This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/yIR2ykqDL3mm7OpbFLEIbA2EkFU.roa File: yIR2ykqDL3mm7OpbFLEIbA2EkFU.roa (raw, json) Hash identifier: cduqrtFCtc6mNaM5tX4WTpvEqx6uRh6yFt4sNgSA/II= Subject key identifier: C8:84:76:CA:4A:83:2F:79:A6:EC:EA:5B:14:B1:08:6C:0D:84:90:55 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AAC952B3172836BA7FC607A521867 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/yIR2ykqDL3mm7OpbFLEIbA2EkFU.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139659 IP address blocks: 91.208.236.0/24 maxlen: 24 91.208.240.0/24 maxlen: 24 91.208.245.0/24 maxlen: 24 91.208.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ac:95:2b:31:72:83:6b:a7:fc:60:7a:52:18:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c88476ca4a832f79a6ecea5b14b1086c0d849055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b0:24:e1:89:86:3b:83:5b:7e:5a:99:75:78: 46:a9:ff:3b:2a:33:21:da:4e:83:e3:e9:2e:cd:d0: 8b:5d:59:95:d7:4e:db:67:25:97:eb:f9:4a:0f:9a: 27:17:62:b6:0a:94:2e:78:2f:6e:31:f6:e1:6c:06: e8:68:c1:f3:70:66:cb:6d:a5:f7:4a:a7:53:86:e1: f8:ac:6c:6b:51:08:40:7a:64:42:e7:98:48:de:da: 09:df:1d:99:04:7c:b7:4e:d6:74:32:d2:63:86:38: 5f:7a:56:34:d5:b3:cd:d2:d9:b8:28:d5:d2:87:74: 2c:17:57:15:83:e4:d0:ee:5d:bb:47:27:2c:e7:ec: 48:7c:8e:12:9f:33:46:27:19:24:e0:75:62:5d:39: ef:08:ca:4b:30:ad:54:e3:43:55:d0:42:f4:1f:cf: 2f:a5:c2:6e:35:84:a5:92:ae:47:8e:3d:7a:78:8e: 0e:83:16:02:70:d1:87:a0:90:78:23:81:00:a0:83: 2f:67:40:8f:7f:b4:90:92:af:f8:c3:1f:7c:cd:b6: 52:86:09:36:ce:63:3a:36:b5:cd:3f:c8:1e:12:59: af:e1:1a:68:fd:84:71:62:ad:f7:47:d9:9c:49:41: 1b:30:b8:14:08:95:54:ca:b9:cf:40:18:55:81:7b: ae:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:84:76:CA:4A:83:2F:79:A6:EC:EA:5B:14:B1:08:6C:0D:84:90:55 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/yIR2ykqDL3mm7OpbFLEIbA2EkFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.236.0/24 91.208.240.0/24 91.208.245.0-91.208.246.255 Signature Algorithm: sha256WithRSAEncryption 42:95:dd:88:ae:cc:d3:38:da:e0:ac:03:83:fd:9f:4c:a3:e6: 5c:18:71:32:66:5f:af:4b:e0:59:09:b2:6d:80:af:94:f4:e1: 8a:62:2b:ea:a5:f2:07:01:28:cc:28:45:dd:33:f0:07:eb:4c: a3:a0:e0:4c:08:81:3a:4f:76:3a:67:bb:73:27:c8:71:83:c8: 79:be:7d:66:93:f9:fb:53:e3:13:46:85:9f:3b:fe:b2:47:69: 62:8f:b1:b5:aa:0a:3b:b6:43:83:c2:ad:93:c2:a5:74:15:56: 70:b1:a8:42:cf:ef:3b:4d:42:33:6c:23:59:b1:44:22:ed:8e: fa:ef:7f:d9:01:57:4e:99:dc:0b:61:37:3a:c7:88:4d:d5:cc: c5:2a:a5:05:15:94:30:93:0b:ac:f3:3f:dc:26:4b:73:0f:9c: 47:13:ce:8d:03:b8:51:7d:6e:4f:af:90:6d:9f:62:86:dd:15: 47:c8:24:b8:49:ef:b7:92:d1:5c:28:62:de:d1:7f:82:5f:d2: e0:3e:de:11:56:ef:6d:fd:85:47:21:5a:8a:04:99:3d:31:b6: 19:73:59:66:a4:a8:6b:97:48:6b:93:45:bb:d5:d1:c5:70:58: fe:1c:1b:e6:b5:46:36:7d:d7:17:35:dc:16:59:08:81:4e:1e: 90:24:35:c2 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6WqyVKzFyg2un/GB6UhhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODg0NzZjYTRhODMyZjc5YTZlY2VhNWIxNGIxMDg2YzBkODQ5MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bAk4YmGO4NbflqZdXhGqf87KjMh 2k6D4+kuzdCLXVmV107bZyWX6/lKD5onF2K2CpQueC9uMfbhbAboaMHzcGbLbaX3 SqdThuH4rGxrUQhAemRC55hI3toJ3x2ZBHy3TtZ0MtJjhjhfelY01bPN0tm4KNXS h3QsF1cVg+TQ7l27Rycs5+xIfI4SnzNGJxkk4HViXTnvCMpLMK1U40NV0EL0H88v pcJuNYSlkq5Hjj16eI4OgxYCcNGHoJB4I4EAoIMvZ0CPf7SQkq/4wx98zbZShgk2 zmM6NrXNP8geElmv4Rpo/YRxYq33R9mcSUEbMLgUCJVUyrnPQBhVgXuunQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMiEdspKgy95puzqWxSxCGwNhJBVMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEveUlSMnlrcURMM21tN09wYkZMRUliQTJFa0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAW9DsAwQA W9DwMAwDBABb0PUDBABb0PYwDQYJKoZIhvcNAQELBQADggEBAEKV3YiuzNM42uCs A4P9n0yj5lwYcTJmX69L4FkJsm2Ar5T04YpiK+ql8gcBKMwoRd0z8AfrTKOg4EwI gTpPdjpnu3MnyHGDyHm+fWaT+ftT4xNGhZ87/rJHaWKPsbWqCju2Q4PCrZPCpXQV VnCxqELP7ztNQjNsI1mxRCLtjvrvf9kBV06Z3AthNzrHiE3VzMUqpQUVlDCTC6zz P9wmS3MPnEcTzo0DuFF9bk+vkG2fYobdFUfIJLhJ77eS0VwoYt7Rf4Jf0uA+3hFW 7239hUchWooEmT0xthlzWWakqGuXSGuTRbvV0cVwWP4cG+a1RjZ91xc13BZZCIFO HpAkNcI= -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:03 2026 by rpki-client