This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/yB6M8ezFHQHag23503sXzkmX4yQ.roa File: yB6M8ezFHQHag23503sXzkmX4yQ.roa (raw, json) Hash identifier: epvHA2OWGmIXHjeNZ2bPshcPm5dCsn8VP6Fq2wrQdO0= Subject key identifier: C8:1E:8C:F1:EC:C5:1D:01:DA:83:6D:F9:D3:7B:17:CE:49:97:E3:24 Certificate issuer: /CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e Certificate serial: 019B775905F9575A3CAC56E7E71997C674A2 Authority key identifier: 95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/yB6M8ezFHQHag23503sXzkmX4yQ.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60215 IP address blocks: 91.212.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:05:f9:57:5a:3c:ac:56:e7:e7:19:97:c6:74:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c81e8cf1ecc51d01da836df9d37b17ce4997e324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:10:4d:08:48:42:be:66:5d:b5:a8:3f:f1: c7:72:15:3b:55:b9:23:a2:5b:26:eb:11:30:2f:04: 14:5e:5e:3c:c4:dd:c3:9f:11:8b:2b:e0:76:95:40: 7e:bd:08:3c:4a:12:a5:14:22:95:27:f2:f9:ae:b2: 21:d1:6b:99:78:bb:7a:73:5b:b2:ff:89:b6:3d:df: f2:f0:84:21:3b:8b:61:a1:0a:cb:ab:c8:50:43:05: 25:67:f6:12:e8:4f:37:67:1b:65:ec:9e:2a:e2:f2: a3:6d:d0:24:7c:93:1f:db:42:67:38:26:10:3a:26: 3f:cf:eb:5f:9c:58:de:53:0e:a7:b3:ad:cd:48:4c: 65:35:83:ff:a0:94:9f:d1:bf:d0:d6:31:a4:2b:2f: 00:6a:bb:89:73:6a:26:4e:c1:d3:d4:9f:2c:c0:66: e4:aa:1b:32:02:f7:f8:fd:d7:d5:65:0b:46:e7:cc: 18:03:58:f4:09:94:57:b1:2c:b0:73:f2:da:da:e9: d8:a2:d5:76:00:c0:ba:21:51:8f:ad:76:7d:63:8b: 62:1d:f8:48:9e:90:a5:a8:84:7e:fa:83:65:15:68: b1:29:c4:6e:9e:a4:3c:04:eb:ba:f2:1d:c4:81:cf: 8d:17:01:ab:f0:f3:54:93:66:35:be:64:7f:fb:d1: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1E:8C:F1:EC:C5:1D:01:DA:83:6D:F9:D3:7B:17:CE:49:97:E3:24 X509v3 Authority Key Identifier: keyid:95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/yB6M8ezFHQHag23503sXzkmX4yQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.24.0/24 Signature Algorithm: sha256WithRSAEncryption 62:2c:7e:fa:63:cf:58:8e:fb:99:37:ff:61:f2:34:52:f8:8e: fa:53:a3:9e:19:0a:df:7e:96:c3:34:6e:4e:9b:85:84:63:9c: c9:96:52:97:18:2c:6f:89:22:3f:c6:d7:c1:9a:5c:78:41:c2: 75:00:63:67:a6:c8:bb:9d:69:e7:78:db:92:f7:eb:25:ac:ae: c3:99:7a:ec:14:40:6a:87:e5:0e:03:b2:f1:a8:f4:1b:b7:bb: c5:20:d9:90:1a:2a:6b:9c:e3:2a:57:cb:99:53:b3:24:08:bc: c4:aa:30:48:e9:cb:4b:05:96:06:4f:bf:24:a3:ac:1f:1b:06: ac:3c:96:2a:b6:7a:d7:03:5f:ee:5f:e7:0f:ac:cb:85:da:8b: 81:b6:5d:23:40:c0:c5:09:b2:dd:84:83:e4:f1:c5:c0:38:9e: 81:3d:2b:bd:37:8d:08:84:28:09:2b:70:c5:bc:ac:b0:f0:84: 98:da:91:cf:d1:d8:72:67:67:f9:b9:cb:57:7e:37:04:97:88: b9:20:62:1c:9f:ce:9a:a9:51:37:9c:62:35:47:c7:2c:d8:40: 2f:3a:02:3f:e3:8a:df:36:1a:82:e6:5a:31:d9:6c:3b:d3:84: 3b:f1:20:c3:5b:28:75:75:33:fb:be:5e:03:6b:2a:73:a4:78: e6:f0:da:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQX5V1o8rFbn5xmXxnSiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MGYyODRjZjVjMzlmMjZkZGQyMzUyZTdmMmFkZjdhOGRj NjBmOGUwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODFlOGNmMWVjYzUxZDAxZGE4MzZkZjlkMzdiMTdjZTQ5OTdlMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscsQTQhIQr5mXbWoP/HHchU7Vbkj olsm6xEwLwQUXl48xN3DnxGLK+B2lUB+vQg8ShKlFCKVJ/L5rrIh0WuZeLt6c1uy /4m2Pd/y8IQhO4thoQrLq8hQQwUlZ/YS6E83Zxtl7J4q4vKjbdAkfJMf20JnOCYQ OiY/z+tfnFjeUw6ns63NSExlNYP/oJSf0b/Q1jGkKy8AaruJc2omTsHT1J8swGbk qhsyAvf4/dfVZQtG58wYA1j0CZRXsSywc/La2unYotV2AMC6IVGPrXZ9Y4tiHfhI npClqIR++oNlFWixKcRunqQ8BOu68h3Egc+NFwGr8PNUk2Y1vmR/+9E/uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgejPHsxR0B2oNt+dN7F85Jl+MkMB8GA1UdIwQY MBaAFJUPKEz1w58m3dI1Ln8q33qNxg+OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFE4b1RQWERueWJkMGpVdWZ5cmZlbzNHRDQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xOTc0ZWUtNDA4Zi00MTIwLThmMTkt ZmEyZjBkNTRiMWQxLzEveUI2TThlekZIUUhhZzIzNTAzc1h6a21YNHlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xOTc0ZWUtNDA4Zi00MTIwLThmMTktZmEyZjBkNTRiMWQx LzEvbFE4b1RQWERueWJkMGpVdWZ5cmZlbzNHRDQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QYMA0G CSqGSIb3DQEBCwUAA4IBAQBiLH76Y89YjvuZN/9h8jRS+I76U6OeGQrffpbDNG5O m4WEY5zJllKXGCxviSI/xtfBmlx4QcJ1AGNnpsi7nWnneNuS9+slrK7DmXrsFEBq h+UOA7LxqPQbt7vFINmQGiprnOMqV8uZU7MkCLzEqjBI6ctLBZYGT78ko6wfGwas PJYqtnrXA1/uX+cPrMuF2ouBtl0jQMDFCbLdhIPk8cXAOJ6BPSu9N40IhCgJK3DF vKyw8ISY2pHP0dhyZ2f5uctXfjcEl4i5IGIcn86aqVE3nGI1R8cs2EAvOgI/44rf NhqC5lox2Ww704Q78SDDWyh1dTP7vl4DaypzpHjm8Nou -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:12 2026 by rpki-client