This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/y4L9oobruwpNAnVgls1HwiM-6U4.roa File: y4L9oobruwpNAnVgls1HwiM-6U4.roa (raw, json) Hash identifier: Mz64skuD2ZBYLNskkpK3z9GPCdqyA/UMe8c4EVr5FRA= Subject key identifier: CB:82:FD:A2:86:EB:BB:0A:4D:02:75:60:96:CD:47:C2:23:3E:E9:4E Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C75F8346DAD2C0CDF3EE365A911422 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/y4L9oobruwpNAnVgls1HwiM-6U4.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13075 IP address blocks: 83.149.13.0/24 maxlen: 24 83.149.14.0/24 maxlen: 24 91.213.104.0/24 maxlen: 24 2a03:d000:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5f:83:46:da:d2:c0:cd:f3:ee:36:5a:91:14:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb82fda286ebbb0a4d02756096cd47c2233ee94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:63:e1:a5:e0:d5:20:7b:ba:c9:cc:39:9e: 01:37:77:95:b9:e1:56:56:70:8d:3f:b4:a0:9d:76: 19:0f:2f:74:fe:2b:29:5a:26:de:aa:25:c1:a8:19: bb:a8:48:00:4f:9e:f1:43:95:31:c7:1f:0c:86:cf: 43:3b:a9:0e:0e:fd:c8:38:f8:55:7f:5d:67:5d:f6: 70:59:a4:c5:64:89:ae:58:9f:45:f0:90:1e:94:aa: bf:32:ec:51:59:0d:81:a6:c1:8b:17:0f:df:78:70: 2a:65:4a:7f:42:68:f2:27:5e:8f:08:76:1d:06:4f: 8c:89:a4:ac:1b:ab:c7:61:17:5f:8a:82:85:ba:1f: f0:2d:cf:cd:71:4b:d3:73:f7:0e:b3:dc:7e:b3:93: 8b:ac:ce:ab:32:d2:39:43:46:77:46:f4:38:2d:7e: a8:21:44:3e:1a:ec:22:ef:f1:6e:f4:99:88:14:25: 40:fd:cf:20:d8:e4:71:ab:0e:c6:56:9e:bb:5f:9d: 6c:24:09:df:7a:15:55:71:00:e5:78:ff:3c:58:0f: 85:4d:d4:7a:5a:20:b2:f6:1a:d9:d9:c3:cd:78:35: 0f:62:2c:d8:4e:6e:ef:e0:2d:bd:5f:04:5c:ac:c1: 31:af:1c:fd:03:51:20:25:5c:fa:e8:3b:5d:a9:1f: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:FD:A2:86:EB:BB:0A:4D:02:75:60:96:CD:47:C2:23:3E:E9:4E X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/y4L9oobruwpNAnVgls1HwiM-6U4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.149.13.0-83.149.14.255 91.213.104.0/24 IPv6: 2a03:d000:9000::/48 Signature Algorithm: sha256WithRSAEncryption 34:00:a8:4d:4d:7d:24:1a:d4:ab:d0:06:6d:b3:2b:0c:a9:91: 65:50:35:71:be:ba:ce:f1:8b:e4:72:c7:e1:ab:ed:e6:3c:3b: 19:2d:43:dc:31:d6:c7:aa:da:41:a0:14:61:ac:6c:a6:9c:f8: 7c:44:fa:82:bd:4a:c4:d3:22:42:38:28:47:97:9a:fe:a3:4c: 67:e6:cd:3c:e4:b5:eb:50:ee:8b:72:89:3d:2b:7e:73:94:e6: 79:d4:73:00:fe:d2:f4:d9:bc:9b:c8:16:6d:ef:4d:3f:ac:e5: 24:0f:b9:a1:27:4a:e7:0a:03:7c:72:6a:ae:7c:53:3b:db:c7: 60:49:00:bf:a8:90:7e:c6:76:d1:5c:7c:62:68:32:c4:a7:90: 25:0c:b5:9a:b7:13:be:d9:f0:d8:5a:38:8e:bc:56:e6:17:f5: 15:d5:dc:e7:fd:bd:15:76:a3:66:18:4c:46:dc:ea:78:f5:28: d2:ee:a6:fe:17:b0:44:84:63:2f:f6:0f:5c:20:bf:cf:1e:5c: c9:0b:a8:c7:e5:4d:01:16:9a:e2:ae:5a:6a:3c:b0:a4:b9:14: 36:19:5d:71:4e:29:3b:31:41:0e:aa:28:ae:50:8e:c5:0f:ab: 4c:1f:12:f3:91:7a:e9:ec:9b:88:5a:17:c3:24:b6:97:71:c1: e2:bf:15:b3 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt3x1+DRtrSwM3z7jZakRQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjgyZmRhMjg2ZWJiYjBhNGQwMjc1NjA5NmNkNDdjMjIzM2VlOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHZj4aXg1SB7usnMOZ4BN3eVueFW VnCNP7SgnXYZDy90/ispWibeqiXBqBm7qEgAT57xQ5Uxxx8Mhs9DO6kODv3IOPhV f11nXfZwWaTFZImuWJ9F8JAelKq/MuxRWQ2BpsGLFw/feHAqZUp/QmjyJ16PCHYd Bk+MiaSsG6vHYRdfioKFuh/wLc/NcUvTc/cOs9x+s5OLrM6rMtI5Q0Z3RvQ4LX6o IUQ+Guwi7/Fu9JmIFCVA/c8g2ORxqw7GVp67X51sJAnfehVVcQDleP88WA+FTdR6 WiCy9hrZ2cPNeDUPYizYTm7v4C29XwRcrMExrxz9A1EgJVz66DtdqR+4vwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFMuC/aKG67sKTQJ1YJbNR8IjPulOMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEveTRMOW9vYnJ1d3BOQW5WZ2xzMUh3aU0tNlU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBABTlQ0D BABTlQ4DBABb1WgwDwQCAAIwCQMHACoD0ACQADANBgkqhkiG9w0BAQsFAAOCAQEA NACoTU19JBrUq9AGbbMrDKmRZVA1cb66zvGL5HLH4avt5jw7GS1D3DHWx6raQaAU Yaxsppz4fET6gr1KxNMiQjgoR5ea/qNMZ+bNPOS161Dui3KJPSt+c5TmedRzAP7S 9Nm8m8gWbe9NP6zlJA+5oSdK5woDfHJqrnxTO9vHYEkAv6iQfsZ20Vx8YmgyxKeQ JQy1mrcTvtnw2Fo4jrxW5hf1FdXc5/29FXajZhhMRtzqePUo0u6m/hewRIRjL/YP XCC/zx5cyQuox+VNARaa4q5aajywpLkUNhldcU4pOzFBDqoorlCOxQ+rTB8S85F6 6eybiFoXwyS2l3HB4r8Vsw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:46 2026 by rpki-client