This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/ySrRvQm3X3VhVYttkpxQWZYbXdQ.roa File: ySrRvQm3X3VhVYttkpxQWZYbXdQ.roa (raw, json) Hash identifier: KzWiwoTTJ9AdrcEw0bbtPCasz1IP6A360CxQeB6+VbQ= Subject key identifier: C9:2A:D1:BD:09:B7:5F:75:61:55:8B:6D:92:9C:50:59:96:1B:5D:D4 Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6 Certificate serial: 019B7DCA6179826D960C7ED4B26874A68CDD Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/ySrRvQm3X3VhVYttkpxQWZYbXdQ.roa Signing time: Fri 02 Jan 2026 08:19:33 +0000 ROA not before: Fri 02 Jan 2026 08:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57115 IP address blocks: 91.230.83.0/24 maxlen: 24 195.191.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:61:79:82:6d:96:0c:7e:d4:b2:68:74:a6:8c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c92ad1bd09b75f7561558b6d929c5059961b5dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:31:33:4e:83:1c:9b:3d:d1:aa:aa:f3:87:3a: b5:35:eb:68:ea:82:76:b3:cd:76:9d:db:ce:dd:c8: 0d:5d:fe:66:15:f3:da:2a:37:22:0d:93:e3:38:1c: d1:a5:c6:e1:6b:89:54:f2:3a:03:ea:c7:5f:f2:45: 29:c2:e4:d7:de:6a:32:6c:c7:c5:e4:c4:a7:dd:55: 9a:a8:0a:2d:61:fd:56:c8:5b:36:9d:ac:f7:5c:78: e0:9f:43:4f:d2:c5:6b:64:3e:47:02:ef:dc:40:ad: be:6f:9b:c9:f6:d2:b5:6e:9c:4a:d6:dd:f8:fd:77: c9:45:3a:0f:d5:af:98:2a:3d:4e:c8:df:ca:ef:cc: 54:95:ef:1b:a1:92:62:b7:b8:6f:35:00:46:4b:1c: 43:82:88:8b:66:4c:50:66:1f:e0:17:e4:b0:2f:72: de:72:5e:9a:02:c7:06:4e:e3:ad:d4:87:1e:9e:60: 88:ee:d8:b1:a3:22:ec:f2:87:e6:6c:14:3a:94:82: 3c:cd:1b:b7:13:ca:47:7d:b6:1e:8d:c5:dd:fc:c3: 41:2d:86:69:97:8b:cb:bf:dd:0e:02:e9:5c:23:38: 37:17:11:46:0d:cf:48:a7:42:37:65:db:8d:94:8d: f1:94:fe:c3:a5:d1:7e:1f:84:5c:a1:fa:e6:80:08: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2A:D1:BD:09:B7:5F:75:61:55:8B:6D:92:9C:50:59:96:1B:5D:D4 X509v3 Authority Key Identifier: keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/ySrRvQm3X3VhVYttkpxQWZYbXdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.83.0/24 195.191.92.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:78:13:8f:00:44:88:94:6e:19:9c:c2:c9:87:20:12:8a:82: 12:b1:c4:3a:4b:2f:be:59:fb:8a:7d:f3:4c:b5:20:0c:c0:be: d7:d6:04:13:df:7d:a5:a5:a5:54:46:11:03:6e:e7:17:29:b7: 87:e3:3e:36:d6:36:35:b9:48:d4:e8:eb:97:36:74:a5:0a:9c: d4:e0:be:65:d9:2a:26:57:ef:9b:2f:df:17:12:d5:70:84:f1: ff:8e:53:24:3e:53:c2:4c:b4:ec:b5:8d:bf:e1:49:6d:03:cd: 86:30:53:19:81:c1:8e:27:e0:5e:5f:d8:93:b5:a6:03:0c:99: 2b:fd:bd:d7:ac:7f:02:d7:44:f6:10:ea:dd:2e:92:f4:20:b3: 27:01:81:5d:2c:2a:07:d9:bd:78:58:82:ed:da:67:0f:99:88: 10:7d:39:90:00:b6:34:94:ba:51:c2:2c:b9:ae:f0:08:11:4e: 66:70:b6:5b:33:45:d4:45:26:f4:18:ea:e0:65:46:8a:4d:d0: 42:0b:77:f6:e4:0b:61:66:08:99:c2:4b:3b:ea:69:58:8b:9b: 16:31:b7:f7:9c:4c:e9:9e:cf:6a:73:dd:e9:9b:3f:d8:a7:a4: 87:d5:c4:0f:54:06:8b:9a:c5:e7:72:7d:40:36:a0:c6:eb:aa: b8:c0:ab:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ymF5gm2WDH7Usmh0pozdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYTUxMTY1YWE1MDM2YWNkYTExZmVlMDAyMGUzNGZjYzQz OWVkZTYwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTJhZDFiZDA5Yjc1Zjc1NjE1NThiNmQ5MjljNTA1OTk2MWI1ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTEzToMcmz3Rqqrzhzq1Neto6oJ2 s812ndvO3cgNXf5mFfPaKjciDZPjOBzRpcbha4lU8joD6sdf8kUpwuTX3moybMfF 5MSn3VWaqAotYf1WyFs2naz3XHjgn0NP0sVrZD5HAu/cQK2+b5vJ9tK1bpxK1t34 /XfJRToP1a+YKj1OyN/K78xUle8boZJit7hvNQBGSxxDgoiLZkxQZh/gF+SwL3Le cl6aAscGTuOt1IcenmCI7tixoyLs8ofmbBQ6lII8zRu3E8pHfbYejcXd/MNBLYZp l4vLv90OAulcIzg3FxFGDc9Ip0I3ZduNlI3xlP7DpdF+H4RcofrmgAgMxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMkq0b0Jt191YVWLbZKcUFmWG13UMB8GA1UdIwQY MBaAFK+lEWWqUDas2hH+4AIONPzEOe3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZGExZWMtYWE0Yi00ZDk0LTk4Y2It YTc3NmU0YTYzZTZmLzEveVNyUnZRbTNYM1ZoVll0dGtweFFXWlliWGRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yZGExZWMtYWE0Yi00ZDk0LTk4Y2ItYTc3NmU0YTYzZTZm LzEvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+ZTAwQB w79cMA0GCSqGSIb3DQEBCwUAA4IBAQCMeBOPAESIlG4ZnMLJhyASioISscQ6Sy++ WfuKffNMtSAMwL7X1gQT332lpaVURhEDbucXKbeH4z421jY1uUjU6OuXNnSlCpzU 4L5l2SomV++bL98XEtVwhPH/jlMkPlPCTLTstY2/4UltA82GMFMZgcGOJ+BeX9iT taYDDJkr/b3XrH8C10T2EOrdLpL0ILMnAYFdLCoH2b14WILt2mcPmYgQfTmQALY0 lLpRwiy5rvAIEU5mcLZbM0XURSb0GOrgZUaKTdBCC3f25AthZgiZwks76mlYi5sW Mbf3nEzpns9qc93pmz/Yp6SH1cQPVAaLmsXncn1ANqDG66q4wKtL -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:24 2026 by rpki-client