This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YNe4buptuJ7UBEwKBogeIyq80jg.roa File: YNe4buptuJ7UBEwKBogeIyq80jg.roa (raw, json) Hash identifier: NkTj5ifZYkof4P8g9p6OTOx3j64mOVFXyYQzcr25aXA= Subject key identifier: 60:D7:B8:6E:EA:6D:B8:9E:D4:04:4C:0A:06:88:1E:23:2A:BC:D2:38 Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a Certificate serial: 019B78A33544124B89AECA4DE6D12CCAB218 Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YNe4buptuJ7UBEwKBogeIyq80jg.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199284 IP address blocks: 91.137.16.0/20 maxlen: 24 91.137.48.0/22 maxlen: 24 91.137.50.0/23 maxlen: 24 91.137.56.0/21 maxlen: 22 91.137.60.0/22 maxlen: 24 91.137.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:35:44:12:4b:89:ae:ca:4d:e6:d1:2c:ca:b2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60d7b86eea6db89ed4044c0a06881e232abcd238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:c9:ce:cd:a3:5b:d3:5f:72:ea:df:0e:b7: 16:8d:6e:fb:70:6e:ba:78:f6:1e:a8:74:80:92:2c: b9:e0:5c:a4:7f:99:32:04:3c:8d:0e:ef:62:5a:87: 96:0d:62:90:1e:86:e7:36:af:58:7e:f4:97:3e:91: 21:fe:43:27:f0:30:f5:a2:27:da:61:d2:6c:ec:4c: 8e:0c:4f:5d:92:ad:d0:fd:f7:6e:23:55:72:37:8a: 11:da:38:8b:46:cb:e7:61:42:4e:42:80:5d:b4:26: 73:03:e0:84:20:f0:25:cd:31:31:13:64:ac:f5:ce: 6c:dc:71:45:0a:a4:5a:79:5e:3d:15:3e:6d:ae:bf: 90:95:bd:ea:cd:41:85:38:7a:91:e2:a2:fa:7c:0f: 91:ef:9e:ea:4e:f6:e6:ec:94:d6:32:aa:38:2f:fb: 48:c0:d5:44:da:11:23:0b:c9:3a:3b:cd:44:e5:d2: 2b:78:a9:15:00:77:73:c9:8b:8f:f8:c1:c4:eb:9e: 38:c4:cc:aa:6d:ae:5c:8a:d5:ee:96:b3:0e:2f:13: 08:4e:80:c8:5a:3a:f6:17:a0:02:d8:cc:a9:a0:0e: e6:7a:d4:88:ed:72:8e:f2:cc:11:93:8f:b8:c5:3f: 67:df:c8:2f:c8:d1:eb:b0:40:48:d6:11:2d:85:89: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D7:B8:6E:EA:6D:B8:9E:D4:04:4C:0A:06:88:1E:23:2A:BC:D2:38 X509v3 Authority Key Identifier: keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YNe4buptuJ7UBEwKBogeIyq80jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.137.16.0/20 91.137.48.0/22 91.137.56.0/21 Signature Algorithm: sha256WithRSAEncryption 09:64:6e:e2:45:66:9d:c4:0d:33:5b:10:12:15:55:7c:f5:7e: 67:b5:c5:bc:80:b5:0c:6f:c3:ab:93:ad:6e:c4:6e:fd:c0:42: 57:56:66:b2:ea:10:82:ac:ed:f1:1c:8e:dc:db:2b:5a:82:ee: 4a:6f:50:53:14:b4:6f:ca:7f:97:fd:80:98:6c:30:02:d6:93: e8:aa:b4:70:b0:74:50:f3:93:cb:a5:3c:96:2f:9c:2d:16:c6: cc:dc:4d:ee:c5:34:0d:6f:23:28:f1:65:70:74:fe:f8:a9:49: 80:cf:99:b5:bc:e6:e6:6e:12:01:21:b3:e8:a4:84:4c:8f:c3: c1:94:b9:f9:9a:a4:68:af:b6:96:62:32:33:9c:8d:d7:a8:09: a0:21:0e:46:20:24:65:95:13:a9:1d:f2:94:f0:66:22:0d:fc: 03:01:87:8e:cf:0b:bb:b8:48:64:09:ef:ca:2f:7b:d2:07:ca: ec:a6:e8:5c:e6:5e:25:2e:78:d7:82:62:5a:b8:d1:b4:8a:07: 15:8e:57:c2:30:46:35:e6:50:c2:89:f1:08:15:2f:10:03:5d: 1c:49:7d:b1:51:2d:1c:89:0e:a6:56:5f:59:ee:9b:9a:a5:31: ef:32:35:9e:65:23:75:fc:a7:22:12:b7:b4:71:4c:83:de:37: 70:ec:b2:84 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4ozVEEkuJrspN5tEsyrIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZWE4Mzg1YTE0ZmQ5OTY3OTc4YWU3ZjA2ZWM0ZGQ1MjIy OWE0NGEwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGQ3Yjg2ZWVhNmRiODllZDQwNDRjMGEwNjg4MWUyMzJhYmNkMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZLJzs2jW9NfcurfDrcWjW77cG66 ePYeqHSAkiy54Fykf5kyBDyNDu9iWoeWDWKQHobnNq9YfvSXPpEh/kMn8DD1oifa YdJs7EyODE9dkq3Q/fduI1VyN4oR2jiLRsvnYUJOQoBdtCZzA+CEIPAlzTExE2Ss 9c5s3HFFCqRaeV49FT5trr+Qlb3qzUGFOHqR4qL6fA+R757qTvbm7JTWMqo4L/tI wNVE2hEjC8k6O81E5dIreKkVAHdzyYuP+MHE6544xMyqba5citXulrMOLxMIToDI Wjr2F6AC2MypoA7metSI7XKO8swRk4+4xT9n38gvyNHrsEBI1hEthYkK8wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGDXuG7qbbie1ARMCgaIHiMqvNI4MB8GA1UdIwQY MBaAFGDqg4WhT9mWeXiufwbsTdUiKaRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEt ZjU0NTc3ZjdjYzBmLzEvWU5lNGJ1cHR1SjdVQkV3S0JvZ2VJeXE4MGpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEtZjU0NTc3ZjdjYzBm LzEvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEW4kQAwQC W4kwAwQDW4k4MA0GCSqGSIb3DQEBCwUAA4IBAQAJZG7iRWadxA0zWxASFVV89X5n tcW8gLUMb8Ork61uxG79wEJXVmay6hCCrO3xHI7c2ytagu5Kb1BTFLRvyn+X/YCY bDAC1pPoqrRwsHRQ85PLpTyWL5wtFsbM3E3uxTQNbyMo8WVwdP74qUmAz5m1vObm bhIBIbPopIRMj8PBlLn5mqRor7aWYjIznI3XqAmgIQ5GICRllROpHfKU8GYiDfwD AYeOzwu7uEhkCe/KL3vSB8rspuhc5l4lLnjXgmJauNG0igcVjlfCMEY15lDCifEI FS8QA10cSX2xUS0ciQ6mVl9Z7puapTHvMjWeZSN1/KciEre0cUyD3jdw7LKE -----END CERTIFICATE-----Generated at Mon Jan 26 11:07:28 2026 by rpki-client