This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/YAGdK9NgvIyiz7MwVPSphsKwcHE.roa File: YAGdK9NgvIyiz7MwVPSphsKwcHE.roa (raw, json) Hash identifier: YoeO10+z7W0nmsVjlcs0IP7RbonSryjBMwi0I/lLnms= Subject key identifier: 60:01:9D:2B:D3:60:BC:8C:A2:CF:B3:30:54:F4:A9:86:C2:B0:70:71 Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Certificate serial: 019B7DCB27630E577BBBEC6D86D2444A2DDE Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/YAGdK9NgvIyiz7MwVPSphsKwcHE.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204506 IP address blocks: 93.157.207.0/24 maxlen: 24 2001:678:210::/48 maxlen: 48 2a0f:4507:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:27:63:0e:57:7b:bb:ec:6d:86:d2:44:4a:2d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60019d2bd360bc8ca2cfb33054f4a986c2b07071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:6d:43:b2:f4:09:8d:e0:2a:c9:3f:68:5a: 19:b1:a1:9b:40:b8:3f:0e:78:2f:47:12:32:3a:28: 35:09:35:f9:a4:a7:70:26:d1:82:ac:ad:62:c2:2f: dc:0e:58:24:c1:92:ad:21:81:ce:95:65:64:3b:0e: 77:10:04:79:35:88:ff:95:42:fb:cb:d3:33:91:17: 1b:57:c5:c4:4f:11:98:4b:a5:63:7c:4c:71:a0:b6: e3:bf:e3:16:27:19:b4:2f:7a:3a:37:2b:5e:6c:18: 98:1d:07:b1:8e:a4:dd:b5:ff:ab:33:5c:8e:2b:ca: 8a:c9:5e:e2:f0:ee:3d:6e:64:7c:0e:fe:9e:f1:24: 79:7d:cc:88:30:4d:2d:46:d7:5e:a8:3a:c1:37:3b: 3c:d6:cc:c1:26:68:46:a0:68:56:09:92:9e:b1:5d: 5d:18:a2:87:b9:bf:8f:76:20:b2:dc:49:d2:00:8a: 81:92:e2:4b:ff:d5:a2:6b:7f:62:c3:f2:cf:af:ac: 67:aa:82:63:01:f7:8d:8f:1f:bc:75:37:b0:2c:32: ad:ce:d1:ee:8e:63:6f:86:af:fa:b1:57:0c:6e:48: 8f:97:dd:1f:72:41:79:1c:7a:bd:75:31:40:c3:f9: d3:2f:a5:08:0c:b9:14:a8:a3:46:4d:56:a8:87:2e: 10:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:01:9D:2B:D3:60:BC:8C:A2:CF:B3:30:54:F4:A9:86:C2:B0:70:71 X509v3 Authority Key Identifier: keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/YAGdK9NgvIyiz7MwVPSphsKwcHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.207.0/24 IPv6: 2001:678:210::/48 2a0f:4507:8000::/33 Signature Algorithm: sha256WithRSAEncryption 82:0e:fb:ae:8e:d3:46:c2:1d:36:e9:01:6b:47:bb:42:b2:76: 1e:d7:24:e9:e8:57:14:96:e8:a2:e7:bf:f9:1b:2a:ca:24:76: c4:46:f6:91:34:e1:9b:ed:85:ac:b5:98:2d:e7:22:e2:5f:ec: e8:05:b3:50:de:ec:b9:1f:0c:66:d2:90:15:77:a0:0c:37:2e: 47:29:0c:a9:4d:1c:a6:bc:63:2f:78:77:c7:9c:b6:1c:1f:31: 6d:cd:04:6c:ed:0c:8a:5f:fe:d8:b9:05:2b:26:a8:6d:04:11: 6e:82:20:d9:53:57:c2:f6:d1:19:aa:3a:fc:4d:51:97:5a:fd: e7:2e:8e:1c:76:ea:15:f5:49:82:32:fc:8f:23:dd:fd:82:75: 20:e7:3a:a6:9a:44:77:7c:3c:91:95:de:e5:f7:36:b8:53:5b: 94:ce:31:74:3f:2d:67:3e:8c:27:70:f1:d0:d6:72:d6:8f:07: da:04:63:ee:14:15:fd:64:b0:98:b3:a9:27:5a:6e:6f:cc:fc: e3:ca:46:b9:a6:19:81:27:ba:fc:59:37:2a:6a:2d:29:17:70: 7f:b8:87:58:d3:4c:49:aa:ba:11:0a:5a:da:3b:fb:21:2c:4e: 8a:bf:40:0f:b4:f4:3e:e2:50:98:25:f0:4e:af:43:52:1b:2f: 6c:56:bd:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9yydjDld7u+xthtJESi3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2IyYzM4NzEwNjkwMDJhZDBiMmY0MmIwY2JmNWU5MmUz YmU0YjMwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDAxOWQyYmQzNjBiYzhjYTJjZmIzMzA1NGY0YTk4NmMyYjA3MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr61tQ7L0CY3gKsk/aFoZsaGbQLg/ DngvRxIyOig1CTX5pKdwJtGCrK1iwi/cDlgkwZKtIYHOlWVkOw53EAR5NYj/lUL7 y9MzkRcbV8XETxGYS6VjfExxoLbjv+MWJxm0L3o6NytebBiYHQexjqTdtf+rM1yO K8qKyV7i8O49bmR8Dv6e8SR5fcyIME0tRtdeqDrBNzs81szBJmhGoGhWCZKesV1d GKKHub+PdiCy3EnSAIqBkuJL/9Wia39iw/LPr6xnqoJjAfeNjx+8dTewLDKtztHu jmNvhq/6sVcMbkiPl90fckF5HHq9dTFAw/nTL6UIDLkUqKNGTVaohy4QxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGABnSvTYLyMos+zMFT0qYbCsHBxMB8GA1UdIwQY MBaAFAA7LDhxBpACrQsvQrDL9ekuO+SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGIt YjM1YTBhMTQ1M2ZiLzEvWUFHZEs5Tmd2SXlpejdNd1ZQU3Boc0t3Y0hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGItYjM1YTBhMTQ1M2Zi LzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAXZ3PMBcE AgACMBEDBwAgAQZ4AhADBgcqD0UHgDANBgkqhkiG9w0BAQsFAAOCAQEAgg77ro7T RsIdNukBa0e7QrJ2Htck6ehXFJbooue/+RsqyiR2xEb2kTThm+2FrLWYLeci4l/s 6AWzUN7suR8MZtKQFXegDDcuRykMqU0cprxjL3h3x5y2HB8xbc0EbO0Mil/+2LkF KyaobQQRboIg2VNXwvbRGao6/E1Rl1r95y6OHHbqFfVJgjL8jyPd/YJ1IOc6pppE d3w8kZXe5fc2uFNblM4xdD8tZz6MJ3Dx0NZy1o8H2gRj7hQV/WSwmLOpJ1pub8z8 48pGuaYZgSe6/Fk3KmotKRdwf7iHWNNMSaq6EQpa2jv7ISxOir9AD7T0PuJQmCXw Tq9DUhsvbFa9Iw== -----END CERTIFICATE-----Generated at Wed Jan 14 12:58:00 2026 by rpki-client