This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa File: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (raw, json) Hash identifier: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ= Subject key identifier: 61:31:EA:CB:58:D7:35:5E:DD:37:3A:C0:3B:F4:5B:19:84:53:09:C0 Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Certificate serial: 019B791021AA407C12A2766ED8BB1BE9B16A Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51500 IP address blocks: 91.197.240.0/24 maxlen: 24 2a07:f3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:21:aa:40:7c:12:a2:76:6e:d8:bb:1b:e9:b1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6131eacb58d7355edd373ac03bf45b19845309c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ad:db:d1:86:ce:ce:e4:51:4c:71:20:48:f1: 14:5d:fe:68:4b:6e:c3:81:33:29:1f:d1:34:f1:3b: 3e:4e:50:af:12:ed:c8:aa:3c:d4:54:6d:b3:84:27: b0:30:69:9c:61:70:c7:53:33:96:b0:fa:b8:5c:17: dc:56:87:0c:50:73:ab:51:8d:e0:a0:fc:aa:77:c7: 4a:29:6a:ee:d2:4a:7c:85:8a:6a:e4:41:34:da:e3: 05:ec:9a:bf:ae:3a:e6:56:53:21:97:5d:c1:99:5b: 29:64:5a:9b:5d:9b:e7:4f:ac:f9:99:99:37:07:9d: d9:bb:ba:bc:ee:37:32:85:80:2e:9d:c4:4a:17:68: 49:3e:8f:bc:52:19:6c:52:57:bb:a2:6c:1c:12:c3: a7:d7:cc:f5:d9:59:b9:4a:ef:9b:0c:32:b3:fc:04: 8c:c2:7b:a0:5a:39:a2:5e:04:b2:5c:dc:16:8a:88: 6c:cf:15:6a:3c:c7:4b:9c:79:a6:03:a6:e8:d8:22: 7e:9b:23:47:b6:cf:f3:5a:e5:f9:48:24:54:03:41: aa:4c:46:72:df:1b:ef:d5:52:8c:4f:7c:e7:60:ae: 6d:71:c3:c8:34:63:61:a4:ab:ee:42:77:db:c1:11: 03:67:f8:91:dc:77:86:89:7f:cd:74:83:f8:23:bc: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:31:EA:CB:58:D7:35:5E:DD:37:3A:C0:3B:F4:5B:19:84:53:09:C0 X509v3 Authority Key Identifier: keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.240.0/24 IPv6: 2a07:f3c0::/29 Signature Algorithm: sha256WithRSAEncryption 25:ae:b4:2d:ae:56:92:24:2f:fd:2b:81:2d:4a:ba:48:6d:1c: cf:52:d1:ef:f0:5b:b0:bd:cd:86:19:cd:85:fa:90:35:45:8e: ee:de:0c:40:93:69:f5:58:90:1f:12:e0:57:78:04:fe:93:af: c1:e8:0c:06:63:3d:ef:a2:36:bf:8f:33:25:87:ce:7f:b1:b4: 17:b3:83:c3:f6:34:c5:8e:d0:2d:83:ab:c8:fc:e9:e0:2f:45: b8:33:e3:e2:48:ae:5a:79:16:23:45:b3:7e:66:b1:de:90:0d: b6:fb:96:31:6d:be:39:09:85:54:32:04:c5:0b:f3:59:0f:a6: 1f:b7:fe:44:0f:2a:d5:53:5d:4b:3c:85:ce:da:42:04:b5:c9: 98:f6:1d:d2:1e:e5:1c:d1:c0:85:84:cc:84:30:72:59:1d:a7: 45:3c:36:10:e5:2a:4f:81:3a:85:d6:58:eb:2a:0b:96:d9:f3: 55:41:2a:17:20:26:bf:a1:d1:88:f1:eb:c9:93:6e:58:5f:85: 8c:57:23:8e:43:1e:42:33:41:c4:af:9f:29:98:21:86:21:f7: 38:48:f9:7c:ef:ff:55:15:91:0b:74:89:bd:fc:d7:1f:fb:50: 46:0d:09:6e:2b:ea:32:e9:20:66:5d:32:65:82:bf:00:92:10: 26:3f:48:d6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ECGqQHwSonZu2Lsb6bFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy YjQ4NWEwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTMxZWFjYjU4ZDczNTVlZGQzNzNhYzAzYmY0NWIxOTg0NTMwOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q3b0YbOzuRRTHEgSPEUXf5oS27D gTMpH9E08Ts+TlCvEu3IqjzUVG2zhCewMGmcYXDHUzOWsPq4XBfcVocMUHOrUY3g oPyqd8dKKWru0kp8hYpq5EE02uMF7Jq/rjrmVlMhl13BmVspZFqbXZvnT6z5mZk3 B53Zu7q87jcyhYAuncRKF2hJPo+8UhlsUle7omwcEsOn18z12Vm5Su+bDDKz/ASM wnugWjmiXgSyXNwWiohszxVqPMdLnHmmA6bo2CJ+myNHts/zWuX5SCRUA0GqTEZy 3xvv1VKMT3znYK5tccPINGNhpKvuQnfbwREDZ/iR3HeGiX/NdIP4I7xLjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGEx6stY1zVe3Tc6wDv0WxmEUwnAMB8GA1UdIwQY MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt MjI3NDBiZjJkNWVhLzEvWVRIcXkxalhOVjdkTnpyQU9fUmJHWVJUQ2NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8XwMA0E AgACMAcDBQMqB/PAMA0GCSqGSIb3DQEBCwUAA4IBAQAlrrQtrlaSJC/9K4EtSrpI bRzPUtHv8Fuwvc2GGc2F+pA1RY7u3gxAk2n1WJAfEuBXeAT+k6/B6AwGYz3voja/ jzMlh85/sbQXs4PD9jTFjtAtg6vI/OngL0W4M+PiSK5aeRYjRbN+ZrHekA22+5Yx bb45CYVUMgTFC/NZD6Yft/5EDyrVU11LPIXO2kIEtcmY9h3SHuUc0cCFhMyEMHJZ HadFPDYQ5SpPgTqF1ljrKguW2fNVQSoXICa/odGI8evJk25YX4WMVyOOQx5CM0HE r58pmCGGIfc4SPl87/9VFZELdIm9/Ncf+1BGDQluK+oy6SBmXTJlgr8AkhAmP0jW -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:12 2026 by rpki-client