This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/yhO6jjNSs_bJoAXmqMYLMOei02c.roa File: yhO6jjNSs_bJoAXmqMYLMOei02c.roa (raw, json) Hash identifier: onlwkoJ5OKhTr40KVglk32d3M7hjIqq4nk6HmNYVvsU= Subject key identifier: CA:13:BA:8E:33:52:B3:F6:C9:A0:05:E6:A8:C6:0B:30:E7:A2:D3:67 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C80815E256A3A6871697BD28E4C53CB Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/yhO6jjNSs_bJoAXmqMYLMOei02c.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206943 IP address blocks: 37.35.54.0/24 maxlen: 24 62.216.76.0/22 maxlen: 22 188.74.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:81:5e:25:6a:3a:68:71:69:7b:d2:8e:4c:53:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca13ba8e3352b3f6c9a005e6a8c60b30e7a2d367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:a0:e4:56:39:2e:2b:e5:be:bb:54:50:10: 80:f5:84:e1:7b:b4:e3:f5:2a:8c:4c:f0:d3:16:10: 41:d6:2e:13:9a:b6:25:e5:04:73:6b:fd:9d:08:60: 7a:b2:14:e3:b8:27:47:42:54:ad:56:38:dd:93:74: 43:f1:1d:88:11:24:4a:3c:e3:15:6b:ee:e4:ae:00: e2:92:08:3f:16:48:8f:98:b6:93:d0:57:14:1a:7b: d8:f0:ca:4a:01:ec:36:6b:2d:6c:24:75:c4:be:6e: 3c:49:d7:fb:b7:b1:5b:ba:57:7e:38:69:39:32:77: 55:92:a7:fd:49:8b:d5:f1:45:c2:2f:4c:5b:d1:db: e0:30:32:92:03:e0:b0:b3:72:84:22:c0:35:f1:5e: 02:a6:ae:27:97:87:47:dd:80:d5:31:10:57:62:bd: f8:77:39:84:b4:6c:06:64:89:f0:18:2a:6f:db:59: 59:ef:7e:ef:94:c4:81:15:8f:05:02:a3:2d:03:e9: 2e:18:3c:75:7c:e7:41:96:8d:8d:07:eb:ee:23:c4: 32:44:49:0a:af:47:4c:d1:9e:56:3d:85:26:1c:67: 8c:60:23:0e:cb:87:f8:77:b6:9a:9f:e4:d4:4e:15: 39:c9:dd:6b:03:fa:00:3f:13:8d:75:f1:1e:dc:f9: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:13:BA:8E:33:52:B3:F6:C9:A0:05:E6:A8:C6:0B:30:E7:A2:D3:67 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/yhO6jjNSs_bJoAXmqMYLMOei02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.35.54.0/24 62.216.76.0/22 188.74.246.0/23 Signature Algorithm: sha256WithRSAEncryption 60:42:42:6e:ed:96:28:b1:01:3f:a1:19:a9:dd:6c:34:62:0a: 18:7f:61:47:7d:cd:59:e6:c8:60:89:86:08:2c:62:01:f5:f0: b7:02:56:c6:e3:82:8f:69:1b:91:c2:c7:09:3f:90:53:af:d0: 91:f5:f4:af:e0:48:cd:c8:4c:6f:ae:82:6b:62:c8:e9:1e:67: 44:a8:93:af:56:9a:04:59:56:f9:d9:c1:29:0e:9a:ce:cc:6f: e8:eb:77:71:b6:7d:e0:e0:fb:18:f8:bc:f6:af:3d:30:d1:92: c9:aa:39:39:cc:d8:31:e0:c7:5a:2e:a5:a9:2a:ad:b4:b6:25: 81:cd:8f:19:e0:e6:30:8f:7f:22:c8:33:ac:b2:0f:7d:75:d4: a6:41:9c:4c:ae:7c:a9:e1:0f:2d:fc:be:da:65:fc:7f:25:61: 64:12:cd:45:79:54:c9:e5:e4:58:a7:b8:f6:e2:de:ae:1e:0e: 87:43:a6:a4:6d:34:aa:1d:aa:3f:27:ca:86:b7:35:56:5f:02: a4:83:1f:3a:85:18:87:37:d9:cc:77:14:29:bc:38:c3:8e:f7: f5:fa:ba:db:67:ef:81:f2:4b:da:1f:d1:06:59:1e:df:bc:93: 6d:ed:0a:7a:b6:9c:25:df:2e:e6:5c:32:ef:61:9b:1a:59:3a: f9:36:9b:12 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gIFeJWo6aHFpe9KOTFPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTEzYmE4ZTMzNTJiM2Y2YzlhMDA1ZTZhOGM2MGIzMGU3YTJkMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21ag5FY5LivlvrtUUBCA9YThe7Tj 9SqMTPDTFhBB1i4TmrYl5QRza/2dCGB6shTjuCdHQlStVjjdk3RD8R2IESRKPOMV a+7krgDikgg/FkiPmLaT0FcUGnvY8MpKAew2ay1sJHXEvm48Sdf7t7Fbuld+OGk5 MndVkqf9SYvV8UXCL0xb0dvgMDKSA+Cws3KEIsA18V4Cpq4nl4dH3YDVMRBXYr34 dzmEtGwGZInwGCpv21lZ737vlMSBFY8FAqMtA+kuGDx1fOdBlo2NB+vuI8QyREkK r0dM0Z5WPYUmHGeMYCMOy4f4d7aan+TUThU5yd1rA/oAPxONdfEe3PnYhwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMoTuo4zUrP2yaAF5qjGCzDnotNnMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEveWhPNmpqTlNzX2JKb0FYbXFNWUxNT2VpMDJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJSM2AwQC PthMAwQBvEr2MA0GCSqGSIb3DQEBCwUAA4IBAQBgQkJu7ZYosQE/oRmp3Ww0YgoY f2FHfc1Z5shgiYYILGIB9fC3AlbG44KPaRuRwscJP5BTr9CR9fSv4EjNyExvroJr YsjpHmdEqJOvVpoEWVb52cEpDprOzG/o63dxtn3g4PsY+Lz2rz0w0ZLJqjk5zNgx 4MdaLqWpKq20tiWBzY8Z4OYwj38iyDOssg99ddSmQZxMrnyp4Q8t/L7aZfx/JWFk Es1FeVTJ5eRYp7j24t6uHg6HQ6akbTSqHao/J8qGtzVWXwKkgx86hRiHN9nMdxQp vDjDjvf1+rrbZ++B8kvaH9EGWR7fvJNt7Qp6tpwl3y7mXDLvYZsaWTr5NpsS -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:59 2026 by rpki-client