This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/Ym1MgRv-50h_8HgOmRXao0XyVRI.roa File: Ym1MgRv-50h_8HgOmRXao0XyVRI.roa (raw, json) Hash identifier: QCOXuZU6xfCdgok7iSaeanqJZnLc1XTx+TNhtGwPM/g= Subject key identifier: 62:6D:4C:81:1B:FE:E7:48:7F:F0:78:0E:99:15:DA:A3:45:F2:55:12 Certificate issuer: /CN=7982802ce71830590b26aba9971e12f6ae18dcee Certificate serial: 019B7F144F2D7A7118E7283D7CD1C170924F Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/Ym1MgRv-50h_8HgOmRXao0XyVRI.roa Signing time: Fri 02 Jan 2026 14:19:56 +0000 ROA not before: Fri 02 Jan 2026 14:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197357 IP address blocks: 91.220.63.0/24 maxlen: 24 2001:67c:a70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4f:2d:7a:71:18:e7:28:3d:7c:d1:c1:70:92:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee Validity Not Before: Jan 2 14:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=626d4c811bfee7487ff0780e9915daa345f25512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:dd:6f:a8:bb:d8:65:68:91:5f:00:06:cb: 34:74:4c:9c:d9:1e:92:96:c6:81:27:38:b6:31:52: 57:08:dd:12:ec:c2:2c:ba:6b:13:1c:49:63:56:7f: ff:65:ae:22:87:24:19:b2:2a:a9:5b:1c:c6:13:ce: 69:ca:47:e0:ac:25:9b:f9:17:88:4a:79:fa:89:c1: 23:41:e0:8e:5d:9b:0f:72:f8:08:dc:f8:a2:f5:33: ab:ff:75:c3:e7:e0:8e:bd:49:d4:2b:4a:84:4d:c7: 96:15:aa:08:c0:43:09:4d:bf:2d:8c:cb:0a:a3:74: 56:49:48:0b:20:80:e0:0f:41:30:29:42:fc:55:2d: ba:b5:1b:ff:ec:cc:70:75:40:28:c7:ee:b1:cd:44: b0:da:16:10:88:3e:0e:77:3d:a4:4f:95:55:1c:2c: 98:8e:29:2c:0a:1b:af:e0:b5:86:55:36:d2:7b:13: 88:94:95:a8:cf:a3:ec:e0:b0:ed:e4:3d:67:02:be: 1f:78:92:89:f1:da:4f:53:33:76:5e:44:78:98:67: 68:32:8b:cf:7e:e2:e4:1b:48:30:73:dd:d6:f4:c7: a7:64:4c:5a:61:5b:87:ec:4a:50:52:d0:7c:c4:de: 4d:33:7d:62:8b:94:8e:7a:ed:9f:71:85:9a:bb:43: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6D:4C:81:1B:FE:E7:48:7F:F0:78:0E:99:15:DA:A3:45:F2:55:12 X509v3 Authority Key Identifier: keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/Ym1MgRv-50h_8HgOmRXao0XyVRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.63.0/24 IPv6: 2001:67c:a70::/48 Signature Algorithm: sha256WithRSAEncryption 6a:dd:23:77:5d:20:79:91:bb:7d:b9:d5:a1:59:fc:3f:8b:a2: 58:f8:2a:c2:97:5b:85:01:10:bb:c4:b1:a8:2d:78:d9:ce:79: 4d:aa:e3:42:ee:bd:d1:5e:d2:51:4a:54:88:9a:80:1b:45:5a: d2:1e:e4:ff:d5:fc:7c:d1:12:03:ea:61:d9:ba:9f:57:cf:0e: 97:02:c6:a4:04:79:99:02:51:89:5d:d3:d8:d1:1d:7e:ef:ea: d0:e6:27:d1:cc:0a:d5:0b:dd:54:f4:b8:07:15:40:d9:88:4a: 9f:67:8f:89:5a:e6:d3:ad:5f:31:fe:32:21:1e:9b:4a:04:42: f1:36:8c:c9:e1:6b:71:cc:5b:b9:9d:b6:94:ff:3e:90:86:2f: 63:d0:d8:b6:95:8f:ee:1e:6e:eb:02:37:a3:c6:5f:29:2e:c2: 34:4e:0d:12:30:5b:9c:c3:be:24:82:76:23:e6:cc:03:00:d2: 0c:6f:de:4d:f6:a5:e6:75:78:70:3c:cc:4f:79:a7:48:74:01: b4:89:0e:82:48:cb:f0:3a:1e:8a:41:33:ef:f9:3b:29:af:02: 06:d5:eb:58:6d:19:20:64:64:04:f6:2d:60:28:cd:3a:96:d1: 9d:2a:ab:b6:ae:fc:b3:17:55:cf:71:50:95:d3:ab:27:6c:4f: 5b:ec:9b:99 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FE8tenEY5yg9fNHBcJJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ODI4MDJjZTcxODMwNTkwYjI2YWJhOTk3MWUxMmY2YWUx OGRjZWUwHhcNMjYwMTAyMTQxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjZkNGM4MTFiZmVlNzQ4N2ZmMDc4MGU5OTE1ZGFhMzQ1ZjI1NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbDdb6i72GVokV8ABss0dEyc2R6S lsaBJzi2MVJXCN0S7MIsumsTHEljVn//Za4ihyQZsiqpWxzGE85pykfgrCWb+ReI Snn6icEjQeCOXZsPcvgI3Pii9TOr/3XD5+COvUnUK0qETceWFaoIwEMJTb8tjMsK o3RWSUgLIIDgD0EwKUL8VS26tRv/7MxwdUAox+6xzUSw2hYQiD4Odz2kT5VVHCyY jiksChuv4LWGVTbSexOIlJWoz6Ps4LDt5D1nAr4feJKJ8dpPUzN2XkR4mGdoMovP fuLkG0gwc93W9MenZExaYVuH7EpQUtB8xN5NM31ii5SOeu2fcYWau0O+XQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGJtTIEb/udIf/B4DpkV2qNF8lUSMB8GA1UdIwQY MBaAFHmCgCznGDBZCyarqZceEvauGNzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUt ZGNkZjI0NDE0OTg5LzEvWW0xTWdSdi01MGhfOEhnT21SWGFvMFh5VlJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUtZGNkZjI0NDE0OTg5 LzEvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9w/MA8E AgACMAkDBwAgAQZ8CnAwDQYJKoZIhvcNAQELBQADggEBAGrdI3ddIHmRu3251aFZ /D+Lolj4KsKXW4UBELvEsagteNnOeU2q40LuvdFe0lFKVIiagBtFWtIe5P/V/HzR EgPqYdm6n1fPDpcCxqQEeZkCUYld09jRHX7v6tDmJ9HMCtUL3VT0uAcVQNmISp9n j4la5tOtXzH+MiEem0oEQvE2jMnha3HMW7mdtpT/PpCGL2PQ2LaVj+4ebusCN6PG XykuwjRODRIwW5zDviSCdiPmzAMA0gxv3k32peZ1eHA8zE95p0h0AbSJDoJIy/A6 HopBM+/5OymvAgbV61htGSBkZAT2LWAozTqW0Z0qq7au/LMXVc9xUJXTqydsT1vs m5k= -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:34 2026 by rpki-client