This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/YthcC5vfZaqX4lQHCzfAkYHmBn8.roa File: YthcC5vfZaqX4lQHCzfAkYHmBn8.roa (raw, json) Hash identifier: e1Wa1MDzLGWDE0S3sqNrMKZLPwUzO14S8dedZF4Jkxs= Subject key identifier: 62:D8:5C:0B:9B:DF:65:AA:97:E2:54:07:0B:37:C0:91:81:E6:06:7F Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a Certificate serial: 019B7C12C0D8A0D3C2206F71504E5EBB34F8 Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/YthcC5vfZaqX4lQHCzfAkYHmBn8.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49123 IP address blocks: 91.212.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c0:d8:a0:d3:c2:20:6f:71:50:4e:5e:bb:34:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62d85c0b9bdf65aa97e254070b37c09181e6067f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e5:ba:c5:fc:63:41:90:8f:25:4c:e7:2d:52: b3:c6:eb:5d:c5:ac:5f:fe:b9:be:29:d5:a2:ad:ee: ee:44:1b:29:7e:18:6c:7b:26:ea:68:73:a9:6c:60: 0f:d2:dc:8a:7a:4e:19:62:c8:77:86:ac:46:92:bc: e9:f4:cc:70:fb:1f:f9:95:5a:d6:39:d2:75:1a:2d: 57:d6:51:e7:7c:df:ff:c2:e4:64:8c:aa:42:aa:08: c2:18:d8:42:fb:8f:3f:ca:15:b1:01:5a:ee:5e:be: d0:bb:d3:14:60:b2:ef:80:32:75:0f:0c:b2:82:12: f6:d2:8c:6d:2e:a3:27:d3:9e:e7:ae:0e:ef:16:e7: 54:f2:d0:31:1d:69:4f:ea:31:3a:95:e8:a5:8e:41: d8:df:cd:61:cb:61:90:70:da:45:9a:07:9c:0d:b1: a4:7f:1f:53:00:14:28:a1:f6:69:5e:83:51:95:ed: 7c:28:a5:49:fa:93:a2:4e:a7:cf:1e:7d:62:8a:c1: 51:08:5a:f5:a3:e6:4a:6f:cc:dc:99:bc:81:62:4e: ad:c0:5e:17:7c:ea:4a:fb:03:96:76:be:1a:01:76: 00:6e:cd:4f:8c:bc:61:56:81:0c:5d:f4:89:08:17: cf:fa:e7:79:3f:c8:76:7d:34:2f:7d:43:42:56:cb: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D8:5C:0B:9B:DF:65:AA:97:E2:54:07:0B:37:C0:91:81:E6:06:7F X509v3 Authority Key Identifier: keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/YthcC5vfZaqX4lQHCzfAkYHmBn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.143.0/24 Signature Algorithm: sha256WithRSAEncryption 29:e3:e4:c4:5e:9c:41:0c:11:89:15:e7:45:f7:df:6b:5e:25: 79:7d:23:af:06:30:62:1a:3c:78:29:b2:05:62:c5:a3:4e:51: 11:5b:10:80:fe:2c:4f:7a:30:ea:4a:86:08:8d:6b:58:aa:b6: 32:fd:b7:7c:ca:2b:21:ca:5c:c5:8d:65:e4:36:1b:63:6a:5b: a3:e7:de:f7:63:45:1e:5a:68:2b:2b:4d:2b:27:9d:9c:c7:41: 54:d8:d4:f2:ad:90:15:a8:a8:ca:81:be:69:a2:36:46:25:73: 4f:99:cc:30:d4:65:3b:9d:e1:44:26:6e:25:97:e6:0a:4e:91: 62:77:39:3f:9b:a7:d5:10:cb:0f:0a:e6:0a:fb:65:07:b0:61: fb:5a:dc:e6:d7:e1:dd:f7:ae:21:f9:65:75:fc:33:e3:e1:51: 1b:5a:42:cd:97:a3:09:8d:e6:a1:98:af:3d:74:b0:92:12:58: 1e:d6:9a:8b:58:6d:ed:34:7d:23:1d:6f:b3:d7:99:17:99:53: 6f:f9:0b:87:1b:dd:5b:65:af:73:be:a5:8f:bb:6a:06:fb:35: 68:43:9e:04:e7:6f:0a:e4:25:6d:44:82:aa:0e:75:fd:0f:6e: fb:e7:ce:bf:01:4c:4c:b2:f7:60:a4:28:9d:6c:65:2b:ad:fd: a9:65:d3:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsDYoNPCIG9xUE5euzT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNzEwNWM5ZDFmYjA2OTA1NTQ5NzFmNDY0Y2EyMWY0YTQ1 YzEwNmEwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmQ4NWMwYjliZGY2NWFhOTdlMjU0MDcwYjM3YzA5MTgxZTYwNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeW6xfxjQZCPJUznLVKzxutdxaxf /rm+KdWire7uRBspfhhseybqaHOpbGAP0tyKek4ZYsh3hqxGkrzp9Mxw+x/5lVrW OdJ1Gi1X1lHnfN//wuRkjKpCqgjCGNhC+48/yhWxAVruXr7Qu9MUYLLvgDJ1Dwyy ghL20oxtLqMn057nrg7vFudU8tAxHWlP6jE6leiljkHY381hy2GQcNpFmgecDbGk fx9TABQoofZpXoNRle18KKVJ+pOiTqfPHn1iisFRCFr1o+ZKb8zcmbyBYk6twF4X fOpK+wOWdr4aAXYAbs1PjLxhVoEMXfSJCBfP+ud5P8h2fTQvfUNCVsumfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGLYXAub32Wql+JUBws3wJGB5gZ/MB8GA1UdIwQY MBaAFJJxBcnR+waQVUlx9GTKIfSkXBBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wYzlkODAtNDNhNS00NTNhLWFkMjUt NGVlOTJlZTFlMGNkLzEvWXRoY0M1dmZaYXFYNGxRSEN6ZkFrWUhtQm44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wYzlkODAtNDNhNS00NTNhLWFkMjUtNGVlOTJlZTFlMGNk LzEva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SPMA0G CSqGSIb3DQEBCwUAA4IBAQAp4+TEXpxBDBGJFedF999rXiV5fSOvBjBiGjx4KbIF YsWjTlERWxCA/ixPejDqSoYIjWtYqrYy/bd8yishylzFjWXkNhtjaluj5973Y0Ue WmgrK00rJ52cx0FU2NTyrZAVqKjKgb5pojZGJXNPmcww1GU7neFEJm4ll+YKTpFi dzk/m6fVEMsPCuYK+2UHsGH7Wtzm1+Hd964h+WV1/DPj4VEbWkLNl6MJjeahmK89 dLCSElge1pqLWG3tNH0jHW+z15kXmVNv+QuHG91bZa9zvqWPu2oG+zVoQ54E528K 5CVtRIKqDnX9D277586/AUxMsvdgpCidbGUrrf2pZdO4 -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:39 2026 by rpki-client