This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/y2uk9iTvYFQlsAkoQzXBKT1bW2c.roa File: y2uk9iTvYFQlsAkoQzXBKT1bW2c.roa (raw, json) Hash identifier: UTt0RJbrpflFiPCnOTE+QQq6a+IabdHiXBu7z6m08C0= Subject key identifier: CB:6B:A4:F6:24:EF:60:54:25:B0:09:28:43:35:C1:29:3D:5B:5B:67 Certificate issuer: /CN=7beef5e16c1467da7a02f19237653ae42b109652 Certificate serial: 019B7B3544ECC381229CE72843BEE7219306 Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/y2uk9iTvYFQlsAkoQzXBKT1bW2c.roa Signing time: Thu 01 Jan 2026 20:17:27 +0000 ROA not before: Thu 01 Jan 2026 20:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205890 IP address blocks: 91.196.144.0/22 maxlen: 22 91.207.72.0/23 maxlen: 23 91.207.94.0/23 maxlen: 23 2a0a:de40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:44:ec:c3:81:22:9c:e7:28:43:be:e7:21:93:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652 Validity Not Before: Jan 1 20:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb6ba4f624ef605425b009284335c1293d5b5b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0d:47:02:f3:32:49:8b:c3:3b:eb:27:34:0e: 0a:4c:36:cf:39:d0:a9:67:32:46:91:0e:e7:b9:dd: f7:16:87:a6:cd:c1:94:3a:3d:8b:8f:9b:05:91:6b: 3e:9e:1d:ec:5c:76:ee:9d:24:21:ba:74:51:4a:60: 3c:b5:56:00:26:03:33:3f:c3:6e:36:26:38:27:b5: 36:94:79:59:b9:f9:06:a2:ae:bd:39:d2:52:a6:04: 1d:9f:a5:bc:c8:5c:d6:82:7c:d9:5e:c9:a3:08:bc: aa:c7:5f:2d:b7:2c:16:79:11:61:82:a8:58:5a:ee: 06:fc:47:9b:4f:1b:0f:b6:3a:c2:46:2b:3c:35:73: ec:55:3d:45:92:b4:fc:e9:20:e0:97:00:59:c2:86: c3:fb:79:e5:48:f8:88:b4:f2:cd:d9:d9:2a:d9:04: dc:c5:1f:7f:e3:0c:9b:f4:9a:22:54:0d:2b:df:e2: 80:b6:7a:ae:9a:5a:9d:d7:81:d1:e1:d2:9c:53:f6: 35:28:c8:74:90:0c:a7:12:90:44:f1:1e:60:43:7b: b7:f4:f3:df:78:b5:fc:2f:46:4a:5f:cb:bc:52:82: dc:15:86:0f:45:8a:8b:1e:d5:eb:0c:fc:33:82:66: f2:74:e7:21:16:bb:a5:4e:ff:be:fd:f9:ef:7e:03: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6B:A4:F6:24:EF:60:54:25:B0:09:28:43:35:C1:29:3D:5B:5B:67 X509v3 Authority Key Identifier: keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/y2uk9iTvYFQlsAkoQzXBKT1bW2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.144.0/22 91.207.72.0/23 91.207.94.0/23 IPv6: 2a0a:de40::/32 Signature Algorithm: sha256WithRSAEncryption 5c:23:6c:b4:2b:c7:cc:55:29:72:d2:0c:8b:02:a5:7f:9a:20: bf:65:86:76:14:f7:df:38:9f:2f:63:d6:77:20:f7:99:bc:0a: 8f:92:47:a7:d7:14:36:96:88:cf:2c:8e:38:14:d1:2c:12:3f: 14:81:63:6d:c7:ba:3e:84:12:d6:67:82:f2:7d:d9:21:ff:9b: ce:04:a7:73:05:31:63:c5:01:90:55:b5:3b:10:b1:37:50:4d: 0a:83:33:1a:4c:61:37:f5:5b:3f:93:bd:45:40:58:28:79:0f: 1a:1b:54:67:75:82:4b:05:e2:a3:5c:7c:7f:4d:2f:c7:63:bd: c5:27:b2:9f:1f:c9:fc:0d:56:c1:c8:d3:7c:87:f5:88:b3:d7: af:06:ec:04:ce:48:f4:f9:5d:61:b9:2c:eb:6e:0e:61:b8:8b: 66:19:59:ef:58:e1:66:0b:cc:35:1a:b2:a8:a1:dc:18:38:9e: f0:9b:00:80:47:4f:2d:d2:16:29:ae:46:77:be:1b:9b:ad:85: b8:29:08:b2:03:bd:c7:ee:58:73:e9:dc:14:7a:23:7e:7a:d0: 7e:b7:29:32:dd:b1:a2:8d:ec:16:5a:92:8e:ca:e6:cd:75:8a: e7:09:45:52:c8:7b:3b:fb:cf:d3:e2:2f:0f:ec:84:c2:08:5d: ff:ee:d3:a1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7NUTsw4EinOcoQ77nIZMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZWVmNWUxNmMxNDY3ZGE3YTAyZjE5MjM3NjUzYWU0MmIx MDk2NTIwHhcNMjYwMTAxMjAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjZiYTRmNjI0ZWY2MDU0MjViMDA5Mjg0MzM1YzEyOTNkNWI1YjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA1HAvMySYvDO+snNA4KTDbPOdCp ZzJGkQ7nud33FoemzcGUOj2Lj5sFkWs+nh3sXHbunSQhunRRSmA8tVYAJgMzP8Nu NiY4J7U2lHlZufkGoq69OdJSpgQdn6W8yFzWgnzZXsmjCLyqx18ttywWeRFhgqhY Wu4G/EebTxsPtjrCRis8NXPsVT1FkrT86SDglwBZwobD+3nlSPiItPLN2dkq2QTc xR9/4wyb9JoiVA0r3+KAtnqumlqd14HR4dKcU/Y1KMh0kAynEpBE8R5gQ3u39PPf eLX8L0ZKX8u8UoLcFYYPRYqLHtXrDPwzgmbydOchFrulTv++/fnvfgOPMQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMtrpPYk72BUJbAJKEM1wSk9W1tnMB8GA1UdIwQY MBaAFHvu9eFsFGfaegLxkjdlOuQrEJZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMmI5ODMtNTUzOC00ODVlLWIxMGYt MTdhNjliNzAyZTFiLzEveTJ1azlpVHZZRlFsc0Frb1F6WEJLVDFiVzJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hMmI5ODMtNTUzOC00ODVlLWIxMGYtMTdhNjliNzAyZTFi LzEvZS03MTRXd1VaOXA2QXZHU04yVTY1Q3NRbGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCW8SQAwQB W89IAwQBW89eMA0EAgACMAcDBQAqCt5AMA0GCSqGSIb3DQEBCwUAA4IBAQBcI2y0 K8fMVSly0gyLAqV/miC/ZYZ2FPffOJ8vY9Z3IPeZvAqPkken1xQ2lojPLI44FNEs Ej8UgWNtx7o+hBLWZ4Lyfdkh/5vOBKdzBTFjxQGQVbU7ELE3UE0KgzMaTGE39Vs/ k71FQFgoeQ8aG1RndYJLBeKjXHx/TS/HY73FJ7KfH8n8DVbByNN8h/WIs9evBuwE zkj0+V1huSzrbg5huItmGVnvWOFmC8w1GrKoodwYOJ7wmwCAR08t0hYprkZ3vhub rYW4KQiyA73H7lhz6dwUeiN+etB+tyky3bGijewWWpKOyubNdYrnCUVSyHs7+8/T 4i8P7ITCCF3/7tOh -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:26 2026 by rpki-client