This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/yp_V2SDm61CRWvjnGT6m5_yIOPI.roa File: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (raw, json) Hash identifier: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4= Subject key identifier: CA:9F:D5:D9:20:E6:EB:50:91:5A:F8:E7:19:3E:A6:E7:FC:88:38:F2 Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Certificate serial: 019B77C70F196A3CA7B08CFF1B954D293F73 Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/yp_V2SDm61CRWvjnGT6m5_yIOPI.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61112 IP address blocks: 91.229.132.0/23 maxlen: 23 91.229.132.0/24 maxlen: 24 91.229.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0f:19:6a:3c:a7:b0:8c:ff:1b:95:4d:29:3f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca9fd5d920e6eb50915af8e7193ea6e7fc8838f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:7c:96:76:08:23:b5:1a:d2:3c:28:6f:3b: 23:49:da:ca:16:65:a2:ee:ba:ac:59:88:f6:2d:20: a0:18:a5:f6:9e:03:29:e4:7a:c9:d2:90:97:71:bf: 76:57:7d:c7:86:19:2d:73:b9:7e:71:40:99:c1:d2: ba:6c:69:cf:91:68:b1:47:97:93:6f:b4:9c:0f:eb: 25:ce:2f:4c:f3:d6:95:d6:15:f8:cb:a6:26:38:48: 57:61:0d:ab:0f:dd:a6:c4:35:8e:e5:26:e7:60:93: 34:32:ab:a3:56:87:f6:6d:6e:81:df:d5:95:a7:c6: d6:90:2f:cd:05:03:c9:2a:42:e4:7a:27:f1:9d:9f: e7:89:ea:74:4f:71:b2:18:f3:75:41:0f:5e:3b:7e: 54:03:44:3b:bd:3c:25:46:98:83:aa:9a:16:93:62: bb:3e:a2:6c:5e:22:0c:b5:32:b1:6a:3b:9d:38:ec: d0:a8:6b:ef:79:f8:33:2b:2b:a1:33:5f:41:e9:cf: cc:96:0b:9e:53:7b:83:13:b3:7e:a3:47:8d:b7:cb: 31:32:f6:16:5a:a0:ce:6d:ac:ef:01:d1:1d:31:50: b4:6a:1f:a5:1f:56:32:4e:11:e9:78:90:d3:35:1b: ba:7b:33:8f:05:0e:48:e3:aa:3e:e1:a7:59:24:71: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9F:D5:D9:20:E6:EB:50:91:5A:F8:E7:19:3E:A6:E7:FC:88:38:F2 X509v3 Authority Key Identifier: keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/yp_V2SDm61CRWvjnGT6m5_yIOPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.132.0/23 Signature Algorithm: sha256WithRSAEncryption 07:92:af:8d:5a:79:1f:9b:7d:8a:a8:ef:07:70:f7:eb:fb:af: f5:dd:a3:11:65:ba:40:79:b7:d3:fa:51:c4:f0:9d:c5:34:c3: 0d:5c:70:de:7a:a6:a1:09:0a:52:4a:cf:5d:91:84:0e:22:14: 47:06:a0:75:c6:35:01:5e:21:fc:b7:63:36:94:44:07:f9:00: 62:fa:eb:4d:d7:93:7e:99:52:29:58:f9:46:c1:57:f9:4d:c0: 0a:57:dd:49:ab:4d:2e:e0:ca:0e:83:35:d9:2c:a7:73:c3:a9: 5c:51:f1:88:43:90:50:9d:f9:ac:a4:c8:3a:05:be:de:c7:22: 6b:12:9b:0a:5c:b5:68:f0:69:6d:65:17:f9:9c:6a:a8:07:f6: cd:5a:ca:33:c8:ee:8b:a8:61:43:ed:45:ec:e0:1d:12:db:bd: b2:ad:14:4a:01:db:3f:ea:a4:03:aa:85:42:e3:21:ba:d2:9f: 46:c8:22:04:f7:29:83:d7:93:d5:ff:18:a1:2d:8b:e0:59:98: ff:47:2e:7c:e9:23:4e:90:1d:c8:bc:d7:8b:0c:b8:d1:08:d8: a1:d5:41:eb:63:23:25:f4:a0:71:aa:39:56:24:2e:d9:a3:6c: a9:23:00:b8:3f:4d:f1:ad:04:4c:5a:b2:fd:96:f8:35:0b:df: ca:71:de:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xw8ZajynsIz/G5VNKT9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz YjI0YjYwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTlmZDVkOTIwZTZlYjUwOTE1YWY4ZTcxOTNlYTZlN2ZjODgzOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxex8lnYII7Ua0jwobzsjSdrKFmWi 7rqsWYj2LSCgGKX2ngMp5HrJ0pCXcb92V33Hhhktc7l+cUCZwdK6bGnPkWixR5eT b7ScD+slzi9M89aV1hX4y6YmOEhXYQ2rD92mxDWO5SbnYJM0MqujVof2bW6B39WV p8bWkC/NBQPJKkLkeifxnZ/niep0T3GyGPN1QQ9eO35UA0Q7vTwlRpiDqpoWk2K7 PqJsXiIMtTKxajudOOzQqGvvefgzKyuhM19B6c/MlgueU3uDE7N+o0eNt8sxMvYW WqDObazvAdEdMVC0ah+lH1YyThHpeJDTNRu6ezOPBQ5I46o+4adZJHE9FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMqf1dkg5utQkVr45xk+puf8iDjyMB8GA1UdIwQY MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt ZGZkZGIxMzY0MzYzLzEveXBfVjJTRG02MUNSV3ZqbkdUNm01X3lJT1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+WEMA0G CSqGSIb3DQEBCwUAA4IBAQAHkq+NWnkfm32KqO8HcPfr+6/13aMRZbpAebfT+lHE 8J3FNMMNXHDeeqahCQpSSs9dkYQOIhRHBqB1xjUBXiH8t2M2lEQH+QBi+utN15N+ mVIpWPlGwVf5TcAKV91Jq00u4MoOgzXZLKdzw6lcUfGIQ5BQnfmspMg6Bb7exyJr EpsKXLVo8GltZRf5nGqoB/bNWsozyO6LqGFD7UXs4B0S272yrRRKAds/6qQDqoVC 4yG60p9GyCIE9ymD15PV/xihLYvgWZj/Ry586SNOkB3IvNeLDLjRCNih1UHrYyMl 9KBxqjlWJC7Zo2ypIwC4P03xrQRMWrL9lvg1C9/Kcd4S -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:06 2026 by rpki-client