This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gyVI-6q7srkL0pN89EzBjxDJa5w.roa File: gyVI-6q7srkL0pN89EzBjxDJa5w.roa (raw, json) Hash identifier: g2gJd9nWGn9Jgs2bdquPwYT7IdHgV7brm845NEO7BOE= Subject key identifier: 83:25:48:FB:AA:BB:B2:B9:0B:D2:93:7C:F4:4C:C1:8F:10:C9:6B:9C Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79113C6680E3006B3B1694F1BAF52C0B Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gyVI-6q7srkL0pN89EzBjxDJa5w.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9150 IP address blocks: 104.222.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3c:66:80:e3:00:6b:3b:16:94:f1:ba:f5:2c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=832548fbaabbb2b90bd2937cf44cc18f10c96b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:94:0a:6d:23:c5:28:66:1c:ae:ba:da:f9: cd:7e:2a:c9:48:dd:8e:35:58:f4:47:9a:52:2a:06: 5c:de:b1:10:56:8e:f9:1f:42:e7:98:25:c7:68:24: bf:dd:5a:21:8e:fc:b1:d8:93:4d:a3:49:8b:69:c7: 59:46:5a:3b:c6:be:92:8a:36:68:7c:9f:87:11:57: ec:27:a8:2c:d3:b4:b8:6e:54:23:fe:ed:38:59:83: f4:50:3d:a1:62:59:5b:ec:f9:87:cd:4d:c8:19:97: 4b:54:e9:fd:00:2c:a9:24:b1:61:2a:7e:df:c8:64: 49:95:bd:dd:ed:ab:20:a7:b3:86:27:e7:f5:54:b3: 74:5e:3e:7d:26:79:e1:bd:c1:7b:79:9a:c5:62:b1: 11:1f:84:75:cd:cd:d3:5d:0d:91:0a:62:e6:c6:34: 2a:a6:3b:4d:ab:0b:d8:e6:13:b5:88:10:19:da:e1: 6d:13:b5:69:ce:95:2c:5c:02:7a:99:ac:72:11:f0: be:a8:be:43:c7:c2:8f:b0:ed:4a:df:6b:8d:04:7d: 41:5a:4d:ca:3c:0b:8a:b7:8b:a5:3d:b8:e4:ec:8c: aa:37:a5:1b:33:a4:95:75:5e:98:f7:f5:17:9a:6b: 9f:77:4c:7b:bd:d4:af:63:0c:a1:3e:78:22:47:0a: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:25:48:FB:AA:BB:B2:B9:0B:D2:93:7C:F4:4C:C1:8F:10:C9:6B:9C X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gyVI-6q7srkL0pN89EzBjxDJa5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.222.191.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:3b:4a:0d:0c:18:e0:6a:96:8d:47:60:3c:97:13:3f:e2:07: 83:39:99:f0:4d:11:c5:b5:1e:2b:50:f3:a0:ba:68:c4:64:c6: 36:70:da:1d:88:0d:81:42:77:24:20:8c:a5:f7:b5:82:08:fb: 62:1d:aa:4c:ea:e4:99:88:1a:1e:74:ff:4c:ae:99:9c:9a:05: b4:e4:23:0a:ac:8f:46:44:be:e1:bc:8b:de:9b:ee:b3:74:88: 01:7e:91:4c:cc:5d:eb:b4:16:f3:77:41:9b:83:a6:54:ea:7d: f0:05:54:d9:02:09:a0:fd:40:c6:48:41:71:32:a8:a0:ef:1a: 40:a8:b5:03:19:83:06:71:6b:46:6d:cc:c4:e9:e6:eb:93:da: 8b:4c:72:4b:18:2f:fb:2b:0c:5f:5b:c8:e9:3d:bd:a8:96:ca: 98:24:0f:86:57:4a:62:80:72:b5:ed:d1:5a:99:10:78:85:8e: ee:e3:72:44:9a:64:5b:65:42:3d:58:93:75:38:99:dc:9e:40: 59:dc:fb:b1:0a:a8:74:ca:55:5e:c0:a2:7d:3a:74:b5:55:d3: a8:b5:cd:5d:7f:61:b9:0e:f6:08:4a:99:ae:e0:75:6b:2f:93: 29:08:16:75:39:35:0b:89:f1:21:18:09:b0:b5:b9:c6:84:d8: 0c:a2:7d:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETxmgOMAazsWlPG69SwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzI1NDhmYmFhYmJiMmI5MGJkMjkzN2NmNDRjYzE4ZjEwYzk2YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eKUCm0jxShmHK662vnNfirJSN2O NVj0R5pSKgZc3rEQVo75H0LnmCXHaCS/3Vohjvyx2JNNo0mLacdZRlo7xr6SijZo fJ+HEVfsJ6gs07S4blQj/u04WYP0UD2hYllb7PmHzU3IGZdLVOn9ACypJLFhKn7f yGRJlb3d7asgp7OGJ+f1VLN0Xj59JnnhvcF7eZrFYrERH4R1zc3TXQ2RCmLmxjQq pjtNqwvY5hO1iBAZ2uFtE7VpzpUsXAJ6maxyEfC+qL5Dx8KPsO1K32uNBH1BWk3K PAuKt4ulPbjk7IyqN6UbM6SVdV6Y9/UXmmufd0x7vdSvYwyhPngiRwpT5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMlSPuqu7K5C9KTfPRMwY8QyWucMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvZ3lWSS02cTdzcmtMMHBOODlFekJqeERKYTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaN6/MA0G CSqGSIb3DQEBCwUAA4IBAQAtO0oNDBjgapaNR2A8lxM/4geDOZnwTRHFtR4rUPOg umjEZMY2cNodiA2BQnckIIyl97WCCPtiHapM6uSZiBoedP9MrpmcmgW05CMKrI9G RL7hvIvem+6zdIgBfpFMzF3rtBbzd0Gbg6ZU6n3wBVTZAgmg/UDGSEFxMqig7xpA qLUDGYMGcWtGbczE6ebrk9qLTHJLGC/7KwxfW8jpPb2olsqYJA+GV0pigHK17dFa mRB4hY7u43JEmmRbZUI9WJN1OJncnkBZ3PuxCqh0ylVewKJ9OnS1VdOotc1df2G5 DvYISpmu4HVrL5MpCBZ1OTULifEhGAmwtbnGhNgMon1V -----END CERTIFICATE-----Generated at Fri Jan 2 02:43:03 2026 by rpki-client