This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/1-Y3ijndscKqraUdYHPlGlvPiaww.roa File: 1-Y3ijndscKqraUdYHPlGlvPiaww.roa (raw, json) Hash identifier: xxGKvHWQXGb9FbfED6D0G6e4DrQ9E36ESQZN/cdfGxs= Subject key identifier: F9:8D:E2:8E:77:6C:70:AA:AB:69:47:58:1C:F9:46:96:F3:E2:6B:0C Certificate issuer: /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b Certificate serial: 019B78A30547B12D9E269B335AD9B54B565F Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/1-Y3ijndscKqraUdYHPlGlvPiaww.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 91.197.164.0/22 maxlen: 24 94.247.232.0/21 maxlen: 24 95.81.128.0/18 maxlen: 24 185.215.136.0/22 maxlen: 24 185.241.96.0/22 maxlen: 24 213.205.96.0/19 maxlen: 24 217.71.208.0/21 maxlen: 24 2a00:1080::/32 maxlen: 48 2a02:3e8::/32 maxlen: 48 2a02:e10::/32 maxlen: 48 2a0c:a080::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:05:47:b1:2d:9e:26:9b:33:5a:d9:b5:4b:56:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f98de28e776c70aaab6947581cf94696f3e26b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:b9:2c:95:25:3e:49:d7:80:35:fa:d0:b7: c5:68:d5:1b:94:af:ed:d6:e7:44:0d:ac:d5:45:4d: ab:8b:95:19:af:34:63:40:a3:a7:9c:8f:d6:3d:44: 93:8d:2a:8a:72:d5:e9:c6:d9:e3:c2:00:87:47:61: bd:3e:ec:5f:0b:24:06:f3:97:08:1b:87:30:61:89: 4f:9f:96:6c:eb:38:23:24:0b:ae:bb:fb:ef:b6:6b: e3:1a:46:2e:b8:6c:ec:d7:49:29:00:09:87:aa:a5: d6:42:84:46:f1:7d:6e:0e:47:21:62:ac:a9:7e:78: 05:11:f6:34:a6:99:fe:a6:67:98:50:e7:1f:63:32: ab:c8:07:9d:57:57:48:d4:30:0e:bb:59:09:18:a5: 3f:35:dc:c6:00:1d:76:d0:a8:0b:d2:a8:3c:bf:ae: 70:5b:72:00:dc:d6:a8:77:fd:bb:cd:64:f7:58:a3: 73:37:19:1f:2a:5a:f6:03:2c:5d:e7:d5:cb:08:a4: 43:55:a6:7a:5a:8c:48:04:06:f0:1c:95:04:c8:40: ff:ea:30:dd:e7:34:38:73:14:42:75:bd:8c:15:2b: 11:0f:fd:b9:f0:e8:ea:2d:3d:11:38:f6:3c:db:96: de:24:51:c3:55:6a:f9:81:e1:2e:35:4f:38:83:ae: 0e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8D:E2:8E:77:6C:70:AA:AB:69:47:58:1C:F9:46:96:F3:E2:6B:0C X509v3 Authority Key Identifier: keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/1-Y3ijndscKqraUdYHPlGlvPiaww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.164.0/22 94.247.232.0/21 95.81.128.0/18 185.215.136.0/22 185.241.96.0/22 213.205.96.0/19 217.71.208.0/21 IPv6: 2a00:1080::/32 2a02:3e8::/32 2a02:e10::/32 2a0c:a080::/29 Signature Algorithm: sha256WithRSAEncryption 07:22:ed:5c:d5:3e:c9:53:d1:25:26:4c:ee:41:37:71:a4:5b: f8:7e:d8:41:91:53:91:22:66:f9:f8:a8:70:18:37:e4:cd:c2: 83:bb:99:c4:66:9a:6c:fb:62:28:f7:95:aa:c8:96:2d:45:37: 69:f4:5c:ff:c8:43:e7:31:70:cd:f4:e5:80:9d:ba:04:44:ca: 58:31:39:89:41:17:19:c9:d0:f1:15:2e:bc:f3:df:67:bc:37: 04:dd:b3:ba:1b:98:f7:66:8d:20:d9:d0:cd:f7:9f:97:d6:51: 08:3e:c1:cc:0b:6a:d4:01:d9:e0:51:12:f2:81:17:8d:76:27: 6c:f4:6f:0a:73:45:5b:cc:52:c2:ff:67:97:f1:9e:63:42:02: 92:5c:50:a5:38:be:64:21:20:63:2b:69:4c:bc:61:77:0f:31: 6f:d0:30:3d:c5:27:26:ba:cd:1f:02:4f:09:1e:c3:3f:98:96: 78:95:80:d5:89:6b:5b:42:5b:5e:be:c4:66:be:68:d1:02:9f: 06:44:64:e4:58:5e:63:78:b8:7c:d1:97:fb:60:c1:0e:d4:c7: 95:bb:8a:cb:1b:99:1a:ef:27:8b:5b:2c:64:d1:11:59:c5:3b: 2c:dd:4f:6e:16:14:e7:0a:4c:20:23:3b:c5:e4:88:4e:01:01: 3c:14:c2:5a -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt4owVHsS2eJpszWtm1S1ZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMGNhMzQ4YWM4OTFjMzM2ZDhjNzk0NWE1YmQ1YjMzMjVl YjVmMGIwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOThkZTI4ZTc3NmM3MGFhYWI2OTQ3NTgxY2Y5NDY5NmYzZTI2YjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDq5LJUlPknXgDX60LfFaNUblK/t 1udEDazVRU2ri5UZrzRjQKOnnI/WPUSTjSqKctXpxtnjwgCHR2G9PuxfCyQG85cI G4cwYYlPn5Zs6zgjJAuuu/vvtmvjGkYuuGzs10kpAAmHqqXWQoRG8X1uDkchYqyp fngFEfY0ppn+pmeYUOcfYzKryAedV1dI1DAOu1kJGKU/NdzGAB120KgL0qg8v65w W3IA3Naod/27zWT3WKNzNxkfKlr2Ayxd59XLCKRDVaZ6WoxIBAbwHJUEyED/6jDd 5zQ4cxRCdb2MFSsRD/258OjqLT0ROPY825beJFHDVWr5geEuNU84g64OcQIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFPmN4o53bHCqq2lHWBz5Rpbz4msMMB8GA1UdIwQY MBaAFMsMo0isiRwzbYx5RaW9WzMl618LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXd5alNLeUpIRE50akhsRnBiMWJNeVhyWHdzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZjYxZDYtMDVkMS00ZmIyLWE2ZWEt NDI1MjMyZmQ1NjQzLzEvMS1ZM2lqbmRzY0txcmFVZFlIUGxHbHZQaWF3dy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDkvZWY2MWQ2LTA1ZDEtNGZiMi1hNmVhLTQyNTIzMmZkNTY0 My8xL3l3eWpTS3lKSEROdGpIbEZwYjFiTXlYclh3cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBnBggrBgEFBQcBBwEB/wRYMFYwMAQCAAEwKgMEAlvFpAME A1736AMEBl9RgAMEArnXiAMEArnxYAMEBdXNYAMEA9lH0DAiBAIAAjAcAwUAKgAQ gAMFACoCA+gDBQAqAg4QAwUDKgyggDANBgkqhkiG9w0BAQsFAAOCAQEAByLtXNU+ yVPRJSZM7kE3caRb+H7YQZFTkSJm+fiocBg35M3Cg7uZxGaabPtiKPeVqsiWLUU3 afRc/8hD5zFwzfTlgJ26BETKWDE5iUEXGcnQ8RUuvPPfZ7w3BN2zuhuY92aNINnQ zfefl9ZRCD7BzAtq1AHZ4FES8oEXjXYnbPRvCnNFW8xSwv9nl/GeY0ICklxQpTi+ ZCEgYytpTLxhdw8xb9AwPcUnJrrNHwJPCR7DP5iWeJWA1YlrW0JbXr7EZr5o0QKf BkRk5FheY3i4fNGX+2DBDtTHlbuKyxuZGu8ni1ssZNERWcU7LN1PbhYU5wpMICM7 xeSITgEBPBTCWg== -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:13 2026 by rpki-client