This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/yb6eeUKKTu5xnfipewiooSY4ygA.roa File: yb6eeUKKTu5xnfipewiooSY4ygA.roa (raw, json) Hash identifier: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw= Subject key identifier: C9:BE:9E:79:42:8A:4E:EE:71:9D:F8:A9:7B:08:A8:A1:26:38:CA:00 Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Certificate serial: 019B7DCAAEC564EA589133B020B2429E2446 Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/yb6eeUKKTu5xnfipewiooSY4ygA.roa Signing time: Fri 02 Jan 2026 08:19:53 +0000 ROA not before: Fri 02 Jan 2026 08:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25455 IP address blocks: 31.210.169.0/24 maxlen: 24 83.143.68.0/22 maxlen: 22 91.90.200.0/21 maxlen: 21 92.43.164.0/23 maxlen: 23 94.232.30.0/24 maxlen: 24 185.79.40.0/22 maxlen: 22 2a05:7140::/32 maxlen: 32 2a05:7141::/32 maxlen: 32 2a05:7142::/31 maxlen: 31 2a05:7144::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ae:c5:64:ea:58:91:33:b0:20:b2:42:9e:24:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Validity Not Before: Jan 2 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9be9e79428a4eee719df8a97b08a8a12638ca00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:64:5c:bb:e5:1e:32:a7:bb:4c:c9:e8:6b:f2: 79:1b:69:e9:c2:80:eb:ab:db:2f:6c:dc:b5:b4:a4: 86:ad:2b:6a:89:b6:0e:89:d4:4f:7d:a1:93:ae:2f: cb:5c:5f:90:48:19:4d:a4:7e:51:55:ea:ea:9c:f7: ea:19:da:d0:7f:fa:46:26:00:bd:cc:e5:da:6b:8e: 15:bc:84:70:6a:6d:49:58:67:df:bc:0a:6f:79:6a: bc:c1:c0:bf:3c:c1:01:18:b8:ce:2d:e2:5d:53:7e: be:c8:a5:d6:38:91:44:fa:cf:b7:32:78:4b:7f:f5: e3:36:3c:84:89:4a:9c:3e:39:e3:a0:f2:83:71:49: f2:b1:35:7d:46:9f:a6:08:cb:87:ba:0a:41:ad:ca: a3:ea:c8:3a:56:ef:ea:ca:24:ae:cb:01:09:86:9f: a3:e1:17:1e:5b:cf:14:bb:86:8b:f0:f1:9b:3a:9c: 37:ce:75:6e:25:eb:aa:84:44:ba:cb:3c:eb:51:44: 74:b9:fd:99:be:b1:ad:1c:74:cc:63:f4:b2:e1:b4: 01:2f:e2:9b:ae:ad:c0:03:94:b5:f1:1a:90:01:9a: 51:c2:92:6f:fe:c6:d7:2f:e8:b0:fd:39:58:67:f0: f9:09:02:29:2d:8a:32:61:d2:20:37:0e:95:f2:bd: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BE:9E:79:42:8A:4E:EE:71:9D:F8:A9:7B:08:A8:A1:26:38:CA:00 X509v3 Authority Key Identifier: keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/yb6eeUKKTu5xnfipewiooSY4ygA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.169.0/24 83.143.68.0/22 91.90.200.0/21 92.43.164.0/23 94.232.30.0/24 185.79.40.0/22 IPv6: 2a05:7140::/29 Signature Algorithm: sha256WithRSAEncryption 2a:de:86:58:71:a7:3d:1e:fa:0c:6e:a0:18:18:dd:cf:4c:8f: 06:76:2f:4d:dd:91:e7:60:ed:1f:b7:28:19:63:6b:f0:9f:d3: 4d:e7:2e:91:93:a2:dd:e6:81:f2:7c:09:93:99:cf:f4:06:8c: 02:1d:ed:af:cb:9a:15:75:86:01:a1:f0:ba:36:ca:97:f3:e2: fb:a2:56:2c:32:20:f8:f6:4f:8c:40:8c:62:ee:b5:a4:26:f7: 91:70:1f:7c:3d:93:aa:9e:a9:af:34:f9:c3:f0:46:12:25:c6: 9b:40:85:da:d2:81:bd:e2:e1:fe:42:da:4b:0f:1f:44:c7:46: 4b:38:9c:26:1c:3b:81:81:4e:82:99:49:71:94:e8:fd:ad:a1: f9:64:10:ec:65:2d:3c:d0:61:11:cc:7a:05:b4:b1:6f:b4:0e: 56:9d:f7:5c:83:96:32:49:ec:c3:a7:3e:bd:53:9f:ed:ff:32: 86:1c:e3:eb:d7:a3:a1:1d:41:bc:7b:fe:96:31:85:71:0e:6f: c0:56:a3:81:90:ae:6d:ca:d0:9a:6c:8f:32:3c:02:73:bc:d1: 79:5c:39:e6:76:88:3a:2d:21:0c:20:33:72:fb:2b:dd:ac:e3: ff:85:3f:f2:a9:66:42:e1:26:06:1a:a8:77:bd:84:fb:eb:0a: 4a:05:9f:5b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt9yq7FZOpYkTOwILJCniRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz MThmODYwHhcNMjYwMTAyMDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWJlOWU3OTQyOGE0ZWVlNzE5ZGY4YTk3YjA4YThhMTI2MzhjYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WRcu+UeMqe7TMnoa/J5G2npwoDr q9svbNy1tKSGrStqibYOidRPfaGTri/LXF+QSBlNpH5RVerqnPfqGdrQf/pGJgC9 zOXaa44VvIRwam1JWGffvApveWq8wcC/PMEBGLjOLeJdU36+yKXWOJFE+s+3MnhL f/XjNjyEiUqcPjnjoPKDcUnysTV9Rp+mCMuHugpBrcqj6sg6Vu/qyiSuywEJhp+j 4RceW88Uu4aL8PGbOpw3znVuJeuqhES6yzzrUUR0uf2ZvrGtHHTMY/Sy4bQBL+Kb rq3AA5S18RqQAZpRwpJv/sbXL+iw/TlYZ/D5CQIpLYoyYdIgNw6V8r15wQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFMm+nnlCik7ucZ34qXsIqKEmOMoAMB8GA1UdIwQY MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt Yjc4ZGFjMzdlYWM4LzEveWI2ZWVVS0tUdTV4bmZpcGV3aW9vU1k0eWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4 LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAH9KpAwQC U49EAwQDW1rIAwQBXCukAwQAXugeAwQCuU8oMA0EAgACMAcDBQMqBXFAMA0GCSqG SIb3DQEBCwUAA4IBAQAq3oZYcac9HvoMbqAYGN3PTI8Gdi9N3ZHnYO0ftygZY2vw n9NN5y6Rk6Ld5oHyfAmTmc/0BowCHe2vy5oVdYYBofC6NsqX8+L7olYsMiD49k+M QIxi7rWkJveRcB98PZOqnqmvNPnD8EYSJcabQIXa0oG94uH+QtpLDx9Ex0ZLOJwm HDuBgU6CmUlxlOj9raH5ZBDsZS080GERzHoFtLFvtA5Wnfdcg5YySezDpz69U5/t /zKGHOPr16OhHUG8e/6WMYVxDm/AVqOBkK5tytCabI8yPAJzvNF5XDnmdog6LSEM IDNy+yvdrOP/hT/yqWZC4SYGGqh3vYT76wpKBZ9b -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:03 2026 by rpki-client