This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/y1ZGPii4-Iho89Jbi89mZfdS1ws.roa File: y1ZGPii4-Iho89Jbi89mZfdS1ws.roa (raw, json) Hash identifier: yZ2Nri2tE+Ow1XmjiyJ8EmOUZDFcXjKl1ZngDw5T7Ak= Subject key identifier: CB:56:46:3E:28:B8:F8:88:68:F3:D2:5B:8B:CF:66:65:F7:52:D7:0B Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8549F1458A419EC09D2435014A500E Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/y1ZGPii4-Iho89Jbi89mZfdS1ws.roa Signing time: Fri 02 Jan 2026 16:23:20 +0000 ROA not before: Fri 02 Jan 2026 16:23:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207246 IP address blocks: 91.242.76.0/23 maxlen: 24 91.242.98.0/24 maxlen: 24 91.242.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:49:f1:45:8a:41:9e:c0:9d:24:35:01:4a:50:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb56463e28b8f88868f3d25b8bcf6665f752d70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:89:f1:2e:f9:48:79:9a:47:54:b0:4a:9f: e6:fb:2a:41:4b:41:a4:35:66:97:ba:53:4b:41:e2: a1:44:b2:8c:24:ed:45:07:d4:6e:d2:cc:f3:b2:17: a4:1a:32:d1:8f:f6:38:77:81:b4:77:c4:47:70:d7: 24:36:15:e0:5a:17:b7:0e:2c:68:8c:a1:b8:11:20: 10:6f:0d:07:df:d7:f2:96:26:46:34:1b:c1:c1:a7: 91:67:7e:fd:cb:de:3a:63:a9:4f:a4:57:34:44:0b: ae:98:cb:62:b9:1e:00:3b:dd:fe:c2:89:82:68:8b: 7f:1f:4a:9f:6f:dc:12:4d:07:01:5a:c1:c8:04:64: 94:c2:2f:f5:51:48:34:33:7d:01:a2:a1:ff:c4:ec: c4:2d:b7:99:18:2d:e5:df:f4:8a:85:3b:96:c3:fd: 94:9c:c4:38:a8:c6:71:9d:5b:c6:26:b7:6a:4c:f5: 03:dc:5d:2c:a3:be:a4:0b:37:a0:e3:3b:9c:38:b3: 78:30:87:06:b1:7b:b4:e0:1a:7d:50:04:a2:e8:4c: ba:2f:24:f1:e8:e6:b9:46:83:a4:dd:ce:4b:29:27: d1:1d:35:72:81:60:b1:d8:36:4f:59:8d:8f:e4:3c: 4f:c1:a3:fb:1a:51:ce:cc:97:27:50:a5:19:62:da: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:56:46:3E:28:B8:F8:88:68:F3:D2:5B:8B:CF:66:65:F7:52:D7:0B X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/y1ZGPii4-Iho89Jbi89mZfdS1ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.76.0/23 91.242.98.0/24 91.242.104.0/24 Signature Algorithm: sha256WithRSAEncryption 02:ea:a8:08:02:5e:14:9d:79:39:99:a1:d0:79:5f:5c:47:b6: a5:f7:f6:6c:26:e7:4b:fa:b6:fe:a7:5b:52:2e:57:84:e2:8a: 8f:1d:9f:14:45:d9:8e:d0:d0:c8:43:6a:e8:87:7c:93:c4:9d: ee:3b:12:e9:6e:17:2f:74:2b:89:99:5e:ef:de:81:29:26:0c: 41:1c:fa:03:b7:fe:23:7c:de:ee:e9:b9:eb:68:32:80:46:3a: ab:22:31:81:ac:4a:1f:eb:d7:00:35:ce:2a:32:66:3d:38:a7: d7:d1:a7:72:61:bb:39:35:10:bc:af:3c:21:22:89:b2:f1:18: 5a:15:32:f4:fc:52:b8:cc:0b:5d:a6:0b:2c:01:63:57:7c:e2: 7d:57:ae:4b:3b:b0:f1:43:69:ac:d1:2d:5f:d3:7b:28:6c:6b: f8:01:a9:9e:54:e3:d1:44:1c:ba:d0:0e:ca:d9:86:dd:db:69: 4d:c3:fd:0f:41:54:22:27:57:3b:a5:14:a5:06:d4:1a:b6:d3: 93:f2:5b:e8:26:e3:5b:50:f6:2a:71:d5:06:99:54:07:4b:ed: 44:4d:c0:ee:7c:ea:48:8a:56:23:99:d9:ef:fe:23:71:5f:27: 17:70:22:4a:17:48:69:e7:7e:da:e9:a7:8e:a0:fd:a5:a9:bd: b8:de:9f:fa -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hUnxRYpBnsCdJDUBSlAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjU2NDYzZTI4YjhmODg4NjhmM2QyNWI4YmNmNjY2NWY3NTJkNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIaJ8S75SHmaR1SwSp/m+ypBS0Gk NWaXulNLQeKhRLKMJO1FB9Ru0szzshekGjLRj/Y4d4G0d8RHcNckNhXgWhe3Dixo jKG4ESAQbw0H39fyliZGNBvBwaeRZ379y946Y6lPpFc0RAuumMtiuR4AO93+womC aIt/H0qfb9wSTQcBWsHIBGSUwi/1UUg0M30BoqH/xOzELbeZGC3l3/SKhTuWw/2U nMQ4qMZxnVvGJrdqTPUD3F0so76kCzeg4zucOLN4MIcGsXu04Bp9UASi6Ey6LyTx 6Oa5RoOk3c5LKSfRHTVygWCx2DZPWY2P5DxPwaP7GlHOzJcnUKUZYtqACQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMtWRj4ouPiIaPPSW4vPZmX3UtcLMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEveTFaR1BpaTQtSWhvODlKYmk4OW1aZmRTMXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW/JMAwQA W/JiAwQAW/JoMA0GCSqGSIb3DQEBCwUAA4IBAQAC6qgIAl4UnXk5maHQeV9cR7al 9/ZsJudL+rb+p1tSLleE4oqPHZ8URdmO0NDIQ2roh3yTxJ3uOxLpbhcvdCuJmV7v 3oEpJgxBHPoDt/4jfN7u6bnraDKARjqrIjGBrEof69cANc4qMmY9OKfX0adyYbs5 NRC8rzwhIomy8RhaFTL0/FK4zAtdpgssAWNXfOJ9V65LO7DxQ2ms0S1f03sobGv4 AameVOPRRBy60A7K2Ybd22lNw/0PQVQiJ1c7pRSlBtQattOT8lvoJuNbUPYqcdUG mVQHS+1ETcDufOpIilYjmdnv/iNxXycXcCJKF0hp537a6aeOoP2lqb243p/6 -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:51 2026 by rpki-client