This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/y_GQcAQDbkFTHL71hHYsT9LG7hc.roa File: y_GQcAQDbkFTHL71hHYsT9LG7hc.roa (raw, json) Hash identifier: 2J6Fy5jG8JnfTzvk3RxBPKppQZeZ6SvRqxBPKKzZurU= Subject key identifier: CB:F1:90:70:04:03:6E:41:53:1C:BE:F5:84:76:2C:4F:D2:C6:EE:17 Certificate issuer: /CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7 Certificate serial: 019B7DC9EB7DB6380485DB6B7502A326BEB9 Authority key identifier: 7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/y_GQcAQDbkFTHL71hHYsT9LG7hc.roa Signing time: Fri 02 Jan 2026 08:19:03 +0000 ROA not before: Fri 02 Jan 2026 08:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56811 IP address blocks: 91.227.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:eb:7d:b6:38:04:85:db:6b:75:02:a3:26:be:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7 Validity Not Before: Jan 2 08:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbf1907004036e41531cbef584762c4fd2c6ee17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:97:87:79:71:16:b9:73:56:f2:2a:58:e8: c7:96:f0:59:2b:43:39:63:5b:50:dc:8d:14:55:5d: 6a:9e:25:cf:d9:71:a4:53:cb:36:d7:c8:c0:21:ad: 66:2c:2a:ae:b9:02:27:c1:aa:f2:de:c1:ed:34:e9: 7b:b8:af:54:78:27:8c:74:71:75:b9:4b:49:b1:c0: f5:9e:4b:c8:2e:d8:00:b6:d1:6f:3c:33:aa:c8:08: f0:af:82:16:13:d2:81:2a:9d:b0:ec:d6:19:01:07: c6:1f:07:ba:51:b9:db:54:86:26:0d:74:43:15:2a: 5f:4c:f1:a7:00:bd:dd:3b:cb:d3:d7:ad:3a:94:76: 78:f9:ee:bc:69:29:a9:98:c1:ac:22:3b:7e:c3:03: 4b:50:e3:36:28:5f:e3:09:b9:12:b9:a3:99:eb:ef: b3:21:15:bb:8b:ef:06:c0:74:c4:44:93:b4:e6:85: ba:ff:e2:dc:31:92:34:2b:19:0b:3f:17:e2:3a:2c: 67:a3:d3:6c:2b:08:df:18:25:5f:1d:b2:3c:79:04: 51:77:35:89:f7:e3:4f:94:b4:e1:01:7f:88:6f:33: f3:6c:a8:0e:86:da:f2:6b:a5:01:c3:d5:bf:8d:01: 45:0b:27:48:71:2c:59:e8:44:f7:93:4e:52:16:5d: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F1:90:70:04:03:6E:41:53:1C:BE:F5:84:76:2C:4F:D2:C6:EE:17 X509v3 Authority Key Identifier: keyid:7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/y_GQcAQDbkFTHL71hHYsT9LG7hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.255.0/24 Signature Algorithm: sha256WithRSAEncryption e9:4c:8c:5c:d4:fd:38:b6:1c:b8:15:ae:1d:6a:92:44:5d:9e: 43:d9:a0:32:7e:48:2d:fb:4e:44:11:52:b3:69:c2:aa:03:d4: 23:d4:64:b3:f1:b7:19:8b:57:fe:77:f2:ff:90:f7:59:ce:90: 89:1f:00:0d:1e:ac:d7:79:9b:19:c9:31:4d:79:a2:91:c3:4c: 27:ef:8a:05:f3:44:41:4a:d6:ed:ec:87:83:e8:e6:53:7d:46: 64:5a:bc:51:33:f3:33:7e:e1:51:34:5f:0e:55:4d:ac:65:0e: 03:4b:47:a7:ca:e8:3c:69:fc:7d:e4:e9:7a:83:bb:b1:99:1f: b2:04:b2:99:93:7f:ca:e6:28:e8:af:a6:08:48:d4:4b:a4:e7: 33:0b:80:a1:a5:6a:67:b7:0b:fc:44:d3:77:05:cc:1b:6a:6c: 33:cb:48:ff:ea:74:33:11:12:9e:68:9e:b0:3d:83:98:b1:03: 91:e8:33:2a:f9:97:7e:48:f0:25:f0:51:74:dd:61:4e:8e:0d: 96:2f:55:03:dd:4e:91:37:41:fe:2c:18:2f:57:99:18:30:c9: a9:c9:31:e8:2e:d8:74:4a:c3:66:0f:6a:4d:45:f3:ce:ec:c0: c2:f9:d4:87:f3:cd:25:ca:81:46:55:63:ff:e4:48:f8:2c:e0: 20:fd:d0:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yet9tjgEhdtrdQKjJr65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjRmY2E3NzNlOTlmNmFkYzgxYWEzY2U1YzYzNjIzZWUy YjFkZDcwHhcNMjYwMTAyMDgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmYxOTA3MDA0MDM2ZTQxNTMxY2JlZjU4NDc2MmM0ZmQyYzZlZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RWXh3lxFrlzVvIqWOjHlvBZK0M5 Y1tQ3I0UVV1qniXP2XGkU8s218jAIa1mLCquuQInwary3sHtNOl7uK9UeCeMdHF1 uUtJscD1nkvILtgAttFvPDOqyAjwr4IWE9KBKp2w7NYZAQfGHwe6UbnbVIYmDXRD FSpfTPGnAL3dO8vT1606lHZ4+e68aSmpmMGsIjt+wwNLUOM2KF/jCbkSuaOZ6++z IRW7i+8GwHTERJO05oW6/+LcMZI0KxkLPxfiOixno9NsKwjfGCVfHbI8eQRRdzWJ 9+NPlLThAX+IbzPzbKgOhtrya6UBw9W/jQFFCydIcSxZ6ET3k05SFl05BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMvxkHAEA25BUxy+9YR2LE/Sxu4XMB8GA1UdIwQY MBaAFH5k/Kdz6Z9q3IGqPOXGNiPuKx3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1UOHAzUHBuMnJjZ2FvODVjWTJJLTRySGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80ODBkMzYtZDFmZC00ZWViLWI5Yjgt YzUyZGZiMjg5ODQzLzEveV9HUWNBUURia0ZUSEw3MWhIWXNUOUxHN2hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80ODBkMzYtZDFmZC00ZWViLWI5YjgtYzUyZGZiMjg5ODQz LzEvZm1UOHAzUHBuMnJjZ2FvODVjWTJJLTRySGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+P/MA0G CSqGSIb3DQEBCwUAA4IBAQDpTIxc1P04thy4Fa4dapJEXZ5D2aAyfkgt+05EEVKz acKqA9Qj1GSz8bcZi1f+d/L/kPdZzpCJHwANHqzXeZsZyTFNeaKRw0wn74oF80RB Stbt7IeD6OZTfUZkWrxRM/MzfuFRNF8OVU2sZQ4DS0enyug8afx95Ol6g7uxmR+y BLKZk3/K5ijor6YISNRLpOczC4ChpWpntwv8RNN3Bcwbamwzy0j/6nQzERKeaJ6w PYOYsQOR6DMq+Zd+SPAl8FF03WFOjg2WL1UD3U6RN0H+LBgvV5kYMMmpyTHoLth0 SsNmD2pNRfPO7MDC+dSH880lyoFGVWP/5Ej4LOAg/dAm -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:36 2026 by rpki-client