This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/Yc842nPawebZwJ_3vPInht2PhWc.roa File: Yc842nPawebZwJ_3vPInht2PhWc.roa (raw, json) Hash identifier: pK4l4MkPAVEDkDlaUNSdspt7kS5pkyjEEEGIn1qkNvg= Subject key identifier: 61:CF:38:DA:73:DA:C1:E6:D9:C0:9F:F7:BC:F2:27:86:DD:8F:85:67 Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916 Certificate serial: 019B7B35879AAE572664E8C2885DC6AF7996 Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/Yc842nPawebZwJ_3vPInht2PhWc.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43674 IP address blocks: 91.198.100.0/24 maxlen: 24 193.43.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:87:9a:ae:57:26:64:e8:c2:88:5d:c6:af:79:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61cf38da73dac1e6d9c09ff7bcf22786dd8f8567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:c1:27:be:99:24:57:25:09:5f:cd:d1:91: bd:c6:46:93:45:08:d1:17:17:08:4f:a8:6f:1b:85: 25:4f:26:d8:a5:53:47:9f:b6:3c:48:cf:8c:e2:a8: 50:c9:1b:dc:c3:74:37:30:24:24:b1:ef:12:8b:cc: d5:1f:36:57:05:12:9b:bb:86:27:a9:de:e3:7d:5a: 0c:cf:12:25:c1:f1:67:92:a1:4f:05:32:a1:5e:8c: a1:2e:81:d0:59:21:b5:e6:37:4b:8c:15:6c:f2:ce: 9c:a7:7a:97:dd:bd:04:0f:19:f3:85:fb:d6:f8:79: 1f:39:bd:df:04:aa:00:c0:1a:1b:2c:f3:51:96:9a: 67:62:a4:ad:3e:bf:ec:40:8d:3d:4e:90:cf:55:8a: 29:77:ff:d0:f9:92:e8:0e:57:8f:65:65:d7:e8:a8: 61:b8:0f:95:f1:09:ea:85:3c:06:1d:f8:48:83:aa: 63:3e:66:23:ea:6c:49:7a:22:ce:21:3b:e7:18:63: 7d:96:26:91:b4:ac:79:d5:40:1a:7a:1c:5f:53:8b: a8:3e:39:55:c5:6a:20:31:35:47:89:0a:b8:01:50: 7e:89:4a:ce:1a:9e:49:f2:cf:b5:82:9c:3d:11:78: 0b:51:a8:4a:1e:d0:ed:0f:17:9a:21:0c:1f:8a:0c: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CF:38:DA:73:DA:C1:E6:D9:C0:9F:F7:BC:F2:27:86:DD:8F:85:67 X509v3 Authority Key Identifier: keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/Yc842nPawebZwJ_3vPInht2PhWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.100.0/24 193.43.90.0/24 Signature Algorithm: sha256WithRSAEncryption 63:ba:59:c4:63:b5:d5:e4:4b:bb:03:52:cd:af:f1:73:da:dc: 09:2d:be:91:e1:fc:a5:db:f2:f9:3f:05:33:a9:db:57:e2:f1: d7:40:f6:f1:d5:71:b9:b0:e0:fe:0b:73:2c:86:79:56:f3:ef: 83:a7:bf:9c:d9:11:99:58:d8:2d:f9:35:d1:d1:ee:1a:75:32: a3:cf:9e:3e:fe:bc:79:02:43:c0:22:8a:9d:53:e9:49:c3:00: 98:16:14:92:d2:db:f1:48:75:b9:1f:19:13:87:39:a5:b0:25: 71:ac:e0:e2:4d:02:b8:32:14:9a:4e:80:96:cb:70:6b:c2:23: 03:d8:69:21:40:cf:33:a1:d0:c1:5e:fb:2d:4e:61:c7:19:f6: 9d:f5:5d:e6:1c:09:84:63:f5:67:89:03:2e:ec:3e:3e:ce:8c: b8:bf:54:81:1a:17:71:89:a6:69:21:c2:00:de:ee:b9:d3:56: 2f:d9:4d:c0:2f:2e:c7:41:2a:18:03:a5:32:84:61:a3:5a:45: 01:61:6b:be:68:86:da:0f:1e:4d:48:a2:5e:e8:e3:9b:a0:36: 1c:da:7b:ef:02:d6:aa:91:8a:d3:3a:91:39:cf:42:21:39:4a: de:6e:09:76:e6:94:41:b3:7e:fc:1a:5d:ed:73:0e:45:52:7c: 23:e1:44:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NYearlcmZOjCiF3Gr3mWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODhiNWU5MzUyMmI4OThlNzZmNDVmNDc4NDQzYzM0OGY1 N2I5MTYwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWNmMzhkYTczZGFjMWU2ZDljMDlmZjdiY2YyMjc4NmRkOGY4NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr97BJ76ZJFclCV/N0ZG9xkaTRQjR FxcIT6hvG4UlTybYpVNHn7Y8SM+M4qhQyRvcw3Q3MCQkse8Si8zVHzZXBRKbu4Yn qd7jfVoMzxIlwfFnkqFPBTKhXoyhLoHQWSG15jdLjBVs8s6cp3qX3b0EDxnzhfvW +HkfOb3fBKoAwBobLPNRlppnYqStPr/sQI09TpDPVYopd//Q+ZLoDlePZWXX6Khh uA+V8QnqhTwGHfhIg6pjPmYj6mxJeiLOITvnGGN9liaRtKx51UAaehxfU4uoPjlV xWogMTVHiQq4AVB+iUrOGp5J8s+1gpw9EXgLUahKHtDtDxeaIQwfigyhOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGHPONpz2sHm2cCf97zyJ4bdj4VnMB8GA1UdIwQY MBaAFB+Itek1IriY529F9HhEPDSPV7kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYt Y2QzOTJiMGRlZGNmLzEvWWM4NDJuUGF3ZWJad0pfM3ZQSW5odDJQaFdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYtY2QzOTJiMGRlZGNm LzEvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8ZkAwQA wStaMA0GCSqGSIb3DQEBCwUAA4IBAQBjulnEY7XV5Eu7A1LNr/Fz2twJLb6R4fyl 2/L5PwUzqdtX4vHXQPbx1XG5sOD+C3MshnlW8++Dp7+c2RGZWNgt+TXR0e4adTKj z54+/rx5AkPAIoqdU+lJwwCYFhSS0tvxSHW5HxkThzmlsCVxrODiTQK4MhSaToCW y3BrwiMD2GkhQM8zodDBXvstTmHHGfad9V3mHAmEY/VniQMu7D4+zoy4v1SBGhdx iaZpIcIA3u6501Yv2U3ALy7HQSoYA6UyhGGjWkUBYWu+aIbaDx5NSKJe6OOboDYc 2nvvAtaqkYrTOpE5z0IhOUrebgl25pRBs378Gl3tcw5FUnwj4UTu -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:41 2026 by rpki-client