This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/YJY4ynuuiedvHHvTSK2Y99WgTKA.roa File: YJY4ynuuiedvHHvTSK2Y99WgTKA.roa (raw, json) Hash identifier: vAaOsQ/R4WjdxzIXlSEYb3gqw5HoiLYG5de2yPVuZNE= Subject key identifier: 60:96:38:CA:7B:AE:89:E7:6F:1C:7B:D3:48:AD:98:F7:D5:A0:4C:A0 Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409 Certificate serial: 019B77C74CF9009F11A79F5C2E41C5113DF9 Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/YJY4ynuuiedvHHvTSK2Y99WgTKA.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58138 IP address blocks: 91.239.32.0/23 maxlen: 24 185.43.80.0/22 maxlen: 24 2a04:9040::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4c:f9:00:9f:11:a7:9f:5c:2e:41:c5:11:3d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=609638ca7bae89e76f1c7bd348ad98f7d5a04ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:65:8c:16:2c:42:04:aa:fe:dd:7c:32:81: 24:8e:cc:f6:b6:be:3a:5b:c3:ca:1b:e9:dc:00:cd: 99:bc:d3:f2:1d:a9:fb:80:d6:b5:dd:fe:ff:72:76: 81:2d:82:39:b4:31:f5:12:3c:fd:48:73:f1:26:62: a9:6b:7e:40:c9:55:60:3a:96:2e:26:0e:1d:c5:e3: 40:6b:0f:37:cb:0f:a6:33:43:90:80:28:25:35:3b: ff:0a:b0:95:84:8d:1f:fa:01:94:c7:0e:43:6f:dc: 1a:ae:d7:aa:8b:06:41:9f:c4:9a:9b:09:ff:2a:55: 75:02:e7:f6:c1:1f:60:9c:de:e0:04:3c:96:bf:21: 7f:98:28:34:73:11:4e:7a:6a:c1:84:22:8d:a8:34: 8c:5f:0a:41:ab:36:ac:7a:00:b8:56:55:fa:93:14: 87:95:2f:80:1a:9b:0d:dc:ae:68:5c:9c:c2:eb:cf: 7f:28:1e:24:ea:47:cc:a0:38:b2:44:f2:c8:da:eb: 60:2a:8f:51:62:45:99:2c:3c:29:33:21:13:e6:69: d8:21:38:50:d6:36:1f:70:9c:88:ca:2a:fe:73:24: 47:82:e0:d4:d5:15:fd:6e:c7:f6:6d:cd:c7:38:0a: 82:b3:a3:68:b5:15:ca:3f:6b:06:77:80:68:01:a9: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:96:38:CA:7B:AE:89:E7:6F:1C:7B:D3:48:AD:98:F7:D5:A0:4C:A0 X509v3 Authority Key Identifier: keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/YJY4ynuuiedvHHvTSK2Y99WgTKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.32.0/23 185.43.80.0/22 IPv6: 2a04:9040::/29 Signature Algorithm: sha256WithRSAEncryption b3:a8:3c:ac:54:43:ef:80:bf:49:99:0f:08:66:18:58:5b:32: 0e:b5:95:41:59:af:6c:7b:ce:0d:e4:a9:2e:7c:05:f7:f6:e8: 2d:00:bb:d1:4e:24:f1:7b:d3:ac:24:a3:87:a4:d4:70:1b:f7: a1:77:f9:e9:99:3e:30:9d:ce:3e:5a:f1:05:d7:7c:00:6f:0f: 44:5b:c8:a8:28:bc:01:c9:ed:ac:8a:db:dc:02:89:1b:43:6d: 54:20:8b:cc:53:b1:ac:1c:3a:21:23:e0:88:89:ab:ca:97:d6: 62:13:3f:26:92:dc:44:e4:b9:6e:75:c8:f6:3d:9f:94:f7:f9: 64:e4:b3:95:a3:66:92:2b:f1:14:42:3c:1e:cf:f3:6b:3c:2e: 48:58:7a:c8:e4:d4:22:3f:86:47:7e:37:65:f5:d3:07:9e:54: c3:4b:bb:35:56:76:5e:62:29:fe:f0:a4:e0:91:51:e5:c2:59: cf:9e:00:07:12:2f:dd:00:d0:5b:87:47:9a:50:82:c7:11:9f: 73:c8:2b:00:19:62:91:fc:a9:a9:76:30:9f:00:18:55:2b:c3: 25:9a:1b:7c:ed:6f:a9:82:2a:f2:1f:df:af:ac:6a:33:d2:8b: 19:c7:63:49:05:d9:6c:aa:ac:91:5b:cf:c3:fb:97:74:8e:e4: e6:60:be:0b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3x0z5AJ8Rp59cLkHFET35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZTNkNGQ4MTBmMjQ3Nzg0MWE4Yjg1NTkzYjhmMzBlOGFl Y2Q0MDkwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDk2MzhjYTdiYWU4OWU3NmYxYzdiZDM0OGFkOThmN2Q1YTA0Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9NljBYsQgSq/t18MoEkjsz2tr46 W8PKG+ncAM2ZvNPyHan7gNa13f7/cnaBLYI5tDH1Ejz9SHPxJmKpa35AyVVgOpYu Jg4dxeNAaw83yw+mM0OQgCglNTv/CrCVhI0f+gGUxw5Db9warteqiwZBn8Samwn/ KlV1Auf2wR9gnN7gBDyWvyF/mCg0cxFOemrBhCKNqDSMXwpBqzasegC4VlX6kxSH lS+AGpsN3K5oXJzC689/KB4k6kfMoDiyRPLI2utgKo9RYkWZLDwpMyET5mnYIThQ 1jYfcJyIyir+cyRHguDU1RX9bsf2bc3HOAqCs6NotRXKP2sGd4BoAanZCwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGCWOMp7ronnbxx700itmPfVoEygMB8GA1UdIwQY MBaAFA7j1NgQ8kd4Qai4VZO48w6K7NQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzIt YzMzMjZhZDJjZjhmLzEvWUpZNHludXVpZWR2SEh2VFNLMlk5OVdnVEtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzItYzMzMjZhZDJjZjhm LzEvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+8gAwQC uStQMA0EAgACMAcDBQMqBJBAMA0GCSqGSIb3DQEBCwUAA4IBAQCzqDysVEPvgL9J mQ8IZhhYWzIOtZVBWa9se84N5KkufAX39ugtALvRTiTxe9OsJKOHpNRwG/ehd/np mT4wnc4+WvEF13wAbw9EW8ioKLwBye2sitvcAokbQ21UIIvMU7GsHDohI+CIiavK l9ZiEz8mktxE5Lludcj2PZ+U9/lk5LOVo2aSK/EUQjwez/NrPC5IWHrI5NQiP4ZH fjdl9dMHnlTDS7s1VnZeYin+8KTgkVHlwlnPngAHEi/dANBbh0eaUILHEZ9zyCsA GWKR/KmpdjCfABhVK8Mlmht87W+pgiryH9+vrGoz0osZx2NJBdlsqqyRW8/D+5d0 juTmYL4L -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:36 2026 by rpki-client