This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/y_l5I-08oYpHriEipp4h8dgrSr8.roa File: y_l5I-08oYpHriEipp4h8dgrSr8.roa (raw, json) Hash identifier: Sudmmxuxp4Gm0euuCyvwJqn5dRNkNZeSNEf/mCRLjYc= Subject key identifier: CB:F9:79:23:ED:3C:A1:8A:47:AE:21:22:A6:9E:21:F1:D8:2B:4A:BF Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 019B7BA3C2B1E5A142CC3629320072987B55 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/y_l5I-08oYpHriEipp4h8dgrSr8.roa Signing time: Thu 01 Jan 2026 22:18:08 +0000 ROA not before: Thu 01 Jan 2026 22:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61960 IP address blocks: 91.243.120.0/23 maxlen: 24 185.54.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c2:b1:e5:a1:42:cc:36:29:32:00:72:98:7b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jan 1 22:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbf97923ed3ca18a47ae2122a69e21f1d82b4abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:a3:81:fd:21:5e:7d:e5:f7:87:bc:34:5e: 18:dc:2c:62:be:f3:d1:0f:13:59:5d:12:4b:4a:a9: 7b:97:1e:eb:14:c2:8c:93:7d:c5:ef:fe:96:eb:e7: ff:65:b1:87:85:2a:b2:4f:98:0f:39:5d:48:ff:53: b0:65:00:24:34:01:bc:25:1c:7d:7f:e7:3d:9f:a2: 69:21:c0:bf:62:f0:8c:ab:5f:50:b6:7a:ac:da:31: 72:d6:ea:5f:01:d0:c7:4e:f6:89:c0:4e:fb:6e:1a: 64:a0:1d:80:e1:f2:41:b5:79:48:39:67:fe:8c:7f: 87:b6:83:d3:58:a8:26:21:78:d5:c9:4b:de:53:ba: 3b:8d:b1:ee:81:39:a5:38:26:1e:ae:61:4f:27:2d: e9:df:df:3a:37:e7:fb:0f:f2:42:10:a1:65:57:5a: 86:0b:93:2a:9a:07:c1:85:98:54:86:7a:a0:03:e6: be:a5:fa:3e:d2:91:a6:d9:de:fc:3c:be:61:a5:8b: 70:f2:5e:09:b8:9f:ce:b6:6f:a1:39:d3:b4:81:67: 03:ab:fc:d5:68:4c:7f:01:5c:c6:cb:f1:01:c2:79: 7c:24:1d:ee:84:1a:99:14:78:05:cd:1b:9c:1d:82: e3:57:60:5a:6d:59:12:ad:59:bc:f0:2c:93:e2:28: 51:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F9:79:23:ED:3C:A1:8A:47:AE:21:22:A6:9E:21:F1:D8:2B:4A:BF X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/y_l5I-08oYpHriEipp4h8dgrSr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.243.120.0/23 185.54.48.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:39:1b:d2:84:0b:ec:68:61:f8:80:ae:0c:53:40:16:c5:cc: fb:eb:8b:6b:b9:34:6c:4a:7a:e4:6e:67:6b:d0:c7:b8:83:a3: 6a:2d:23:e1:d9:be:bd:fe:b5:b0:32:ec:68:45:99:8a:b6:f3: d2:08:39:4f:42:c2:b1:ee:29:70:c8:8c:a9:85:56:6c:ef:e1: 7f:6d:86:73:3b:3d:56:bd:86:74:c7:6c:d0:8c:46:92:3a:2d: 49:c5:0b:fe:00:6c:78:c8:01:2a:da:89:31:17:7e:a8:da:b8: 6a:1c:48:42:7d:7e:55:8a:f5:50:b5:d0:fc:20:14:d7:25:b2: 32:1d:4f:68:27:91:38:24:ca:c3:de:b4:b9:82:9c:fa:e2:4a: ba:08:55:e2:3d:40:8e:d9:1c:05:05:19:ec:2c:60:ea:6d:1c: 63:c0:11:c6:84:36:fc:5e:1c:38:07:9c:b8:54:68:4a:c1:c7: e9:89:43:86:d1:68:64:6c:fe:3f:bc:6a:8d:a4:84:16:50:5c: dc:89:e0:13:e7:34:c2:04:d7:94:97:a7:6a:22:56:8f:92:57: 09:18:57:77:21:68:c4:ca:3c:39:bf:ac:01:0a:2e:62:bb:ca: dc:cb:1e:46:4b:2f:52:4c:e2:9e:65:a6:5d:6d:32:7b:71:f9: 27:47:5f:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o8Kx5aFCzDYpMgBymHtVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjYwMTAxMjIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmY5NzkyM2VkM2NhMThhNDdhZTIxMjJhNjllMjFmMWQ4MmI0YWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Ojgf0hXn3l94e8NF4Y3CxivvPR DxNZXRJLSql7lx7rFMKMk33F7/6W6+f/ZbGHhSqyT5gPOV1I/1OwZQAkNAG8JRx9 f+c9n6JpIcC/YvCMq19Qtnqs2jFy1upfAdDHTvaJwE77bhpkoB2A4fJBtXlIOWf+ jH+HtoPTWKgmIXjVyUveU7o7jbHugTmlOCYermFPJy3p3986N+f7D/JCEKFlV1qG C5MqmgfBhZhUhnqgA+a+pfo+0pGm2d78PL5hpYtw8l4JuJ/Otm+hOdO0gWcDq/zV aEx/AVzGy/EBwnl8JB3uhBqZFHgFzRucHYLjV2BabVkSrVm88CyT4ihRtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMv5eSPtPKGKR64hIqaeIfHYK0q/MB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEveV9sNUktMDhvWXBIcmlFaXBwNGg4ZGdyU3I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW/N4AwQC uTYwMA0GCSqGSIb3DQEBCwUAA4IBAQAqORvShAvsaGH4gK4MU0AWxcz764truTRs Snrkbmdr0Me4g6NqLSPh2b69/rWwMuxoRZmKtvPSCDlPQsKx7ilwyIyphVZs7+F/ bYZzOz1WvYZ0x2zQjEaSOi1JxQv+AGx4yAEq2okxF36o2rhqHEhCfX5VivVQtdD8 IBTXJbIyHU9oJ5E4JMrD3rS5gpz64kq6CFXiPUCO2RwFBRnsLGDqbRxjwBHGhDb8 Xhw4B5y4VGhKwcfpiUOG0WhkbP4/vGqNpIQWUFzcieAT5zTCBNeUl6dqIlaPklcJ GFd3IWjEyjw5v6wBCi5iu8rcyx5GSy9STOKeZaZdbTJ7cfknR19c -----END CERTIFICATE-----Generated at Wed Jan 21 19:41:31 2026 by rpki-client