This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/dYTWl_HrN9r92Nekpg3pgJtlLjM.roa File: dYTWl_HrN9r92Nekpg3pgJtlLjM.roa (raw, json) Hash identifier: voD1ajQ6b6swHMNJXe4JnTjlvgwr00xMQAtpSBslD8k= Subject key identifier: 75:84:D6:97:F1:EB:37:DA:FD:D8:D7:A4:A6:0D:E9:80:9B:65:2E:33 Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1 Certificate serial: 019B7AC85755660EF0ED35C292D13F8AC1AA Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/dYTWl_HrN9r92Nekpg3pgJtlLjM.roa Signing time: Thu 01 Jan 2026 18:18:28 +0000 ROA not before: Thu 01 Jan 2026 18:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12516 IP address blocks: 91.216.195.0/24 maxlen: 24 195.54.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:57:55:66:0e:f0:ed:35:c2:92:d1:3f:8a:c1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1 Validity Not Before: Jan 1 18:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7584d697f1eb37dafdd8d7a4a60de9809b652e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:b7:f0:6c:44:9c:e4:62:8b:cd:d3:08:48: 9e:61:12:46:fe:a0:57:b2:48:03:90:72:e0:17:01: bb:62:eb:e2:6b:50:c1:55:db:87:32:a6:99:bf:c7: 7e:6d:bc:d7:9d:17:e6:61:e5:3e:aa:d6:3f:f4:ce: d7:c0:22:4e:2d:57:b7:a5:b5:03:14:ba:0e:5e:cf: aa:cd:21:55:06:89:97:8c:82:6a:cf:1f:2f:2c:a2: ab:4d:dd:b8:82:6b:3d:b4:7e:a1:4c:7e:06:e5:b9: df:d2:f2:de:0f:37:57:bc:82:c0:0a:78:be:ae:5b: e5:96:32:55:a4:fc:cd:98:04:0f:71:55:b6:77:d4: 35:44:32:b7:05:bd:0c:40:73:6f:83:54:1a:b4:a1: de:ac:bd:12:24:85:25:7d:c1:24:78:eb:48:0c:ed: 05:d5:ac:46:6b:df:11:66:2c:07:db:f8:89:b2:8a: e6:0d:4d:ca:46:64:09:fe:06:2d:58:66:f0:c8:0b: 6a:a3:2f:51:5d:e5:f1:5d:50:96:aa:4f:32:32:e7: 93:0a:04:98:8a:7d:72:60:97:c8:1a:15:6f:7e:68: d7:d4:f4:c4:f9:b8:8f:57:1b:29:84:91:f0:3b:cf: ee:0c:fe:7d:50:3c:ce:4a:d2:5d:c5:bd:de:d4:8c: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:84:D6:97:F1:EB:37:DA:FD:D8:D7:A4:A6:0D:E9:80:9B:65:2E:33 X509v3 Authority Key Identifier: keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/dYTWl_HrN9r92Nekpg3pgJtlLjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.195.0/24 195.54.48.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:f2:44:17:54:1e:0c:e0:d6:e2:4d:c3:8e:8c:a3:33:64:c6: c0:82:e7:0c:80:0e:2e:52:a0:d1:06:4f:62:ea:5a:14:45:73: a2:81:9f:e6:13:7d:39:d2:d9:c7:4a:41:b0:3a:fd:03:fe:f7: 92:d5:75:ef:8f:59:5d:96:e1:73:ce:52:c3:17:c7:05:c4:23: 12:59:fa:9f:25:79:06:cd:25:76:3a:97:50:a1:7b:9a:21:e4: 69:f1:2f:53:a9:5c:65:cf:b2:f0:48:01:3b:84:8a:32:0d:2b: f0:4b:a7:d7:0e:15:c5:9f:ca:4e:d2:d7:8b:9d:da:11:3d:16: 77:7f:e0:14:d4:96:28:93:15:c4:88:ba:03:c9:45:39:fb:c8: fe:ec:d3:fc:7b:ef:51:8e:c4:06:bb:52:f3:f1:03:2c:88:67: 3a:62:7c:49:f3:b0:6c:97:c6:78:b8:eb:94:ba:ed:3d:b2:8f: 2f:93:0f:0f:7b:f8:9f:68:d9:0b:7f:5a:e0:d1:1e:c1:a4:61: 63:0d:50:2b:4c:e9:0c:c8:36:4b:b8:00:4b:90:6b:7a:b0:b6: ae:1b:63:83:34:6c:19:2c:b6:e8:ce:d1:8e:85:d3:7c:c3:3f: 6f:bd:cf:bb:9e:59:36:3d:fb:66:34:4b:c3:f6:2f:06:49:c0: 06:b9:90:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yFdVZg7w7TXCktE/isGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NmJhNjIyOWM0NTlkNzY5NWQzNTI5YjEyMDdlMmMyOWIw ODQyYjEwHhcNMjYwMTAxMTgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTg0ZDY5N2YxZWIzN2RhZmRkOGQ3YTRhNjBkZTk4MDliNjUyZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+S38GxEnORii83TCEieYRJG/qBX skgDkHLgFwG7Yuvia1DBVduHMqaZv8d+bbzXnRfmYeU+qtY/9M7XwCJOLVe3pbUD FLoOXs+qzSFVBomXjIJqzx8vLKKrTd24gms9tH6hTH4G5bnf0vLeDzdXvILACni+ rlvlljJVpPzNmAQPcVW2d9Q1RDK3Bb0MQHNvg1QatKHerL0SJIUlfcEkeOtIDO0F 1axGa98RZiwH2/iJsormDU3KRmQJ/gYtWGbwyAtqoy9RXeXxXVCWqk8yMueTCgSY in1yYJfIGhVvfmjX1PTE+biPVxsphJHwO8/uDP59UDzOStJdxb3e1Iw1pQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHWE1pfx6zfa/djXpKYN6YCbZS4zMB8GA1UdIwQY MBaAFJdrpiKcRZ12ldNSmxIH4sKbCEKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kOTVmMTUtMmEyZC00NjViLWE4MjIt YzhlZTQ2NjQ4ZGJmLzEvZFlUV2xfSHJOOXI5Mk5la3BnM3BnSnRsTGpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9kOTVmMTUtMmEyZC00NjViLWE4MjItYzhlZTQ2NjQ4ZGJm LzEvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9jDAwQB wzYwMA0GCSqGSIb3DQEBCwUAA4IBAQAK8kQXVB4M4NbiTcOOjKMzZMbAgucMgA4u UqDRBk9i6loURXOigZ/mE3050tnHSkGwOv0D/veS1XXvj1ldluFzzlLDF8cFxCMS WfqfJXkGzSV2OpdQoXuaIeRp8S9TqVxlz7LwSAE7hIoyDSvwS6fXDhXFn8pO0teL ndoRPRZ3f+AU1JYokxXEiLoDyUU5+8j+7NP8e+9RjsQGu1Lz8QMsiGc6YnxJ87Bs l8Z4uOuUuu09so8vkw8Pe/ifaNkLf1rg0R7BpGFjDVArTOkMyDZLuABLkGt6sLau G2ODNGwZLLboztGOhdN8wz9vvc+7nlk2PftmNEvD9i8GScAGuZB3 -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:11 2026 by rpki-client