This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/yWKjIr-KiDyKL-TFC_YWyumNPFY.roa File: yWKjIr-KiDyKL-TFC_YWyumNPFY.roa (raw, json) Hash identifier: tGpo5HgtbRNbDfzJQyEVQHJI3m6rcZ2a1vQoza/IAIU= Subject key identifier: C9:62:A3:22:BF:8A:88:3C:8A:2F:E4:C5:0B:F6:16:CA:E9:8D:3C:56 Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a Certificate serial: 019B78A3156A62A24907ABDAB1AFF02999A6 Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/yWKjIr-KiDyKL-TFC_YWyumNPFY.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197536 IP address blocks: 91.223.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:15:6a:62:a2:49:07:ab:da:b1:af:f0:29:99:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=319b679c14681089f2d07786df04f779d741c11a Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c962a322bf8a883c8a2fe4c50bf616cae98d3c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7e:fd:13:a0:f3:fa:05:7a:3b:35:ec:05:17: fd:b7:de:38:d2:71:96:79:bb:f7:e3:7d:32:e5:96: 7e:dd:39:92:40:ef:b3:76:e8:78:e4:ad:a2:1d:da: 2e:9e:23:1a:3d:e4:96:9f:04:94:cd:a8:fa:aa:55: da:c8:3b:85:85:e8:a8:ef:55:bc:2f:97:0d:6c:3a: e4:09:f7:ce:90:22:43:d8:20:e5:0d:a9:31:cd:a7: b6:0e:12:94:ae:a7:86:87:2d:eb:23:e1:6e:4e:c4: ed:23:1b:d4:0a:15:33:68:7f:e3:9c:99:8f:f9:8b: e3:19:61:e5:a8:60:2b:1b:d9:2b:bf:92:5b:63:3e: e9:d5:68:7f:1f:99:cb:11:75:a7:01:01:2a:ad:13: b3:a5:98:7c:78:b5:04:7d:e3:0f:17:a8:85:01:22: 86:d3:77:4c:1e:df:21:28:1d:1a:8d:c6:b6:c0:f0: 99:0b:e3:b0:72:ad:0d:c9:5e:57:7d:47:e8:f3:a8: 6a:56:0c:c6:62:c9:dc:6c:f7:a8:ad:48:e1:bd:f9: 21:be:65:34:bd:8e:0e:8e:4e:d0:a3:b4:6f:ee:fe: 12:d4:22:4f:10:16:01:0a:9c:8e:1f:3e:62:cf:27: 53:49:af:a0:ac:f5:64:24:24:31:71:e2:7b:0a:96: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:62:A3:22:BF:8A:88:3C:8A:2F:E4:C5:0B:F6:16:CA:E9:8D:3C:56 X509v3 Authority Key Identifier: keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/yWKjIr-KiDyKL-TFC_YWyumNPFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.39.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:62:20:28:a5:61:99:a8:18:b7:ad:6b:a1:f1:19:ea:f4:63: e9:23:44:b8:dd:2e:87:6a:e7:91:e1:ba:05:c7:59:9e:c8:6a: 2b:94:6c:90:dc:21:74:7f:76:fb:c1:40:3e:b7:53:fb:80:29: 85:6f:cd:e1:2a:ab:f8:17:dd:36:f3:28:88:5f:54:79:6e:bf: 4d:3b:ff:6c:6a:13:ab:3c:55:6f:cc:d1:b5:4c:4d:dd:ff:39: 28:73:8e:ed:84:91:d6:9f:47:38:4d:fa:82:62:2f:d1:ba:3f: 6f:b1:84:43:b8:61:10:3a:b8:5e:cb:ac:5e:b6:e8:65:70:2e: e1:20:50:2c:51:28:05:8f:bb:34:39:d4:d9:a1:49:f3:3a:9e: fc:90:b2:78:d6:7d:8f:60:2e:e7:a2:58:24:0e:62:6d:11:c1: 00:f7:1e:20:b4:92:48:4f:df:19:a4:86:23:62:39:eb:ae:9f: 95:75:51:a3:d3:71:fe:6b:74:bc:21:89:10:9f:a6:62:fb:83: 54:97:68:ab:de:1f:6a:db:9b:2e:92:37:91:cd:95:21:c6:10: 4f:a2:7f:fa:b4:8f:f8:36:81:6d:11:9d:75:32:f5:a5:54:d4: b0:e5:24:25:9b:f5:90:2f:a8:73:69:3e:81:d9:e2:2e:30:5f: 57:34:6c:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxVqYqJJB6vasa/wKZmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOWI2NzljMTQ2ODEwODlmMmQwNzc4NmRmMDRmNzc5ZDc0 MWMxMWEwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTYyYTMyMmJmOGE4ODNjOGEyZmU0YzUwYmY2MTZjYWU5OGQzYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n79E6Dz+gV6OzXsBRf9t9440nGW ebv3430y5ZZ+3TmSQO+zduh45K2iHdouniMaPeSWnwSUzaj6qlXayDuFheio71W8 L5cNbDrkCffOkCJD2CDlDakxzae2DhKUrqeGhy3rI+FuTsTtIxvUChUzaH/jnJmP +YvjGWHlqGArG9krv5JbYz7p1Wh/H5nLEXWnAQEqrROzpZh8eLUEfeMPF6iFASKG 03dMHt8hKB0ajca2wPCZC+Owcq0NyV5XfUfo86hqVgzGYsncbPeorUjhvfkhvmU0 vY4Ojk7Qo7Rv7v4S1CJPEBYBCpyOHz5izydTSa+grPVkJCQxceJ7CpZbdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMlioyK/iog8ii/kxQv2FsrpjTxWMB8GA1UdIwQY MBaAFDGbZ5wUaBCJ8tB3ht8E93nXQcEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xMzlmZjItZjVkMC00OWJlLTkxMGIt YjVjOTQ1YTBjYTE2LzEveVdLaklyLUtpRHlLTC1URkNfWVd5dW1OUEZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xMzlmZjItZjVkMC00OWJlLTkxMGItYjVjOTQ1YTBjYTE2 LzEvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW98nMA0G CSqGSIb3DQEBCwUAA4IBAQB7YiAopWGZqBi3rWuh8Rnq9GPpI0S43S6HaueR4boF x1meyGorlGyQ3CF0f3b7wUA+t1P7gCmFb83hKqv4F9028yiIX1R5br9NO/9sahOr PFVvzNG1TE3d/zkoc47thJHWn0c4TfqCYi/Ruj9vsYRDuGEQOrhey6xetuhlcC7h IFAsUSgFj7s0OdTZoUnzOp78kLJ41n2PYC7nolgkDmJtEcEA9x4gtJJIT98ZpIYj Yjnrrp+VdVGj03H+a3S8IYkQn6Zi+4NUl2ir3h9q25sukjeRzZUhxhBPon/6tI/4 NoFtEZ11MvWlVNSw5SQlm/WQL6hzaT6B2eIuMF9XNGy9 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:58 2026 by rpki-client