This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/Y3ge3oRqpdmJst537rmbrGZpsUE.roa File: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (raw, json) Hash identifier: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w= Subject key identifier: 63:78:1E:DE:84:6A:A5:D9:89:B2:DE:77:EE:B9:9B:AC:66:69:B1:41 Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93 Certificate serial: 019B7910BA1B3966686F6EDEA58C122B3A75 Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/Y3ge3oRqpdmJst537rmbrGZpsUE.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24703 IP address blocks: 91.210.188.0/24 maxlen: 24 91.210.189.0/24 maxlen: 24 91.210.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ba:1b:39:66:68:6f:6e:de:a5:8c:12:2b:3a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93 Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63781ede846aa5d989b2de77eeb99bac6669b141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:5a:33:7d:e8:8d:7e:c7:80:81:38:43:9a: a5:77:d6:5e:2c:a4:2c:eb:24:b7:5c:6c:6e:a1:d9: 01:64:2f:54:73:c1:db:65:91:ad:6b:46:de:9f:53: 96:27:73:a4:53:ff:f4:69:d1:54:ca:2d:4d:7d:79: 56:ca:66:49:38:e6:c1:35:01:cc:42:e6:78:71:4a: 01:0c:c6:df:9e:d0:b1:59:d6:fb:b2:09:74:e8:97: 1d:95:a8:85:9b:8c:b1:48:db:1e:90:35:0a:23:81: 4e:e3:0e:b7:5a:92:13:18:3c:9f:1a:05:d2:f6:32: 7f:07:e1:5e:46:0a:b5:bd:65:c7:42:be:1a:db:8e: ae:bf:67:8a:80:36:f2:fc:b1:0f:60:e2:85:c1:d9: c0:2c:73:b0:ec:be:25:f5:77:79:23:a1:51:f2:c3: 85:0f:f5:ee:ac:86:b0:94:17:b7:02:a9:ee:f8:4c: ba:49:57:ea:6e:cb:8f:6f:00:48:f0:32:cc:3a:90: 3b:00:f4:aa:80:dc:ed:46:ce:e8:0d:10:af:78:3e: 59:b2:07:9b:72:5f:19:51:82:c2:04:14:95:c6:de: 6c:a4:c3:ee:0f:f0:e9:05:85:e6:c5:52:7a:7c:13: f5:cb:68:ce:23:65:d6:d5:16:e7:97:8b:bb:44:64: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:78:1E:DE:84:6A:A5:D9:89:B2:DE:77:EE:B9:9B:AC:66:69:B1:41 X509v3 Authority Key Identifier: keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/Y3ge3oRqpdmJst537rmbrGZpsUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.188.0-91.210.190.255 Signature Algorithm: sha256WithRSAEncryption 85:c9:6c:2c:e3:73:5a:ea:6e:54:02:3c:90:88:69:a8:88:f6: 77:55:7c:3f:a0:d6:84:12:2e:94:d0:3a:41:e4:2e:9f:12:ad: c8:f0:38:a2:49:f9:ae:11:31:8a:79:05:d5:73:71:ba:3e:44: 16:93:05:23:50:59:17:a9:28:2c:03:6d:63:c6:aa:9c:a2:d4: 7c:fc:72:69:2c:5b:a5:35:50:da:08:3c:6f:9f:61:ee:c7:1f: ca:03:5b:b7:3a:01:26:c5:90:5b:f6:a9:b2:fa:ed:d1:ea:ba: 05:f1:d5:08:ec:4d:10:2b:f9:20:f4:61:f2:7a:f1:ea:c6:4c: ec:09:ad:16:22:03:de:33:00:5c:34:de:fb:7f:e0:17:b8:08: ab:73:ca:1f:69:ce:f6:83:d0:be:81:a2:12:14:a7:d0:e6:76: ea:58:4c:47:68:ad:21:64:12:81:cb:0a:d5:e4:10:9b:8f:03: 44:66:81:ff:28:38:c8:69:9d:14:14:57:0f:53:18:46:1e:46: 97:2b:1d:ad:85:bd:64:58:dc:b9:14:24:8b:73:1c:a9:bf:ac: d2:d1:02:74:90:81:01:9d:58:cf:a0:85:ba:3c:d5:31:cf:cb: a1:33:7d:5f:0f:e0:5f:27:c6:68:50:68:18:7b:c8:de:cb:f5: 1c:8a:91:7f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ELobOWZob27epYwSKzp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDRhZDk1ZjE3ZjM5NzIwN2EzZmMwZDE4NmYyOTEzZGYz OGViOTMwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzc4MWVkZTg0NmFhNWQ5ODliMmRlNzdlZWI5OWJhYzY2NjliMTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8daM33ojX7HgIE4Q5qld9ZeLKQs 6yS3XGxuodkBZC9Uc8HbZZGta0ben1OWJ3OkU//0adFUyi1NfXlWymZJOObBNQHM QuZ4cUoBDMbfntCxWdb7sgl06JcdlaiFm4yxSNsekDUKI4FO4w63WpITGDyfGgXS 9jJ/B+FeRgq1vWXHQr4a246uv2eKgDby/LEPYOKFwdnALHOw7L4l9Xd5I6FR8sOF D/XurIawlBe3Aqnu+Ey6SVfqbsuPbwBI8DLMOpA7APSqgNztRs7oDRCveD5Zsgeb cl8ZUYLCBBSVxt5spMPuD/DpBYXmxVJ6fBP1y2jOI2XW1Rbnl4u7RGT2/wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGN4Ht6EaqXZibLed+65m6xmabFBMB8GA1UdIwQY MBaAFAvUrZXxfzlyB6P8DRhvKRPfOOuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYt YjJmNjA4NjM2OGM3LzEvWTNnZTNvUnFwZG1Kc3Q1MzdybWJyR1pwc1VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83NmQwODItYWMzMi00NzM4LTk5ZTYtYjJmNjA4NjM2OGM3 LzEvQzlTdGxmRl9PWElIb193TkdHOHBFOTg0NjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJb0rwD BABb0r4wDQYJKoZIhvcNAQELBQADggEBAIXJbCzjc1rqblQCPJCIaaiI9ndVfD+g 1oQSLpTQOkHkLp8SrcjwOKJJ+a4RMYp5BdVzcbo+RBaTBSNQWRepKCwDbWPGqpyi 1Hz8cmksW6U1UNoIPG+fYe7HH8oDW7c6ASbFkFv2qbL67dHqugXx1QjsTRAr+SD0 YfJ68erGTOwJrRYiA94zAFw03vt/4Be4CKtzyh9pzvaD0L6BohIUp9DmdupYTEdo rSFkEoHLCtXkEJuPA0Rmgf8oOMhpnRQUVw9TGEYeRpcrHa2FvWRY3LkUJItzHKm/ rNLRAnSQgQGdWM+ghbo81THPy6EzfV8P4F8nxmhQaBh7yN7L9RyKkX8= -----END CERTIFICATE-----Generated at Mon Jan 26 15:33:51 2026 by rpki-client