This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/y72QXlfn1iGh89QO3R6WPZp7awU.roa File: y72QXlfn1iGh89QO3R6WPZp7awU.roa (raw, json) Hash identifier: O6eU6r5oRWPIVud9+sofhzvQc+xlO3/W5yzIFE7k+e4= Subject key identifier: CB:BD:90:5E:57:E7:D6:21:A1:F3:D4:0E:DD:1E:96:3D:9A:7B:6B:05 Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Certificate serial: 019B7D5BD04D9DD2EC6406C5619B99733358 Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/y72QXlfn1iGh89QO3R6WPZp7awU.roa Signing time: Fri 02 Jan 2026 06:18:47 +0000 ROA not before: Fri 02 Jan 2026 06:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56998 IP address blocks: 91.229.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d0:4d:9d:d2:ec:64:06:c5:61:9b:99:73:33:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Validity Not Before: Jan 2 06:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbbd905e57e7d621a1f3d40edd1e963d9a7b6b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:fd:c0:1f:78:1f:47:b8:56:b2:1e:b8:98: 82:3d:19:cf:bb:9c:51:36:9b:87:b7:fc:be:08:1e: 93:0d:cb:4f:fb:44:c6:83:10:b9:e1:5e:42:ed:4b: df:83:8c:8c:18:55:7b:8e:dd:2b:9a:cb:96:cf:3f: ef:5e:64:07:17:25:50:a3:a6:81:63:d2:03:f0:36: ab:9b:f2:8b:36:1c:2f:89:5c:59:49:b5:e9:37:29: a3:db:47:60:15:a8:0c:72:45:77:85:2c:c7:8a:7c: 6f:80:e3:ea:bf:37:9e:dd:95:09:19:6b:57:77:ad: e1:71:a0:ab:ba:1c:94:97:0e:79:de:18:f3:8d:24: 4b:a7:46:72:bf:e3:94:36:61:7a:9e:0b:ab:9c:20: 9f:f1:cf:e1:7f:5b:28:22:47:7a:ed:38:d1:4a:bd: f5:5f:3b:5c:d9:16:84:00:e2:f2:52:b6:c2:72:31: da:d1:ad:16:82:80:5b:50:99:01:eb:db:1b:a9:e8: 17:49:fa:da:c6:db:b7:aa:27:63:71:88:7b:bd:a4: 67:bb:f5:39:09:25:b5:cc:99:29:91:e4:a3:de:f0: 08:7b:7f:ba:fa:d3:87:10:db:46:3f:7d:d0:1e:ec: f5:c3:8f:b5:4e:e8:92:81:13:93:e7:3e:13:39:6f: 8f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BD:90:5E:57:E7:D6:21:A1:F3:D4:0E:DD:1E:96:3D:9A:7B:6B:05 X509v3 Authority Key Identifier: keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/y72QXlfn1iGh89QO3R6WPZp7awU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.184.0/24 Signature Algorithm: sha256WithRSAEncryption 81:d7:7c:70:06:c6:e4:d6:c2:4b:15:48:2f:5d:6d:be:fe:e8: df:0d:2d:3a:db:39:8c:9d:1c:4d:b5:74:fd:47:1c:dd:2a:1b: 3b:07:5a:54:a8:bd:8e:61:87:b3:ea:26:fe:f2:e1:e6:45:2f: a3:52:a4:37:96:c2:ed:6c:ab:b2:ca:38:01:47:e4:a5:03:34: 5c:a3:12:06:68:6a:c5:32:fa:45:ce:53:df:19:7d:30:8a:1c: 2d:30:61:42:2c:17:54:5a:09:1e:59:fc:aa:81:a6:9b:00:af: 37:5d:f5:e2:35:20:e7:80:11:8f:9c:16:70:97:16:05:86:ac: 01:2f:ce:ec:37:5c:5c:d9:32:41:34:96:bd:63:e1:2d:13:52: 43:fe:70:1d:51:d1:5a:11:60:86:92:5c:91:af:be:dd:e1:14: 39:1c:fb:ad:1c:d6:8b:93:ba:b0:6d:03:bb:63:6e:9f:5c:75: 14:d7:3e:51:ce:35:69:b8:c8:38:68:02:35:91:89:10:3f:bc: 31:f5:d6:08:e9:8e:c1:9d:f9:be:17:8b:3b:94:44:15:95:2f: 00:36:3d:5b:5a:fd:e5:f6:e3:84:f8:3d:63:63:0d:0f:a2:47: 27:38:b5:4e:f1:1e:dd:26:2c:1c:46:1b:43:42:50:35:c2:55: d7:ff:19:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W9BNndLsZAbFYZuZczNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVjMzQzNTM4MGU4YWUxNWZjODFjZGRjYzk0Y2VlNjdk NmIzOTAwHhcNMjYwMTAyMDYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmJkOTA1ZTU3ZTdkNjIxYTFmM2Q0MGVkZDFlOTYzZDlhN2I2YjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE39wB94H0e4VrIeuJiCPRnPu5xR NpuHt/y+CB6TDctP+0TGgxC54V5C7Uvfg4yMGFV7jt0rmsuWzz/vXmQHFyVQo6aB Y9ID8Darm/KLNhwviVxZSbXpNymj20dgFagMckV3hSzHinxvgOPqvzee3ZUJGWtX d63hcaCruhyUlw553hjzjSRLp0Zyv+OUNmF6ngurnCCf8c/hf1soIkd67TjRSr31 Xztc2RaEAOLyUrbCcjHa0a0WgoBbUJkB69sbqegXSfraxtu3qidjcYh7vaRnu/U5 CSW1zJkpkeSj3vAIe3+6+tOHENtGP33QHuz1w4+1TuiSgROT5z4TOW+P0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMu9kF5X59YhofPUDt0elj2ae2sFMB8GA1UdIwQY MBaAFP2Ow0NTgOiuFfyBzdzJTO5n1rOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYt Zjc2MjUyNjMwN2U4LzEveTcyUVhsZm4xaUdoODlRTzNSNldQWnA3YXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYtZjc2MjUyNjMwN2U4 LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+W4MA0G CSqGSIb3DQEBCwUAA4IBAQCB13xwBsbk1sJLFUgvXW2+/ujfDS062zmMnRxNtXT9 RxzdKhs7B1pUqL2OYYez6ib+8uHmRS+jUqQ3lsLtbKuyyjgBR+SlAzRcoxIGaGrF MvpFzlPfGX0wihwtMGFCLBdUWgkeWfyqgaabAK83XfXiNSDngBGPnBZwlxYFhqwB L87sN1xc2TJBNJa9Y+EtE1JD/nAdUdFaEWCGklyRr77d4RQ5HPutHNaLk7qwbQO7 Y26fXHUU1z5RzjVpuMg4aAI1kYkQP7wx9dYI6Y7Bnfm+F4s7lEQVlS8ANj1bWv3l 9uOE+D1jYw0PokcnOLVO8R7dJiwcRhtDQlA1wlXX/xlD -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:08 2026 by rpki-client