This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/yPfyngOSudI1ySWIfQxdWtyiNIs.roa File: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (raw, json) Hash identifier: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc= Subject key identifier: C8:F7:F2:9E:03:92:B9:D2:35:C9:25:88:7D:0C:5D:5A:DC:A2:34:8B Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d Certificate serial: 019B7758CCC5A59191CFBF441314C7236B7C Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/yPfyngOSudI1ySWIfQxdWtyiNIs.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25176 IP address blocks: 92.39.0.0/20 maxlen: 20 95.140.64.0/20 maxlen: 20 193.254.4.0/22 maxlen: 22 194.69.6.0/23 maxlen: 23 194.69.8.0/21 maxlen: 21 194.153.32.0/19 maxlen: 19 194.153.64.0/21 maxlen: 21 2a00:1718::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cc:c5:a5:91:91:cf:bf:44:13:14:c7:23:6b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5947a414a8830515656d738a78382890160377d Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8f7f29e0392b9d235c925887d0c5d5adca2348b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:a2:83:b5:3d:a0:22:45:3f:a9:e4:e0:9b: 7f:b1:9b:db:93:76:3e:0b:3c:b0:94:6b:51:07:71: 9a:6e:92:1d:8f:e3:bd:41:27:99:1e:46:d4:a8:da: df:2b:d4:98:83:3f:01:de:b7:5c:38:9a:be:f8:7a: 99:e7:ec:9a:c3:54:63:9c:16:2e:d9:3d:ed:66:05: e0:2e:c9:cc:68:bc:c9:a8:ed:f0:55:86:ef:15:33: ae:a4:49:2d:5b:e5:d9:b7:71:96:a3:0f:fe:29:ce: 4c:2d:37:41:c3:69:8f:48:91:46:56:c8:4f:c1:2b: 77:47:41:7e:29:03:2f:ab:7d:54:6a:ab:3d:d6:4f: d4:4d:36:a1:e5:7a:39:97:48:15:83:f5:38:5a:e6: 19:f2:b0:ca:93:8e:98:54:88:2a:78:30:9b:90:e9: b8:99:1d:5e:91:ae:c5:a7:b4:e4:b8:61:a2:7d:49: 3e:76:42:6b:d8:60:94:43:14:ff:3a:59:9a:27:5b: 57:f4:37:74:67:bc:f7:96:b8:d8:6b:4f:7c:f9:c9: 27:d7:ce:b7:08:4f:fc:e7:0c:3e:6d:35:34:54:ed: 15:9d:5c:d3:66:86:1c:6b:17:67:74:c0:59:33:1c: f1:4f:0a:37:9c:5c:30:6f:5f:46:be:74:61:a0:df: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F7:F2:9E:03:92:B9:D2:35:C9:25:88:7D:0C:5D:5A:DC:A2:34:8B X509v3 Authority Key Identifier: keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/yPfyngOSudI1ySWIfQxdWtyiNIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.39.0.0/20 95.140.64.0/20 193.254.4.0/22 194.69.6.0-194.69.15.255 194.153.32.0-194.153.71.255 IPv6: 2a00:1718::/32 Signature Algorithm: sha256WithRSAEncryption 04:be:28:e8:c6:ed:36:5d:67:74:3e:89:f2:2b:6a:38:b1:3b: 5e:ec:53:20:c7:62:68:e1:cb:8d:9e:7f:e9:55:be:bd:2c:fd: b2:dd:6e:56:11:d3:41:08:f8:9a:58:a8:e5:67:a4:a9:ec:16: 4e:ff:82:9d:b7:fd:66:f9:25:f4:93:ec:6a:c6:ce:1b:64:3b: b9:99:61:88:d4:43:e1:0a:a0:a7:ef:16:ac:3b:fc:8b:6e:78: 43:15:45:0b:db:4a:27:23:d4:e0:e2:94:2e:4c:ad:cf:23:ba: 9b:c6:64:2d:22:7b:76:1a:a9:dc:9a:3a:1f:bb:c2:ee:cf:13: f5:cc:61:ab:5b:c6:6f:57:8c:99:4f:8f:5b:d1:a6:50:77:2b: a1:a0:99:e7:98:97:8b:ab:57:c7:cf:df:bc:5f:2d:93:3a:32: 90:d8:2d:42:79:a3:56:ab:3a:46:dc:3d:9b:99:2d:82:04:df: 00:69:41:eb:f7:0a:17:82:03:74:37:5e:e6:ec:02:3b:60:76: 72:84:88:a9:2c:7d:4b:ff:4b:9d:9a:f9:58:ea:a2:a5:58:3c: 75:28:ed:4b:52:7d:a2:23:86:99:20:ee:06:78:28:9b:13:1e: c5:a6:d2:15:ae:6e:e8:e2:91:43:79:d8:1a:ec:a4:33:4c:3c: 2c:32:34:3a -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt3WMzFpZGRz79EExTHI2t8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTQ3YTQxNGE4ODMwNTE1NjU2ZDczOGE3ODM4Mjg5MDE2 MDM3N2QwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGY3ZjI5ZTAzOTJiOWQyMzVjOTI1ODg3ZDBjNWQ1YWRjYTIzNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFeig7U9oCJFP6nk4Jt/sZvbk3Y+ CzywlGtRB3GabpIdj+O9QSeZHkbUqNrfK9SYgz8B3rdcOJq++HqZ5+yaw1RjnBYu 2T3tZgXgLsnMaLzJqO3wVYbvFTOupEktW+XZt3GWow/+Kc5MLTdBw2mPSJFGVshP wSt3R0F+KQMvq31Uaqs91k/UTTah5Xo5l0gVg/U4WuYZ8rDKk46YVIgqeDCbkOm4 mR1eka7Fp7TkuGGifUk+dkJr2GCUQxT/OlmaJ1tX9Dd0Z7z3lrjYa098+ckn1863 CE/85ww+bTU0VO0VnVzTZoYcaxdndMBZMxzxTwo3nFwwb19GvnRhoN8ryQIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFMj38p4DkrnSNckliH0MXVrcojSLMB8GA1UdIwQY MBaAFMWUekFKiDBRVlbXOKeDgokBYDd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2Yt MGU1NDk0YWY1ODQwLzEveVBmeW5nT1N1ZEkxeVNXSWZReGRXdHlpTklzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2YtMGU1NDk0YWY1ODQw LzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQEXCcAAwQE X4xAAwQCwf4EMAwDBAHCRQYDBATCRQAwDAMEBcKZIAMEA8KZQDANBAIAAjAHAwUA KgAXGDANBgkqhkiG9w0BAQsFAAOCAQEABL4o6MbtNl1ndD6J8itqOLE7XuxTIMdi aOHLjZ5/6VW+vSz9st1uVhHTQQj4mlio5WekqewWTv+Cnbf9Zvkl9JPsasbOG2Q7 uZlhiNRD4Qqgp+8WrDv8i254QxVFC9tKJyPU4OKULkytzyO6m8ZkLSJ7dhqp3Jo6 H7vC7s8T9cxhq1vGb1eMmU+PW9GmUHcroaCZ55iXi6tXx8/fvF8tkzoykNgtQnmj Vqs6Rtw9m5ktggTfAGlB6/cKF4IDdDde5uwCO2B2coSIqSx9S/9LnZr5WOqipVg8 dSjtS1J9oiOGmSDuBngomxMexabSFa5u6OKRQ3nYGuykM0w8LDI0Og== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:23 2026 by rpki-client