This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/yW1FUN1ZCCIEnSX9Cc7LKZkXcQE.roa File: yW1FUN1ZCCIEnSX9Cc7LKZkXcQE.roa (raw, json) Hash identifier: a9E3tGrrOYODytlgh6kPNqxZXo5qrShZbqk3p2Jq5kc= Subject key identifier: C9:6D:45:50:DD:59:08:22:04:9D:25:FD:09:CE:CB:29:99:17:71:01 Certificate issuer: /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Certificate serial: 019B76EAC4269F2A07FCA78ADA5D855931A6 Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/yW1FUN1ZCCIEnSX9Cc7LKZkXcQE.roa Signing time: Thu 01 Jan 2026 00:17:35 +0000 ROA not before: Thu 01 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31317 IP address blocks: 91.198.136.0/24 maxlen: 24 185.170.244.0/22 maxlen: 32 2a0a:b900::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c4:26:9f:2a:07:fc:a7:8a:da:5d:85:59:31:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c96d4550dd590822049d25fd09cecb2999177101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:45:b3:63:85:df:29:e1:63:26:ca:57:29: 16:d6:80:e3:90:0d:ba:24:17:2c:5d:4c:8d:c7:52: 38:0e:34:3f:d9:7c:6a:58:b6:85:17:ce:97:28:1d: 6a:ae:6f:21:28:8f:18:10:b9:6d:14:1e:ba:b6:b8: b5:87:b5:71:33:82:0e:19:e3:84:fa:0d:63:6a:2b: d2:7d:9a:8d:ca:62:26:4f:8e:71:e7:d4:4b:d5:b7: 85:13:d6:c6:08:11:b8:86:31:17:0b:2b:c6:36:28: 92:ab:4a:38:63:90:4a:d6:d8:b4:18:b3:a6:bd:f1: c2:d6:2e:a0:c8:06:40:de:f3:a1:47:c3:97:99:79: c6:34:ec:5c:b6:41:ca:bb:88:89:f4:7d:23:3f:9f: 4f:14:05:47:9c:07:a1:c7:87:79:a6:1b:e5:7e:84: 09:c9:a3:e9:bf:1b:e6:3d:8a:1c:40:a1:6e:ae:67: 13:54:c9:07:68:35:83:18:3b:48:d7:7b:28:85:b3: e4:79:60:71:3f:b8:b3:74:6b:8e:30:56:77:76:23: 71:38:25:62:2d:74:70:b0:db:de:29:20:a6:29:40: 4d:30:64:14:99:5a:d4:10:b0:8b:8b:42:f3:bb:bb: 8a:8d:17:68:50:1f:c1:fb:c3:bd:81:6c:88:49:2e: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6D:45:50:DD:59:08:22:04:9D:25:FD:09:CE:CB:29:99:17:71:01 X509v3 Authority Key Identifier: keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/yW1FUN1ZCCIEnSX9Cc7LKZkXcQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.136.0/24 185.170.244.0/22 IPv6: 2a0a:b900::/29 Signature Algorithm: sha256WithRSAEncryption 5d:7d:2f:7f:4e:63:15:c2:66:f3:a1:06:64:d1:59:65:36:b0: ed:6c:52:40:33:20:15:0a:c3:ff:77:0a:5c:b7:28:5a:c5:0d: dc:70:c0:9a:cb:c5:e9:48:bf:70:71:fa:e9:9a:f9:18:fa:58: 4b:ff:38:ae:d8:4f:1b:c8:fe:d0:ec:5e:eb:76:e1:b0:d0:b6: 9a:d0:90:a0:c5:6c:1c:7f:63:d5:a7:ec:23:ee:d9:8d:8f:4c: 4c:de:37:f3:3c:8a:fb:ac:cc:98:89:f7:08:6d:22:64:0d:b8: 57:54:1a:34:34:72:76:41:27:46:cf:13:14:87:d5:8d:2d:94: d3:2b:75:68:15:67:3e:3b:0a:be:2a:ce:0b:3e:d6:df:7f:03: d5:2c:b1:a3:c1:28:69:67:bb:de:a3:6c:f5:83:70:6d:ab:92: 62:91:63:cb:b1:87:9c:6e:05:b4:09:d4:f3:e7:40:b0:7a:52: 19:51:17:44:48:4b:56:ce:94:93:20:d0:50:41:94:9a:f1:51: 8f:c1:ec:81:a2:88:03:c4:22:67:4d:83:6f:53:5f:0b:84:e7: 7a:5c:f6:f5:3f:68:c2:cc:80:b6:98:38:ad:b6:78:58:aa:0f: 7f:4f:8f:76:40:59:14:90:5d:c6:02:b4:2e:02:a4:35:98:0c: 53:8d:13:1a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26sQmnyoH/KeK2l2FWTGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZThiODhmMWUzMDU3M2EwZTIwZTQ3OWQ1YmEwMGI0ZTkx ODI3YjYwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTZkNDU1MGRkNTkwODIyMDQ5ZDI1ZmQwOWNlY2IyOTk5MTc3MTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfpFs2OF3ynhYybKVykW1oDjkA26 JBcsXUyNx1I4DjQ/2XxqWLaFF86XKB1qrm8hKI8YELltFB66tri1h7VxM4IOGeOE +g1jaivSfZqNymImT45x59RL1beFE9bGCBG4hjEXCyvGNiiSq0o4Y5BK1ti0GLOm vfHC1i6gyAZA3vOhR8OXmXnGNOxctkHKu4iJ9H0jP59PFAVHnAehx4d5phvlfoQJ yaPpvxvmPYocQKFurmcTVMkHaDWDGDtI13sohbPkeWBxP7izdGuOMFZ3diNxOCVi LXRwsNveKSCmKUBNMGQUmVrUELCLi0Lzu7uKjRdoUB/B+8O9gWyISS7eNQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMltRVDdWQgiBJ0l/QnOyymZF3EBMB8GA1UdIwQY MBaAFMHouI8eMFc6DiDkedW6ALTpGCe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQt ZWZmZTk1NWE1ZDY0LzEveVcxRlVOMVpDQ0lFblNYOUNjN0xLWmtYY1FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQtZWZmZTk1NWE1ZDY0 LzEvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW8aIAwQC uar0MA0EAgACMAcDBQMqCrkAMA0GCSqGSIb3DQEBCwUAA4IBAQBdfS9/TmMVwmbz oQZk0VllNrDtbFJAMyAVCsP/dwpctyhaxQ3ccMCay8XpSL9wcfrpmvkY+lhL/ziu 2E8byP7Q7F7rduGw0Laa0JCgxWwcf2PVp+wj7tmNj0xM3jfzPIr7rMyYifcIbSJk DbhXVBo0NHJ2QSdGzxMUh9WNLZTTK3VoFWc+Owq+Ks4LPtbffwPVLLGjwShpZ7ve o2z1g3Btq5JikWPLsYecbgW0CdTz50CwelIZURdESEtWzpSTINBQQZSa8VGPweyB oogDxCJnTYNvU18LhOd6XPb1P2jCzIC2mDittnhYqg9/T492QFkUkF3GArQuAqQ1 mAxTjRMa -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:41 2026 by rpki-client