This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa File: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (raw, json) Hash identifier: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA= Subject key identifier: CB:FD:92:1F:12:A1:7D:EF:EB:83:36:C8:4B:A7:92:77:F1:84:58:8C Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f Certificate serial: 019B7834A8F1A1244018A963B36990A09DE8 Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15943 IP address blocks: 193.31.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a8:f1:a1:24:40:18:a9:63:b3:69:90:a0:9d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbfd921f12a17defeb8336c84ba79277f184588c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:40:56:c8:09:fa:0a:88:1a:b3:de:ea:23: a7:d5:d4:8a:76:83:66:a6:18:3d:41:07:24:db:da: 4d:c7:6a:02:36:5d:92:97:64:e5:7a:a1:e1:74:7f: db:67:d4:10:b1:e5:a0:e4:8b:22:32:c8:ec:0a:27: 41:69:e1:3a:61:8b:15:ac:f6:31:6f:ca:ae:c6:fc: c5:af:f6:b9:5e:00:7a:fa:92:cb:ff:b7:05:7b:d9: dc:c7:41:c7:5a:17:d6:ba:7b:80:77:03:08:f8:4d: 18:4e:ee:c3:4a:c7:74:20:d5:38:14:9f:f6:a1:3b: c1:6f:e4:16:10:c3:ec:6a:a2:d9:5a:47:b6:63:1d: 3f:4e:b0:f3:a4:fa:93:39:20:69:b9:12:c8:e5:01: fd:73:ea:4c:3e:a5:f9:a7:10:30:93:1b:9b:a2:80: fd:88:6c:53:dc:87:42:99:51:26:0f:54:43:cb:0d: c9:32:6f:45:98:a2:2e:8e:dc:b6:8c:e0:af:d1:69: 42:4d:e9:bc:ce:37:30:8f:38:7b:bc:bc:e1:47:07: 5f:30:35:3a:de:f5:5b:f6:16:66:26:ea:4c:74:75: 2b:9b:e8:db:b5:60:eb:55:66:e0:ae:33:2c:54:68: 39:9e:ff:1f:f6:7c:84:22:4f:32:55:4e:f8:fe:ac: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FD:92:1F:12:A1:7D:EF:EB:83:36:C8:4B:A7:92:77:F1:84:58:8C X509v3 Authority Key Identifier: keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.31.3.0/24 Signature Algorithm: sha256WithRSAEncryption 60:99:a1:d2:7f:02:d6:0d:87:a4:c8:a7:d7:e1:02:78:07:dc: d2:d3:00:91:7a:0e:47:2d:69:8d:95:c4:ef:1d:50:b6:50:01: f2:a6:66:8f:fb:01:65:47:ee:e4:29:55:b6:9b:7a:17:b1:9a: 5b:19:45:ef:a8:77:6c:35:de:2c:7c:f9:a4:25:3a:16:0a:d8: 42:08:58:36:6e:dc:fd:35:a2:6c:c9:27:fc:2b:3f:e7:52:b2: b9:55:14:42:92:73:c3:08:16:8c:13:2d:ce:85:4f:4e:cc:a1: 41:62:1c:c4:f3:51:e6:98:8a:cb:62:1e:34:ea:6c:17:4a:95: 81:76:55:f7:5a:c4:b4:46:4f:6f:57:0c:8b:a4:81:73:8a:95: 29:ca:d8:50:2f:a2:03:62:30:d8:15:d3:4b:fe:43:58:fb:55: 74:0f:46:e8:b8:05:ca:13:d6:c1:89:8e:5d:97:cc:56:b8:cb: 09:e6:c8:93:93:5b:2c:dc:f5:4e:5b:ad:df:a7:b7:36:a9:aa: 11:7c:ec:3d:d7:93:02:ac:e8:67:d5:8b:40:00:92:19:2a:b7: 2b:03:f8:67:ab:28:1e:79:45:94:c7:f9:f6:a0:3c:c0:f0:69: f4:0c:63:de:22:72:35:76:b7:0b:52:08:05:1d:bf:ab:6d:6b: 36:35:c6:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKjxoSRAGKljs2mQoJ3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NDc2OGE2ZDg3MDhiMzYzMTQzYWE4ODExZTVkOTc2ODI2 NGVmNWYwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmZkOTIxZjEyYTE3ZGVmZWI4MzM2Yzg0YmE3OTI3N2YxODQ1ODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndNAVsgJ+gqIGrPe6iOn1dSKdoNm phg9QQck29pNx2oCNl2Sl2TleqHhdH/bZ9QQseWg5IsiMsjsCidBaeE6YYsVrPYx b8quxvzFr/a5XgB6+pLL/7cFe9ncx0HHWhfWunuAdwMI+E0YTu7DSsd0INU4FJ/2 oTvBb+QWEMPsaqLZWke2Yx0/TrDzpPqTOSBpuRLI5QH9c+pMPqX5pxAwkxubooD9 iGxT3IdCmVEmD1RDyw3JMm9FmKIujty2jOCv0WlCTem8zjcwjzh7vLzhRwdfMDU6 3vVb9hZmJupMdHUrm+jbtWDrVWbgrjMsVGg5nv8f9nyEIk8yVU74/qxqiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMv9kh8SoX3v64M2yEunknfxhFiMMB8GA1UdIwQY MBaAFJZHaKbYcIs2MUOqiBHl2XaCZO9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAt YmZhNjM2ODc3ZTkwLzEveV8yU0h4S2hmZV9yZ3piSVM2ZVNkX0dFV0l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAtYmZhNjM2ODc3ZTkw LzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR8DMA0G CSqGSIb3DQEBCwUAA4IBAQBgmaHSfwLWDYekyKfX4QJ4B9zS0wCReg5HLWmNlcTv HVC2UAHypmaP+wFlR+7kKVW2m3oXsZpbGUXvqHdsNd4sfPmkJToWCthCCFg2btz9 NaJsySf8Kz/nUrK5VRRCknPDCBaMEy3OhU9OzKFBYhzE81HmmIrLYh406mwXSpWB dlX3WsS0Rk9vVwyLpIFzipUpythQL6IDYjDYFdNL/kNY+1V0D0bouAXKE9bBiY5d l8xWuMsJ5siTk1ss3PVOW63fp7c2qaoRfOw915MCrOhn1YtAAJIZKrcrA/hnqyge eUWUx/n2oDzA8Gn0DGPeInI1drcLUggFHb+rbWs2NcaL -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:15 2026 by rpki-client