This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa File: Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa (raw, json) Hash identifier: SA4NVslryO/GKYfRH6uU7OXQ/zmv533QvWL9j3NGE/I= Subject key identifier: 63:1E:96:0A:D7:5A:25:7F:A5:66:13:58:A7:2A:0F:DE:A4:D1:4D:60 Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b Certificate serial: 019B7EA45C706FAA8B8565AE57AE6978D98A Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa Signing time: Fri 02 Jan 2026 12:17:39 +0000 ROA not before: Fri 02 Jan 2026 12:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47952 IP address blocks: 91.198.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:5c:70:6f:aa:8b:85:65:ae:57:ae:69:78:d9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b Validity Not Before: Jan 2 12:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=631e960ad75a257fa5661358a72a0fdea4d14d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:2f:e7:8b:90:4a:f8:94:19:76:b1:9d:5a: af:63:e4:9c:47:af:c0:31:48:44:4c:30:e7:8e:b2: 62:79:2f:47:7b:7c:2d:ec:2d:7b:1f:49:db:99:f2: bc:2b:d5:50:ed:65:63:b1:3d:a8:dd:bf:fc:5f:b8: cc:26:09:20:9b:5e:a0:bb:73:78:33:b5:c9:b5:62: 66:22:7e:30:2c:5b:51:e6:45:82:d6:a9:2b:a1:20: 70:50:41:9b:6f:22:55:3e:e9:09:21:67:a1:22:41: d9:11:86:dc:cb:0b:bd:7e:bc:ed:ed:49:d6:d0:68: 61:b7:98:08:9d:b2:bd:01:64:48:33:ab:4a:f3:d7: 13:fe:1f:08:8e:24:fd:31:b8:c6:85:94:5a:52:fe: c1:7a:2d:ec:82:41:69:20:4a:50:30:96:17:91:6e: 1c:aa:d8:ba:6e:29:62:da:96:2e:02:c0:90:ac:46: 7a:1e:46:15:23:5a:8a:2e:28:76:33:39:45:bb:21: 3e:eb:4f:e9:02:80:1f:0f:94:29:c3:03:26:60:15: 70:e7:28:fb:e6:75:f3:52:9e:fa:7e:71:42:77:9f: d6:0a:6d:f4:44:11:4b:93:8f:09:9e:86:08:d0:42: d6:af:30:69:3c:22:0f:4e:93:1b:8a:f9:2d:60:d0: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1E:96:0A:D7:5A:25:7F:A5:66:13:58:A7:2A:0F:DE:A4:D1:4D:60 X509v3 Authority Key Identifier: keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.64.0/24 Signature Algorithm: sha256WithRSAEncryption 19:5c:31:d4:34:eb:9a:eb:9a:82:7a:ef:02:09:65:e5:01:d2: 14:53:1e:fc:9b:28:a8:d7:de:19:e8:df:35:47:61:37:e7:7b: d2:50:38:0b:3f:56:3f:2a:b1:a2:cb:46:9b:d7:1f:e1:f3:a5: 8f:89:68:09:3d:26:f7:e7:e0:27:64:7e:fd:b0:96:d3:9f:1d: e4:92:8b:bf:d0:3f:60:99:f3:2d:8c:ba:5e:49:fc:1d:bf:cc: 2c:fa:fa:04:f6:4d:16:2d:74:0d:64:c3:cb:bf:da:4d:8d:88: f3:fb:0f:e6:d1:aa:26:67:50:14:f7:bf:ad:c9:76:dc:2f:80: f2:24:a3:9f:b6:ee:a1:58:5c:cc:05:0f:be:92:26:20:ca:3e: 47:49:ec:8d:58:da:2f:bf:bf:11:76:61:2f:34:c5:fc:a8:81: 64:bb:35:53:3a:79:06:48:7f:13:85:47:25:09:bb:2f:81:3f: 3c:ca:ad:9d:65:8a:22:3c:b6:c4:65:cb:d7:d8:3b:72:da:a4: 0c:23:00:c2:17:cc:71:ad:43:5a:92:3a:d5:a7:a2:bf:d2:86: cc:0d:fd:20:f8:62:33:7d:43:59:70:df:38:be:ff:15:b2:08: 3e:f0:8b:33:e1:2b:ce:6a:1e:24:0e:17:3c:9d:c0:36:66:54: c9:98:a0:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pFxwb6qLhWWuV65peNmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YWMzMTYzNWQwOTFiZTYxNTU3NDMzMTFmZTFkYjdjN2Fm MzQ3N2IwHhcNMjYwMTAyMTIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzFlOTYwYWQ3NWEyNTdmYTU2NjEzNThhNzJhMGZkZWE0ZDE0ZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOgv54uQSviUGXaxnVqvY+ScR6/A MUhETDDnjrJieS9He3wt7C17H0nbmfK8K9VQ7WVjsT2o3b/8X7jMJgkgm16gu3N4 M7XJtWJmIn4wLFtR5kWC1qkroSBwUEGbbyJVPukJIWehIkHZEYbcywu9frzt7UnW 0Ghht5gInbK9AWRIM6tK89cT/h8IjiT9MbjGhZRaUv7Bei3sgkFpIEpQMJYXkW4c qti6bili2pYuAsCQrEZ6HkYVI1qKLih2MzlFuyE+60/pAoAfD5QpwwMmYBVw5yj7 5nXzUp76fnFCd5/WCm30RBFLk48JnoYI0ELWrzBpPCIPTpMbivktYNC9bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMelgrXWiV/pWYTWKcqD96k0U1gMB8GA1UdIwQY MBaAFHisMWNdCRvmFVdDMR/h23x680d7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQt ZjZlOGJiZGJkMzNiLzEvWXg2V0N0ZGFKWC1sWmhOWXB5b1AzcVRSVFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQtZjZlOGJiZGJkMzNi LzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZAMA0G CSqGSIb3DQEBCwUAA4IBAQAZXDHUNOua65qCeu8CCWXlAdIUUx78myio194Z6N81 R2E353vSUDgLP1Y/KrGiy0ab1x/h86WPiWgJPSb35+AnZH79sJbTnx3kkou/0D9g mfMtjLpeSfwdv8ws+voE9k0WLXQNZMPLv9pNjYjz+w/m0aomZ1AU97+tyXbcL4Dy JKOftu6hWFzMBQ++kiYgyj5HSeyNWNovv78RdmEvNMX8qIFkuzVTOnkGSH8ThUcl CbsvgT88yq2dZYoiPLbEZcvX2Dty2qQMIwDCF8xxrUNakjrVp6K/0obMDf0g+GIz fUNZcN84vv8Vsgg+8Isz4SvOah4kDhc8ncA2ZlTJmKD6 -----END CERTIFICATE-----Generated at Wed Jan 21 17:18:37 2026 by rpki-client