This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/yLM9o7GKvs0JjxCIjJ1MaAuyO6s.roa File: yLM9o7GKvs0JjxCIjJ1MaAuyO6s.roa (raw, json) Hash identifier: f+kH+veFpi3YeiizJ0dA/mIueCUsIUIC0u0hO3JeJvI= Subject key identifier: C8:B3:3D:A3:B1:8A:BE:CD:09:8F:10:88:8C:9D:4C:68:0B:B2:3B:AB Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab Certificate serial: 019B7EA74AA54628E7F7D111F6CDF9098E9D Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/yLM9o7GKvs0JjxCIjJ1MaAuyO6s.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50833 IP address blocks: 91.224.59.0/24 maxlen: 24 193.150.128.0/24 maxlen: 24 193.150.129.0/24 maxlen: 24 2a10:24c0:272::/48 maxlen: 48 2a10:24c0:6c2::/48 maxlen: 48 2a10:24c0:ad1b::/48 maxlen: 48 2a10:24c0:ada1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4a:a5:46:28:e7:f7:d1:11:f6:cd:f9:09:8e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8b33da3b18abecd098f10888c9d4c680bb23bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:c9:29:23:ee:05:0e:02:8b:44:78:0c:4c: 62:bb:c3:bc:81:63:0f:dc:88:be:a2:a8:6b:df:78: b5:02:a4:cd:c7:64:91:33:59:23:4e:03:7a:4a:6b: 33:3f:81:5a:a7:78:a6:d4:26:41:27:cc:d7:12:36: 2d:17:3a:33:51:96:d9:e0:a2:e5:ca:d0:48:6b:84: d2:f7:90:37:31:7f:42:cd:97:07:91:f9:b7:05:81: ca:0f:a3:35:5e:c8:1f:65:21:bc:c9:d1:f0:8c:8b: 6c:54:bd:c3:85:c8:c8:13:61:cc:2b:b6:a5:c4:80: 09:de:3b:17:c7:bd:04:e6:e1:2b:d3:bb:f0:ef:6d: 89:dd:87:55:67:ad:ab:4c:ea:e4:c6:ea:28:8c:01: 40:0d:e1:32:d5:6d:26:2d:2e:02:13:9c:97:d4:a7: 1d:43:bb:de:bf:fc:1f:7a:4e:89:3f:3c:2e:5f:12: 61:d5:15:f0:41:25:a4:75:4e:11:06:aa:80:fd:66: 20:60:c8:ad:71:3e:b2:b3:f6:20:2a:31:99:33:1b: c4:8e:38:e5:84:b3:cc:3e:7c:8e:a3:9b:0b:49:42: d9:88:ef:02:b5:a7:ea:32:ca:b6:30:81:47:86:f8: 91:5c:93:4a:fc:a8:db:c0:8b:7c:9e:13:8e:74:7a: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B3:3D:A3:B1:8A:BE:CD:09:8F:10:88:8C:9D:4C:68:0B:B2:3B:AB X509v3 Authority Key Identifier: keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/yLM9o7GKvs0JjxCIjJ1MaAuyO6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.59.0/24 193.150.128.0/23 IPv6: 2a10:24c0:272::/48 2a10:24c0:6c2::/48 2a10:24c0:ad1b::/48 2a10:24c0:ada1::/48 Signature Algorithm: sha256WithRSAEncryption 4f:1d:da:e3:69:1a:92:5e:17:09:ac:72:ca:b6:e3:ab:83:f0: de:f0:e2:cb:07:46:84:99:5a:14:1d:b1:33:48:56:ca:d3:d1: 05:6b:f2:48:b9:97:4e:93:76:80:7c:30:0f:05:a3:bb:ed:63: 92:5b:7d:f4:cf:1e:2a:7a:2a:72:b2:b4:93:94:53:79:11:95: 7d:c1:af:02:03:90:bc:30:f2:83:6e:a2:b3:e1:3e:09:14:69: 9a:27:26:3a:54:60:56:49:56:a8:e4:32:36:5e:40:b2:29:b2: d0:6b:26:75:40:c0:3f:20:8d:a8:da:35:f1:09:ba:e9:36:42: ae:a6:69:90:88:eb:04:c4:28:a5:81:8c:56:7b:e1:b4:74:53: 62:02:83:9c:94:d8:8d:1b:94:e6:e2:08:ce:89:38:a7:cd:e9: 94:0e:53:5a:ac:08:a2:a6:ca:8a:3e:6d:15:d5:7d:06:42:86: aa:6b:8c:77:e1:79:95:f9:e9:b9:80:53:98:fe:8b:31:08:d6: ec:c9:2e:61:84:c2:38:62:a0:bc:3d:b4:d3:8f:14:47:fc:da: b3:50:b5:c0:d9:d9:f3:2e:7c:17:ff:db:f8:9a:17:c8:6d:31: 9a:cd:25:b0:02:b9:d6:e4:aa:d3:a7:21:df:10:83:22:65:2c: 91:68:fd:c1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt+p0qlRijn99ER9s35CY6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWJkNjgyYzFhOGZjNTAzN2FkYmY2ODE0M2FlNzdmZDAw ZjM4YWIwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGIzM2RhM2IxOGFiZWNkMDk4ZjEwODg4YzlkNGM2ODBiYjIzYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U7JKSPuBQ4Ci0R4DExiu8O8gWMP 3Ii+oqhr33i1AqTNx2SRM1kjTgN6SmszP4Fap3im1CZBJ8zXEjYtFzozUZbZ4KLl ytBIa4TS95A3MX9CzZcHkfm3BYHKD6M1XsgfZSG8ydHwjItsVL3DhcjIE2HMK7al xIAJ3jsXx70E5uEr07vw722J3YdVZ62rTOrkxuoojAFADeEy1W0mLS4CE5yX1Kcd Q7vev/wfek6JPzwuXxJh1RXwQSWkdU4RBqqA/WYgYMitcT6ys/YgKjGZMxvEjjjl hLPMPnyOo5sLSULZiO8CtafqMsq2MIFHhviRXJNK/KjbwIt8nhOOdHpbUwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFMizPaOxir7NCY8QiIydTGgLsjurMB8GA1UdIwQY MBaAFAur1oLBqPxQN62/aBQ653/QDzirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUt ZmFjM2Q1NTQzYTJjLzEveUxNOW83R0t2czBKanhDSWpKMU1hQXV5TzZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUtZmFjM2Q1NTQzYTJj LzEvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDASBAIAATAMAwQAW+A7AwQB wZaAMCoEAgACMCQDBwAqECTAAnIDBwAqECTABsIDBwAqECTArRsDBwAqECTAraEw DQYJKoZIhvcNAQELBQADggEBAE8d2uNpGpJeFwmscsq246uD8N7w4ssHRoSZWhQd sTNIVsrT0QVr8ki5l06TdoB8MA8Fo7vtY5JbffTPHip6KnKytJOUU3kRlX3BrwID kLww8oNuorPhPgkUaZonJjpUYFZJVqjkMjZeQLIpstBrJnVAwD8gjajaNfEJuuk2 Qq6maZCI6wTEKKWBjFZ74bR0U2ICg5yU2I0blObiCM6JOKfN6ZQOU1qsCKKmyoo+ bRXVfQZChqprjHfheZX56bmAU5j+izEI1uzJLmGEwjhioLw9tNOPFEf82rNQtcDZ 2fMufBf/2/iaF8htMZrNJbACudbkqtOnId8QgyJlLJFo/cE= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:46 2026 by rpki-client