This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/y-ScFLanDsjVsM3wGQyWrMPavCs.roa File: y-ScFLanDsjVsM3wGQyWrMPavCs.roa (raw, json) Hash identifier: EfxOZrUcMelgWorEhLZGI65x8ngLIwOn6wnoqi8/fyc= Subject key identifier: CB:E4:9C:14:B6:A7:0E:C8:D5:B0:CD:F0:19:0C:96:AC:C3:DA:BC:2B Certificate issuer: /CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66 Certificate serial: 019B7835486521FBDE9EED416DE573C816C0 Authority key identifier: AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/y-ScFLanDsjVsM3wGQyWrMPavCs.roa Signing time: Thu 01 Jan 2026 06:18:36 +0000 ROA not before: Thu 01 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56513 IP address blocks: 91.224.172.0/23 maxlen: 23 91.224.172.0/24 maxlen: 24 91.224.173.0/24 maxlen: 24 2001:67c:548::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:48:65:21:fb:de:9e:ed:41:6d:e5:73:c8:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbe49c14b6a70ec8d5b0cdf0190c96acc3dabc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:20:f3:e3:10:88:fe:fb:3a:f6:30:ab:c5: cf:de:fc:d4:f6:13:19:e3:c2:93:fb:8d:43:c6:c1: 9a:33:41:2c:09:22:60:47:87:04:21:f6:93:46:2a: 4b:8e:9c:d2:f8:73:41:4b:26:7a:b9:65:0c:48:a0: 6e:db:9c:06:1f:51:9d:8e:10:fe:f5:e7:ac:b8:21: c4:fc:86:a7:f0:58:de:10:0b:51:2f:3f:6d:60:81: d0:94:12:94:e5:d9:d0:91:51:1c:4a:60:eb:02:c9: e8:f3:b0:b8:30:8e:5a:56:cd:f6:62:63:a3:d3:ec: 4e:b7:0a:03:09:08:d4:59:e3:0a:a5:40:d0:29:f7: e5:f8:e2:b1:7e:7b:15:8d:13:e7:0a:44:98:20:4b: ea:9c:1c:6b:d7:42:d1:76:07:19:f3:d2:50:36:89: 38:68:a6:d7:d1:db:87:bf:fb:98:5a:f5:51:a8:5d: fa:36:d5:24:85:b6:ec:47:d9:c0:52:82:1f:ca:9e: 57:8a:7b:67:57:2c:d6:0a:25:af:c1:9c:80:8b:83: 4a:5c:00:3d:19:bf:ad:93:fb:8f:a4:0e:6a:d7:0e: 42:5b:03:ff:02:ff:95:96:7d:0d:b9:75:75:8d:bf: e7:50:90:c3:24:a7:4b:96:fb:13:3e:4d:27:98:b8: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E4:9C:14:B6:A7:0E:C8:D5:B0:CD:F0:19:0C:96:AC:C3:DA:BC:2B X509v3 Authority Key Identifier: keyid:AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/y-ScFLanDsjVsM3wGQyWrMPavCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.172.0/23 IPv6: 2001:67c:548::/48 Signature Algorithm: sha256WithRSAEncryption 43:ec:53:99:aa:88:1c:85:91:c0:be:ca:33:5f:f5:5b:cb:58: 9b:79:ac:3f:70:c9:e2:9f:6e:64:e7:cb:b7:c3:34:71:b0:dc: 60:fb:f9:0a:63:22:6b:55:8a:01:2c:de:1d:c7:e0:1f:fb:4b: c6:00:cc:ec:cb:ed:e1:1c:6a:b8:94:4d:05:c6:c9:1c:cc:d6: eb:e8:00:e3:bf:a9:02:af:89:4d:7c:48:8e:b1:5e:4c:33:42: 60:9a:f8:67:2d:d6:a9:71:1c:9c:f4:90:2e:90:a5:06:44:b7: a0:2f:5d:94:01:dc:ef:a8:b1:08:fd:08:d8:3a:3c:09:f7:de: 76:03:44:57:35:c6:bd:5d:1b:b8:09:dd:4a:03:52:47:af:40: 4a:e2:ae:15:34:7c:a8:ab:bf:44:37:b8:3f:01:52:88:69:c0: f8:83:41:d1:d4:f2:65:15:e3:ab:e5:26:15:2c:04:82:ff:d2: 43:72:7e:b4:9f:3c:94:b6:17:e7:44:7b:ac:95:ab:f1:66:f1: 7d:c7:7e:c9:0e:b0:30:a6:8e:d9:2c:c4:51:bb:73:d8:c4:3c: ad:ea:c4:9c:a7:93:c7:17:5c:c7:64:4b:ff:b2:d1:bb:e3:ee: 13:62:76:e9:26:72:7c:29:ea:83:b9:e2:bf:be:db:9e:14:7d: 95:ae:83:93 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NUhlIfvenu1BbeVzyBbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNDUzNjRlNDlkYzNhMTViZWZmMjY5YzNhMzJiM2MwNTQx YzhiNjYwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmU0OWMxNGI2YTcwZWM4ZDViMGNkZjAxOTBjOTZhY2MzZGFiYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6gg8+MQiP77OvYwq8XP3vzU9hMZ 48KT+41DxsGaM0EsCSJgR4cEIfaTRipLjpzS+HNBSyZ6uWUMSKBu25wGH1GdjhD+ 9eesuCHE/Ian8FjeEAtRLz9tYIHQlBKU5dnQkVEcSmDrAsno87C4MI5aVs32YmOj 0+xOtwoDCQjUWeMKpUDQKffl+OKxfnsVjRPnCkSYIEvqnBxr10LRdgcZ89JQNok4 aKbX0duHv/uYWvVRqF36NtUkhbbsR9nAUoIfyp5XintnVyzWCiWvwZyAi4NKXAA9 Gb+tk/uPpA5q1w5CWwP/Av+Vln0NuXV1jb/nUJDDJKdLlvsTPk0nmLhXyQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMvknBS2pw7I1bDN8BkMlqzD2rwrMB8GA1UdIwQY MBaAFKtFNk5J3DoVvv8mnDoys8BUHItmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTBVMlRrbmNPaFctX3lhY09qS3p3RlFjaTJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81YWFmMjUtOTc0OC00NTkyLWE0OTct ZjhiZDI1MDQ1NGViLzEveS1TY0ZMYW5Ec2pWc00zd0dReVdyTVBhdkNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny81YWFmMjUtOTc0OC00NTkyLWE0OTctZjhiZDI1MDQ1NGVi LzEvcTBVMlRrbmNPaFctX3lhY09qS3p3RlFjaTJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+CsMA8E AgACMAkDBwAgAQZ8BUgwDQYJKoZIhvcNAQELBQADggEBAEPsU5mqiByFkcC+yjNf 9VvLWJt5rD9wyeKfbmTny7fDNHGw3GD7+QpjImtVigEs3h3H4B/7S8YAzOzL7eEc ariUTQXGyRzM1uvoAOO/qQKviU18SI6xXkwzQmCa+Gct1qlxHJz0kC6QpQZEt6Av XZQB3O+osQj9CNg6PAn33nYDRFc1xr1dG7gJ3UoDUkevQErirhU0fKirv0Q3uD8B UohpwPiDQdHU8mUV46vlJhUsBIL/0kNyfrSfPJS2F+dEe6yVq/Fm8X3HfskOsDCm jtksxFG7c9jEPK3qxJynk8cXXMdkS/+y0bvj7hNidukmcnwp6oO54r++254UfZWu g5M= -----END CERTIFICATE-----Generated at Tue Feb 10 04:50:19 2026 by rpki-client