41:47:6e:37:15:32: 9d:ae:4a:59:a0:e6:b7:19:9b:92:4f:e9:43:33:3c: c1:53:75:d2:27:9c:8d:b9:61:cb:72:c4:25:72:61: cf:85:5c:58:3a:17:9c:ac:12:93:6d:b2:df:60:2f: 1c:60:65:5e:f2:5b:6c:a1:b7:15:95:33:e9:66:cc: 8a:1c:b0:11:8d:f2:98:60:37:9f:ca:5a:0b:f8:c7: 63:41:16:26:d5:42:5e:f7:f9:ba:15:59:45:f4:b2: 39:66:49:27:38:7c:2a:c4:f2:70:63:62:d4:83:98: 07:22:96:44:e4:8a:63:02:d7:8f:5b:fd:fc:f5:00: 35:f8:49:06:ad:7c:0b:03:c3:ab:9c:e0:d9:32:be: d1:04:3c:57:f4:a8:43:e3:37:bf:47:31:e6:1e:ba: 7b:48:bc:ad:b4:ae:ad:95:88:5e:2e:82:1f:7d:ec: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FB:D4:6F:BC:71:9C:42:7F:B9:B5:28:FF:97:5D:B5:56:05:72:A1 X509v3 Authority Key Identifier: keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.107.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:79:55:a0:66:ec:2b:1c:25:3d:33:98:f1:a7:07:40:90:90: 09:61:ed:6a:11:84:f6:21:51:39:44:7d:11:8d:7f:ea:04:ca: 48:79:d4:98:4f:46:02:b1:84:23:4b:d0:0a:a1:aa:59:f1:9a: 30:a2:ed:d6:d8:d8:b9:1b:b8:14:ab:b8:a5:92:aa:4a:96:30: a5:3a:55:a7:00:b7:31:d9:2c:f8:81:f4:63:ff:59:7e:a3:bf: 5c:c7:29:98:ea:9f:9b:5b:47:5b:b6:6f:1f:7d:4d:3e:c4:02: c7:9b:08:80:19:b9:1d:e0:fe:9a:5c:cf:ca:ec:9e:e8:21:00: 6f:1d:19:b2:15:1c:a9:b2:4c:25:aa:3c:aa:05:59:f7:99:63: 3e:4d:bf:e7:42:2b:79:ae:91:7d:a8:39:da:22:35:52:f2:5e: 62:d4:1d:86:cf:38:3d:a8:b7:22:ab:6c:84:62:88:53:54:fa: fe:ee:fb:25:e8:23:89:75:2a:64:91:5d:99:de:9c:e7:5a:6b: a8:3f:67:c7:07:45:94:82:dd:4e:1b:f4:04:e9:98:02:8d:29: 0e:27:70:88:1a:b5:f9:42:3c:d5:5d:6c:84:a1:b5:7a:d6:22: bf:d7:75:f4:60:51:cc:78:3b:3d:95:0c:c0:7d:17:5f:61:e5: 0b:6d:6e:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJp6spabk6jp5FAFlFKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0 M2IzMjIwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2ZiZDQ2ZmJjNzE5YzQyN2ZiOWI1MjhmZjk3NWRiNTU2MDU3MmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsszuNW91kyiQ8sLgzzXfXiGOi0Gw 6/IapRAbMk18w/d7lS+kEE4gThLZ6Qn3RQMvnSkbSBUTFEdhbiBoHrRMjMOSDxez PJWu0HZTREe3HfTEtzxBR243FTKdrkpZoOa3GZuST+lDMzzBU3XSJ5yNuWHLcsQl cmHPhVxYOhecrBKTbbLfYC8cYGVe8ltsobcVlTPpZsyKHLARjfKYYDefyloL+Mdj QRYm1UJe9/m6FVlF9LI5ZkknOHwqxPJwY2LUg5gHIpZE5IpjAtePW/389QA1+EkG rXwLA8OrnODZMr7RBDxX9KhD4ze/RzHmHrp7SLyttK6tlYheLoIffezNjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGP71G+8cZxCf7m1KP+XXbVWBXKhMB8GA1UdIwQY MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct ODIwMmE0NjdkNzUzLzEvWV92VWI3eHhuRUpfdWJVb181ZGR0VllGY3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8BrMA0G CSqGSIb3DQEBCwUAA4IBAQAMeVWgZuwrHCU9M5jxpwdAkJAJYe1qEYT2IVE5RH0R jX/qBMpIedSYT0YCsYQjS9AKoapZ8Zowou3W2Ni5G7gUq7ilkqpKljClOlWnALcx 2Sz4gfRj/1l+o79cxymY6p+bW0dbtm8ffU0+xALHmwiAGbkd4P6aXM/K7J7oIQBv HRmyFRypskwlqjyqBVn3mWM+Tb/nQit5rpF9qDnaIjVS8l5i1B2Gzzg9qLciq2yE YohTVPr+7vsl6COJdSpkkV2Z3pznWmuoP2fHB0WUgt1OG/QE6ZgCjSkOJ3CIGrX5 QjzVXWyEobV61iK/13X0YFHMeDs9lQzAfRdfYeULbW5v -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:41 2026 by rpki-client