This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/yO5VUy12ddh73zDCCV8z_vcmXj4.roa File: yO5VUy12ddh73zDCCV8z_vcmXj4.roa (raw, json) Hash identifier: JXSS7iXS89n3AmF1lMYl9UTKNor1TEXY5nMl7r8w9ck= Subject key identifier: C8:EE:55:53:2D:76:75:D8:7B:DF:30:C2:09:5F:33:FE:F7:26:5E:3E Certificate issuer: /CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f Certificate serial: 019B7BA513D45A4E4AA0A62A985A180DEA6A Authority key identifier: 12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/yO5VUy12ddh73zDCCV8z_vcmXj4.roa Signing time: Thu 01 Jan 2026 22:19:34 +0000 ROA not before: Thu 01 Jan 2026 22:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49667 IP address blocks: 91.213.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:13:d4:5a:4e:4a:a0:a6:2a:98:5a:18:0d:ea:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ee55532d7675d87bdf30c2095f33fef7265e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:20:e0:aa:00:ea:1a:16:08:d0:4b:ef:8d: 28:38:97:9b:ca:9d:c3:0e:73:38:6b:23:04:2f:ec: 9b:b9:0e:d2:84:95:95:b5:92:de:04:c2:5b:2d:bd: b1:9d:0f:74:e2:f6:90:4f:a2:c0:90:fe:82:2c:3a: fa:40:f2:17:77:6b:c1:fd:eb:13:8b:20:ce:92:a9: 59:b6:95:a0:03:60:ef:a5:7a:ba:e0:f5:7d:bc:d8: 52:a5:7e:5e:6e:31:28:38:59:cb:a4:91:e4:41:69: d5:a8:27:9f:f8:84:97:72:ca:da:84:c8:58:1b:74: 77:71:87:20:51:ef:5b:83:95:41:3b:ca:b0:a9:14: 13:da:52:4e:7e:11:54:9b:e9:2a:e6:e2:e1:a9:07: b1:65:88:0a:d7:b3:8a:1b:25:26:8c:e3:e0:cd:1a: 74:3b:04:ce:5b:0e:7b:a9:cb:53:73:c1:3a:09:a6: 71:a0:8f:e3:85:2a:53:93:e0:84:3f:ed:2f:23:a8: e1:77:da:e7:65:56:0e:37:91:ac:6d:2f:32:72:ff: c0:8d:c4:34:dc:0a:1f:c3:d4:7d:8e:af:db:7c:cd: 98:ca:6a:60:9d:e4:c7:5c:dd:6a:80:a6:c7:95:17: 60:7d:ab:0c:c9:29:36:9e:8a:a7:65:69:4e:34:94: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EE:55:53:2D:76:75:D8:7B:DF:30:C2:09:5F:33:FE:F7:26:5E:3E X509v3 Authority Key Identifier: keyid:12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/yO5VUy12ddh73zDCCV8z_vcmXj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.106.0/24 Signature Algorithm: sha256WithRSAEncryption 77:21:5e:79:1f:50:63:45:05:5c:dc:ce:f7:74:d6:bb:49:8c: 99:a5:bf:e6:1e:42:f7:4e:5d:a6:96:6d:dc:26:93:ae:d4:4e: 38:e0:3e:9c:45:7b:02:48:88:e4:81:20:d0:36:bc:01:6b:c3: 2f:8a:d6:7c:1e:00:4e:31:e7:ac:05:2d:11:21:e2:49:95:68: f6:d2:6c:aa:e5:45:ef:21:26:e7:4f:f5:51:05:19:d2:6c:89: cf:d8:e8:8d:bd:76:15:ab:06:76:1c:d9:0d:97:2a:70:fe:6b: 49:04:4c:f5:f8:3b:f5:ba:b0:56:05:a4:64:c9:5d:5c:85:c5: 32:31:0f:dc:1b:6c:36:94:cc:9e:a7:b4:2c:b5:d1:7b:08:43: 35:6f:81:c3:38:69:79:de:11:b0:8b:a6:be:ae:6b:65:12:0f: a8:fa:ee:d3:24:11:b9:04:be:ef:1f:87:5e:a3:1e:43:9b:74: b0:46:2f:ae:cb:06:7a:b4:1c:7d:92:58:b3:da:76:e6:e8:81: 10:88:30:1c:21:d5:d6:13:60:ee:b4:3b:2c:56:2f:b4:4b:56: c1:75:ca:42:c6:79:9b:13:70:8b:be:93:ac:f6:9b:7c:0b:1a: 16:23:7a:60:6e:ff:46:0f:7c:41:d4:6b:a8:59:7d:5e:63:85: 62:95:92:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRPUWk5KoKYqmFoYDepqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNWYyMGQxZWY1ZmYyZjAxZDgyMjQ4NmJkOWVlOGFmNGQ2 NTZiN2YwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVlNTU1MzJkNzY3NWQ4N2JkZjMwYzIwOTVmMzNmZWY3MjY1ZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Mg4KoA6hoWCNBL740oOJebyp3D DnM4ayMEL+ybuQ7ShJWVtZLeBMJbLb2xnQ904vaQT6LAkP6CLDr6QPIXd2vB/esT iyDOkqlZtpWgA2DvpXq64PV9vNhSpX5ebjEoOFnLpJHkQWnVqCef+ISXcsrahMhY G3R3cYcgUe9bg5VBO8qwqRQT2lJOfhFUm+kq5uLhqQexZYgK17OKGyUmjOPgzRp0 OwTOWw57qctTc8E6CaZxoI/jhSpTk+CEP+0vI6jhd9rnZVYON5GsbS8ycv/AjcQ0 3Aofw9R9jq/bfM2YympgneTHXN1qgKbHlRdgfasMySk2noqnZWlONJTIDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMjuVVMtdnXYe98wwglfM/73Jl4+MB8GA1UdIwQY MBaAFBJfINHvX/LwHYIkhr2e6K9NZWt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWw4ZzBlOWY4dkFkZ2lTR3ZaN29yMDFsYTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZGM0ZDctYmMzNC00NTg0LWIwZjkt ZmU5YTA2NDE4MWIyLzEveU81VlV5MTJkZGg3M3pEQ0NWOHpfdmNtWGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yZGM0ZDctYmMzNC00NTg0LWIwZjktZmU5YTA2NDE4MWIy LzEvRWw4ZzBlOWY4dkFkZ2lTR3ZaN29yMDFsYTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9VqMA0G CSqGSIb3DQEBCwUAA4IBAQB3IV55H1BjRQVc3M73dNa7SYyZpb/mHkL3Tl2mlm3c JpOu1E444D6cRXsCSIjkgSDQNrwBa8MvitZ8HgBOMeesBS0RIeJJlWj20myq5UXv ISbnT/VRBRnSbInP2OiNvXYVqwZ2HNkNlypw/mtJBEz1+Dv1urBWBaRkyV1chcUy MQ/cG2w2lMyep7QstdF7CEM1b4HDOGl53hGwi6a+rmtlEg+o+u7TJBG5BL7vH4de ox5Dm3SwRi+uywZ6tBx9kliz2nbm6IEQiDAcIdXWE2DutDssVi+0S1bBdcpCxnmb E3CLvpOs9pt8CxoWI3pgbv9GD3xB1GuoWX1eY4VilZLN -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:58 2026 by rpki-client