This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa File: ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa (raw, json) Hash identifier: mYTcv7dGzDKbqrjt808JcooFhDSFlGdRfp8YaG3pmNY= Subject key identifier: CA:00:3E:C0:6F:6D:8D:16:C9:16:E2:E7:A2:1B:8D:C9:73:23:7E:04 Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1 Certificate serial: 019B78A32405473A4E7BAE90E69F8FC246D1 Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21100 IP address blocks: 93.187.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:24:05:47:3a:4e:7b:ae:90:e6:9f:8f:c2:46:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca003ec06f6d8d16c916e2e7a21b8dc973237e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:e6:ef:ef:4c:71:c2:9a:f0:07:86:d3:60: 6e:c2:72:d5:67:71:20:1e:9c:41:6c:5e:cf:43:cb: 32:98:81:d0:7f:93:df:27:99:04:67:90:cd:c7:42: 51:8b:79:02:a8:e7:3e:ab:eb:82:08:77:b9:1f:62: ae:db:6a:3f:0e:66:14:15:63:2a:be:d8:78:bf:85: f6:8e:73:50:10:ed:66:4a:ff:df:ef:27:9c:71:40: eb:50:1c:54:5e:d6:51:4f:fa:ed:df:b6:b1:29:c0: 9c:10:16:fa:f3:fa:3c:61:3b:b6:db:49:de:2d:f1: ab:ab:07:f4:89:0b:0d:16:3c:9b:ec:5d:3d:dd:18: 1c:ea:24:21:f9:0f:93:f4:c7:63:75:4f:b9:14:10: c6:04:72:24:bf:24:1e:6e:a8:7c:6f:20:5c:1b:7d: f7:7c:29:a1:d6:f9:31:db:f2:0a:26:a5:1c:46:1c: 57:e9:4d:f5:c9:22:79:68:21:42:88:ae:c8:f4:66: 42:e7:e9:cf:70:ba:13:7a:34:d0:e9:78:7d:12:3a: a3:ce:1f:a8:18:ff:5f:ca:59:35:9f:2b:13:39:3a: ed:11:c7:c1:2f:fb:90:ea:06:83:53:28:3b:14:3f: a0:c7:b9:d7:a2:e6:76:5c:2b:1b:e1:f8:3c:73:25: 4f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:00:3E:C0:6F:6D:8D:16:C9:16:E2:E7:A2:1B:8D:C9:73:23:7E:04 X509v3 Authority Key Identifier: keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.64.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:23:c0:64:d2:63:3e:3f:30:15:ab:7e:7f:62:dc:76:d2:1a: 6e:ae:b7:62:f1:25:ea:1a:aa:f9:29:99:78:0e:d7:97:21:fd: 6c:97:c3:b9:ed:0f:2b:68:c7:f1:eb:86:ff:b8:9a:2a:7f:ba: 53:de:db:f3:6e:b6:0a:64:79:49:40:b5:b2:2a:0c:39:52:83: b4:d1:fc:14:a6:fc:a4:a0:f9:4f:51:b5:14:98:3c:3a:d5:93: 08:3a:9b:57:b4:df:ef:52:0e:cd:f0:ec:49:cf:a3:38:c1:83: 72:bd:16:6b:2a:4f:ee:12:10:04:c5:5d:3c:00:3b:64:35:a3: 1e:e6:96:e4:13:85:38:90:e6:9b:ce:a5:22:7f:fc:44:c5:2a: a6:1e:dc:f1:f3:08:aa:22:45:84:d6:a8:62:63:a6:ab:8b:35: cf:31:f3:eb:93:c7:cf:4a:9a:cf:2f:db:9a:d9:e2:28:9b:83: 7f:0c:0b:5a:c9:a6:b2:61:76:24:d2:22:e2:b8:ff:06:a3:59: 39:3e:08:ce:64:fb:d4:2b:d4:04:43:fb:77:b6:1c:13:b0:09: 6f:d1:23:21:6a:bc:b0:7c:c2:fb:23:f1:6e:ca:1a:f0:37:c8: 88:92:03:44:36:af:06:aa:04:34:d3:64:b8:39:8c:f1:7c:3f: a7:08:af:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyQFRzpOe66Q5p+PwkbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YmJkYjJkOTgwYWMwYTgyN2MwY2M2ZWQwZjkwNjc0OWNi MmNlYTEwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTAwM2VjMDZmNmQ4ZDE2YzkxNmUyZTdhMjFiOGRjOTczMjM3ZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kzm7+9MccKa8AeG02BuwnLVZ3Eg HpxBbF7PQ8symIHQf5PfJ5kEZ5DNx0JRi3kCqOc+q+uCCHe5H2Ku22o/DmYUFWMq vth4v4X2jnNQEO1mSv/f7yeccUDrUBxUXtZRT/rt37axKcCcEBb68/o8YTu220ne LfGrqwf0iQsNFjyb7F093Rgc6iQh+Q+T9MdjdU+5FBDGBHIkvyQebqh8byBcG333 fCmh1vkx2/IKJqUcRhxX6U31ySJ5aCFCiK7I9GZC5+nPcLoTejTQ6Xh9Ejqjzh+o GP9fylk1nysTOTrtEcfBL/uQ6gaDUyg7FD+gx7nXouZ2XCsb4fg8cyVPbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMoAPsBvbY0WyRbi56IbjclzI34EMB8GA1UdIwQY MBaAFFS72y2YCsCoJ8DMbtD5BnScss6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQt ZjM4NTU5YmU4MGU5LzEveWdBLXdHOXRqUmJKRnVMbm9odU55WE1qZmdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQtZjM4NTU5YmU4MGU5 LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbtAMA0G CSqGSIb3DQEBCwUAA4IBAQB8I8Bk0mM+PzAVq35/Ytx20hpurrdi8SXqGqr5KZl4 DteXIf1sl8O57Q8raMfx64b/uJoqf7pT3tvzbrYKZHlJQLWyKgw5UoO00fwUpvyk oPlPUbUUmDw61ZMIOptXtN/vUg7N8OxJz6M4wYNyvRZrKk/uEhAExV08ADtkNaMe 5pbkE4U4kOabzqUif/xExSqmHtzx8wiqIkWE1qhiY6arizXPMfPrk8fPSprPL9ua 2eIom4N/DAtayaayYXYk0iLiuP8Go1k5PgjOZPvUK9QEQ/t3thwTsAlv0SMharyw fML7I/FuyhrwN8iIkgNENq8GqgQ002S4OYzxfD+nCK+f -----END CERTIFICATE-----Generated at Mon Jan 26 13:28:35 2026 by rpki-client