This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/YGHRshzP7E3xrzqnk97S3WYr9W8.roa File: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (raw, json) Hash identifier: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM= Subject key identifier: 60:61:D1:B2:1C:CF:EC:4D:F1:AF:3A:A7:93:DE:D2:DD:66:2B:F5:6F Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A7279D9AD40040728D204E282201 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/YGHRshzP7E3xrzqnk97S3WYr9W8.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 91.229.18.0/24 maxlen: 24 91.229.19.0/24 maxlen: 24 93.120.24.0/23 maxlen: 24 109.207.129.0/24 maxlen: 24 192.162.184.0/24 maxlen: 24 192.162.185.0/24 maxlen: 24 193.36.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a7:27:9d:9a:d4:00:40:72:8d:20:4e:28:22:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6061d1b21ccfec4df1af3aa793ded2dd662bf56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:a1:23:45:c0:0d:fe:eb:d7:cc:08:1a:52: 62:42:0d:58:89:f4:f3:3e:9e:e6:8e:9f:33:7c:bc: dc:e1:a2:14:10:f0:00:7d:fe:46:bf:ab:5b:a3:9b: 58:77:38:0f:ce:cb:dd:38:85:9c:28:5b:b3:35:8e: 83:31:a3:74:5f:07:b0:04:b6:29:90:fa:25:58:c9: b7:58:88:12:fc:f0:8f:86:91:e8:42:46:46:4e:97: 36:d7:a2:b6:6c:68:21:81:e4:29:b2:5f:f7:ff:10: 3a:98:d7:f8:a7:27:8a:03:c8:d6:f0:f2:ba:75:9c: 62:3c:d6:49:c7:9b:97:44:6d:c7:0d:c3:46:7f:fa: 03:72:da:34:4d:50:b6:3b:56:21:9a:e4:31:77:98: ab:0a:3b:1d:21:db:18:32:45:e8:a0:2f:9e:82:9a: 1e:8a:bd:91:f6:c4:b7:8f:4c:af:6a:87:ac:04:c7: 44:2e:dd:12:71:6d:98:90:22:8d:52:b1:50:3a:a6: 02:27:1a:e2:6c:ab:e3:d3:65:01:1a:81:9d:5f:94: 22:3e:71:03:68:95:65:f9:0f:91:2d:4d:ae:7f:e6: 83:28:cf:b2:03:8a:27:e7:a9:8f:3a:bc:91:69:ac: 1c:5f:f6:17:e1:45:0a:cf:61:56:e5:f1:bb:fa:e8: ac:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:61:D1:B2:1C:CF:EC:4D:F1:AF:3A:A7:93:DE:D2:DD:66:2B:F5:6F X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/YGHRshzP7E3xrzqnk97S3WYr9W8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.18.0/23 93.120.24.0/23 109.207.129.0/24 192.162.184.0/23 193.36.203.0/24 Signature Algorithm: sha256WithRSAEncryption 24:24:ff:ea:26:03:aa:5c:d0:1c:94:0f:9f:00:be:ba:e4:94: ff:ef:27:a9:25:ba:94:fb:44:d5:72:18:b5:60:cd:6a:14:3c: db:9b:a0:9c:94:5f:56:a3:d1:84:78:d0:39:39:16:e6:54:4b: 70:29:a9:cf:95:cb:66:cf:fd:07:81:66:17:8b:fe:f4:c1:9c: b7:bc:ae:08:43:cc:cb:69:19:ea:36:75:9c:67:33:b7:27:75: 77:a5:46:8a:01:bc:48:68:94:f7:57:01:fb:54:19:7c:6e:a0: 48:2e:f1:0f:c3:34:9c:e9:23:2f:db:aa:78:66:52:1c:ea:42: e8:a9:5c:2e:bc:0f:33:1f:2a:8c:dd:88:31:75:78:3e:9f:fc: cd:38:9f:f8:c4:0d:d6:cc:9d:5e:c7:e0:a3:b9:f1:bf:a6:71: e9:00:92:1f:d6:30:01:2b:7f:a0:e4:67:d3:15:cd:3b:7d:19: ed:da:25:53:7f:69:29:45:a0:b8:6d:2a:8f:83:3c:b8:2b:b8: a8:b3:8b:aa:91:b8:18:53:62:f5:37:27:57:a7:f0:dd:0e:d2: 4d:98:ae:a8:f9:6a:4c:9b:fd:12:45:be:1c:b9:48:35:96:c3: 42:c0:43:68:a4:10:94:bd:55:03:c8:9e:c5:e4:fe:ad:62:96: 73:03:f0:10 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+N6cnnZrUAEByjSBOKCIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDYxZDFiMjFjY2ZlYzRkZjFhZjNhYTc5M2RlZDJkZDY2MmJmNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszuhI0XADf7r18wIGlJiQg1YifTz Pp7mjp8zfLzc4aIUEPAAff5Gv6tbo5tYdzgPzsvdOIWcKFuzNY6DMaN0XwewBLYp kPolWMm3WIgS/PCPhpHoQkZGTpc216K2bGghgeQpsl/3/xA6mNf4pyeKA8jW8PK6 dZxiPNZJx5uXRG3HDcNGf/oDcto0TVC2O1YhmuQxd5irCjsdIdsYMkXooC+egpoe ir2R9sS3j0yvaoesBMdELt0ScW2YkCKNUrFQOqYCJxribKvj02UBGoGdX5QiPnED aJVl+Q+RLU2uf+aDKM+yA4on56mPOryRaawcX/YX4UUKz2FW5fG7+uisOQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGBh0bIcz+xN8a86p5Pe0t1mK/VvMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvWUdIUnNoelA3RTN4cnpxbms5N1MzV1lyOVc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBW+USAwQB XXgYAwQAbc+BAwQBwKK4AwQAwSTLMA0GCSqGSIb3DQEBCwUAA4IBAQAkJP/qJgOq XNAclA+fAL665JT/7yepJbqU+0TVchi1YM1qFDzbm6CclF9Wo9GEeNA5ORbmVEtw KanPlctmz/0HgWYXi/70wZy3vK4IQ8zLaRnqNnWcZzO3J3V3pUaKAbxIaJT3VwH7 VBl8bqBILvEPwzSc6SMv26p4ZlIc6kLoqVwuvA8zHyqM3YgxdXg+n/zNOJ/4xA3W zJ1ex+CjufG/pnHpAJIf1jABK3+g5GfTFc07fRnt2iVTf2kpRaC4bSqPgzy4K7io s4uqkbgYU2L1NydXp/DdDtJNmK6o+WpMm/0SRb4cuUg1lsNCwENopBCUvVUDyJ7F 5P6tYpZzA/AQ -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:04 2026 by rpki-client