This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/SYOUieKR_QV6weJnpGp0PwQqP8M.roa File: SYOUieKR_QV6weJnpGp0PwQqP8M.roa (raw, json) Hash identifier: rJyUI3FjwjJFeXbvOOvKbgCn4Z66P2GsnFdxLTdu4tY= Subject key identifier: 49:83:94:89:E2:91:FD:05:7A:C1:E2:67:A4:6A:74:3F:04:2A:3F:C3 Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df Certificate serial: 019B7A5A187550ECFA422802A436F88FC0E7 Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/SYOUieKR_QV6weJnpGp0PwQqP8M.roa Signing time: Thu 01 Jan 2026 16:18:03 +0000 ROA not before: Thu 01 Jan 2026 16:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57593 IP address blocks: 91.233.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:18:75:50:ec:fa:42:28:02:a4:36:f8:8f:c0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df Validity Not Before: Jan 1 16:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49839489e291fd057ac1e267a46a743f042a3fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:c9:ec:2d:6c:d0:75:e7:76:c7:56:46:b3: 12:92:cc:6f:5c:40:0a:2c:cb:cf:7e:11:a0:18:9e: 9f:87:8f:43:5f:44:3c:ce:27:3b:ae:10:05:33:58: eb:82:3e:5e:89:38:8d:37:8a:01:9c:be:3e:4e:7e: cd:8a:c2:38:fb:69:d8:74:75:22:0a:df:5b:42:0d: 7d:5c:f7:7f:56:5a:79:90:5b:92:49:b4:31:30:52: b5:98:63:1d:40:b0:29:01:67:bb:f4:a5:70:19:0c: 6f:5b:d4:fc:7d:0d:8b:d2:20:01:89:de:3f:57:b4: 88:44:63:63:eb:75:bf:82:41:75:9b:11:76:d4:1e: cf:f3:59:76:6e:3f:06:c3:4d:33:d2:5c:80:8e:1a: 54:af:57:5c:ef:88:06:e1:29:17:24:2c:ef:f0:fa: f9:d6:01:67:0b:f9:47:81:a8:02:d5:c4:67:d6:20: 1c:12:79:96:fb:dc:d2:f4:66:68:71:16:ae:80:74: 4b:1b:aa:93:a7:ef:dd:93:99:a6:2a:70:fd:d6:74: 61:3d:8d:c9:07:cd:1b:52:5d:5c:18:a1:d1:8e:af: 31:b7:b3:73:ee:20:84:9d:6d:30:db:79:ff:3f:9b: 1f:2d:e2:d7:4f:67:d7:6a:34:49:a2:d4:b6:47:33: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:83:94:89:E2:91:FD:05:7A:C1:E2:67:A4:6A:74:3F:04:2A:3F:C3 X509v3 Authority Key Identifier: keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/SYOUieKR_QV6weJnpGp0PwQqP8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.60.0/24 Signature Algorithm: sha256WithRSAEncryption 59:5a:43:40:2e:f2:cc:df:e7:bd:d2:03:d2:39:0a:9a:6d:85: 6b:27:84:52:39:57:26:ae:99:5c:93:26:04:eb:08:9e:95:11: fd:c4:c6:31:b8:db:cf:26:a1:4d:c0:16:9a:08:cd:90:ed:32: f9:6e:0e:08:fc:8a:82:80:18:bd:82:f2:cb:68:70:b9:b3:0a: 0f:8a:33:50:01:6f:99:12:51:e5:ec:c5:72:c6:85:c4:07:ef: de:b8:ed:d2:d3:6a:2a:de:24:56:6d:0a:ca:01:b6:d7:5a:3d: 2a:94:e1:bd:a7:3f:05:06:b9:8e:16:43:9c:03:b4:0a:6b:84: 6b:6b:03:88:1b:d5:b9:7a:c6:8e:00:7f:f1:fc:27:d7:78:6a: 5a:97:f8:14:b0:91:fc:87:8a:65:ed:7e:c9:b8:f9:49:af:5a: f1:93:23:fb:79:5c:1d:37:dc:69:2e:69:e5:1a:2e:6d:bc:c3: a9:d1:1d:2e:50:15:5b:1f:50:b5:cc:dd:6f:57:cc:8e:ba:b6: 7b:36:ab:90:a0:e6:c6:87:7c:f9:8d:1e:1d:8c:f1:ca:3f:24: c4:ab:fb:de:33:3c:ba:8e:a6:98:de:3e:ef:0a:e2:e8:c7:bb: db:b5:1a:f2:b1:38:23:21:33:fb:5d:c1:ba:40:c2:7a:65:4f: a3:a8:9d:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Whh1UOz6QigCpDb4j8DnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDEyMzQzYTYyZjNmMDliNTVjZGJjMDFlNzVjMzgyMTJh MjM1ZGYwHhcNMjYwMTAxMTYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTgzOTQ4OWUyOTFmZDA1N2FjMWUyNjdhNDZhNzQzZjA0MmEzZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hvJ7C1s0HXndsdWRrMSksxvXEAK LMvPfhGgGJ6fh49DX0Q8zic7rhAFM1jrgj5eiTiNN4oBnL4+Tn7NisI4+2nYdHUi Ct9bQg19XPd/Vlp5kFuSSbQxMFK1mGMdQLApAWe79KVwGQxvW9T8fQ2L0iABid4/ V7SIRGNj63W/gkF1mxF21B7P81l2bj8Gw00z0lyAjhpUr1dc74gG4SkXJCzv8Pr5 1gFnC/lHgagC1cRn1iAcEnmW+9zS9GZocRaugHRLG6qTp+/dk5mmKnD91nRhPY3J B80bUl1cGKHRjq8xt7Nz7iCEnW0w23n/P5sfLeLXT2fXajRJotS2RzNL8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEmDlInikf0FesHiZ6RqdD8EKj/DMB8GA1UdIwQY MBaAFDQBI0OmLz8JtVzbwB51w4ISojXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iMjMwMmUtYWFkZS00NjVhLWFhOWIt MzJkMmJkZDRiYmIxLzEvU1lPVWllS1JfUVY2d2VKbnBHcDBQd1FxUDhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iMjMwMmUtYWFkZS00NjVhLWFhOWItMzJkMmJkZDRiYmIx LzEvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+k8MA0G CSqGSIb3DQEBCwUAA4IBAQBZWkNALvLM3+e90gPSOQqabYVrJ4RSOVcmrplckyYE 6wielRH9xMYxuNvPJqFNwBaaCM2Q7TL5bg4I/IqCgBi9gvLLaHC5swoPijNQAW+Z ElHl7MVyxoXEB+/euO3S02oq3iRWbQrKAbbXWj0qlOG9pz8FBrmOFkOcA7QKa4Rr awOIG9W5esaOAH/x/CfXeGpal/gUsJH8h4pl7X7JuPlJr1rxkyP7eVwdN9xpLmnl Gi5tvMOp0R0uUBVbH1C1zN1vV8yOurZ7NquQoObGh3z5jR4djPHKPyTEq/veMzy6 jqaY3j7vCuLox7vbtRrysTgjITP7XcG6QMJ6ZU+jqJ3i -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:30 2026 by rpki-client