This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/Yz3xFMiM2Kcl-UC8rhV6b_HYaLA.roa File: Yz3xFMiM2Kcl-UC8rhV6b_HYaLA.roa (raw, json) Hash identifier: a/DGW0i/X4m/ikPJX+oJ6qAZ0udts75Z/BZGzVsUAJI= Subject key identifier: 63:3D:F1:14:C8:8C:D8:A7:25:F9:40:BC:AE:15:7A:6F:F1:D8:68:B0 Certificate issuer: /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a Certificate serial: 019B79103D8FABE704FDF89AB0E0AFEBA22C Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/Yz3xFMiM2Kcl-UC8rhV6b_HYaLA.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47993 IP address blocks: 91.208.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3d:8f:ab:e7:04:fd:f8:9a:b0:e0:af:eb:a2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=633df114c88cd8a725f940bcae157a6ff1d868b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:37:cd:73:ee:ee:d9:5f:3e:63:99:b3:69: d3:dd:c8:dd:1c:e1:2d:fb:93:15:91:d7:25:69:92: eb:2c:28:ab:85:bf:ac:e9:1e:6b:78:88:99:8c:d1: e7:9f:cf:7a:0f:fb:7d:6f:fa:98:1f:90:a5:fb:b0: 3a:4f:75:68:5e:30:48:b2:9a:50:d1:82:8c:cf:42: 61:eb:d1:c9:ea:f3:ef:e1:b1:e4:3f:29:d8:aa:e2: 74:4a:df:59:2a:e6:e5:0d:88:58:c5:05:6d:30:75: dc:b7:38:c6:2f:2d:9e:b4:a4:1f:cd:7e:7f:0e:c8: 8a:c9:77:87:bd:89:4d:ac:ab:a6:6f:c0:13:b1:d0: d8:77:2d:4d:99:cd:c2:00:d8:28:c9:9e:18:bf:42: 11:a1:6d:f0:50:a9:82:67:1b:eb:b0:69:0d:5a:ec: 88:10:33:fa:82:99:c1:85:47:31:a2:d4:c6:d8:f6: 49:7d:13:92:bc:d1:80:05:da:6c:8c:2b:42:d9:da: d2:b6:5b:92:1f:c8:ff:50:ce:c3:6f:c2:f9:e9:47: f6:0a:6a:1d:8e:11:a1:1f:91:d8:52:65:0c:3e:97: 1b:50:9d:79:c7:35:5b:cc:fd:fa:23:4a:c1:a7:c5: 37:28:de:37:f4:7f:2c:ab:84:64:36:f3:88:35:15: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3D:F1:14:C8:8C:D8:A7:25:F9:40:BC:AE:15:7A:6F:F1:D8:68:B0 X509v3 Authority Key Identifier: keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/Yz3xFMiM2Kcl-UC8rhV6b_HYaLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.168.0/24 Signature Algorithm: sha256WithRSAEncryption 34:0c:aa:a8:99:f9:f0:67:f8:9f:ca:79:67:67:24:64:05:d2: 36:94:6f:5c:3d:05:2f:d6:be:2b:ff:f2:5e:2a:73:ae:1e:4f: 2d:03:c8:8a:5b:84:06:af:f3:7f:f7:b6:94:c9:92:c0:97:07: 9e:8a:62:50:34:dc:3c:fe:3e:e4:5e:0e:98:09:a7:ee:9f:28: 61:91:d4:74:df:b5:ed:79:cb:e0:84:94:39:10:90:33:ae:26: 28:b1:96:8b:28:ee:ad:25:28:0a:80:7e:8c:10:1e:2b:80:91: 91:b7:73:e0:78:34:76:71:da:b7:ac:6c:d7:d5:e1:95:f8:76: 3e:4b:08:73:1f:17:23:f9:b2:38:da:c7:e2:06:0d:73:b4:15: 31:49:69:df:73:d0:b0:ee:75:78:9c:ba:fe:83:26:29:c6:1e: 84:eb:eb:56:bf:f5:c2:2b:60:dd:63:8b:5c:ab:df:e9:a0:ca: 36:44:88:32:38:b3:7d:19:36:0d:e8:07:4c:60:2f:8b:24:0a: 2a:4d:b7:71:58:81:f8:f4:85:6d:54:ec:3c:1c:d4:ad:88:ac: 90:8a:c8:9e:a1:2d:d5:08:a5:a1:19:f7:79:50:3b:f7:af:00: 90:27:73:c3:44:4c:cd:8a:88:19:f7:5b:b7:38:d7:02:61:c2: f1:3c:4b:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ED2Pq+cE/fiasOCv66IsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5OTZhNmZmZGFkNWNlYjI2MjY2MTdiZDZlZDljNGVjNTcx ZDBmM2EwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzNkZjExNGM4OGNkOGE3MjVmOTQwYmNhZTE1N2E2ZmYxZDg2OGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBE3zXPu7tlfPmOZs2nT3cjdHOEt +5MVkdclaZLrLCirhb+s6R5reIiZjNHnn896D/t9b/qYH5Cl+7A6T3VoXjBIsppQ 0YKMz0Jh69HJ6vPv4bHkPynYquJ0St9ZKublDYhYxQVtMHXctzjGLy2etKQfzX5/ DsiKyXeHvYlNrKumb8ATsdDYdy1Nmc3CANgoyZ4Yv0IRoW3wUKmCZxvrsGkNWuyI EDP6gpnBhUcxotTG2PZJfROSvNGABdpsjCtC2drStluSH8j/UM7Db8L56Uf2Cmod jhGhH5HYUmUMPpcbUJ15xzVbzP36I0rBp8U3KN439H8sq4RkNvOINRWtWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGM98RTIjNinJflAvK4Vem/x2GiwMB8GA1UdIwQY MBaAFOmWpv/a1c6yYmYXvW7ZxOxXHQ86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlphbV85clZ6ckppWmhlOWJ0bkU3RmNkRHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82YzE1ZTgtOGE4Mi00OWQ1LWEzMDkt MzhiZTZhNDdjZmNjLzEvWXozeEZNaU0yS2NsLVVDOHJoVjZiX0hZYUxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC82YzE1ZTgtOGE4Mi00OWQ1LWEzMDktMzhiZTZhNDdjZmNj LzEvNlphbV85clZ6ckppWmhlOWJ0bkU3RmNkRHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9CoMA0G CSqGSIb3DQEBCwUAA4IBAQA0DKqomfnwZ/ifynlnZyRkBdI2lG9cPQUv1r4r//Je KnOuHk8tA8iKW4QGr/N/97aUyZLAlweeimJQNNw8/j7kXg6YCafunyhhkdR037Xt ecvghJQ5EJAzriYosZaLKO6tJSgKgH6MEB4rgJGRt3PgeDR2cdq3rGzX1eGV+HY+ SwhzHxcj+bI42sfiBg1ztBUxSWnfc9Cw7nV4nLr+gyYpxh6E6+tWv/XCK2DdY4tc q9/poMo2RIgyOLN9GTYN6AdMYC+LJAoqTbdxWIH49IVtVOw8HNStiKyQisieoS3V CKWhGfd5UDv3rwCQJ3PDREzNiogZ91u3ONcCYcLxPEtf -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:15 2026 by rpki-client