This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ygJihJoEFTH2yDRR0Sl-jcxqC0Q.roa File: ygJihJoEFTH2yDRR0Sl-jcxqC0Q.roa (raw, json) Hash identifier: 8ZQ1qiEiuvsIkgBswJAnf3eGUcB29l0qukHGlnRR4w8= Subject key identifier: CA:02:62:84:9A:04:15:31:F6:C8:34:51:D1:29:7E:8D:CC:6A:0B:44 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E379F8CF633B7DDF5F51C55FFCBB2AD Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ygJihJoEFTH2yDRR0Sl-jcxqC0Q.roa Signing time: Fri 02 Jan 2026 10:18:53 +0000 ROA not before: Fri 02 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199967 IP address blocks: 91.246.192.0/24 maxlen: 24 91.246.193.0/24 maxlen: 24 91.246.194.0/24 maxlen: 24 91.246.195.0/24 maxlen: 24 176.113.180.0/24 maxlen: 24 176.113.181.0/24 maxlen: 24 176.113.182.0/24 maxlen: 24 176.113.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9f:8c:f6:33:b7:dd:f5:f5:1c:55:ff:cb:b2:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca0262849a041531f6c83451d1297e8dcc6a0b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:2c:f4:9a:88:eb:37:b7:3a:02:6c:29:81: ba:39:25:2d:05:77:b8:9e:f1:67:3d:97:2a:27:cb: 61:94:3b:91:51:82:0f:45:fb:70:b8:7e:97:ce:5f: 20:8c:9f:ef:05:e1:42:75:86:2f:f1:0d:ed:9a:bc: 6c:e4:13:93:e4:78:a9:c9:a9:11:f9:81:d1:4f:11: 73:21:83:23:71:7d:aa:2c:39:b6:1d:93:83:25:64: 6d:ca:2a:0f:d9:10:e0:d4:d6:ff:b4:ad:fd:77:4a: f8:7e:ee:71:30:d5:29:ea:d7:48:c4:8c:38:43:77: b6:9a:51:a7:1f:bd:77:38:a8:23:78:d2:38:0e:74: 69:f0:f2:57:60:fe:b0:a1:ba:de:23:50:31:56:c9: 3b:e4:d4:ab:2e:5a:44:a8:ac:7f:5f:55:6f:f2:98: e8:85:55:b7:b0:87:fe:20:d3:1b:dc:ee:2e:09:14: 75:ef:c9:48:7f:a0:65:8b:69:8c:10:f5:03:cb:99: d1:3d:36:14:1e:14:1c:cc:db:a9:15:bb:45:3b:78: a6:9d:a8:a3:dd:03:e6:6a:af:29:1b:6e:8e:41:7a: 44:7a:48:69:32:88:b2:5a:ce:a0:45:62:e8:a1:2c: 9a:26:fd:65:3d:3a:e5:30:c3:b4:5d:e5:02:c5:57: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:02:62:84:9A:04:15:31:F6:C8:34:51:D1:29:7E:8D:CC:6A:0B:44 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ygJihJoEFTH2yDRR0Sl-jcxqC0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.192.0/22 176.113.180.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:60:d8:15:08:7c:dd:1e:d5:60:2c:ca:01:72:a0:e5:a3:61: da:8d:74:70:75:ab:d2:ff:3b:e7:8f:a6:a8:bd:a2:87:c6:f6: b1:a2:50:c5:56:0b:38:f3:87:c3:4e:a2:06:cd:30:cc:a6:2b: 96:0b:c5:bd:59:7d:0e:11:69:9c:29:d8:54:35:f7:6e:9c:cb: 2f:37:58:d6:e1:96:ef:80:ac:61:aa:6c:a5:81:9c:05:1a:9c: 6e:ac:65:09:4b:11:2b:8e:66:85:ab:c0:15:63:7f:3a:c8:88: 39:33:d7:9e:6e:cc:5a:5b:2a:22:9e:20:64:7f:fb:55:12:1b: dd:98:c5:0d:b3:ce:96:56:87:00:57:18:05:f8:a0:df:33:7a: 34:b6:a0:3a:26:1d:53:4f:1c:ec:80:1b:55:63:33:09:82:c6: ef:92:86:3f:59:cc:ff:e4:c4:d1:5e:a4:3a:56:9c:83:b5:b8: 49:5a:63:84:25:a9:6d:93:8a:84:2d:08:f5:af:9a:61:50:d8: 3e:5d:51:62:55:15:2e:e2:6a:17:2a:66:0d:d7:01:9c:81:0d: dd:54:ba:ba:85:84:f8:72:74:db:a1:00:c1:de:6f:3d:bf:52: 88:b0:a1:3b:c3:e9:a0:7f:53:11:c1:ca:bc:e3:b0:87:f4:cf: d6:ee:f1:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N5+M9jO33fX1HFX/y7KtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTAyNjI4NDlhMDQxNTMxZjZjODM0NTFkMTI5N2U4ZGNjNmEwYjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEss9JqI6ze3OgJsKYG6OSUtBXe4 nvFnPZcqJ8thlDuRUYIPRftwuH6Xzl8gjJ/vBeFCdYYv8Q3tmrxs5BOT5HipyakR +YHRTxFzIYMjcX2qLDm2HZODJWRtyioP2RDg1Nb/tK39d0r4fu5xMNUp6tdIxIw4 Q3e2mlGnH713OKgjeNI4DnRp8PJXYP6wobreI1AxVsk75NSrLlpEqKx/X1Vv8pjo hVW3sIf+INMb3O4uCRR178lIf6Bli2mMEPUDy5nRPTYUHhQczNupFbtFO3imnaij 3QPmaq8pG26OQXpEekhpMoiyWs6gRWLooSyaJv1lPTrlMMO0XeUCxVfWhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMoCYoSaBBUx9sg0UdEpfo3MagtEMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEveWdKaWhKb0VGVEgyeURSUjBTbC1qY3hxQzBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW/bAAwQC sHG0MA0GCSqGSIb3DQEBCwUAA4IBAQBtYNgVCHzdHtVgLMoBcqDlo2HajXRwdavS /zvnj6aovaKHxvaxolDFVgs484fDTqIGzTDMpiuWC8W9WX0OEWmcKdhUNfdunMsv N1jW4ZbvgKxhqmylgZwFGpxurGUJSxErjmaFq8AVY386yIg5M9eebsxaWyoiniBk f/tVEhvdmMUNs86WVocAVxgF+KDfM3o0tqA6Jh1TTxzsgBtVYzMJgsbvkoY/Wcz/ 5MTRXqQ6VpyDtbhJWmOEJaltk4qELQj1r5phUNg+XVFiVRUu4moXKmYN1wGcgQ3d VLq6hYT4cnTboQDB3m89v1KIsKE7w+mgf1MRwcq847CH9M/W7vG9 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:21 2026 by rpki-client