This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/YgtG-eXPQuYp4oVS-PRtPNrxxe4.roa File: YgtG-eXPQuYp4oVS-PRtPNrxxe4.roa (raw, json) Hash identifier: RWCfa29kamid4Jj9pOqOGZ7EXsOuYoZh2w0x+4VeWGo= Subject key identifier: 62:0B:46:F9:E5:CF:42:E6:29:E2:85:52:F8:F4:6D:3C:DA:F1:C5:EE Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb Certificate serial: 019B7EA581B85C3399413A4BAC117972FB67 Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/YgtG-eXPQuYp4oVS-PRtPNrxxe4.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206807 IP address blocks: 93.114.249.0/24 maxlen: 24 185.187.69.0/24 maxlen: 24 185.187.70.0/24 maxlen: 24 194.116.220.0/24 maxlen: 24 2a10:22c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:81:b8:5c:33:99:41:3a:4b:ac:11:79:72:fb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=620b46f9e5cf42e629e28552f8f46d3cdaf1c5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:74:4e:b5:b5:bd:52:b6:97:a8:5d:77:e5: 79:d0:d0:27:96:d4:14:07:db:dc:3c:c3:ea:52:33: db:d2:1e:7d:88:8f:4b:65:67:ec:79:52:f8:b7:91: 08:a5:34:e4:b4:25:06:36:5f:37:2f:a1:0f:30:fd: 8e:19:45:aa:e8:8e:40:fe:55:cb:ab:68:d6:a6:75: a6:87:aa:9b:8b:41:d1:f4:1f:63:e0:d1:8e:3b:a5: 47:0a:0e:6d:5c:e8:20:2b:8a:9a:bb:af:90:7e:ca: 6b:a6:ce:44:91:b4:0d:94:11:79:0f:7d:49:80:6f: b9:aa:ca:4d:b6:f8:46:e0:42:9b:a6:32:57:80:66: bc:57:f5:eb:3a:64:c1:ae:44:3b:18:2f:87:5a:8d: e8:c8:79:6b:aa:45:32:de:28:8c:84:45:5a:ee:6e: 58:48:df:28:cc:a5:ea:e6:e6:b5:2e:11:7f:0c:2f: df:cb:18:dc:9f:61:94:7a:4b:9b:a3:db:df:f2:2e: 6c:99:33:b0:d9:f5:ff:ea:2f:07:f6:21:fc:be:8b: 85:ac:86:ad:f0:a8:50:bd:33:b3:fd:ee:b2:7e:4b: e8:92:0d:90:e3:fe:35:6b:06:53:36:b7:cd:dc:e7: 59:9e:cf:8d:ed:c6:1e:39:9d:49:61:93:31:cc:2f: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0B:46:F9:E5:CF:42:E6:29:E2:85:52:F8:F4:6D:3C:DA:F1:C5:EE X509v3 Authority Key Identifier: keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/YgtG-eXPQuYp4oVS-PRtPNrxxe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.114.249.0/24 185.187.69.0-185.187.70.255 194.116.220.0/24 IPv6: 2a10:22c0::/29 Signature Algorithm: sha256WithRSAEncryption 48:02:05:77:68:fa:a0:7e:1b:fa:91:64:71:d1:3b:a0:94:ea: 24:38:c1:61:ef:ec:3a:e6:8b:e2:fe:80:ea:55:b7:89:51:37: a3:af:b8:c2:3a:9d:17:b9:eb:99:db:28:64:99:86:4a:d1:87: ef:4b:be:de:7f:ca:f3:6f:38:8d:a9:0f:f5:87:a7:b4:7b:92: 62:a1:90:96:d1:3b:cf:ad:bd:7a:d3:ae:b1:06:40:28:53:74: 3a:f8:c2:ec:00:38:23:0d:96:3c:c0:23:f0:25:dd:b4:96:76: 2b:a6:fb:15:0a:33:a5:95:40:0b:16:60:1e:be:e3:64:87:13: 11:1f:65:d0:36:d0:1d:86:eb:d5:db:c5:f6:d5:9e:8b:1b:a6: 58:1b:11:9a:0c:4e:7a:03:1f:af:a0:db:31:a6:7a:25:75:76: b7:d3:99:7b:40:00:bb:84:48:ab:71:fd:a9:07:48:9a:d2:5b: b0:25:6f:7e:9f:e5:8e:23:4a:50:3e:df:c0:ed:61:62:19:28: b2:3a:19:e2:bd:d0:61:6f:81:d3:b3:a1:f8:8c:d3:64:9d:cb: 54:f5:7d:59:47:73:90:9d:ab:b0:53:6d:bb:34:83:af:2c:09: 90:4c:e4:a0:50:9f:75:05:d3:b9:01:bf:17:09:c1:b3:11:83: ff:ba:cc:42 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt+pYG4XDOZQTpLrBF5cvtnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDI5MjlmMTY1MmY5NTg4MTJkMDk5YTIzM2YzM2FkMzQ0 NWJiZmIwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjBiNDZmOWU1Y2Y0MmU2MjllMjg1NTJmOGY0NmQzY2RhZjFjNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJ0TrW1vVK2l6hdd+V50NAnltQU B9vcPMPqUjPb0h59iI9LZWfseVL4t5EIpTTktCUGNl83L6EPMP2OGUWq6I5A/lXL q2jWpnWmh6qbi0HR9B9j4NGOO6VHCg5tXOggK4qau6+Qfsprps5EkbQNlBF5D31J gG+5qspNtvhG4EKbpjJXgGa8V/XrOmTBrkQ7GC+HWo3oyHlrqkUy3iiMhEVa7m5Y SN8ozKXq5ua1LhF/DC/fyxjcn2GUekubo9vf8i5smTOw2fX/6i8H9iH8vouFrIat 8KhQvTOz/e6yfkvokg2Q4/41awZTNrfN3OdZns+N7cYeOZ1JYZMxzC/zGQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFGILRvnlz0LmKeKFUvj0bTza8cXuMB8GA1UdIwQY MBaAFDXSkp8WUvlYgS0JmiM/M600Rbv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEt YjI4MGQ0YzYyNzQ1LzEvWWd0Ry1lWFBRdVlwNG9WUy1QUnRQTnJ4eGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEtYjI4MGQ0YzYyNzQ1 LzEvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQAXXL5MAwD BAC5u0UDBAC5u0YDBADCdNwwDQQCAAIwBwMFAyoQIsAwDQYJKoZIhvcNAQELBQAD ggEBAEgCBXdo+qB+G/qRZHHRO6CU6iQ4wWHv7Drmi+L+gOpVt4lRN6OvuMI6nRe5 65nbKGSZhkrRh+9Lvt5/yvNvOI2pD/WHp7R7kmKhkJbRO8+tvXrTrrEGQChTdDr4 wuwAOCMNljzAI/Al3bSWdium+xUKM6WVQAsWYB6+42SHExEfZdA20B2G69XbxfbV nosbplgbEZoMTnoDH6+g2zGmeiV1drfTmXtAALuESKtx/akHSJrSW7Alb36f5Y4j SlA+38DtYWIZKLI6GeK90GFvgdOzofiM02Sdy1T1fVlHc5Cdq7BTbbs0g68sCZBM 5KBQn3UF07kBvxcJwbMRg/+6zEI= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:38 2026 by rpki-client