This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/yCcfya-jB3S-Fhloi_JZSoWRN1w.roa File: yCcfya-jB3S-Fhloi_JZSoWRN1w.roa (raw, json) Hash identifier: 8VHySyEqz9LaoooRkHWLcdlgezRWIk8QkynQdc9lQz8= Subject key identifier: C8:27:1F:C9:AF:A3:07:74:BE:16:19:68:8B:F2:59:4A:85:91:37:5C Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67 Certificate serial: 019B7AC7FE1FC0325DA1DB959F7D0A74C172 Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/yCcfya-jB3S-Fhloi_JZSoWRN1w.roa Signing time: Thu 01 Jan 2026 18:18:05 +0000 ROA not before: Thu 01 Jan 2026 18:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13008 IP address blocks: 91.235.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:fe:1f:c0:32:5d:a1:db:95:9f:7d:0a:74:c1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67 Validity Not Before: Jan 1 18:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8271fc9afa30774be1619688bf2594a8591375c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:58:b9:98:c4:67:bf:96:5f:a8:9c:ff:69: 56:db:4b:42:52:8e:1c:f3:af:8f:82:df:07:53:cd: 31:77:63:ee:3f:be:22:24:10:87:5c:42:c3:92:47: f8:39:c3:ec:13:7d:d9:9d:56:35:62:16:b9:7e:16: d1:96:9b:99:0b:18:19:f9:94:49:df:db:83:59:e6: 2d:d4:53:64:1b:c6:01:4c:74:f8:0b:a5:70:96:1d: 74:51:07:31:73:20:bc:49:ce:dc:6e:8d:da:cd:d3: 65:68:9d:d0:02:a1:4d:dc:61:30:02:e5:56:3c:da: 21:a2:6e:93:1e:e7:ef:a3:79:18:a1:2d:55:c8:e6: 57:f8:07:75:dd:f6:16:fb:e0:19:f0:07:db:72:c0: a2:1f:01:17:b6:aa:ce:5d:f7:6e:61:51:c1:76:67: 3e:af:b0:3b:ec:59:e2:e5:f6:da:bb:5e:76:89:8b: 2f:9f:86:e2:ad:a0:f2:5e:2e:b9:a0:12:88:a4:80: 18:9b:2e:0c:3d:fd:c3:ab:9a:3b:b0:90:df:07:d0: 33:15:f2:24:27:50:9a:0f:62:f7:f6:e9:0d:c6:d5: 3c:10:57:76:6f:04:19:e2:e7:f2:e3:40:5b:9f:f5: ce:7a:05:47:da:f0:5e:4c:24:97:86:8b:36:9c:35: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:27:1F:C9:AF:A3:07:74:BE:16:19:68:8B:F2:59:4A:85:91:37:5C X509v3 Authority Key Identifier: keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/yCcfya-jB3S-Fhloi_JZSoWRN1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.119.0/24 Signature Algorithm: sha256WithRSAEncryption 54:15:85:18:0d:54:6e:4b:ad:3b:ba:4f:ee:c4:86:8b:ce:4d: f0:aa:99:d8:05:f2:5d:5e:14:2e:44:50:d5:9e:e1:23:90:28: 64:d5:f4:a2:f0:f2:ea:92:3b:37:71:23:52:a3:ec:1a:cd:f4: 13:ed:15:1c:58:dc:7b:d2:9c:4b:21:3e:b8:15:80:5b:b2:f8: 5b:b2:3d:89:48:97:23:04:77:9c:a4:3c:63:e3:70:e3:95:1a: f1:a5:7e:07:9a:dc:72:1b:a6:a1:14:a3:b8:4d:0b:2e:37:cb: 97:7d:d5:ce:ed:df:2e:11:8b:4c:bc:62:8a:6f:5a:8b:6e:bc: bf:ef:57:3e:48:31:28:c1:1f:29:03:e3:a2:b7:a1:88:9b:b7: 7c:bc:74:90:29:de:0e:38:57:f0:cf:69:66:a3:88:78:41:bb: 68:2e:e4:04:71:bc:ef:79:c9:ad:75:33:5f:cf:12:16:76:cc: ff:14:f3:66:05:92:f8:50:9d:a4:ad:4e:8e:a0:da:22:bd:77: 49:86:81:b3:84:4b:a9:3f:ab:30:47:71:60:c2:df:45:76:23: 95:66:de:66:21:01:ac:d3:ed:24:51:a5:29:ac:9e:dd:17:65: cb:4e:28:c2:02:ac:70:35:70:47:f0:9b:3c:86:5f:84:34:6d: 9e:d7:4f:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/4fwDJdoduVn30KdMFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4 Y2NkNjcwHhcNMjYwMTAxMTgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODI3MWZjOWFmYTMwNzc0YmUxNjE5Njg4YmYyNTk0YTg1OTEzNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrFYuZjEZ7+WX6ic/2lW20tCUo4c 86+Pgt8HU80xd2PuP74iJBCHXELDkkf4OcPsE33ZnVY1Yha5fhbRlpuZCxgZ+ZRJ 39uDWeYt1FNkG8YBTHT4C6Vwlh10UQcxcyC8Sc7cbo3azdNlaJ3QAqFN3GEwAuVW PNohom6THufvo3kYoS1VyOZX+Ad13fYW++AZ8AfbcsCiHwEXtqrOXfduYVHBdmc+ r7A77Fni5fbau152iYsvn4biraDyXi65oBKIpIAYmy4MPf3Dq5o7sJDfB9AzFfIk J1CaD2L39ukNxtU8EFd2bwQZ4ufy40Bbn/XOegVH2vBeTCSXhos2nDWJJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgnH8mvowd0vhYZaIvyWUqFkTdcMB8GA1UdIwQY MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt MTA5NTlhYWE4YjNlLzEveUNjZnlhLWpCM1MtRmhsb2lfSlpTb1dSTjF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+t3MA0G CSqGSIb3DQEBCwUAA4IBAQBUFYUYDVRuS607uk/uxIaLzk3wqpnYBfJdXhQuRFDV nuEjkChk1fSi8PLqkjs3cSNSo+wazfQT7RUcWNx70pxLIT64FYBbsvhbsj2JSJcj BHecpDxj43DjlRrxpX4HmtxyG6ahFKO4TQsuN8uXfdXO7d8uEYtMvGKKb1qLbry/ 71c+SDEowR8pA+Oit6GIm7d8vHSQKd4OOFfwz2lmo4h4QbtoLuQEcbzvecmtdTNf zxIWdsz/FPNmBZL4UJ2krU6OoNoivXdJhoGzhEupP6swR3Fgwt9FdiOVZt5mIQGs 0+0kUaUprJ7dF2XLTijCAqxwNXBH8Js8hl+ENG2e109g -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:33 2026 by rpki-client