This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Yv4C6R_11WUJaACaARyBGzxIQs0.roa File: Yv4C6R_11WUJaACaARyBGzxIQs0.roa (raw, json) Hash identifier: Dhh+Gd/pYBlPGZVHC+BSJU6441dwL/YnNWEUEL1gaK8= Subject key identifier: 62:FE:02:E9:1F:F5:D5:65:09:68:00:9A:01:1C:81:1B:3C:48:42:CD Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019BD2A6B5AA1AABCAFC54D8EEBBD6E11C3A Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Yv4C6R_11WUJaACaARyBGzxIQs0.roa Signing time: Sun 18 Jan 2026 19:48:19 +0000 ROA not before: Sun 18 Jan 2026 19:48:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 77.92.153.0/24 maxlen: 24 188.132.163.0/24 maxlen: 24 188.132.214.0/24 maxlen: 24 188.132.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:a6:b5:aa:1a:ab:ca:fc:54:d8:ee:bb:d6:e1:1c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 18 19:48:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62fe02e91ff5d5650968009a011c811b3c4842cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:67:68:91:75:ff:ff:c1:0f:b3:c7:0b:a5: 10:22:ea:d7:6b:15:f3:81:55:67:5e:aa:44:a2:7b: 97:1c:b6:a1:b2:f3:fa:40:71:6d:4c:8b:37:a7:c0: 13:81:80:60:84:08:de:b9:b3:ce:aa:ad:73:e4:97: 15:f0:8c:6c:a1:71:15:de:4c:9b:8e:91:7e:d5:72: 6d:3f:ae:17:02:15:01:ce:ca:a6:9d:13:7d:e6:15: ac:50:45:42:d2:47:9f:19:c1:28:3b:bb:78:10:3b: d4:fb:10:17:b8:08:7a:bf:25:ff:be:70:62:cd:25: 47:22:ab:5f:02:23:3d:61:41:80:93:fc:55:d4:d4: 81:94:12:c3:63:98:be:34:38:85:50:98:c6:74:c8: 11:15:95:0a:41:a9:14:17:6c:50:e5:a4:6b:97:4b: 7f:57:1f:18:bc:29:e6:78:5d:43:4f:74:e4:aa:0f: 37:3c:fc:1a:72:f7:c9:f9:65:29:54:66:3e:d8:dc: bf:88:37:d5:39:dc:62:ad:53:dc:15:38:0b:32:b2: 98:90:b2:85:07:fc:3f:64:26:36:ec:8e:25:9a:73: 3d:1a:7f:f6:ba:1a:62:2e:0a:c8:0a:7e:ff:3c:27: 3a:a7:a3:09:4f:32:c5:fa:a5:71:80:c7:2b:5b:60: 74:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FE:02:E9:1F:F5:D5:65:09:68:00:9A:01:1C:81:1B:3C:48:42:CD X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Yv4C6R_11WUJaACaARyBGzxIQs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.153.0/24 188.132.163.0/24 188.132.214.0/24 188.132.218.0/24 Signature Algorithm: sha256WithRSAEncryption 40:fc:32:67:da:27:be:38:a0:93:c3:d9:31:86:3c:48:51:5f: 3e:27:86:94:aa:25:84:22:9a:a4:ec:fa:cb:63:b5:c0:f9:b0: e6:29:d5:94:c9:f1:21:de:e8:6b:f4:27:fd:dc:a6:95:d0:c0: 84:1f:a5:ff:82:fd:8f:8a:12:7b:fd:f1:dc:9d:6d:34:a5:27: a6:4c:07:7d:d3:f7:26:de:04:62:83:32:10:44:0a:61:f8:d6: 91:3f:e3:4f:4e:f5:78:9f:65:8f:ee:0f:36:90:c7:bf:fd:57: cf:7d:de:70:5d:a8:d8:88:c3:0f:52:65:c4:a6:9d:99:15:52: dc:1b:39:c4:38:b3:07:92:d8:7d:b1:b9:2a:b5:9d:4f:3c:90: 65:6a:67:e4:84:19:a8:ff:93:5c:62:ef:cf:cc:0d:15:0f:e4: a7:91:d9:91:f5:5f:0a:67:31:38:e4:8e:8d:f0:ef:85:f0:ce: bb:fd:51:e7:30:ac:64:3a:6d:61:04:07:92:90:65:76:74:79: 7f:c2:70:e7:20:37:36:d1:f7:b8:50:3d:d8:69:48:be:99:89: 14:b6:7c:f1:52:e7:13:fa:ed:1b:08:20:a9:49:d2:4d:57:b0: 45:4b:b1:44:8e:38:52:77:7b:b5:c7:2d:05:55:a4:0d:85:83: ff:0a:22:cd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvSprWqGqvK/FTY7rvW4Rw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTE4MTk0ODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmZlMDJlOTFmZjVkNTY1MDk2ODAwOWEwMTFjODExYjNjNDg0MmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mZnaJF1///BD7PHC6UQIurXaxXz gVVnXqpEonuXHLahsvP6QHFtTIs3p8ATgYBghAjeubPOqq1z5JcV8IxsoXEV3kyb jpF+1XJtP64XAhUBzsqmnRN95hWsUEVC0kefGcEoO7t4EDvU+xAXuAh6vyX/vnBi zSVHIqtfAiM9YUGAk/xV1NSBlBLDY5i+NDiFUJjGdMgRFZUKQakUF2xQ5aRrl0t/ Vx8YvCnmeF1DT3Tkqg83PPwacvfJ+WUpVGY+2Ny/iDfVOdxirVPcFTgLMrKYkLKF B/w/ZCY27I4lmnM9Gn/2uhpiLgrICn7/PCc6p6MJTzLF+qVxgMcrW2B0/wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGL+Aukf9dVlCWgAmgEcgRs8SELNMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvWXY0QzZSXzExV1VKYUFDYUFSeUJHenhJUXMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVyZAwQA vISjAwQAvITWAwQAvITaMA0GCSqGSIb3DQEBCwUAA4IBAQBA/DJn2ie+OKCTw9kx hjxIUV8+J4aUqiWEIpqk7PrLY7XA+bDmKdWUyfEh3uhr9Cf93KaV0MCEH6X/gv2P ihJ7/fHcnW00pSemTAd90/cm3gRigzIQRAph+NaRP+NPTvV4n2WP7g82kMe//VfP fd5wXajYiMMPUmXEpp2ZFVLcGznEOLMHkth9sbkqtZ1PPJBlamfkhBmo/5NcYu/P zA0VD+SnkdmR9V8KZzE45I6N8O+F8M67/VHnMKxkOm1hBAeSkGV2dHl/wnDnIDc2 0fe4UD3YaUi+mYkUtnzxUucT+u0bCCCpSdJNV7BFS7FEjjhSd3u1xy0FVaQNhYP/ CiLN -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:54 2026 by rpki-client