This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa File: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (raw, json) Hash identifier: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw= Subject key identifier: 89:20:3F:60:06:39:88:52:D3:74:96:4E:4D:7B:AC:D0:08:BE:A3:FB Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F8421563832CC06B63C9DA4254C5161 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa Signing time: Fri 02 Jan 2026 16:22:04 +0000 ROA not before: Fri 02 Jan 2026 16:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12357 IP address blocks: 37.222.0.0/15 maxlen: 24 87.125.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:21:56:38:32:cc:06:b6:3c:9d:a4:25:4c:51:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89203f6006398852d374964e4d7bacd008bea3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:5e:17:63:c8:4c:74:17:98:e6:a0:16:e5: f4:6e:e4:81:7b:eb:0d:c2:06:78:5e:73:dd:9f:91: 6b:51:91:21:24:ce:b7:d8:a9:f6:65:32:83:68:3d: 93:87:4c:a2:ae:cc:53:20:20:9e:e2:9c:c0:67:e9: 23:6f:97:ca:ad:b2:fa:91:d6:e4:42:66:0d:ec:e0: ae:0e:db:3f:f1:f9:fa:63:6c:45:13:90:a0:bf:f2: 8f:b4:74:92:2d:41:35:98:cc:15:a5:31:a9:7c:84: 01:c9:c4:44:1c:61:f4:72:5b:19:d9:ea:e9:0c:ec: 22:f1:ca:d4:82:17:cc:da:6c:62:9e:5a:07:83:15: fa:02:47:c4:f8:bb:8c:53:91:b3:4b:9b:dc:bd:dd: 82:63:05:be:40:e6:d1:d8:2c:ff:77:c9:85:1f:84: 9c:da:e8:99:26:6e:98:77:2d:14:06:29:60:bd:00: 35:ec:36:e2:fd:e2:28:c6:78:a6:c4:18:a2:42:40: 5e:00:56:64:c4:67:78:8c:80:fa:b1:67:46:99:ad: e4:7c:18:d7:8d:ba:b2:36:84:0a:75:01:34:a0:1b: d6:73:c4:f9:3a:cf:21:b2:37:9e:e1:2f:16:c9:8e: 6b:ca:1c:35:7a:8a:fe:4d:4e:bc:1d:1d:6b:8b:03: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:20:3F:60:06:39:88:52:D3:74:96:4E:4D:7B:AC:D0:08:BE:A3:FB X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.222.0.0/15 87.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 07:64:9d:77:cd:e2:ca:5e:a7:f2:c0:4e:31:7d:db:1a:7e:eb: ac:50:c1:cf:b2:60:47:79:bb:02:e4:a7:38:c3:97:a8:4f:de: 0c:03:40:e6:60:72:61:7b:9c:12:78:7e:83:56:d2:5f:27:8f: 95:cc:c2:8e:68:57:ff:f7:9e:c8:ca:a2:f4:fc:a7:00:15:a3: 02:ec:4b:12:5c:dd:13:03:8b:a4:4b:d3:56:27:f2:2e:be:77: e7:71:c0:52:b1:9a:01:46:b5:fe:b6:53:de:0d:41:2f:45:8c: 58:0e:78:cf:c8:34:c7:95:b7:8d:7a:d8:bc:2e:52:e1:d2:cc: fc:55:60:99:49:82:06:35:db:b4:a1:81:d0:1a:68:3d:89:23: 56:8b:dd:65:1f:8f:12:c0:d8:d6:89:34:f7:f3:1d:fe:0e:38: 8c:af:4d:b1:da:f6:ba:9a:d8:0c:64:a0:60:df:c6:53:77:44: de:95:b4:b9:26:db:5b:b9:25:e8:38:ea:59:2f:32:dd:b2:ff: 93:a3:2b:a9:e2:06:11:11:09:1c:80:78:92:b6:02:ad:3b:7b: 56:e0:c0:49:58:37:27:b0:90:96:75:1f:f2:01:5b:b0:8b:95: 4e:56:6f:b8:e3:bc:4f:f5:eb:56:b1:95:d3:f7:f6:da:ab:1a: 98:8d:c0:64 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt/hCFWODLMBrY8naQlTFFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTIwM2Y2MDA2Mzk4ODUyZDM3NDk2NGU0ZDdiYWNkMDA4YmVhM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV5eF2PITHQXmOagFuX0buSBe+sN wgZ4XnPdn5FrUZEhJM632Kn2ZTKDaD2Th0yirsxTICCe4pzAZ+kjb5fKrbL6kdbk QmYN7OCuDts/8fn6Y2xFE5Cgv/KPtHSSLUE1mMwVpTGpfIQBycREHGH0clsZ2erp DOwi8crUghfM2mxinloHgxX6AkfE+LuMU5GzS5vcvd2CYwW+QObR2Cz/d8mFH4Sc 2uiZJm6Ydy0UBilgvQA17Dbi/eIoxnimxBiiQkBeAFZkxGd4jID6sWdGma3kfBjX jbqyNoQKdQE0oBvWc8T5Os8hsjee4S8WyY5ryhw1eor+TU68HR1riwO+EQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFIkgP2AGOYhS03SWTk17rNAIvqP7MB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvaVNBX1lBWTVpRkxUZEpaT1RYdXMwQWktb19zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMBJd4DAwBX fTANBgkqhkiG9w0BAQsFAAOCAQEAB2Sdd83iyl6n8sBOMX3bGn7rrFDBz7JgR3m7 AuSnOMOXqE/eDANA5mByYXucEnh+g1bSXyePlczCjmhX//eeyMqi9PynABWjAuxL ElzdEwOLpEvTVifyLr5353HAUrGaAUa1/rZT3g1BL0WMWA54z8g0x5W3jXrYvC5S 4dLM/FVgmUmCBjXbtKGB0BpoPYkjVovdZR+PEsDY1ok09/Md/g44jK9Nsdr2uprY DGSgYN/GU3dE3pW0uSbbW7kl6DjqWS8y3bL/k6MrqeIGEREJHIB4krYCrTt7VuDA SVg3J7CQlnUf8gFbsIuVTlZvuOO8T/XrVrGV0/f22qsamI3AZA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:36 2026 by rpki-client