This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa File: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (raw, json) Hash identifier: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc= Subject key identifier: 63:B0:CD:2B:D8:5C:04:14:C4:ED:38:75:91:8C:95:C3:74:4F:C1:66 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC42E54CBA5A182D82B8D6AF9E652A Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa Signing time: Thu 01 Jan 2026 14:18:05 +0000 ROA not before: Thu 01 Jan 2026 14:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49617 IP address blocks: 91.215.60.0/23 maxlen: 23 91.236.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:42:e5:4c:ba:5a:18:2d:82:b8:d6:af:9e:65:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63b0cd2bd85c0414c4ed3875918c95c3744fc166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:1a:8d:29:5f:b7:c7:ad:56:6a:5d:b7:07: 46:4e:bf:88:41:45:9c:16:65:8f:fb:d6:3c:8c:98: 9f:a2:08:66:ed:1b:a9:28:2b:ec:2e:31:66:a1:0d: 1c:8d:5b:c8:71:2f:d8:67:2f:51:74:2b:e0:94:f5: bd:6c:ac:bc:9d:c0:91:ab:51:1b:c3:c3:79:2c:17: 6d:5c:68:ea:ff:00:8d:cd:38:c9:d0:48:c8:8e:9e: d3:10:b7:54:70:d9:e4:8a:fc:68:b3:4d:4f:e4:27: e3:83:e6:1d:ef:6b:85:c9:cc:9b:73:92:a5:6c:b6: 8c:94:ff:f9:60:41:fe:a0:68:2e:c2:8b:8c:37:6e: ea:f4:f0:58:57:4f:15:19:63:90:0b:13:d2:31:81: 71:a8:23:2a:48:28:ad:19:8e:0c:bd:ce:65:16:bf: ff:81:7b:db:38:bd:5e:4c:22:d5:d5:ab:4d:68:08: d5:91:23:9c:d3:1b:2f:a0:54:b3:e0:78:21:bf:7c: d8:b7:16:3a:28:fd:ab:70:21:56:9a:9e:28:0b:bd: 89:d2:7f:8b:a3:87:0e:41:20:fb:79:b3:7e:c3:a6: 7d:e1:8e:cb:ca:a0:2e:0d:46:77:e8:52:f4:a1:2c: f6:0a:04:f2:94:5b:14:fd:c7:71:b4:0c:bc:ec:ad: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B0:CD:2B:D8:5C:04:14:C4:ED:38:75:91:8C:95:C3:74:4F:C1:66 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.60.0/23 91.236.134.0/24 Signature Algorithm: sha256WithRSAEncryption 90:89:cd:95:32:3f:8e:9d:c4:5b:bd:36:5f:20:cc:ea:ea:57: 64:a8:94:6e:db:80:df:3b:53:bc:e6:11:62:3b:cb:04:33:39: 10:fd:fe:71:51:cf:3e:c0:53:2b:06:31:06:28:12:b8:be:56: 7d:1d:75:60:98:13:73:45:a4:47:bb:79:e9:73:7c:37:49:af: 8f:1a:e9:8d:dd:9f:86:16:ff:37:40:91:80:79:33:4c:9f:4e: df:df:40:9b:1d:e7:22:ca:d5:ce:0d:aa:0d:d5:dc:3c:cd:a8: c1:1b:a4:94:43:e7:a5:fb:51:1b:eb:f1:55:ee:c7:51:ca:76: c3:d8:d0:5d:4c:ed:03:9b:75:84:d1:60:cc:c8:bd:fb:9e:8f: f2:dc:1a:a2:a3:00:07:f4:03:76:7f:97:36:7c:92:c5:5d:76: cd:2c:c3:bf:ca:e7:99:b2:cf:e4:fa:4d:36:fd:34:05:49:8a: 81:3b:21:fd:5b:22:7f:1e:a4:ce:7e:d9:22:7a:7c:28:01:e9: 5e:19:ac:18:ef:3a:75:d2:c1:c7:46:bf:60:62:f3:03:af:cd: 4c:f8:d3:9a:6f:e0:2b:b0:4f:5e:4a:79:20:ac:df:4d:e4:27: f4:85:bb:8c:09:bf:ee:c5:26:b6:e1:a8:cf:66:b3:98:d2:be: 49:2c:66:61 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57ELlTLpaGC2CuNavnmUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2IwY2QyYmQ4NWMwNDE0YzRlZDM4NzU5MThjOTVjMzc0NGZjMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfsajSlft8etVmpdtwdGTr+IQUWc FmWP+9Y8jJifoghm7RupKCvsLjFmoQ0cjVvIcS/YZy9RdCvglPW9bKy8ncCRq1Eb w8N5LBdtXGjq/wCNzTjJ0EjIjp7TELdUcNnkivxos01P5Cfjg+Yd72uFycybc5Kl bLaMlP/5YEH+oGguwouMN27q9PBYV08VGWOQCxPSMYFxqCMqSCitGY4Mvc5lFr// gXvbOL1eTCLV1atNaAjVkSOc0xsvoFSz4Hghv3zYtxY6KP2rcCFWmp4oC72J0n+L o4cOQSD7ebN+w6Z94Y7LyqAuDUZ36FL0oSz2CgTylFsU/cdxtAy87K16owIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGOwzSvYXAQUxO04dZGMlcN0T8FmMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvWTdETks5aGNCQlRFN1RoMWtZeVZ3M1JQd1dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW9c8AwQA W+yGMA0GCSqGSIb3DQEBCwUAA4IBAQCQic2VMj+OncRbvTZfIMzq6ldkqJRu24Df O1O85hFiO8sEMzkQ/f5xUc8+wFMrBjEGKBK4vlZ9HXVgmBNzRaRHu3npc3w3Sa+P GumN3Z+GFv83QJGAeTNMn07f30CbHeciytXODaoN1dw8zajBG6SUQ+el+1Eb6/FV 7sdRynbD2NBdTO0Dm3WE0WDMyL37no/y3BqiowAH9AN2f5c2fJLFXXbNLMO/yueZ ss/k+k02/TQFSYqBOyH9WyJ/HqTOftkienwoAeleGawY7zp10sHHRr9gYvMDr81M +NOab+ArsE9eSnkgrN9N5Cf0hbuMCb/uxSa24ajPZrOY0r5JLGZh -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:11 2026 by rpki-client