This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/YytdvmUqMlUYaz2rUM4035jtC1g.roa File: YytdvmUqMlUYaz2rUM4035jtC1g.roa (raw, json) Hash identifier: shR9sZHCpyT2KbYpD+KESwIQfMOwq9VzuzMQm7Ip8Tg= Subject key identifier: 63:2B:5D:BE:65:2A:32:55:18:6B:3D:AB:50:CE:34:DF:98:ED:0B:58 Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Certificate serial: 019B7DCABCF133925F808DAFA757FAAC4CC7 Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/YytdvmUqMlUYaz2rUM4035jtC1g.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51776 IP address blocks: 87.238.136.0/21 maxlen: 24 87.238.137.0/24 maxlen: 24 87.238.138.0/24 maxlen: 24 87.238.141.0/24 maxlen: 24 87.238.142.0/24 maxlen: 24 91.201.212.0/23 maxlen: 24 91.201.212.0/24 maxlen: 24 91.201.213.0/24 maxlen: 24 185.132.128.0/22 maxlen: 24 185.188.52.0/24 maxlen: 24 185.188.53.0/24 maxlen: 24 185.188.54.0/24 maxlen: 24 185.188.55.0/24 maxlen: 24 2001:67c:3fc::/48 maxlen: 48 2a06:56c0::/29 maxlen: 48 2a06:56c0:11::/48 maxlen: 48 2a06:56c0:12::/48 maxlen: 48 2a06:56c1:2::/48 maxlen: 48 2a06:56c3::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bc:f1:33:92:5f:80:8d:af:a7:57:fa:ac:4c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=632b5dbe652a3255186b3dab50ce34df98ed0b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:74:75:0b:a8:65:31:68:ac:3a:e8:5d:c8:4f: c6:1b:0c:9b:d2:d0:4b:4d:8b:dd:00:ba:c0:6e:9d: 8e:7e:9b:8e:fa:08:c2:ba:04:30:84:6b:15:5b:6d: 25:cd:79:bc:17:1a:94:7b:2c:47:91:12:19:7b:90: 25:26:07:f0:9d:1d:ac:5a:2c:76:d1:c0:b5:f0:dd: 59:04:fc:b3:84:a8:e8:1d:c6:1b:c2:2b:b4:80:0a: 38:1c:47:42:4e:b9:68:5d:7f:24:94:bf:20:2f:a4: d5:e9:02:d1:bd:7d:37:c8:d3:d7:53:8a:6e:0a:31: 9f:9d:3a:aa:d1:2e:56:24:71:1c:6f:b4:10:f0:74: 5c:fa:da:9c:57:d0:0f:0e:de:76:03:2d:0e:61:dd: 3f:4d:1a:fd:d9:19:9f:f7:d6:91:06:6c:26:db:ac: 35:24:5f:80:90:e3:3c:e3:f0:46:47:dc:2b:b7:5d: f3:13:3f:06:91:6f:e8:ff:b1:2b:88:10:e9:db:7f: 22:b6:e7:df:88:14:dd:d9:73:ca:be:ea:b6:68:46: 5b:bf:80:a5:0d:02:bd:e9:0b:99:e4:bc:e0:fd:2c: e4:ef:d3:6a:2c:e0:f7:da:d3:73:22:67:24:b6:07: ff:d7:4c:7f:2d:be:8b:a2:6f:43:6e:56:be:76:33: 4d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:5D:BE:65:2A:32:55:18:6B:3D:AB:50:CE:34:DF:98:ED:0B:58 X509v3 Authority Key Identifier: keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/YytdvmUqMlUYaz2rUM4035jtC1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.136.0/21 91.201.212.0/23 185.132.128.0/22 185.188.52.0/22 IPv6: 2001:67c:3fc::/48 2a06:56c0::/29 Signature Algorithm: sha256WithRSAEncryption b3:3b:98:98:3c:b3:d7:f8:01:1f:35:7f:32:77:fc:08:f8:81: e9:53:db:19:c1:b6:23:25:2c:66:97:5e:fe:5d:d3:1b:6a:a0: da:26:3f:74:3b:17:cb:b8:3a:af:b3:e4:a5:78:33:49:80:1b: 73:d5:ba:f5:97:8a:0f:47:36:04:be:05:b3:40:24:bd:04:a7: 83:74:05:85:10:f5:11:34:6e:f6:6c:ae:fa:da:2b:39:87:03: 4d:05:0c:f9:35:b3:81:6e:ef:8f:57:ed:d5:79:d2:4d:c6:79: 1f:d1:4e:a3:de:74:44:16:6a:c4:26:0b:38:4d:e3:81:24:2f: 60:04:a6:23:b3:fd:7a:82:d1:ca:6a:ad:28:65:e7:6a:64:ec: 6a:f3:be:4b:bc:e5:6d:73:4d:aa:75:b5:32:3d:3f:31:26:5f: c2:9a:f2:91:b7:82:03:29:f0:ba:f6:05:69:b3:ed:05:c5:04: 6d:15:b1:52:88:77:0c:28:2b:5d:7e:f6:49:b5:31:45:50:9f: db:b6:47:3c:1d:fe:fd:8d:9c:64:dc:c9:a8:00:75:a9:aa:ff: 65:00:7d:66:47:1c:2e:b0:e0:52:7a:4c:1b:b5:ec:de:1e:cb: d7:ad:3b:39:c9:8d:b6:75:72:2c:2b:74:1b:80:d8:9f:25:34: 36:18:26:61 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt9yrzxM5JfgI2vp1f6rEzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy ZGFjNjgwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzJiNWRiZTY1MmEzMjU1MTg2YjNkYWI1MGNlMzRkZjk4ZWQwYjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nR1C6hlMWisOuhdyE/GGwyb0tBL TYvdALrAbp2OfpuO+gjCugQwhGsVW20lzXm8FxqUeyxHkRIZe5AlJgfwnR2sWix2 0cC18N1ZBPyzhKjoHcYbwiu0gAo4HEdCTrloXX8klL8gL6TV6QLRvX03yNPXU4pu CjGfnTqq0S5WJHEcb7QQ8HRc+tqcV9APDt52Ay0OYd0/TRr92Rmf99aRBmwm26w1 JF+AkOM84/BGR9wrt13zEz8GkW/o/7EriBDp238ituffiBTd2XPKvuq2aEZbv4Cl DQK96QuZ5Lzg/Szk79NqLOD32tNzImcktgf/10x/Lb6Lom9Dbla+djNNFwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFGMrXb5lKjJVGGs9q1DONN+Y7QtYMB8GA1UdIwQY MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct ZjBiOTYyZjUyNDE0LzEvWXl0ZHZtVXFNbFVZYXoyclVNNDAzNWp0QzFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0 LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQDV+6IAwQB W8nUAwQCuYSAAwQCubw0MBYEAgACMBADBwAgAQZ8A/wDBQMqBlbAMA0GCSqGSIb3 DQEBCwUAA4IBAQCzO5iYPLPX+AEfNX8yd/wI+IHpU9sZwbYjJSxml17+XdMbaqDa Jj90OxfLuDqvs+SleDNJgBtz1br1l4oPRzYEvgWzQCS9BKeDdAWFEPURNG72bK76 2is5hwNNBQz5NbOBbu+PV+3VedJNxnkf0U6j3nREFmrEJgs4TeOBJC9gBKYjs/16 gtHKaq0oZedqZOxq875LvOVtc02qdbUyPT8xJl/CmvKRt4IDKfC69gVps+0FxQRt FbFSiHcMKCtdfvZJtTFFUJ/btkc8Hf79jZxk3MmoAHWpqv9lAH1mRxwusOBSekwb tezeHsvXrTs5yY22dXIsK3QbgNifJTQ2GCZh -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:31 2026 by rpki-client