This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y2bQ66DQEtuKTxY2GiMT54W1Ycg.roa File: Y2bQ66DQEtuKTxY2GiMT54W1Ycg.roa (raw, json) Hash identifier: tb9pBVSsJCO1bR29ETABdm5urQlf58k2uCutOM34xzc= Subject key identifier: 63:66:D0:EB:A0:D0:12:DB:8A:4F:16:36:1A:23:13:E7:85:B5:61:C8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE2B4F1A67B3CCE74E8307DE9CB67 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y2bQ66DQEtuKTxY2GiMT54W1Ycg.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215638 IP address blocks: 89.213.96.0/24 maxlen: 24 109.176.243.0/24 maxlen: 24 213.218.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e2:b4:f1:a6:7b:3c:ce:74:e8:30:7d:e9:cb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6366d0eba0d012db8a4f16361a2313e785b561c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:0a:a8:43:8e:3c:26:d2:e3:15:4a:15:ca: a1:1f:fb:29:82:40:2c:4f:eb:74:82:2a:d9:3d:0b: a1:5a:2c:75:8b:b6:f0:a7:66:12:f6:02:4f:92:4d: 8c:8a:cf:ee:57:78:02:97:45:ae:f3:11:5b:39:fc: b7:e5:50:b4:ca:51:02:92:94:19:6f:88:b6:f4:b3: 59:c6:00:36:70:48:5b:39:5f:0d:77:2f:4e:1d:00: 1b:4f:c7:2c:05:ef:a1:57:fc:f0:ba:00:5d:53:3f: ee:37:c5:a4:46:07:08:9c:11:ab:95:c0:91:1d:60: c9:21:8d:1b:de:fe:b2:44:20:34:fc:4c:b2:7b:76: 43:f4:58:f0:5c:c6:ce:7f:41:d3:52:56:7c:06:3e: 5d:3c:76:ab:2a:53:4e:39:08:f1:ee:3a:6f:cf:8e: 03:76:c1:43:53:fd:82:fd:ef:fa:3d:58:2c:3d:25: 08:cd:b2:17:c1:cf:86:df:46:3f:33:00:40:2e:be: ba:9d:58:17:38:41:98:0f:c0:f7:7f:ed:01:db:ba: de:a0:84:62:67:7e:e5:39:4b:29:a7:8d:f9:fd:be: a8:a7:06:c6:2f:1e:6e:df:05:78:bd:ee:0f:b9:50: 89:e9:10:cc:eb:da:37:39:29:8c:d8:4a:77:8b:f7: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:66:D0:EB:A0:D0:12:DB:8A:4F:16:36:1A:23:13:E7:85:B5:61:C8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y2bQ66DQEtuKTxY2GiMT54W1Ycg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.96.0/24 109.176.243.0/24 213.218.252.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:b4:2e:d9:10:39:46:6c:75:e4:5a:50:5a:b7:03:e9:33:d0: 46:d4:f5:cf:4f:b1:b8:5e:42:a6:d6:2d:6d:5b:48:5e:fa:32: 8f:a5:b1:a6:83:fa:eb:36:2a:54:98:db:d9:04:a1:26:fa:01: 5a:9a:a8:5c:ce:45:24:ad:a2:61:13:5c:47:98:51:60:45:f7: 25:b7:43:4c:49:0e:d9:14:95:8b:da:a6:b3:12:26:27:3d:8b: df:08:89:a9:ae:a4:02:53:0c:ee:11:08:df:78:23:25:32:80: d5:82:24:2c:30:14:6b:ed:70:ea:71:93:c3:d0:84:6e:69:f1: a2:b9:41:df:c0:69:69:1e:9c:fc:f1:6f:77:44:b5:36:74:5a: af:d4:86:f0:4e:62:d0:40:08:37:b3:75:95:11:01:2d:80:98: d0:81:a0:56:15:7a:9c:3e:93:f2:7c:5e:29:39:f9:ac:d1:23: ca:07:d9:04:2e:2a:e1:b2:dc:ad:ff:e3:9b:8e:58:c1:32:55: ab:ef:99:3b:0b:66:fd:27:8b:af:17:68:6a:12:d4:20:3e:20: 9f:8b:50:93:79:16:b6:ad:7b:b9:ae:ec:4a:98:ff:41:16:3a: 25:67:68:81:41:35:69:41:97:f6:ea:8d:8c:e0:06:48:58:f1: ef:3c:6b:dd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WuK08aZ7PM506DB96ctnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzY2ZDBlYmEwZDAxMmRiOGE0ZjE2MzYxYTIzMTNlNzg1YjU2MWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02YKqEOOPCbS4xVKFcqhH/spgkAs T+t0girZPQuhWix1i7bwp2YS9gJPkk2Mis/uV3gCl0Wu8xFbOfy35VC0ylECkpQZ b4i29LNZxgA2cEhbOV8Ndy9OHQAbT8csBe+hV/zwugBdUz/uN8WkRgcInBGrlcCR HWDJIY0b3v6yRCA0/Eyye3ZD9FjwXMbOf0HTUlZ8Bj5dPHarKlNOOQjx7jpvz44D dsFDU/2C/e/6PVgsPSUIzbIXwc+G30Y/MwBALr66nVgXOEGYD8D3f+0B27reoIRi Z37lOUspp435/b6opwbGLx5u3wV4ve4PuVCJ6RDM69o3OSmM2Ep3i/f9KQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGNm0Oug0BLbik8WNhojE+eFtWHIMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWTJiUTY2RFFFdHVLVHhZMkdpTVQ1NFcxWWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWdVgAwQA bbDzAwQB1dr8MA0GCSqGSIb3DQEBCwUAA4IBAQBOtC7ZEDlGbHXkWlBatwPpM9BG 1PXPT7G4XkKm1i1tW0he+jKPpbGmg/rrNipUmNvZBKEm+gFamqhczkUkraJhE1xH mFFgRfclt0NMSQ7ZFJWL2qazEiYnPYvfCImprqQCUwzuEQjfeCMlMoDVgiQsMBRr 7XDqcZPD0IRuafGiuUHfwGlpHpz88W93RLU2dFqv1IbwTmLQQAg3s3WVEQEtgJjQ gaBWFXqcPpPyfF4pOfms0SPKB9kELirhstyt/+ObjljBMlWr75k7C2b9J4uvF2hq EtQgPiCfi1CTeRa2rXu5ruxKmP9BFjolZ2iBQTVpQZf26o2M4AZIWPHvPGvd -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:23 2026 by rpki-client