This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gyyi_g90CPIfPmEPYmKNYVW6ewo.roa File: gyyi_g90CPIfPmEPYmKNYVW6ewo.roa (raw, json) Hash identifier: nruWO8Oqk5nEsuNdFlzZmgBl2HxoKT/Zj6GcH1btQoA= Subject key identifier: 83:2C:A2:FE:0F:74:08:F2:1F:3E:61:0F:62:62:8D:61:55:BA:7B:0A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AAA59BBBA5B5266DFE93ED7F4B13C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gyyi_g90CPIfPmEPYmKNYVW6ewo.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59711 IP address blocks: 82.153.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:aa:59:bb:ba:5b:52:66:df:e9:3e:d7:f4:b1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=832ca2fe0f7408f21f3e610f62628d6155ba7b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:2a:0b:a3:a6:e5:61:35:04:2a:35:ba:af: 96:d0:43:52:d6:ac:2d:cb:ae:bf:0d:20:bf:9b:24: 6c:eb:94:33:ea:83:bd:c9:91:38:32:85:0a:c1:b8: 7f:c0:bd:7d:13:a0:75:c1:08:dd:c7:e9:66:57:7c: 2c:5f:65:99:d0:a4:ec:c8:aa:8f:98:06:04:39:f9: 97:bb:2f:a9:c0:0e:97:bd:75:df:2e:0b:dc:ef:31: 11:ba:35:93:a1:69:91:5d:a8:2d:6f:93:0b:2d:44: 44:bd:94:d8:55:90:92:de:a5:53:98:a7:e7:a2:12: 6b:13:0a:6e:52:b7:3e:e1:10:90:6f:a4:8b:5f:a5: 2b:c9:08:c0:7a:b7:17:8f:ee:f2:16:5f:83:ab:29: 8b:17:ff:07:7b:6f:3f:ef:bb:24:0b:de:99:c7:cc: c1:cd:a0:1a:f4:02:89:2b:86:06:b5:63:3e:1e:99: 12:68:97:ec:43:e6:99:3a:69:77:aa:11:d1:9f:2e: 9f:a5:28:41:e8:ca:4b:6e:e5:a0:f9:4b:62:c6:f2: 5a:70:e4:2c:69:c6:cf:1a:06:5f:64:c1:3a:3f:34: 52:be:6b:92:65:b7:99:02:96:a8:57:27:09:e7:f6: 1e:5f:5c:78:43:54:44:17:36:48:9a:9c:a2:d7:18: a3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2C:A2:FE:0F:74:08:F2:1F:3E:61:0F:62:62:8D:61:55:BA:7B:0A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gyyi_g90CPIfPmEPYmKNYVW6ewo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.248.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:c1:87:8a:44:ff:c2:a2:e1:68:4e:93:24:b2:b4:85:80:6c: cf:ab:b3:7e:33:6e:fb:dd:3e:cf:eb:57:11:a4:50:60:d9:59: b3:8b:8c:2c:d5:7e:ca:1b:27:9e:37:88:61:d7:c2:44:ae:3b: 42:0e:98:4a:b2:90:1f:90:51:58:bd:48:ed:6d:91:14:0c:a0: d5:44:ad:11:f8:20:ff:fe:59:6b:15:04:57:df:db:97:fa:24: 14:96:44:fe:d4:f4:61:a5:99:72:fa:ff:fc:da:8d:85:82:3a: 72:b4:f3:6d:08:44:d2:f7:29:46:6b:c2:65:be:bf:d8:8d:53: 82:3a:ea:18:74:77:05:34:c4:fb:67:5c:12:70:35:5f:78:0e: a9:48:06:25:01:c9:5f:65:80:2d:1a:68:4c:75:e9:83:98:01: b8:8a:fa:8e:2e:f7:bc:b0:c2:6f:1d:49:eb:ce:16:07:64:18: 55:d1:a0:3c:f5:d0:00:78:6c:37:09:fe:f0:3a:87:d3:df:09: 2b:d7:4a:71:1d:c7:0a:5d:af:ff:3d:79:84:df:b0:0b:bc:06: 98:47:a6:32:45:3b:18:d1:5c:17:ce:c2:80:41:49:c4:c1:5b: 87:6f:e5:e8:7b:f6:38:1d:97:66:89:70:ce:cb:c2:47:f6:9b: 83:6c:41:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqpZu7pbUmbf6T7X9LE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzJjYTJmZTBmNzQwOGYyMWYzZTYxMGY2MjYyOGQ2MTU1YmE3YjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWIqC6Om5WE1BCo1uq+W0ENS1qwt y66/DSC/myRs65Qz6oO9yZE4MoUKwbh/wL19E6B1wQjdx+lmV3wsX2WZ0KTsyKqP mAYEOfmXuy+pwA6XvXXfLgvc7zERujWToWmRXagtb5MLLUREvZTYVZCS3qVTmKfn ohJrEwpuUrc+4RCQb6SLX6UryQjAercXj+7yFl+DqymLF/8He28/77skC96Zx8zB zaAa9AKJK4YGtWM+HpkSaJfsQ+aZOml3qhHRny6fpShB6MpLbuWg+UtixvJacOQs acbPGgZfZME6PzRSvmuSZbeZApaoVycJ5/YeX1x4Q1REFzZImpyi1xijMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMsov4PdAjyHz5hD2JijWFVunsKMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZ3l5aV9nOTBDUElmUG1FUFltS05ZVlc2ZXdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpn4MA0G CSqGSIb3DQEBCwUAA4IBAQAfwYeKRP/CouFoTpMksrSFgGzPq7N+M2773T7P61cR pFBg2Vmzi4ws1X7KGyeeN4hh18JErjtCDphKspAfkFFYvUjtbZEUDKDVRK0R+CD/ /llrFQRX39uX+iQUlkT+1PRhpZly+v/82o2FgjpytPNtCETS9ylGa8Jlvr/YjVOC OuoYdHcFNMT7Z1wScDVfeA6pSAYlAclfZYAtGmhMdemDmAG4ivqOLve8sMJvHUnr zhYHZBhV0aA89dAAeGw3Cf7wOofT3wkr10pxHccKXa//PXmE37ALvAaYR6YyRTsY 0VwXzsKAQUnEwVuHb+Xoe/Y4HZdmiXDOy8JH9puDbEEy -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:52 2026 by rpki-client