This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/YFl0dNeZwCdbfQ3WGJ1MIOQDpdo.roa File: YFl0dNeZwCdbfQ3WGJ1MIOQDpdo.roa (raw, json) Hash identifier: 1mP71yZ3Cuf0zDsZ+9/tw2WORdFZj0h4UY03Wvub7b8= Subject key identifier: 60:59:74:74:D7:99:C0:27:5B:7D:0D:D6:18:9D:4C:20:E4:03:A5:DA Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec Certificate serial: 019B7EA6DE3A65C47911418D68E2E5BDDA95 Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/YFl0dNeZwCdbfQ3WGJ1MIOQDpdo.roa Signing time: Fri 02 Jan 2026 12:20:23 +0000 ROA not before: Fri 02 Jan 2026 12:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203960 IP address blocks: 91.199.243.0/24 maxlen: 24 185.69.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:de:3a:65:c4:79:11:41:8d:68:e2:e5:bd:da:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec Validity Not Before: Jan 2 12:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60597474d799c0275b7d0dd6189d4c20e403a5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:f5:f5:3f:cb:98:f0:87:e8:f6:c3:82:10: a6:ba:5b:19:70:c5:41:f1:d0:e0:06:35:02:b6:6d: bd:b4:ca:2b:62:79:65:fb:2a:5a:50:4d:1c:e0:fb: 00:10:68:6a:e4:d5:13:d6:88:fa:74:e6:e4:3b:1d: 4b:bb:f3:38:79:9e:9c:02:56:e1:a7:a5:d8:bb:98: 40:6c:52:b4:97:14:e1:38:ed:cc:d1:a1:67:04:d7: 4e:f2:20:64:5b:78:a0:f7:00:05:15:e9:af:05:81: 5c:e7:ac:74:43:6c:4b:02:c3:9c:fc:45:e1:d6:67: 6b:c5:fb:74:dd:08:3c:15:3e:26:75:99:81:7d:9a: 24:d7:17:7d:d8:3f:d3:24:fc:c7:31:c9:17:f9:9e: cd:31:92:2b:69:bb:f7:fa:4f:ed:2c:1a:15:a5:1e: 7c:b4:d8:80:17:60:7a:a9:72:c2:98:18:1f:77:07: a5:b9:74:21:f3:38:cb:4b:0a:e1:75:94:a1:d1:3b: 6e:ce:ce:1a:09:53:f6:38:1b:bd:73:7e:80:6e:e7: d6:96:a6:67:88:ec:19:9e:c7:99:28:75:de:e5:09: 4c:45:e6:41:c4:93:9f:d6:c6:95:bb:1d:30:48:e1: 0e:5c:5c:b0:00:97:81:96:8b:59:96:d0:05:84:a7: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:59:74:74:D7:99:C0:27:5B:7D:0D:D6:18:9D:4C:20:E4:03:A5:DA X509v3 Authority Key Identifier: keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/YFl0dNeZwCdbfQ3WGJ1MIOQDpdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.243.0/24 185.69.241.0/24 Signature Algorithm: sha256WithRSAEncryption 10:53:11:1b:f2:89:15:56:ef:b0:8f:be:e9:1a:e3:4e:6d:52: 58:ff:b9:05:04:cd:25:73:8b:34:a6:95:d5:40:56:83:e5:68: 06:ca:d0:02:41:9a:13:db:cb:d9:1c:1f:6e:58:d7:4c:36:cc: c8:84:f8:1e:5e:aa:2e:c6:f1:5d:91:2e:cd:46:6c:a4:de:e9: 56:24:7f:7a:0d:44:c3:74:6a:3e:84:c6:cf:bc:48:82:01:94: e4:05:3a:0c:7c:16:1e:4a:33:0d:1d:e5:a8:a8:ad:81:d1:64: 20:b7:3f:f2:a7:e0:e2:67:8a:41:de:c3:ae:08:e4:f9:96:ef: 5b:9c:25:84:d3:7e:91:cd:2d:f4:d2:f6:08:9a:1c:a2:c6:f8: 28:0d:7a:4e:b1:93:df:15:89:58:0f:7d:04:87:6d:3d:e1:66: 42:36:62:00:c7:6b:05:1a:aa:0a:3e:2d:b6:50:8e:d6:4c:34: 90:23:2b:b3:26:09:dc:2b:89:3d:f2:1e:62:c4:1a:b3:3f:ba: db:57:2c:f5:ad:5f:e4:6b:f1:f4:94:a7:41:81:3c:06:ca:5e: 5e:84:97:c7:55:41:fd:57:a8:56:ee:16:fb:07:fb:12:73:c2: bb:ec:e8:25:a4:6f:a1:d3:b1:4d:8c:85:42:ec:b0:05:4f:5b: ad:01:27:a1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pt46ZcR5EUGNaOLlvdqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODk2YzU0NGI0NjFkOGIwNjJlZmY5ZTNkMmMyOWNkM2Nj OTYwZWMwHhcNMjYwMTAyMTIyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDU5NzQ3NGQ3OTljMDI3NWI3ZDBkZDYxODlkNGMyMGU0MDNhNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX719T/LmPCH6PbDghCmulsZcMVB 8dDgBjUCtm29tMorYnll+ypaUE0c4PsAEGhq5NUT1oj6dObkOx1Lu/M4eZ6cAlbh p6XYu5hAbFK0lxThOO3M0aFnBNdO8iBkW3ig9wAFFemvBYFc56x0Q2xLAsOc/EXh 1mdrxft03Qg8FT4mdZmBfZok1xd92D/TJPzHMckX+Z7NMZIrabv3+k/tLBoVpR58 tNiAF2B6qXLCmBgfdweluXQh8zjLSwrhdZSh0Ttuzs4aCVP2OBu9c36AbufWlqZn iOwZnseZKHXe5QlMReZBxJOf1saVux0wSOEOXFywAJeBlotZltAFhKcdHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGBZdHTXmcAnW30N1hidTCDkA6XaMB8GA1UdIwQY MBaAFHSJbFRLRh2LBi7/nj0sKc08yWDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2Yt Y2YxNzQwODIzNDAwLzEvWUZsMGROZVp3Q2RiZlEzV0dKMU1JT1FEcGRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2YtY2YxNzQwODIzNDAw LzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8fzAwQA uUXxMA0GCSqGSIb3DQEBCwUAA4IBAQAQUxEb8okVVu+wj77pGuNObVJY/7kFBM0l c4s0ppXVQFaD5WgGytACQZoT28vZHB9uWNdMNszIhPgeXqouxvFdkS7NRmyk3ulW JH96DUTDdGo+hMbPvEiCAZTkBToMfBYeSjMNHeWoqK2B0WQgtz/yp+DiZ4pB3sOu COT5lu9bnCWE036RzS300vYImhyixvgoDXpOsZPfFYlYD30Eh2094WZCNmIAx2sF GqoKPi22UI7WTDSQIyuzJgncK4k98h5ixBqzP7rbVyz1rV/ka/H0lKdBgTwGyl5e hJfHVUH9V6hW7hb7B/sSc8K77OglpG+h07FNjIVC7LAFT1utASeh -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:33 2026 by rpki-client