This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Y3NRzC9hifQe9usbuWmpK6keugQ.roa File: Y3NRzC9hifQe9usbuWmpK6keugQ.roa (raw, json) Hash identifier: VJqsHGvkgw+GazL84ykrZQy43X4CZ0v3NwjmAtv8RIs= Subject key identifier: 63:73:51:CC:2F:61:89:F4:1E:F6:EB:1B:B9:69:A9:2B:A9:1E:BA:04 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A33285AA264BFBCB34E5981C1FB982 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Y3NRzC9hifQe9usbuWmpK6keugQ.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213499 IP address blocks: 213.135.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:32:85:aa:26:4b:fb:cb:34:e5:98:1c:1f:b9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=637351cc2f6189f41ef6eb1bb969a92ba91eba04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:22:f9:a3:49:24:ca:3f:00:c0:5f:3a:10:74: b7:d7:34:b7:f5:df:6a:28:a5:5a:fe:07:a4:2e:0c: 26:e9:58:c2:13:b6:f0:d7:1c:9e:6f:72:38:be:d3: d4:e0:4e:14:37:df:30:a6:d2:f8:03:e0:e1:29:0a: 3a:cf:a3:90:6c:82:e7:d8:93:a8:5e:9c:9b:ba:7c: b5:d0:5b:05:1c:8e:d7:32:7d:d6:60:c2:00:bb:e4: a1:53:f9:5d:35:1a:9e:10:86:ee:f7:ab:f5:df:50: db:17:67:8f:4b:8a:b8:20:12:30:b2:e6:32:f4:02: 83:8e:63:5c:bf:c3:82:2f:5a:17:56:a9:08:2d:85: 73:05:f3:51:df:03:30:65:5f:31:7b:73:a3:25:32: cd:92:b9:d5:f1:22:f7:41:a8:6f:ad:57:7a:8e:76: df:b9:33:4b:f1:26:c2:d9:14:1c:62:61:40:83:8b: 63:f4:24:ea:95:26:c5:c7:cd:11:fc:a7:a4:1f:86: c2:cb:72:04:74:c8:c1:eb:e2:f7:51:53:98:de:06: aa:39:f6:7d:86:a0:ca:d1:2a:6a:9f:df:87:7c:7a: 4e:ea:07:d6:fd:9b:74:43:a1:64:02:e7:7e:da:7a: ea:70:2b:27:87:fc:72:72:51:de:e4:62:0b:d3:85: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:73:51:CC:2F:61:89:F4:1E:F6:EB:1B:B9:69:A9:2B:A9:1E:BA:04 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Y3NRzC9hifQe9usbuWmpK6keugQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.135.80.0/24 Signature Algorithm: sha256WithRSAEncryption 67:37:29:d0:a4:b0:d4:79:f1:dc:4c:cc:73:46:c0:e1:8a:12: 9f:58:c9:73:9c:54:e0:17:ea:65:ff:94:77:3b:78:ca:ce:ee: 99:66:ee:b8:76:5b:c9:fd:cd:a3:5d:ca:4f:d2:84:4e:2f:be: 47:74:9e:f1:73:7c:00:16:1e:63:b9:07:5c:02:07:0d:18:30: 35:9d:25:2d:09:64:d8:07:3e:08:51:23:95:2a:c5:a9:12:dd: c8:ba:4b:d2:b5:ef:4c:da:4e:d0:1b:d6:b5:a8:80:37:44:da: ea:98:71:12:43:73:44:50:a3:f9:6e:65:7a:24:62:1d:ea:1a: 00:aa:4b:37:e3:d6:43:37:96:a5:c6:77:32:e7:31:2e:a6:72: 8b:aa:38:09:e6:b7:5e:c4:70:81:25:bb:c3:7d:57:44:2e:89: 90:c0:76:c7:f0:e9:fc:5b:f2:16:6f:8c:5b:5e:2a:48:3f:6d: c1:d5:86:08:fc:2a:8d:48:59:38:e6:92:7b:2a:95:a2:36:05: bc:75:51:4d:fa:65:08:0d:7d:0f:fb:88:db:e8:60:c5:05:88: 78:40:b2:34:32:ec:b3:4d:63:95:36:54:28:0b:db:2c:24:6d: 5d:db:1f:01:1d:28:51:76:5b:41:b2:bf:b4:c2:f5:28:93:00: b0:5a:9c:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozKFqiZL+8s05ZgcH7mCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzczNTFjYzJmNjE4OWY0MWVmNmViMWJiOTY5YTkyYmE5MWViYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyL5o0kkyj8AwF86EHS31zS39d9q KKVa/gekLgwm6VjCE7bw1xyeb3I4vtPU4E4UN98wptL4A+DhKQo6z6OQbILn2JOo Xpybuny10FsFHI7XMn3WYMIAu+ShU/ldNRqeEIbu96v131DbF2ePS4q4IBIwsuYy 9AKDjmNcv8OCL1oXVqkILYVzBfNR3wMwZV8xe3OjJTLNkrnV8SL3QahvrVd6jnbf uTNL8SbC2RQcYmFAg4tj9CTqlSbFx80R/KekH4bCy3IEdMjB6+L3UVOY3gaqOfZ9 hqDK0Spqn9+HfHpO6gfW/Zt0Q6FkAud+2nrqcCsnh/xyclHe5GIL04Vy3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGNzUcwvYYn0HvbrG7lpqSupHroEMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvWTNOUnpDOWhpZlFlOXVzYnVXbXBLNmtldWdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YdQMA0G CSqGSIb3DQEBCwUAA4IBAQBnNynQpLDUefHcTMxzRsDhihKfWMlznFTgF+pl/5R3 O3jKzu6ZZu64dlvJ/c2jXcpP0oROL75HdJ7xc3wAFh5juQdcAgcNGDA1nSUtCWTY Bz4IUSOVKsWpEt3IukvSte9M2k7QG9a1qIA3RNrqmHESQ3NEUKP5bmV6JGId6hoA qks349ZDN5alxncy5zEupnKLqjgJ5rdexHCBJbvDfVdELomQwHbH8On8W/IWb4xb XipIP23B1YYI/CqNSFk45pJ7KpWiNgW8dVFN+mUIDX0P+4jb6GDFBYh4QLI0Muyz TWOVNlQoC9ssJG1d2x8BHShRdltBsr+0wvUokwCwWpzi -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:47 2026 by rpki-client