This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa File: yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa (raw, json) Hash identifier: iN4CvHFXEcEmHQWuBuugf724GLARZVapxzfbeShr6ro= Subject key identifier: C9:72:46:63:27:97:C2:A6:FD:4A:A5:F6:1C:3C:1A:55:BB:8E:EA:81 Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533 Certificate serial: 019B7B36BD418F2A1751662C481B40B83B7C Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa Signing time: Thu 01 Jan 2026 20:19:03 +0000 ROA not before: Thu 01 Jan 2026 20:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213158 IP address blocks: 91.205.231.0/24 maxlen: 24 2a0b:6640::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bd:41:8f:2a:17:51:66:2c:48:1b:40:b8:3b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533 Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97246632797c2a6fd4aa5f61c3c1a55bb8eea81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:ec:e4:61:b3:d4:c6:33:12:57:23:13:fd: 2f:59:29:75:6d:1c:a8:f9:54:99:7b:6c:4b:76:4a: 39:3c:95:66:ae:93:02:df:6a:f8:7c:a9:28:e0:37: 2b:bd:2b:06:a8:3c:75:ee:4f:9d:06:46:55:06:20: 0a:7c:ca:9c:a4:32:3b:f8:0d:f2:5a:f7:1f:39:db: d2:99:55:6b:a1:2e:20:c1:06:6c:dd:eb:1f:e7:d6: d6:0b:bd:dd:c4:69:c9:91:9f:82:68:06:27:83:7c: b5:3b:d3:58:7f:40:04:03:7f:da:73:c8:d5:26:db: 82:07:d4:6c:f2:f3:12:53:d6:7c:7b:33:57:03:c3: 83:64:aa:9a:3e:72:10:f6:e1:59:2b:79:a9:d7:37: 90:25:db:fb:a5:02:55:23:07:6d:08:dc:0b:dd:1a: a3:e9:13:16:a5:f8:5b:af:28:19:bc:3a:e5:69:dc: 26:f5:68:75:5d:21:ce:83:9c:57:ac:69:7e:9a:7e: a0:4f:ea:b0:ad:fc:42:42:ea:dc:ab:b1:6b:1f:0f: d9:b3:c6:18:7a:07:af:95:77:33:c6:b2:a8:50:47: fa:c6:6b:b3:c2:63:f0:ed:2e:1d:b4:a0:6c:a4:18: 1a:d1:89:ed:39:e3:13:49:9e:60:2a:22:51:4b:92: bf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:72:46:63:27:97:C2:A6:FD:4A:A5:F6:1C:3C:1A:55:BB:8E:EA:81 X509v3 Authority Key Identifier: keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/yXJGYyeXwqb9SqX2HDwaVbuO6oE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.231.0/24 IPv6: 2a0b:6640::/29 Signature Algorithm: sha256WithRSAEncryption 63:92:66:d4:6d:d2:a7:49:6d:b3:df:3c:7a:05:e2:21:8c:f4: 7c:1a:7d:bd:b3:c2:4a:46:4b:e7:82:4a:85:d0:94:81:54:73: 62:a9:81:15:21:e6:9b:c5:76:97:8d:e5:95:a9:f8:94:41:fd: 17:f2:f7:a5:33:e5:78:12:ce:40:72:b9:40:5e:98:4e:23:30: c5:d1:d1:b2:92:74:84:41:c4:a2:29:c1:47:4f:6c:5b:48:68: 43:ec:32:20:24:39:01:30:8d:e9:ce:c7:00:12:f9:81:22:f0: 50:df:d1:78:49:00:b0:0c:95:db:0f:b2:4d:fd:cf:2a:a8:f7: ee:48:96:a4:00:9f:94:d9:a2:c5:d6:81:53:a7:fb:a9:33:32: b0:a5:09:78:61:36:69:16:38:31:b7:29:1d:e5:5d:fc:fa:09: 1d:d3:c0:70:e9:a5:5e:8b:62:0f:66:04:b2:9e:d0:bf:c3:98: fa:79:d4:d3:12:4c:ad:6f:17:62:11:25:c0:3b:2b:19:15:f4: 0b:43:ba:e2:46:71:c2:6c:72:01:68:36:1d:8a:92:c2:e2:ee: d0:5e:83:fb:f1:be:1c:ee:96:f9:03:69:b9:1f:51:6e:2e:0a: f7:c5:fd:61:6f:19:52:39:13:d2:5f:44:0f:f1:e4:ef:52:a7: 2e:fa:48:7b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Nr1BjyoXUWYsSBtAuDt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWE4YjY4OGRlYWRiYjkxZWZiZTA3NzIzMDhiYWM5ZjMw NGE1MzMwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTcyNDY2MzI3OTdjMmE2ZmQ0YWE1ZjYxYzNjMWE1NWJiOGVlYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxfs5GGz1MYzElcjE/0vWSl1bRyo +VSZe2xLdko5PJVmrpMC32r4fKko4DcrvSsGqDx17k+dBkZVBiAKfMqcpDI7+A3y WvcfOdvSmVVroS4gwQZs3esf59bWC73dxGnJkZ+CaAYng3y1O9NYf0AEA3/ac8jV JtuCB9Rs8vMSU9Z8ezNXA8ODZKqaPnIQ9uFZK3mp1zeQJdv7pQJVIwdtCNwL3Rqj 6RMWpfhbrygZvDrladwm9Wh1XSHOg5xXrGl+mn6gT+qwrfxCQurcq7FrHw/Zs8YY egevlXczxrKoUEf6xmuzwmPw7S4dtKBspBga0YntOeMTSZ5gKiJRS5K/qQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMlyRmMnl8Km/Uql9hw8GlW7juqBMB8GA1UdIwQY MBaAFDJai2iN6tu5HvvgdyMIusnzBKUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjIt YmI0YTg2NzJjYzBjLzEveVhKR1l5ZVh3cWI5U3FYMkhEd2FWYnVPNm9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjItYmI0YTg2NzJjYzBj LzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW83nMA0E AgACMAcDBQMqC2ZAMA0GCSqGSIb3DQEBCwUAA4IBAQBjkmbUbdKnSW2z3zx6BeIh jPR8Gn29s8JKRkvngkqF0JSBVHNiqYEVIeabxXaXjeWVqfiUQf0X8velM+V4Es5A crlAXphOIzDF0dGyknSEQcSiKcFHT2xbSGhD7DIgJDkBMI3pzscAEvmBIvBQ39F4 SQCwDJXbD7JN/c8qqPfuSJakAJ+U2aLF1oFTp/upMzKwpQl4YTZpFjgxtykd5V38 +gkd08Bw6aVei2IPZgSyntC/w5j6edTTEkytbxdiESXAOysZFfQLQ7riRnHCbHIB aDYdipLC4u7QXoP78b4c7pb5A2m5H1FuLgr3xf1hbxlSORPSX0QP8eTvUqcu+kh7 -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:27 2026 by rpki-client