This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/YStyBarfvl-bcJLdrA02NobfHyQ.roa File: YStyBarfvl-bcJLdrA02NobfHyQ.roa (raw, json) Hash identifier: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24= Subject key identifier: 61:2B:72:05:AA:DF:BE:5F:9B:70:92:DD:AC:0D:36:36:86:DF:1F:24 Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643 Certificate serial: 019B79ED298E6F8E43E300F915703C4063EF Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/YStyBarfvl-bcJLdrA02NobfHyQ.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50392 IP address blocks: 91.237.244.0/22 maxlen: 24 176.121.13.0/24 maxlen: 24 176.121.15.0/24 maxlen: 24 193.106.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:29:8e:6f:8e:43:e3:00:f9:15:70:3c:40:63:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643 Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=612b7205aadfbe5f9b7092ddac0d363686df1f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:a3:35:22:1a:81:c1:83:a8:54:c2:6a:0b: 57:3b:50:a6:f0:24:3a:35:c6:dd:d0:31:40:0c:42: 10:8d:78:57:b4:28:44:35:e6:3d:d9:b2:92:e4:be: bc:c1:b1:88:3c:40:62:0a:2a:cc:f8:73:6a:77:63: 58:3e:d8:24:e6:c6:4d:2c:c7:8d:06:99:1a:e7:5d: 00:0a:70:61:ae:81:b9:f3:90:4d:08:4f:f8:cb:ce: 92:39:64:0b:32:6c:3c:0e:7b:a0:6e:09:65:af:58: de:0a:8d:f8:bc:2e:01:da:15:b2:84:3f:f2:c5:50: fc:61:4e:63:cb:38:f7:74:62:0c:e6:c8:d4:9a:f9: e3:7c:2a:80:d0:52:2d:33:33:43:91:55:d5:c6:91: a9:1e:2c:04:6c:e8:ed:bd:6d:87:9d:c1:bc:c6:18: 25:7a:cc:13:bb:85:0a:6e:26:f5:c0:5a:0f:40:e7: 2d:8b:83:86:16:e3:e5:11:d9:40:9f:c6:d1:1d:51: c0:29:2e:c8:d2:33:80:7f:a1:19:07:b5:45:fa:19: a6:5f:bf:7e:8f:ad:f5:61:3f:0a:24:c9:73:37:ea: 91:72:b8:bd:35:d5:35:9f:31:34:61:e8:6c:d6:d6: a8:57:ca:dc:7a:03:9c:a9:06:1d:30:57:5e:89:13: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2B:72:05:AA:DF:BE:5F:9B:70:92:DD:AC:0D:36:36:86:DF:1F:24 X509v3 Authority Key Identifier: keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/YStyBarfvl-bcJLdrA02NobfHyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.244.0/22 176.121.13.0/24 176.121.15.0/24 193.106.144.0/22 Signature Algorithm: sha256WithRSAEncryption 60:16:1c:21:fc:d8:09:9f:b7:da:da:ed:f5:90:cf:b1:d6:96: 49:fa:1c:76:b2:fd:44:0f:51:29:35:af:5e:26:6e:67:f3:29: e0:6d:76:4a:4b:e8:d7:9f:3d:b6:a3:d3:95:75:d5:b7:76:be: 21:d3:63:25:a4:76:00:fa:f9:5c:32:f8:58:91:9f:ff:58:c7: 56:f8:39:f4:b4:3f:4f:c0:b7:0b:67:fc:aa:12:19:80:6f:5b: b9:96:2f:63:a6:52:db:bc:3a:23:91:41:65:90:2c:81:3a:08: d4:02:fa:db:8e:d0:dc:83:1f:93:8c:33:67:66:c0:7f:cd:99: 58:ab:2f:67:7a:3c:2f:0f:88:65:d3:a2:fc:ad:37:7a:fc:4b: ee:bc:c4:4d:0f:78:07:fa:a2:99:7e:2d:46:31:21:a6:f6:fa: 58:e6:13:8a:ec:b1:8f:05:14:cd:e3:cc:c9:2e:4b:15:98:31: a7:71:98:4d:0f:1a:89:f2:22:e3:a3:c6:ff:8e:68:e2:ba:45: 34:e0:21:00:f7:7c:c8:76:f9:63:30:b5:71:c0:6a:c7:b6:94: 43:d2:f8:27:95:11:c7:d6:62:d3:8c:c3:10:43:e5:0b:d1:e3: 73:21:01:8b:fa:91:90:8b:de:4f:d9:3d:a7:57:b6:b0:b6:3a: a7:61:c5:af -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57SmOb45D4wD5FXA8QGPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzQ3YjU2NTg0NGUzZTJmYzcxMmZhYjViZTg1OTI0YWFj NTg2NDMwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTJiNzIwNWFhZGZiZTVmOWI3MDkyZGRhYzBkMzYzNjg2ZGYxZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZyjNSIagcGDqFTCagtXO1Cm8CQ6 Ncbd0DFADEIQjXhXtChENeY92bKS5L68wbGIPEBiCirM+HNqd2NYPtgk5sZNLMeN Bpka510ACnBhroG585BNCE/4y86SOWQLMmw8Dnugbgllr1jeCo34vC4B2hWyhD/y xVD8YU5jyzj3dGIM5sjUmvnjfCqA0FItMzNDkVXVxpGpHiwEbOjtvW2HncG8xhgl eswTu4UKbib1wFoPQOcti4OGFuPlEdlAn8bRHVHAKS7I0jOAf6EZB7VF+hmmX79+ j631YT8KJMlzN+qRcri9NdU1nzE0Yehs1taoV8rcegOcqQYdMFdeiRPbWwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGErcgWq375fm3CS3awNNjaG3x8kMB8GA1UdIwQY MBaAFAR0e1ZYROPi/HEvq1voWSSqxYZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQt OTdiMjE1N2NiYWQxLzEvWVN0eUJhcmZ2bC1iY0pMZHJBMDJOb2JmSHlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82NDgwMGItNTRjYy00MGYyLWE3ZWQtOTdiMjE1N2NiYWQx LzEvQkhSN1ZsaEU0LUw4Y1MtclctaFpKS3JGaGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW+30AwQA sHkNAwQAsHkPAwQCwWqQMA0GCSqGSIb3DQEBCwUAA4IBAQBgFhwh/NgJn7fa2u31 kM+x1pZJ+hx2sv1ED1EpNa9eJm5n8yngbXZKS+jXnz22o9OVddW3dr4h02MlpHYA +vlcMvhYkZ//WMdW+Dn0tD9PwLcLZ/yqEhmAb1u5li9jplLbvDojkUFlkCyBOgjU AvrbjtDcgx+TjDNnZsB/zZlYqy9nejwvD4hl06L8rTd6/EvuvMRND3gH+qKZfi1G MSGm9vpY5hOK7LGPBRTN48zJLksVmDGncZhNDxqJ8iLjo8b/jmjiukU04CEA93zI dvljMLVxwGrHtpRD0vgnlRHH1mLTjMMQQ+UL0eNzIQGL+pGQi95P2T2nV7awtjqn YcWv -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:43 2026 by rpki-client