This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yzrROzL-z9TdzpRQ3DUM4JjpLl8.roa File: yzrROzL-z9TdzpRQ3DUM4JjpLl8.roa (raw, json) Hash identifier: mjjaXKUqiIrmkqt+QD8R7OIkuGsvC5K7+2q6nmTAauc= Subject key identifier: CB:3A:D1:3B:32:FE:CF:D4:DD:CE:94:50:DC:35:0C:E0:98:E9:2E:5F Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D357A2CC6679FB5224B9CD5D83B0 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yzrROzL-z9TdzpRQ3DUM4JjpLl8.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59826 IP address blocks: 93.171.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d3:57:a2:cc:66:79:fb:52:24:b9:cd:5d:83:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb3ad13b32fecfd4ddce9450dc350ce098e92e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ff:1e:80:99:f4:d3:6a:95:cb:60:8e:69:6f: c5:ca:23:8e:a2:15:b5:19:48:08:f6:3e:12:99:a3: e2:97:44:6c:38:70:1b:b2:b0:f4:6f:04:67:ac:96: a4:9b:67:c4:65:1e:7f:6c:c2:48:84:2a:8e:05:57: ba:83:44:10:92:da:11:e6:3d:59:45:52:ed:21:e1: 9c:3f:83:eb:10:38:49:6a:b8:51:c3:7d:7f:97:ba: e0:43:93:97:fa:89:9b:ea:43:41:3b:7d:e3:c1:3f: 23:dc:4f:d2:fa:93:b3:07:98:b4:b0:96:20:27:76: 91:58:e7:2a:80:84:38:c7:f0:2b:ae:f1:00:81:2d: f0:58:f0:58:6e:27:7c:70:d4:5f:51:14:65:5d:1a: 1f:82:d7:31:2d:42:af:bd:47:5e:3f:16:04:24:22: 77:5d:41:cb:0f:23:53:ce:65:18:81:7e:d1:b3:df: 5e:f7:71:70:70:21:50:9e:82:07:23:b1:09:83:80: ca:17:b9:b7:49:1e:06:0f:c6:94:bf:83:f3:5d:5a: e2:93:3d:d9:ec:cb:5c:36:f9:ad:81:1d:2c:1e:b5: 1d:23:fe:ed:9f:30:d4:b8:c3:78:4a:73:48:db:51: 36:93:f5:c1:4d:ac:5b:43:13:7a:af:8c:17:f2:53: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3A:D1:3B:32:FE:CF:D4:DD:CE:94:50:DC:35:0C:E0:98:E9:2E:5F X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yzrROzL-z9TdzpRQ3DUM4JjpLl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.172.0/24 Signature Algorithm: sha256WithRSAEncryption 37:29:3c:1d:da:73:d4:9d:1c:72:f4:f4:77:f4:26:05:26:eb: d6:4c:12:e1:f6:e4:65:07:88:2c:77:66:90:a0:cd:66:b3:6f: d4:b1:73:04:fb:04:63:22:24:02:c6:22:5d:6e:f6:0c:8f:b5: bf:53:f2:8c:a2:0d:df:9f:53:d6:db:23:9e:7f:d2:bb:4d:2d: 26:df:1e:02:af:bf:12:ec:c7:85:a7:29:bc:f0:95:2e:9a:5b: b2:3c:e4:35:ed:d6:7f:e5:7a:2f:b8:cc:6b:c2:8b:e1:b1:79: 1d:eb:15:b6:76:b5:ab:51:61:9f:d4:77:a6:6f:2c:39:44:c6: 85:b1:bf:67:e4:3c:1a:88:12:68:79:59:2f:3e:f9:2c:04:d0: dc:a2:8f:f7:bb:1b:ce:e8:46:70:e6:1a:bc:60:bc:b8:e7:39: aa:0c:b4:b6:fe:54:3f:4f:11:68:55:8f:85:17:d5:f3:69:90: 0f:5b:8b:7f:47:63:0d:0e:66:d9:3b:81:64:38:24:a6:c5:81: 5a:dd:64:fd:51:b5:47:41:ef:04:55:0d:9a:be:f6:7e:1f:fe: 1c:33:b4:04:d3:49:94:79:a8:e4:3d:18:02:09:e9:8e:b3:4b: 8c:f5:0b:7a:4c:7b:33:a2:87:22:cd:9f:0e:9e:e5:f5:e0:3d: 96:ac:7e:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNNXosxmeftSJLnNXYOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjNhZDEzYjMyZmVjZmQ0ZGRjZTk0NTBkYzM1MGNlMDk4ZTkyZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P8egJn002qVy2COaW/FyiOOohW1 GUgI9j4SmaPil0RsOHAbsrD0bwRnrJakm2fEZR5/bMJIhCqOBVe6g0QQktoR5j1Z RVLtIeGcP4PrEDhJarhRw31/l7rgQ5OX+omb6kNBO33jwT8j3E/S+pOzB5i0sJYg J3aRWOcqgIQ4x/ArrvEAgS3wWPBYbid8cNRfURRlXRofgtcxLUKvvUdePxYEJCJ3 XUHLDyNTzmUYgX7Rs99e93FwcCFQnoIHI7EJg4DKF7m3SR4GD8aUv4PzXVrikz3Z 7MtcNvmtgR0sHrUdI/7tnzDUuMN4SnNI21E2k/XBTaxbQxN6r4wX8lMjswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMs60Tsy/s/U3c6UUNw1DOCY6S5fMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEveXpyUk96TC16OVRkenBSUTNEVU00SmpwTGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXausMA0G CSqGSIb3DQEBCwUAA4IBAQA3KTwd2nPUnRxy9PR39CYFJuvWTBLh9uRlB4gsd2aQ oM1ms2/UsXME+wRjIiQCxiJdbvYMj7W/U/KMog3fn1PW2yOef9K7TS0m3x4Cr78S 7MeFpym88JUumluyPOQ17dZ/5XovuMxrwovhsXkd6xW2drWrUWGf1Hembyw5RMaF sb9n5DwaiBJoeVkvPvksBNDcoo/3uxvO6EZw5hq8YLy45zmqDLS2/lQ/TxFoVY+F F9XzaZAPW4t/R2MNDmbZO4FkOCSmxYFa3WT9UbVHQe8EVQ2avvZ+H/4cM7QE00mU eajkPRgCCemOs0uM9Qt6THszoocizZ8OnuX14D2WrH4R -----END CERTIFICATE-----Generated at Mon Jan 26 08:04:24 2026 by rpki-client