This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/PY5sdU0kADgfJHW2XFZw0dgHeu0.roa File: PY5sdU0kADgfJHW2XFZw0dgHeu0.roa (raw, json) Hash identifier: WIfT5DY5Ccg3dpUdIFTpUWfqc0ig1ZlT0tU43GrW37g= Subject key identifier: 3D:8E:6C:75:4D:24:00:38:1F:24:75:B6:5C:56:70:D1:D8:07:7A:ED Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6 Certificate serial: 019B7DCB649C9E4A7B55A46488CCB3A4D580 Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/PY5sdU0kADgfJHW2XFZw0dgHeu0.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50489 IP address blocks: 91.240.47.0/24 maxlen: 24 185.35.68.0/22 maxlen: 24 185.35.68.0/24 maxlen: 24 185.35.69.0/24 maxlen: 24 185.35.70.0/24 maxlen: 24 192.153.60.0/22 maxlen: 24 192.153.60.0/24 maxlen: 24 192.153.61.0/24 maxlen: 24 2a0c:c640::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:64:9c:9e:4a:7b:55:a4:64:88:cc:b3:a4:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8672105752b982174d1040c103817570b8d34d6 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d8e6c754d2400381f2475b65c5670d1d8077aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:64:c1:30:e8:b6:39:56:6f:72:ff:af:7e: bc:85:44:b0:da:e0:44:46:1b:3a:15:08:9c:8c:bf: 1f:d9:8c:62:d5:7a:c9:23:5f:16:74:20:71:76:23: b5:0b:98:72:28:61:f8:59:96:5c:ea:f6:dd:ff:45: 12:4f:8c:ea:03:29:d9:e5:c7:cc:12:26:8f:9a:4e: 56:d9:13:20:47:ad:ab:13:24:23:6b:ee:7e:2a:08: 35:42:d4:f3:d6:a0:7b:97:40:2d:79:b3:32:d7:74: 66:3a:0b:49:4a:b5:16:11:b3:4c:8a:94:35:ce:93: 0a:e4:04:80:bf:3f:1e:3b:b6:79:ba:66:5e:5c:82: 41:50:56:b2:96:1b:e5:42:3c:56:1c:f4:a4:2b:a2: 00:7a:c1:32:e5:94:6e:3b:e7:54:97:92:0c:6f:47: 0f:ca:27:c1:d7:63:9f:f7:38:fe:43:ac:12:61:d1: 98:3b:a3:8c:96:00:97:1d:4b:55:ed:34:1f:98:71: 1f:22:e5:c6:e4:93:26:39:1a:a5:c3:d6:7f:69:b5: 75:0c:be:dc:9e:ff:b2:4e:3a:d4:55:aa:f2:e7:00: d3:cd:6a:11:5c:2a:70:cd:1b:70:de:3e:2e:25:27: 45:2c:7f:50:58:48:4b:f5:be:87:32:25:1a:f8:c9: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8E:6C:75:4D:24:00:38:1F:24:75:B6:5C:56:70:D1:D8:07:7A:ED X509v3 Authority Key Identifier: keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/PY5sdU0kADgfJHW2XFZw0dgHeu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.47.0/24 185.35.68.0/22 192.153.60.0/22 IPv6: 2a0c:c640::/29 Signature Algorithm: sha256WithRSAEncryption 51:53:87:7d:2a:ff:e7:cd:d1:43:ef:7a:62:11:e4:5c:d3:e5: 21:3c:3a:10:1c:c5:91:7f:00:85:d8:5c:bc:a7:24:38:29:40: 3f:48:58:56:02:82:2e:ab:9f:85:5a:90:7b:50:47:10:8c:61: da:bd:99:e4:d9:5d:a1:85:88:2c:90:68:6f:05:63:b9:1b:82: d7:56:8c:65:08:09:c9:76:2d:f7:74:ef:19:64:43:fb:74:3c: 2b:a4:a6:ef:9d:72:a9:4c:29:5b:08:a5:b1:c1:c7:8d:66:11: 76:54:37:c0:77:c1:b0:3e:eb:80:99:94:09:14:db:4c:06:7c: dc:43:04:97:bf:8a:d5:9a:70:ef:bb:6d:27:3d:fb:46:22:60: 9a:bd:ff:9f:2e:a9:e9:f6:97:f8:c4:4c:32:98:bf:6c:f2:3b: cf:b7:7d:35:33:8b:12:55:3b:2b:5f:4b:2c:eb:16:e3:2d:03: 39:35:28:85:69:96:fa:b9:d2:74:14:48:78:ef:e0:c0:8e:e8: ad:b2:dd:be:9c:e4:c8:9c:80:e2:40:04:83:46:65:cb:58:c5: ba:4d:b8:ce:4d:ef:91:d2:8e:5b:de:fc:0f:5a:22:5c:75:12: c8:88:fc:9d:6a:11:af:07:8a:c6:3b:3c:08:54:34:9d:80:5d: 2c:42:95:bb -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9y2Scnkp7VaRkiMyzpNWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NjcyMTA1NzUyYjk4MjE3NGQxMDQwYzEwMzgxNzU3MGI4 ZDM0ZDYwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDhlNmM3NTRkMjQwMDM4MWYyNDc1YjY1YzU2NzBkMWQ4MDc3YWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktRkwTDotjlWb3L/r368hUSw2uBE Rhs6FQicjL8f2Yxi1XrJI18WdCBxdiO1C5hyKGH4WZZc6vbd/0UST4zqAynZ5cfM EiaPmk5W2RMgR62rEyQja+5+Kgg1QtTz1qB7l0AtebMy13RmOgtJSrUWEbNMipQ1 zpMK5ASAvz8eO7Z5umZeXIJBUFaylhvlQjxWHPSkK6IAesEy5ZRuO+dUl5IMb0cP yifB12Of9zj+Q6wSYdGYO6OMlgCXHUtV7TQfmHEfIuXG5JMmORqlw9Z/abV1DL7c nv+yTjrUVary5wDTzWoRXCpwzRtw3j4uJSdFLH9QWEhL9b6HMiUa+Mn5bwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFD2ObHVNJAA4HyR1tlxWcNHYB3rtMB8GA1UdIwQY MBaAFNhnIQV1K5ghdNEEDBA4F1cLjTTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUt MTUxOGE3MzNmOTcwLzEvUFk1c2RVMGtBRGdmSkhXMlhGWncwZGdIZXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUtMTUxOGE3MzNmOTcw LzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW/AvAwQC uSNEAwQCwJk8MA0EAgACMAcDBQMqDMZAMA0GCSqGSIb3DQEBCwUAA4IBAQBRU4d9 Kv/nzdFD73piEeRc0+UhPDoQHMWRfwCF2Fy8pyQ4KUA/SFhWAoIuq5+FWpB7UEcQ jGHavZnk2V2hhYgskGhvBWO5G4LXVoxlCAnJdi33dO8ZZEP7dDwrpKbvnXKpTClb CKWxwceNZhF2VDfAd8GwPuuAmZQJFNtMBnzcQwSXv4rVmnDvu20nPftGImCavf+f Lqnp9pf4xEwymL9s8jvPt301M4sSVTsrX0ss6xbjLQM5NSiFaZb6udJ0FEh47+DA juitst2+nOTInIDiQASDRmXLWMW6TbjOTe+R0o5b3vwPWiJcdRLIiPydahGvB4rG OzwIVDSdgF0sQpW7 -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:36 2026 by rpki-client