This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/Ypj1u0D-dKP25bpDr5b37lFIWLY.roa File: Ypj1u0D-dKP25bpDr5b37lFIWLY.roa (raw, json) Hash identifier: sZTi+uNahtkDx1CWD+fSQJ3e4s6S3VqVHfRHxysjxvE= Subject key identifier: 62:98:F5:BB:40:FE:74:A3:F6:E5:BA:43:AF:96:F7:EE:51:48:58:B6 Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426 Certificate serial: 019B7AC7F2C097627A3B90F99D112CC96A6A Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/Ypj1u0D-dKP25bpDr5b37lFIWLY.roa Signing time: Thu 01 Jan 2026 18:18:02 +0000 ROA not before: Thu 01 Jan 2026 18:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33965 IP address blocks: 91.212.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f2:c0:97:62:7a:3b:90:f9:9d:11:2c:c9:6a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426 Validity Not Before: Jan 1 18:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6298f5bb40fe74a3f6e5ba43af96f7ee514858b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:43:04:94:19:10:e5:72:ed:52:68:89:1d: fe:56:d8:52:d9:46:58:09:ea:9b:f6:ca:ea:c9:8b: cc:bc:cd:bd:3f:cb:18:4e:70:78:49:a0:cd:fa:3b: 88:62:6f:83:54:02:8c:39:bb:12:4a:6c:42:f9:9d: 87:97:03:f4:61:a6:a8:59:4a:b1:32:f5:a0:c9:ed: 49:18:2e:53:b9:77:79:c0:da:0b:7a:91:b3:c6:30: f7:e3:c1:4b:4c:d3:2f:97:ec:3a:fd:a6:0e:c7:59: d9:0a:81:27:5b:00:10:6e:d3:2e:1e:89:3f:b4:75: 2c:a4:6a:e0:6c:be:e9:8d:95:03:0b:e0:90:84:54: bb:74:b4:35:47:7c:f3:78:96:e1:d3:e7:83:64:81: 2b:f4:9d:35:55:43:fc:bc:7e:bf:0a:46:d0:52:fc: e1:35:ae:48:59:51:47:5e:7d:ef:38:95:e2:16:b1: a7:fc:4e:da:dc:e7:0d:d7:b5:9f:6f:da:fb:3e:fd: d0:9e:26:8f:67:2e:f2:ec:90:3c:5c:75:99:96:ef: 84:1b:45:95:cb:14:9a:26:61:aa:04:94:db:ae:57: 10:39:a4:2c:9a:16:dc:65:19:62:49:70:45:29:da: 4f:12:29:e9:a8:6f:2e:74:fa:26:27:92:a0:c1:ce: 71:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:98:F5:BB:40:FE:74:A3:F6:E5:BA:43:AF:96:F7:EE:51:48:58:B6 X509v3 Authority Key Identifier: keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/Ypj1u0D-dKP25bpDr5b37lFIWLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.109.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:8e:2c:e2:62:ed:b0:e7:25:01:60:75:b0:2e:23:eb:ad:44: c1:fa:85:75:9e:a9:89:af:9c:72:65:9b:df:d0:30:ab:cd:42: eb:80:70:1f:57:a6:1d:71:3a:cb:d4:fa:e0:08:42:94:1a:e1: be:73:6a:fe:4a:68:ce:64:45:c9:d5:1e:0b:bd:04:68:36:bb: fb:ef:f6:57:9e:5c:7b:13:a1:0c:bd:37:f4:16:9e:16:68:68: 69:ac:55:b3:91:0b:dc:1e:a9:f5:dc:24:89:3b:6d:1f:ee:f8: c2:29:77:fe:1e:c9:f2:7b:93:26:cc:f5:d9:05:71:ac:be:29: 15:8c:75:d1:0a:35:32:72:03:ae:fc:f3:8b:cc:78:81:d7:1a: 63:a8:01:c5:78:e2:36:90:b4:18:b7:47:5a:03:7d:b7:ce:3e: 8c:c0:44:bc:fd:49:0c:99:cd:6e:c7:26:3f:dc:6c:b5:c0:15: dc:9e:44:99:b9:2d:25:42:39:7d:ca:cc:25:a7:9e:f0:f2:a2: 8f:ae:4b:af:cd:26:f4:80:16:bc:8f:e9:b9:79:39:85:5c:02: 34:63:00:d5:b4:90:30:ca:ca:e9:c3:c5:e3:bf:a1:ed:71:7b: 03:2c:36:b8:32:c3:ca:ac:07:65:9c:69:a8:65:f7:f5:8d:32: 82:93:6c:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/LAl2J6O5D5nREsyWpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZDdmMzY4ZmExY2Y1YjFhYWFhNzZiMGYxZjIzYzA2NzUw YTg0MjYwHhcNMjYwMTAxMTgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjk4ZjViYjQwZmU3NGEzZjZlNWJhNDNhZjk2ZjdlZTUxNDg1OGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWBDBJQZEOVy7VJoiR3+VthS2UZY Ceqb9srqyYvMvM29P8sYTnB4SaDN+juIYm+DVAKMObsSSmxC+Z2HlwP0YaaoWUqx MvWgye1JGC5TuXd5wNoLepGzxjD348FLTNMvl+w6/aYOx1nZCoEnWwAQbtMuHok/ tHUspGrgbL7pjZUDC+CQhFS7dLQ1R3zzeJbh0+eDZIEr9J01VUP8vH6/CkbQUvzh Na5IWVFHXn3vOJXiFrGn/E7a3OcN17Wfb9r7Pv3QniaPZy7y7JA8XHWZlu+EG0WV yxSaJmGqBJTbrlcQOaQsmhbcZRliSXBFKdpPEinpqG8udPomJ5Kgwc5xkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGKY9btA/nSj9uW6Q6+W9+5RSFi2MB8GA1UdIwQY MBaAFLbX82j6HPWxqqp2sPHyPAZ1CoQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82ZDE1ZjQtODZhMi00NmQ5LWIzZWQt MDhhZWRjMmYyNjM5LzEvWXBqMXUwRC1kS1AyNWJwRHI1YjM3bEZJV0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82ZDE1ZjQtODZhMi00NmQ5LWIzZWQtMDhhZWRjMmYyNjM5 LzEvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RtMA0G CSqGSIb3DQEBCwUAA4IBAQCdjiziYu2w5yUBYHWwLiPrrUTB+oV1nqmJr5xyZZvf 0DCrzULrgHAfV6YdcTrL1PrgCEKUGuG+c2r+SmjOZEXJ1R4LvQRoNrv77/ZXnlx7 E6EMvTf0Fp4WaGhprFWzkQvcHqn13CSJO20f7vjCKXf+Hsnye5MmzPXZBXGsvikV jHXRCjUycgOu/POLzHiB1xpjqAHFeOI2kLQYt0daA323zj6MwES8/UkMmc1uxyY/ 3Gy1wBXcnkSZuS0lQjl9yswlp57w8qKPrkuvzSb0gBa8j+m5eTmFXAI0YwDVtJAw ysrpw8Xjv6HtcXsDLDa4MsPKrAdlnGmoZff1jTKCk2x2 -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:09 2026 by rpki-client