This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/y_DN1NlT3WxnHFjjy8yM8EUu98c.roa File: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (raw, json) Hash identifier: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU= Subject key identifier: CB:F0:CD:D4:D9:53:DD:6C:67:1C:58:E3:CB:CC:8C:F0:45:2E:F7:C7 Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf Certificate serial: 019B76EB3C7B1143E79A23CD7D243371B40F Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/y_DN1NlT3WxnHFjjy8yM8EUu98c.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201584 IP address blocks: 91.108.188.0/24 maxlen: 24 185.199.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3c:7b:11:43:e7:9a:23:cd:7d:24:33:71:b4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbf0cdd4d953dd6c671c58e3cbcc8cf0452ef7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:b2:6c:09:47:c9:bc:02:ee:d9:0c:4a:13: f4:95:75:e3:98:18:1e:55:93:5b:40:fa:9f:9b:85: 88:e3:9f:c2:87:6d:54:0f:d9:7f:06:21:f0:20:69: 74:da:98:ec:31:1c:1a:75:d0:ac:bf:32:6f:31:99: f8:6a:1e:ed:22:b8:14:21:77:17:49:0d:db:88:70: fa:e1:39:e6:61:2e:c0:c7:04:ef:eb:32:0b:32:47: dc:9e:9f:89:2c:79:18:e1:47:5f:67:fc:5a:db:d4: df:04:98:d6:6b:36:67:b8:0e:4c:52:49:6f:7b:e1: 78:66:96:87:7d:b4:ba:b8:7e:73:1c:de:c7:ff:04: c4:3f:f7:c8:f7:5f:d6:00:ef:e6:68:f8:ce:a2:29: 71:16:da:4f:ea:6a:59:67:e2:a6:65:e0:08:8b:fc: 3f:80:70:b1:62:14:db:2b:61:b5:e5:73:79:34:4c: 54:2c:6e:9a:96:b0:1b:be:a0:5a:8d:0a:5d:47:52: ed:9c:9e:66:a6:70:2e:15:d6:63:3c:71:4e:d7:38: 88:87:9f:7e:bd:03:f0:96:02:c9:47:a0:d8:c5:41: 2a:de:90:da:79:72:b1:30:7f:24:80:54:0c:45:6b: 64:6d:bc:7a:15:87:82:9f:fb:dd:13:24:5f:0b:04: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F0:CD:D4:D9:53:DD:6C:67:1C:58:E3:CB:CC:8C:F0:45:2E:F7:C7 X509v3 Authority Key Identifier: keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/y_DN1NlT3WxnHFjjy8yM8EUu98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.188.0/24 185.199.209.0/24 Signature Algorithm: sha256WithRSAEncryption ad:3f:16:89:a0:88:57:55:b5:e7:2c:79:47:0b:08:da:99:58: 39:0f:73:c6:bd:e8:58:a3:72:b2:9d:c0:0f:38:91:49:ee:1a: 5d:55:56:f9:ec:da:86:2b:d6:fb:33:64:90:45:c4:ae:dc:f4: 5e:f5:db:89:3f:70:37:55:6f:96:84:e9:73:8d:31:d6:b2:b4: 64:df:6d:b3:35:18:75:f4:59:75:78:83:86:4c:9b:dc:e9:5b: c9:0d:3f:29:6e:6b:4e:e2:c2:05:c4:41:63:a2:de:10:30:9c: 34:22:18:4d:b7:06:2d:f1:77:8a:28:0b:a2:af:fc:de:87:11: 48:96:ee:c8:d7:a5:15:02:09:33:5a:3c:70:05:91:79:b2:bd: 66:17:a5:e2:21:27:8d:af:7f:cd:f3:e9:96:26:e9:c7:38:5f: 29:8d:7f:4c:67:82:6b:f5:dc:e0:af:90:a1:59:b5:8c:c5:32: 54:99:03:2b:4e:3e:1d:6a:a0:b6:46:5c:2a:64:96:3a:cc:1f: 82:9b:4a:c4:ed:04:b7:cc:00:09:b3:2b:d1:e3:d0:41:48:ef: c3:13:93:fe:df:26:3c:57:34:51:10:55:a7:7c:7c:2d:4b:2a: da:c3:e8:b5:00:89:bc:9d:bb:b1:54:3a:6e:95:67:f6:23:cb: a4:0f:98:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26zx7EUPnmiPNfSQzcbQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNjdhODQwZTQxYWM2NmY4ZjM1OWNjYmQ2NTM1NGM5MTcw NDJiYmYwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmYwY2RkNGQ5NTNkZDZjNjcxYzU4ZTNjYmNjOGNmMDQ1MmVmN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5GybAlHybwC7tkMShP0lXXjmBge VZNbQPqfm4WI45/Ch21UD9l/BiHwIGl02pjsMRwaddCsvzJvMZn4ah7tIrgUIXcX SQ3biHD64TnmYS7AxwTv6zILMkfcnp+JLHkY4UdfZ/xa29TfBJjWazZnuA5MUklv e+F4ZpaHfbS6uH5zHN7H/wTEP/fI91/WAO/maPjOoilxFtpP6mpZZ+KmZeAIi/w/ gHCxYhTbK2G15XN5NExULG6alrAbvqBajQpdR1LtnJ5mpnAuFdZjPHFO1ziIh59+ vQPwlgLJR6DYxUEq3pDaeXKxMH8kgFQMRWtkbbx6FYeCn/vdEyRfCwSLXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMvwzdTZU91sZxxY48vMjPBFLvfHMB8GA1UdIwQY MBaAFOtnqEDkGsZvjzWcy9ZTVMkXBCu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMt MzRmY2M0MTg3MTQ0LzEveV9ETjFObFQzV3huSEZqank4eU04RVV1OThjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMtMzRmY2M0MTg3MTQ0 LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2y8AwQA ucfRMA0GCSqGSIb3DQEBCwUAA4IBAQCtPxaJoIhXVbXnLHlHCwjamVg5D3PGvehY o3KyncAPOJFJ7hpdVVb57NqGK9b7M2SQRcSu3PRe9duJP3A3VW+WhOlzjTHWsrRk 322zNRh19Fl1eIOGTJvc6VvJDT8pbmtO4sIFxEFjot4QMJw0IhhNtwYt8XeKKAui r/zehxFIlu7I16UVAgkzWjxwBZF5sr1mF6XiISeNr3/N8+mWJunHOF8pjX9MZ4Jr 9dzgr5ChWbWMxTJUmQMrTj4daqC2RlwqZJY6zB+Cm0rE7QS3zAAJsyvR49BBSO/D E5P+3yY8VzRREFWnfHwtSyraw+i1AIm8nbuxVDpulWf2I8ukD5gH -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:07 2026 by rpki-client