This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/yJEHfcJRgkFuNVIuhioT_sp3dfg.roa File: yJEHfcJRgkFuNVIuhioT_sp3dfg.roa (raw, json) Hash identifier: bQzhx47BAwnINhp4yvgiQNvYfmYBagWvwXbBTrw311U= Subject key identifier: C8:91:07:7D:C2:51:82:41:6E:35:52:2E:86:2A:13:FE:CA:77:75:F8 Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Certificate serial: 019B7D5C76428668F89932B336DB2D541C56 Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/yJEHfcJRgkFuNVIuhioT_sp3dfg.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34259 IP address blocks: 91.195.120.0/24 maxlen: 24 91.195.121.0/24 maxlen: 24 91.220.101.0/24 maxlen: 24 91.223.77.0/24 maxlen: 24 193.111.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:76:42:86:68:f8:99:32:b3:36:db:2d:54:1c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c891077dc25182416e35522e862a13feca7775f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:76:ac:70:ca:f1:4d:ac:47:b8:8a:ef:22: 2f:15:35:a9:1e:2b:0a:6e:af:44:a1:26:42:43:52: 88:7f:f9:70:c8:35:c1:0f:a9:0b:f7:d7:35:46:79: 2b:d9:17:ff:05:f3:92:dc:39:18:0e:81:ca:c8:21: f5:06:8c:12:fe:c6:d6:3f:9e:30:06:ce:2d:b7:5d: fa:03:2a:3b:f0:62:09:ce:db:ce:72:a8:b4:a1:f1: 17:f0:d7:83:71:ff:ac:7d:b2:fc:c8:54:01:77:3a: 90:8f:a0:31:11:24:af:99:16:36:b5:67:a3:95:47: fc:ff:90:2e:09:22:a7:77:97:63:cc:e0:0c:7c:30: c3:d7:0f:f7:50:02:4f:56:c2:47:6e:bb:76:96:a7: 5e:65:da:6f:99:54:36:2f:fd:08:cd:b7:a6:c4:f9: 89:66:5d:41:44:7c:5b:b9:65:cb:04:6c:c4:6d:b4: 00:0d:64:8a:f1:dc:98:d5:5b:f9:2e:0e:7f:f4:ff: 12:66:09:21:5d:7d:17:9a:90:48:50:ca:7c:1c:7c: a4:d7:4b:95:dd:cc:d8:00:6a:10:ec:d0:86:d3:a7: a6:44:d7:3a:84:b8:f6:64:d9:14:49:3e:83:9e:bc: 6a:07:be:9a:00:a1:74:1c:74:f3:2b:40:26:d1:a4: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:91:07:7D:C2:51:82:41:6E:35:52:2E:86:2A:13:FE:CA:77:75:F8 X509v3 Authority Key Identifier: keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/yJEHfcJRgkFuNVIuhioT_sp3dfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.120.0/23 91.220.101.0/24 91.223.77.0/24 193.111.83.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:52:9b:37:56:e4:91:2c:68:cb:22:36:b0:9a:81:66:ed:8c: 25:90:a9:57:14:5e:f9:dc:65:1a:61:09:78:c3:72:6e:63:5a: 54:a4:30:85:4f:4f:5c:ed:42:59:4d:f2:b8:dd:a9:5c:b5:6f: 09:3b:d6:d0:a3:67:6e:10:7d:a0:51:b0:35:f6:16:b8:ac:73: ae:41:06:57:3e:b2:74:53:ce:84:5a:9f:ba:a5:20:db:80:a6: df:a5:58:b3:b4:29:c7:63:e4:8a:bc:be:38:b2:42:75:0a:55: 7e:9a:db:50:67:7c:e4:f1:82:54:28:36:a6:cd:f6:1c:ba:1e: e7:20:3c:48:1e:62:62:c0:6d:54:39:b1:d1:d1:5a:46:11:17: c6:5b:9e:95:35:ed:f4:7d:7c:cc:d1:ec:2e:c9:67:19:bf:7f: 6c:2c:a8:40:d3:ee:21:92:a0:5a:07:0f:55:11:db:f9:7c:bb: 00:c2:50:ae:ae:85:44:84:82:65:1e:63:37:5d:96:a7:c6:58: aa:56:f0:03:f8:0a:97:aa:5d:45:dd:de:5c:4f:54:37:04:8c: 8d:fb:0a:1b:8d:70:d6:99:96:fb:7a:96:94:7e:71:76:04:b2: 52:33:2b:e9:d8:56:e5:ad:8f:bf:f7:73:5d:bb:fa:92:89:13: 16:57:93:40 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XHZChmj4mTKzNtstVBxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx OTBmZjEwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODkxMDc3ZGMyNTE4MjQxNmUzNTUyMmU4NjJhMTNmZWNhNzc3NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwd2rHDK8U2sR7iK7yIvFTWpHisK bq9EoSZCQ1KIf/lwyDXBD6kL99c1Rnkr2Rf/BfOS3DkYDoHKyCH1BowS/sbWP54w Bs4tt136Ayo78GIJztvOcqi0ofEX8NeDcf+sfbL8yFQBdzqQj6AxESSvmRY2tWej lUf8/5AuCSKnd5djzOAMfDDD1w/3UAJPVsJHbrt2lqdeZdpvmVQ2L/0IzbemxPmJ Zl1BRHxbuWXLBGzEbbQADWSK8dyY1Vv5Lg5/9P8SZgkhXX0XmpBIUMp8HHyk10uV 3czYAGoQ7NCG06emRNc6hLj2ZNkUST6DnrxqB76aAKF0HHTzK0Am0aTeXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMiRB33CUYJBbjVSLoYqE/7Kd3X4MB8GA1UdIwQY MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt YWRlZGNhYTNkMjZlLzEveUpFSGZjSlJna0Z1TlZJdWhpb1Rfc3AzZGZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBW8N4AwQA W9xlAwQAW99NAwQAwW9TMA0GCSqGSIb3DQEBCwUAA4IBAQB/Ups3VuSRLGjLIjaw moFm7YwlkKlXFF753GUaYQl4w3JuY1pUpDCFT09c7UJZTfK43alctW8JO9bQo2du EH2gUbA19ha4rHOuQQZXPrJ0U86EWp+6pSDbgKbfpViztCnHY+SKvL44skJ1ClV+ mttQZ3zk8YJUKDamzfYcuh7nIDxIHmJiwG1UObHR0VpGERfGW56VNe30fXzM0ewu yWcZv39sLKhA0+4hkqBaBw9VEdv5fLsAwlCuroVEhIJlHmM3XZanxliqVvAD+AqX ql1F3d5cT1Q3BIyN+wobjXDWmZb7epaUfnF2BLJSMyvp2FblrY+/93Ndu/qSiRMW V5NA -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:32 2026 by rpki-client