This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa File: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (raw, json) Hash identifier: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8= Subject key identifier: 63:EA:49:D3:3B:79:C4:5C:2C:7C:0A:4C:E7:30:FF:9A:C4:DA:22:A4 Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09 Certificate serial: 019B7910DE19711BE27F474F5530E7F21D7B Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200478 IP address blocks: 93.114.168.0/24 maxlen: 24 141.226.124.0/24 maxlen: 24 141.226.127.0/24 maxlen: 24 141.226.224.0/23 maxlen: 24 141.226.224.0/24 maxlen: 24 141.226.225.0/24 maxlen: 24 141.226.226.0/24 maxlen: 24 141.226.227.0/24 maxlen: 24 141.226.228.0/24 maxlen: 24 141.226.229.0/24 maxlen: 24 141.226.230.0/24 maxlen: 24 141.226.231.0/24 maxlen: 24 185.106.32.0/22 maxlen: 24 185.106.32.0/24 maxlen: 24 185.106.33.0/24 maxlen: 24 185.106.34.0/24 maxlen: 24 185.106.35.0/24 maxlen: 24 2a06:3b80:30::/48 maxlen: 48 2a06:3b80:110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 19:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:de:19:71:1b:e2:7f:47:4f:55:30:e7:f2:1d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09 Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63ea49d33b79c45c2c7c0a4ce730ff9ac4da22a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:dd:1a:d2:55:aa:ef:76:d2:0f:0e:38:dd: 17:b0:a7:80:96:e8:60:29:60:38:fb:73:9b:35:4a: 18:ca:3d:e5:a1:f6:ae:6d:5b:5a:a1:24:aa:1b:06: 98:9d:af:f4:d9:19:cd:51:e1:42:66:a8:d5:ff:a4: 62:bb:33:e4:72:d5:c0:06:a0:6d:72:79:fa:3d:ab: 4b:47:53:e5:67:d1:ac:0c:9f:57:f6:12:3f:98:63: 28:ef:35:2b:a2:b5:a5:26:9c:8a:d5:cc:33:80:2f: e4:cb:a0:17:3d:43:ee:2f:cf:da:f8:06:0b:dd:2f: 1b:63:41:15:ee:a5:9b:f7:36:72:3f:6c:b6:9b:00: ac:5b:09:f2:74:6e:44:07:92:85:2c:7d:b8:55:fe: 44:68:64:47:30:fc:d8:98:98:48:ac:59:dc:34:ed: 85:f9:09:fd:e7:30:f5:76:a4:53:33:66:d8:cf:fe: 99:a4:55:2d:4a:3a:b4:f2:86:b0:2b:37:6f:80:0d: 5e:63:bd:d7:32:fe:0e:5a:5e:e4:70:e3:62:79:d3: 37:62:22:2d:5f:f8:d3:25:da:7c:b3:d4:21:83:58: 03:24:27:29:8d:e1:fe:df:ac:d6:26:79:9f:3c:7a: 5b:ae:d6:d3:e9:9a:60:93:c5:be:dc:d2:97:ed:a4: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EA:49:D3:3B:79:C4:5C:2C:7C:0A:4C:E7:30:FF:9A:C4:DA:22:A4 X509v3 Authority Key Identifier: keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.114.168.0/24 141.226.124.0/24 141.226.127.0/24 141.226.224.0/21 185.106.32.0/22 IPv6: 2a06:3b80:30::/48 2a06:3b80:110::/48 Signature Algorithm: sha256WithRSAEncryption b6:83:4e:09:46:60:11:6d:31:7e:cb:fe:7c:5a:bb:67:36:76: b5:96:9e:86:06:d9:cc:aa:4e:52:c2:e5:3a:57:ae:4f:a7:9b: 04:6d:2d:a5:17:01:5d:a2:4e:5c:f2:83:e6:31:69:4c:f2:7d: 7b:ca:33:29:78:4a:a0:1e:ec:c0:d1:2c:3b:c3:72:c6:5e:46: d7:52:66:09:87:47:fe:34:79:6b:37:47:58:6a:a4:d6:70:01: c6:e6:3b:53:08:0e:d8:29:12:8f:b0:1d:d6:1e:36:3f:3a:8b: 42:0f:90:c1:dd:c9:20:ee:f4:b1:e1:5c:12:11:85:a8:9d:02: 91:22:1c:ba:6c:43:06:ed:95:c7:62:86:33:bb:79:64:0a:3e: 44:8b:3b:52:8e:3e:bb:af:25:9c:61:f3:9f:95:e9:f9:22:5c: 64:b0:5a:0e:8a:68:55:c9:75:f8:9c:af:77:1e:97:82:18:cf: 4f:4d:7f:4c:cd:12:c4:5f:94:6d:0d:fb:08:d7:e4:46:e1:42: 44:2a:24:a9:60:54:0c:12:f9:d6:d3:33:6e:29:36:cb:84:00: b3:93:ff:35:c2:22:eb:18:d0:95:56:7d:88:d1:c3:10:55:66: d1:c4:cc:b3:f5:77:55:5c:f9:6d:66:4b:75:a3:ff:bb:a0:11: 00:70:b0:1e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt5EN4ZcRvif0dPVTDn8h17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjc0Y2Q4NDY0OTMxMzhmNTIyYzU3YzAwNjViNWM2MDUx MmRkMDkwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2VhNDlkMzNiNzljNDVjMmM3YzBhNGNlNzMwZmY5YWM0ZGEyMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE/dGtJVqu920g8OON0XsKeAluhg KWA4+3ObNUoYyj3lofaubVtaoSSqGwaYna/02RnNUeFCZqjV/6RiuzPkctXABqBt cnn6PatLR1PlZ9GsDJ9X9hI/mGMo7zUrorWlJpyK1cwzgC/ky6AXPUPuL8/a+AYL 3S8bY0EV7qWb9zZyP2y2mwCsWwnydG5EB5KFLH24Vf5EaGRHMPzYmJhIrFncNO2F +Qn95zD1dqRTM2bYz/6ZpFUtSjq08oawKzdvgA1eY73XMv4OWl7kcONiedM3YiIt X/jTJdp8s9Qhg1gDJCcpjeH+36zWJnmfPHpbrtbT6Zpgk8W+3NKX7aQijwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFGPqSdM7ecRcLHwKTOcw/5rE2iKkMB8GA1UdIwQY MBaAFMv3TNhGSTE49SLFfABltcYFEt0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2Yt OTgyZDFmMjFhMzJiLzEvWS1wSjB6dDV4RndzZkFwTTV6RF9tc1RhSXFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2YtOTgyZDFmMjFhMzJi LzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQAXXKoAwQA jeJ8AwQAjeJ/AwQDjeLgAwQCuWogMBgEAgACMBIDBwAqBjuAADADBwAqBjuAARAw DQYJKoZIhvcNAQELBQADggEBALaDTglGYBFtMX7L/nxau2c2drWWnoYG2cyqTlLC 5TpXrk+nmwRtLaUXAV2iTlzyg+YxaUzyfXvKMyl4SqAe7MDRLDvDcsZeRtdSZgmH R/40eWs3R1hqpNZwAcbmO1MIDtgpEo+wHdYeNj86i0IPkMHdySDu9LHhXBIRhaid ApEiHLpsQwbtlcdihjO7eWQKPkSLO1KOPruvJZxh85+V6fkiXGSwWg6KaFXJdfic r3cel4IYz09Nf0zNEsRflG0N+wjX5EbhQkQqJKlgVAwS+dbTM24pNsuEALOT/zXC IusY0JVWfYjRwxBVZtHEzLP1d1Vc+W1mS3Wj/7ugEQBwsB4= -----END CERTIFICATE-----Generated at Sun Jan 11 02:59:07 2026 by rpki-client