This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/y7AqiXLlolDvCA4ci8GI1FGSGEk.roa File: y7AqiXLlolDvCA4ci8GI1FGSGEk.roa (raw, json) Hash identifier: SHdF4S1wOxIU7MQoEG79yqjjmd2Uh7jceITC2kby4Xo= Subject key identifier: CB:B0:2A:89:72:E5:A2:50:EF:08:0E:1C:8B:C1:88:D4:51:92:18:49 Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0 Certificate serial: 019B76EB37D067DF31244DEF073BDF17C8E3 Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/y7AqiXLlolDvCA4ci8GI1FGSGEk.roa Signing time: Thu 01 Jan 2026 00:18:05 +0000 ROA not before: Thu 01 Jan 2026 00:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50358 IP address blocks: 91.241.88.0/22 maxlen: 24 195.191.50.0/23 maxlen: 24 2001:67c:26a0::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:37:d0:67:df:31:24:4d:ef:07:3b:df:17:c8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbb02a8972e5a250ef080e1c8bc188d451921849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:1c:88:9e:42:25:31:01:0a:5c:cc:80:7b: 1a:70:2c:d7:54:78:1d:3c:be:7b:7c:8e:00:58:da: e6:57:aa:5e:85:2c:c3:ce:81:b4:c4:aa:95:12:a2: b9:e5:cd:01:b8:78:14:0d:3c:93:1b:c7:40:ee:eb: f1:74:85:ce:ab:a7:4f:4b:db:62:93:0a:8b:63:95: a8:dc:28:4d:60:97:02:33:18:00:ec:9b:b0:84:ce: b3:36:b0:ad:87:5b:b2:0c:1b:3f:83:0a:e3:91:31: ee:2c:1b:76:40:fa:93:bf:b1:63:a0:c3:52:37:12: 7d:7b:06:5f:13:66:e5:c1:7e:6a:1d:85:22:bc:70: c0:eb:78:b4:79:3c:82:45:4d:14:36:f9:f1:4f:61: 20:f0:6c:46:55:9b:7d:ce:e8:41:b4:58:b0:21:59: b5:7e:01:fb:09:a7:44:64:58:58:3a:70:16:98:38: 6e:ee:27:c0:04:fa:4d:35:41:b7:27:42:77:a4:c6: d4:53:7e:d8:c0:cc:61:68:2f:35:91:ff:bf:ad:80: b4:4c:a9:c6:d6:df:74:20:4f:d2:79:be:72:c3:9f: 39:f4:bf:b3:bd:3c:2f:56:bd:af:12:b3:01:ad:34: f0:b8:7a:1f:74:c9:96:d2:91:30:85:87:0b:73:c6: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B0:2A:89:72:E5:A2:50:EF:08:0E:1C:8B:C1:88:D4:51:92:18:49 X509v3 Authority Key Identifier: keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/y7AqiXLlolDvCA4ci8GI1FGSGEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.88.0/22 195.191.50.0/23 IPv6: 2001:67c:26a0::/48 Signature Algorithm: sha256WithRSAEncryption 35:1b:90:48:ad:06:fa:5c:34:a1:86:dc:40:40:87:64:ed:9b: d3:86:29:bf:6c:df:a0:2a:d7:36:0e:77:da:78:d8:e2:d8:5c: ea:03:de:8a:a7:cc:b3:eb:0d:7b:26:c0:cc:8c:59:80:9a:76: e4:4f:40:28:f3:c1:dd:83:f5:54:ec:fb:00:2d:79:16:18:e0: c7:0b:f9:ea:bf:74:07:af:40:c6:5d:8c:da:db:40:9b:9e:f9: 1b:97:4c:ae:32:97:59:68:bd:ec:74:19:0e:4a:77:c7:3e:1d: 7c:71:32:4e:ae:6f:d0:2e:f4:a9:a1:d6:b7:e3:24:ea:d6:dc: ab:f6:0d:b6:13:f3:1b:b2:98:ad:bb:48:bb:a4:f5:bb:7f:d9: df:8e:ec:8f:8d:04:b1:32:aa:19:54:52:e1:62:67:3e:78:cf: 8c:fe:66:d0:4e:0e:45:73:30:23:ad:b2:c5:6a:72:46:3c:b9: 56:ce:13:19:5a:f1:84:18:aa:f5:09:98:0e:72:c4:37:80:27: 73:44:a6:c3:6f:9a:eb:89:6a:42:66:9d:b1:7f:4e:fc:fe:16: d8:ba:73:c4:82:27:b5:77:de:74:0e:4e:5b:53:8e:a3:6c:34: 6e:cb:e6:02:c6:dc:c0:37:9f:e2:7d:1c:32:09:73:10:92:a1: f9:d1:56:de -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt26zfQZ98xJE3vBzvfF8jjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWRlMTUyOTA2NjY0YWU3YWM5ZjIwODdhYzRkMDA2ODVh NWQ3ZjAwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmIwMmE4OTcyZTVhMjUwZWYwODBlMWM4YmMxODhkNDUxOTIxODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRUciJ5CJTEBClzMgHsacCzXVHgd PL57fI4AWNrmV6pehSzDzoG0xKqVEqK55c0BuHgUDTyTG8dA7uvxdIXOq6dPS9ti kwqLY5Wo3ChNYJcCMxgA7JuwhM6zNrCth1uyDBs/gwrjkTHuLBt2QPqTv7FjoMNS NxJ9ewZfE2blwX5qHYUivHDA63i0eTyCRU0UNvnxT2Eg8GxGVZt9zuhBtFiwIVm1 fgH7CadEZFhYOnAWmDhu7ifABPpNNUG3J0J3pMbUU37YwMxhaC81kf+/rYC0TKnG 1t90IE/Seb5yw5859L+zvTwvVr2vErMBrTTwuHofdMmW0pEwhYcLc8ZJgwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFMuwKoly5aJQ7wgOHIvBiNRRkhhJMB8GA1UdIwQY MBaAFHBd4VKQZmSuesnyCHrE0AaFpdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQt ZjU2MTg0NzdmOGQ0LzEveTdBcWlYTGxvbER2Q0E0Y2k4R0kxRkdTR0VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQtZjU2MTg0NzdmOGQ0 LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCW/FYAwQB w78yMA8EAgACMAkDBwAgAQZ8JqAwDQYJKoZIhvcNAQELBQADggEBADUbkEitBvpc NKGG3EBAh2Ttm9OGKb9s36Aq1zYOd9p42OLYXOoD3oqnzLPrDXsmwMyMWYCaduRP QCjzwd2D9VTs+wAteRYY4McL+eq/dAevQMZdjNrbQJue+RuXTK4yl1lovex0GQ5K d8c+HXxxMk6ub9Au9Kmh1rfjJOrW3Kv2DbYT8xuymK27SLuk9bt/2d+O7I+NBLEy qhlUUuFiZz54z4z+ZtBODkVzMCOtssVqckY8uVbOExla8YQYqvUJmA5yxDeAJ3NE psNvmuuJakJmnbF/Tvz+Fti6c8SCJ7V33nQOTltTjqNsNG7L5gLG3MA3n+J9HDIJ cxCSofnRVt4= -----END CERTIFICATE-----Generated at Mon Jan 12 02:31:24 2026 by rpki-client