This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/YlXedLCyqhXrfS6xWyQ0uTsUI3U.roa File: YlXedLCyqhXrfS6xWyQ0uTsUI3U.roa (raw, json) Hash identifier: F80TY0fOITpa/Bk+EYhgg41ne6mDHfXgDtH94lguM+A= Subject key identifier: 62:55:DE:74:B0:B2:AA:15:EB:7D:2E:B1:5B:24:34:B9:3B:14:23:75 Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe Certificate serial: 019B7C7FEC2D23B01E1259FC33F144B92B8B Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/YlXedLCyqhXrfS6xWyQ0uTsUI3U.roa Signing time: Fri 02 Jan 2026 02:18:36 +0000 ROA not before: Fri 02 Jan 2026 02:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39591 IP address blocks: 91.233.206.0/23 maxlen: 24 91.233.207.0/24 maxlen: 24 2001:678:c30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ec:2d:23:b0:1e:12:59:fc:33:f1:44:b9:2b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6255de74b0b2aa15eb7d2eb15b2434b93b142375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:b9:11:97:fa:31:04:3a:26:9d:c4:f7:fe: 89:c1:f0:5d:4c:3e:88:e7:6a:b9:4f:49:6c:ea:08: fc:d6:2e:32:82:17:50:04:33:a1:42:66:6b:a0:40: 5f:71:79:06:1f:9a:eb:5b:26:36:6a:e4:e1:a0:0f: 04:42:e5:94:91:62:3b:6b:43:2a:1d:16:7a:57:d9: 2b:e6:ba:54:8a:50:c6:69:2e:ce:a6:ac:60:80:9b: da:2b:96:a8:ef:20:f0:bf:d4:5d:d0:dd:0d:31:64: 25:5d:af:db:80:3f:b2:75:f8:8c:a0:8c:e7:ed:13: 00:f6:23:9e:8a:e9:0d:a7:71:7c:ce:bf:0c:31:fc: fa:ab:46:e2:5c:db:e0:fa:9e:b3:8c:46:3c:c8:f4: f5:95:18:1f:e3:a9:71:5a:30:01:14:05:85:31:a7: 44:af:2b:b9:09:b2:96:57:bb:1b:c4:ef:06:6c:76: 09:3f:6f:b8:9d:d2:37:5e:33:ea:26:75:5e:e7:39: cb:33:03:bf:0a:a3:54:21:76:e4:d7:2b:6d:d2:71: 95:61:ed:f7:3e:e9:3c:c8:d8:ff:e2:62:d0:b6:7c: b9:d9:a1:ac:96:cc:76:da:de:45:03:86:4b:3c:70: 22:71:df:d7:4a:19:61:69:48:e2:8f:47:ea:f2:ce: e8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:55:DE:74:B0:B2:AA:15:EB:7D:2E:B1:5B:24:34:B9:3B:14:23:75 X509v3 Authority Key Identifier: keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/YlXedLCyqhXrfS6xWyQ0uTsUI3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.206.0/23 IPv6: 2001:678:c30::/48 Signature Algorithm: sha256WithRSAEncryption 01:b6:bc:be:f5:26:14:cf:28:94:d8:1b:be:1d:8c:eb:0e:87: 02:77:dc:2c:00:62:02:e7:4f:02:dc:a7:e9:0f:ce:c9:5c:47: a0:f0:06:a7:33:01:c2:a6:8e:1f:a1:6d:d7:de:e9:dc:2f:c9: 7f:3d:46:36:28:01:24:d3:49:d1:fe:8e:7b:7c:f8:30:64:ba: 8e:b5:37:3a:9d:c7:a2:23:36:27:20:eb:21:37:fb:40:b5:dc: 46:fe:2f:47:6f:8a:0b:8f:50:cc:31:f8:c6:7b:5e:47:48:a5: ea:28:21:3e:06:45:d1:25:d0:bf:8b:45:96:f3:4d:88:b4:24: 76:f7:a4:a4:ed:51:de:96:9f:6e:f5:68:7c:ff:9f:8e:a4:6d: 83:05:0c:be:3f:9b:c0:19:21:88:69:54:b9:62:b5:9f:99:72: 11:12:64:1a:61:03:69:bc:1f:f8:11:07:1a:f8:35:0e:a5:4f: 27:74:5f:83:53:ee:3a:68:8b:62:3e:d3:17:f1:87:94:d0:35: 82:5e:15:83:44:f5:f0:2c:46:74:b6:bf:fb:a8:78:20:8f:83: 26:bc:eb:a3:19:70:9d:8e:ec:1c:f7:6e:81:ea:b1:33:5e:3f: a9:32:cf:8d:c2:f3:74:22:a7:95:aa:af:0f:15:b5:ce:16:78: 03:e3:86:ee -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8f+wtI7AeEln8M/FEuSuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWI1MTZlYTkwMmQ5NjRhZGIyYWE2ZGNhZDlhMWRjMGY1 YjdlZmUwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjU1ZGU3NGIwYjJhYTE1ZWI3ZDJlYjE1YjI0MzRiOTNiMTQyMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3i5EZf6MQQ6Jp3E9/6JwfBdTD6I 52q5T0ls6gj81i4yghdQBDOhQmZroEBfcXkGH5rrWyY2auThoA8EQuWUkWI7a0Mq HRZ6V9kr5rpUilDGaS7OpqxggJvaK5ao7yDwv9Rd0N0NMWQlXa/bgD+ydfiMoIzn 7RMA9iOeiukNp3F8zr8MMfz6q0biXNvg+p6zjEY8yPT1lRgf46lxWjABFAWFMadE ryu5CbKWV7sbxO8GbHYJP2+4ndI3XjPqJnVe5znLMwO/CqNUIXbk1ytt0nGVYe33 Puk8yNj/4mLQtny52aGslsx22t5FA4ZLPHAicd/XShlhaUjij0fq8s7o8wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGJV3nSwsqoV630usVskNLk7FCN1MB8GA1UdIwQY MBaAFDbrUW6pAtlkrbKqbcrZodwPW37+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWIt OGY3NmMzMjkxZmJjLzEvWWxYZWRMQ3lxaFhyZlM2eFd5UTB1VHNVSTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWItOGY3NmMzMjkxZmJj LzEvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+nOMA8E AgACMAkDBwAgAQZ4DDAwDQYJKoZIhvcNAQELBQADggEBAAG2vL71JhTPKJTYG74d jOsOhwJ33CwAYgLnTwLcp+kPzslcR6DwBqczAcKmjh+hbdfe6dwvyX89RjYoASTT SdH+jnt8+DBkuo61Nzqdx6IjNicg6yE3+0C13Eb+L0dviguPUMwx+MZ7XkdIpeoo IT4GRdEl0L+LRZbzTYi0JHb3pKTtUd6Wn271aHz/n46kbYMFDL4/m8AZIYhpVLli tZ+ZchESZBphA2m8H/gRBxr4NQ6lTyd0X4NT7jpoi2I+0xfxh5TQNYJeFYNE9fAs RnS2v/uoeCCPgya866MZcJ2O7Bz3boHqsTNeP6kyz43C83Qip5Wqrw8Vtc4WeAPj hu4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:32 2026 by rpki-client