This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/T5IQ4IhshTRiFenVlDb9H-uzNG0.roa File: T5IQ4IhshTRiFenVlDb9H-uzNG0.roa (raw, json) Hash identifier: 6i4yB4JY7PrncdZg9kkNq7TpPmD1RLEzHYX4D9lyu0U= Subject key identifier: 4F:92:10:E0:88:6C:85:34:62:15:E9:D5:94:36:FD:1F:EB:B3:34:6D Certificate issuer: /CN=60c44dff71879863ea71442023b7f354dc3dad7c Certificate serial: 019B7E381B22D73597FB48A33D438D3136CD Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/T5IQ4IhshTRiFenVlDb9H-uzNG0.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49882 IP address blocks: 91.92.196.0/24 maxlen: 24 185.88.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1b:22:d7:35:97:fb:48:a3:3d:43:8d:31:36:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f9210e0886c85346215e9d59436fd1febb3346d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:e2:2b:cc:80:81:aa:bc:98:85:ed:89:49: 7c:67:bb:df:c4:bd:2e:a3:1a:3d:5e:47:1b:e9:73: 3e:b8:b5:a0:e4:70:b0:20:a0:15:9d:8a:ec:c8:c2: 3b:7f:ac:76:d9:65:ad:61:6e:b2:1b:03:0b:c2:5b: 0c:ad:63:23:4f:d6:17:10:0e:91:30:38:58:fd:02: b7:8e:42:b7:1c:86:d8:cf:50:cf:5e:07:18:4e:2b: 6a:73:63:1f:72:03:a7:f8:47:9c:2d:cc:51:43:7c: b5:dd:49:60:ff:23:ed:51:64:9c:41:ee:78:49:8d: b5:ef:59:6f:17:e3:ef:55:d1:a2:65:03:21:78:b6: 19:8f:f8:02:a4:ee:55:1e:96:c5:86:ee:1e:cd:1e: 1b:1e:d1:cd:23:2e:90:3a:66:c2:19:09:f2:07:fb: f8:bf:2c:3c:7c:06:65:6b:7b:1b:80:ab:c1:0b:c0: e1:62:c4:9a:1d:c3:13:1f:5c:25:49:1e:02:41:56: b1:52:69:2b:56:c8:3f:00:38:ad:ae:8f:e1:df:1f: 5d:8d:48:f8:13:f0:38:3d:d8:26:75:83:8e:40:9c: a5:b8:dc:bf:53:45:8f:c1:b8:4d:b3:5e:1b:b5:ac: 62:4c:91:8a:eb:3e:bd:ac:c0:9c:9e:6b:66:b6:2c: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:92:10:E0:88:6C:85:34:62:15:E9:D5:94:36:FD:1F:EB:B3:34:6D X509v3 Authority Key Identifier: keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/T5IQ4IhshTRiFenVlDb9H-uzNG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.196.0/24 185.88.184.0/22 Signature Algorithm: sha256WithRSAEncryption b8:d9:02:f9:21:7c:71:66:39:4d:1b:b8:d8:e1:10:3a:6a:56: 0b:a0:b9:25:20:22:ac:9f:7b:9f:85:11:9b:be:6d:74:af:5c: ef:59:08:a4:96:ff:b4:8d:51:cc:b1:60:3c:7c:4d:8d:21:bc: b0:1a:a0:32:30:b7:4c:47:da:b3:ce:e3:1d:5d:8b:55:49:f9: b2:5c:76:ac:42:39:49:2f:f9:1d:14:6b:5a:84:45:e7:10:4e: a9:20:9a:3a:78:6f:cf:48:bd:b9:8c:5a:52:a7:12:40:3d:a2: 6b:27:54:35:23:55:d3:75:6d:6f:99:fd:49:6d:9e:c1:5e:7b: fc:bd:6d:d0:80:26:1b:3d:c6:a4:71:03:a3:c3:7c:91:7d:48: 42:ad:fd:f8:40:e8:c1:cf:47:ff:00:89:b6:f8:35:23:50:5a: 52:e2:c5:f5:13:d7:88:0c:bd:76:24:eb:ca:85:e4:bc:ad:d2: 45:a9:f7:1f:c5:19:2c:45:b6:9d:70:cd:e5:48:33:0e:cc:8e: 7d:e5:7f:9b:51:12:94:e5:7c:e3:98:5d:11:cb:18:dc:e8:9c: 7c:6a:42:3a:6b:6c:07:49:a5:3e:fa:d4:c9:9f:1a:b2:b3:62: 52:bb:33:2a:e1:df:9b:15:02:99:3f:59:d4:00:dd:8f:35:6b: 22:4e:24:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OBsi1zWX+0ijPUONMTbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzQ0ZGZmNzE4Nzk4NjNlYTcxNDQyMDIzYjdmMzU0ZGMz ZGFkN2MwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjkyMTBlMDg4NmM4NTM0NjIxNWU5ZDU5NDM2ZmQxZmViYjMzNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucPiK8yAgaq8mIXtiUl8Z7vfxL0u oxo9Xkcb6XM+uLWg5HCwIKAVnYrsyMI7f6x22WWtYW6yGwMLwlsMrWMjT9YXEA6R MDhY/QK3jkK3HIbYz1DPXgcYTitqc2MfcgOn+EecLcxRQ3y13Ulg/yPtUWScQe54 SY2171lvF+PvVdGiZQMheLYZj/gCpO5VHpbFhu4ezR4bHtHNIy6QOmbCGQnyB/v4 vyw8fAZla3sbgKvBC8DhYsSaHcMTH1wlSR4CQVaxUmkrVsg/ADitro/h3x9djUj4 E/A4PdgmdYOOQJyluNy/U0WPwbhNs14btaxiTJGK6z69rMCcnmtmtiyuQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE+SEOCIbIU0YhXp1ZQ2/R/rszRtMB8GA1UdIwQY MBaAFGDETf9xh5hj6nFEICO381TcPa18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWIt YjJkNzM2Nzg3MjdiLzEvVDVJUTRJaHNoVFJpRmVuVmxEYjlILXV6TkcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWItYjJkNzM2Nzg3Mjdi LzEvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1zEAwQC uVi4MA0GCSqGSIb3DQEBCwUAA4IBAQC42QL5IXxxZjlNG7jY4RA6alYLoLklICKs n3ufhRGbvm10r1zvWQiklv+0jVHMsWA8fE2NIbywGqAyMLdMR9qzzuMdXYtVSfmy XHasQjlJL/kdFGtahEXnEE6pIJo6eG/PSL25jFpSpxJAPaJrJ1Q1I1XTdW1vmf1J bZ7BXnv8vW3QgCYbPcakcQOjw3yRfUhCrf34QOjBz0f/AIm2+DUjUFpS4sX1E9eI DL12JOvKheS8rdJFqfcfxRksRbadcM3lSDMOzI595X+bURKU5XzjmF0Ryxjc6Jx8 akI6a2wHSaU++tTJnxqys2JSuzMq4d+bFQKZP1nUAN2PNWsiTiT3 -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:01 2026 by rpki-client