This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/YPUBKOKTPiEmiP59Xe8MEIRR4Pw.roa File: YPUBKOKTPiEmiP59Xe8MEIRR4Pw.roa (raw, json) Hash identifier: PWQfhcGH7jngcQ70GlQ11H+FIx0EvbMhWzfDH/DhN10= Subject key identifier: 60:F5:01:28:E2:93:3E:21:26:88:FE:7D:5D:EF:0C:10:84:51:E0:FC Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB15313804662D7C933331E5504307 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/YPUBKOKTPiEmiP59Xe8MEIRR4Pw.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 91.108.200.0/22 maxlen: 22 91.108.200.0/24 maxlen: 24 91.108.204.0/22 maxlen: 22 91.108.204.0/24 maxlen: 24 91.108.216.0/22 maxlen: 22 91.108.216.0/24 maxlen: 24 91.108.220.0/22 maxlen: 22 91.108.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:15:31:38:04:66:2d:7c:93:33:31:e5:50:43:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60f50128e2933e212688fe7d5def0c108451e0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:e3:7b:aa:15:75:68:5f:55:b8:ee:be:d0: 1b:e1:cb:23:94:9a:c6:27:90:47:76:ad:2b:9b:dd: fc:13:06:5f:b8:e8:8b:da:4d:d2:ae:15:b4:fe:98: 1a:4e:ff:b2:bf:d7:47:76:03:e3:19:91:40:0a:d3: d1:07:95:1a:e8:df:a0:3c:6a:04:0a:ec:53:26:90: 30:d8:0c:ad:46:90:be:af:5b:2c:55:84:a5:b8:6b: fa:e1:93:c6:d6:4f:78:d1:b2:c0:5a:ae:d9:e4:26: 96:a0:48:ca:2e:df:05:c0:f3:01:34:e6:08:9c:23: db:45:95:95:cd:f1:36:46:31:c5:6c:c4:22:78:20: 5e:d9:dd:82:46:af:3f:96:4d:63:e3:e2:c3:ff:0e: c2:dc:3c:e1:02:6d:54:f7:41:13:7a:82:4f:83:5d: 37:c8:95:16:db:0c:92:f5:a2:ba:59:10:13:a5:94: 3d:19:cc:c1:91:06:65:6b:21:0f:64:75:a5:85:2e: 2b:b8:d5:09:2c:81:42:62:05:85:ab:b5:95:02:12: c9:82:17:1d:e0:ba:2a:eb:5f:04:cf:af:2a:15:6d: 72:76:48:79:ff:2b:07:b3:22:17:ea:ed:85:fa:26: 49:f6:01:1b:a0:b0:ad:65:52:9e:68:cb:c3:5c:7b: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F5:01:28:E2:93:3E:21:26:88:FE:7D:5D:EF:0C:10:84:51:E0:FC X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/YPUBKOKTPiEmiP59Xe8MEIRR4Pw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.200.0/21 91.108.216.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:1f:d2:8b:09:10:02:39:a9:7c:20:eb:42:31:57:39:44:7b: 43:2d:90:17:6f:a1:2b:28:c8:e0:32:e5:36:95:9f:84:8f:bf: 6f:f7:a1:4a:32:67:a1:99:c9:3f:e0:50:0e:90:8f:1f:1d:96: 63:62:6d:3a:77:20:25:6a:52:6b:65:ae:54:b8:f1:5d:c4:af: e6:e3:84:d5:f9:51:06:7f:af:ec:6c:2b:b0:81:83:49:aa:2d: c5:35:63:f4:be:c1:92:b8:50:54:87:43:20:6b:1b:70:51:e1: 5b:95:89:79:00:b8:e2:8e:e7:e7:c4:03:57:be:ad:da:cc:83: df:76:e0:ce:30:c2:72:37:30:a2:0b:ed:ab:e5:e9:bf:b1:1b: e7:20:d8:35:36:bb:29:c5:a4:1b:60:43:51:ff:78:5e:69:0a: 38:a6:46:db:cf:99:ed:0e:32:61:e8:ae:c9:da:cb:18:38:fe: ec:06:2b:ea:da:84:c3:b3:45:ab:3e:55:94:2c:6c:aa:a9:fa: 6d:7c:1c:95:86:53:9d:9e:c1:c0:86:48:20:ee:78:72:cf:30: 20:ef:34:6a:32:35:2c:f7:97:dc:92:13:5e:1e:7b:f0:2b:08: 41:f0:fb:9b:6b:b3:4f:4e:f6:b2:51:81:c2:9b:df:b1:3b:a1: 94:ee:76:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26xUxOARmLXyTMzHlUEMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGY1MDEyOGUyOTMzZTIxMjY4OGZlN2Q1ZGVmMGMxMDg0NTFlMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA163je6oVdWhfVbjuvtAb4csjlJrG J5BHdq0rm938EwZfuOiL2k3SrhW0/pgaTv+yv9dHdgPjGZFACtPRB5Ua6N+gPGoE CuxTJpAw2AytRpC+r1ssVYSluGv64ZPG1k940bLAWq7Z5CaWoEjKLt8FwPMBNOYI nCPbRZWVzfE2RjHFbMQieCBe2d2CRq8/lk1j4+LD/w7C3DzhAm1U90ETeoJPg103 yJUW2wyS9aK6WRATpZQ9GczBkQZlayEPZHWlhS4ruNUJLIFCYgWFq7WVAhLJghcd 4Loq618Ez68qFW1ydkh5/ysHsyIX6u2F+iZJ9gEboLCtZVKeaMvDXHvPQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGD1ASjikz4hJoj+fV3vDBCEUeD8MB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvWVBVQktPS1RQaUVtaVA1OVhlOE1FSVJSNFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW2zIAwQD W2zYMA0GCSqGSIb3DQEBCwUAA4IBAQCeH9KLCRACOal8IOtCMVc5RHtDLZAXb6Er KMjgMuU2lZ+Ej79v96FKMmehmck/4FAOkI8fHZZjYm06dyAlalJrZa5UuPFdxK/m 44TV+VEGf6/sbCuwgYNJqi3FNWP0vsGSuFBUh0MgaxtwUeFblYl5ALjijufnxANX vq3azIPfduDOMMJyNzCiC+2r5em/sRvnINg1NrspxaQbYENR/3heaQo4pkbbz5nt DjJh6K7J2ssYOP7sBivq2oTDs0WrPlWULGyqqfptfByVhlOdnsHAhkgg7nhyzzAg 7zRqMjUs95fckhNeHnvwKwhB8Puba7NPTvayUYHCm9+xO6GU7nan -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:34 2026 by rpki-client