This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sLY3G1xdCHy9saTyO6qv4H647-I.roa File: sLY3G1xdCHy9saTyO6qv4H647-I.roa (raw, json) Hash identifier: /DGNJIVWB/YvwBgoQBpym5udAedp+k63mdUlTFq/BSw= Subject key identifier: B0:B6:37:1B:5C:5D:08:7C:BD:B1:A4:F2:3B:AA:AF:E0:7E:B8:EF:E2 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B890D2101EA087B12DA819766BBEBF1C4 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sLY3G1xdCHy9saTyO6qv4H647-I.roa Signing time: Sun 04 Jan 2026 12:48:17 +0000 ROA not before: Sun 04 Jan 2026 12:48:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213787 IP address blocks: 212.22.64.0/24 maxlen: 24 212.22.68.0/24 maxlen: 24 212.22.88.0/24 maxlen: 24 2a09:d001::/48 maxlen: 48 2a09:d005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:0d:21:01:ea:08:7b:12:da:81:97:66:bb:eb:f1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 4 12:48:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0b6371b5c5d087cbdb1a4f23baaafe07eb8efe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:f8:bd:dd:6e:7a:42:9b:28:25:73:90:80: f1:f0:c0:25:47:06:03:bf:38:17:3a:1d:01:f8:0f: 52:2d:61:b2:19:1f:78:fa:57:c5:f6:0b:da:b0:79: 54:e9:e9:39:e8:68:c0:21:19:3a:74:d0:aa:32:d5: 6b:c1:d7:7f:13:f5:de:b1:2b:c8:20:9c:11:c4:ca: 11:30:22:d4:59:f1:7b:14:e0:d3:a8:de:41:9e:26: f5:4d:68:7e:83:df:c1:90:de:2c:a1:20:95:89:60: 13:0f:f3:6b:11:b3:20:21:ce:d5:bb:c7:82:1b:8b: d4:d1:87:d8:a7:8f:89:08:ea:93:7a:e4:eb:50:30: 0f:cb:28:68:d7:d3:c8:01:38:5b:f6:6b:57:44:2c: 60:7d:b1:9d:8c:24:d3:70:51:0d:3d:cd:13:a9:85: 98:6f:dc:69:cc:07:58:6f:b9:7e:e6:c4:01:31:07: fb:b4:60:30:c0:28:f9:b5:70:6a:4e:78:22:a4:02: 25:76:16:29:00:c4:9b:0d:43:03:29:cd:95:9d:bb: 2e:b0:d4:ff:e2:32:b6:35:48:c2:74:6b:15:bb:fb: cb:3d:8e:87:86:38:25:90:df:95:54:f7:54:1f:fa: 3b:c1:31:3b:48:11:96:85:d5:02:37:ab:5d:b6:80: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B6:37:1B:5C:5D:08:7C:BD:B1:A4:F2:3B:AA:AF:E0:7E:B8:EF:E2 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sLY3G1xdCHy9saTyO6qv4H647-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.22.64.0/24 212.22.68.0/24 212.22.88.0/24 IPv6: 2a09:d001::/48 2a09:d005::/48 Signature Algorithm: sha256WithRSAEncryption 81:82:a4:b5:df:d1:6b:14:a7:8c:4a:99:f7:75:4a:03:8e:26: 8b:d7:16:fc:4d:6b:33:e8:0d:e8:28:9e:b6:3e:2c:8b:52:1a: b5:27:b1:3b:04:93:df:9f:00:b7:8f:17:3c:40:54:bc:ee:f1: 15:9c:d3:62:d3:55:d4:24:44:6d:dc:3b:5a:31:98:c1:ff:97: 07:c6:ca:c5:97:77:bf:98:e7:c7:f9:a8:91:52:1d:a1:12:7c: ae:9d:96:ef:8e:e0:c0:25:28:63:67:6f:93:c3:59:1d:eb:3e: a5:92:d9:d1:53:66:5d:53:e7:d5:bd:5b:cb:04:1e:e6:6d:cc: 80:62:04:17:a2:37:f6:3c:a8:f9:1a:ad:17:29:98:88:7d:26: 7a:42:c8:91:bd:b5:b3:e0:ec:cb:ee:24:f6:5f:c1:73:0d:94: 00:d0:ff:53:81:b2:48:bc:25:07:b2:ba:e3:c4:23:2a:8c:1c: 2d:06:d7:e4:bb:5f:41:08:f1:6b:1f:66:6c:3a:90:05:01:fe: 0b:43:70:df:f8:18:5e:c0:e4:c4:39:36:c1:01:99:21:09:bb: 1c:a6:8a:9c:a2:50:25:59:cb:2e:f4:f6:54:41:0f:cb:25:f1: 58:03:02:26:a0:3e:0e:ed:64:b0:c9:82:76:b5:5c:58:f9:1c: dd:a5:7d:91 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZuJDSEB6gh7EtqBl2a76/HEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTA0MTI0ODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGI2MzcxYjVjNWQwODdjYmRiMWE0ZjIzYmFhYWZlMDdlYjhlZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5L4vd1uekKbKCVzkIDx8MAlRwYD vzgXOh0B+A9SLWGyGR94+lfF9gvasHlU6ek56GjAIRk6dNCqMtVrwdd/E/XesSvI IJwRxMoRMCLUWfF7FODTqN5Bnib1TWh+g9/BkN4soSCViWATD/NrEbMgIc7Vu8eC G4vU0YfYp4+JCOqTeuTrUDAPyyho19PIAThb9mtXRCxgfbGdjCTTcFENPc0TqYWY b9xpzAdYb7l+5sQBMQf7tGAwwCj5tXBqTngipAIldhYpAMSbDUMDKc2VnbsusNT/ 4jK2NUjCdGsVu/vLPY6HhjglkN+VVPdUH/o7wTE7SBGWhdUCN6tdtoAEewIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFLC2NxtcXQh8vbGk8juqr+B+uO/iMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvc0xZM0cxeGRDSHk5c2FUeU82cXY0SDY0Ny1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQA1BZAAwQA 1BZEAwQA1BZYMBgEAgACMBIDBwAqCdABAAADBwAqCdAFAAAwDQYJKoZIhvcNAQEL BQADggEBAIGCpLXf0WsUp4xKmfd1SgOOJovXFvxNazPoDegonrY+LItSGrUnsTsE k9+fALePFzxAVLzu8RWc02LTVdQkRG3cO1oxmMH/lwfGysWXd7+Y58f5qJFSHaES fK6dlu+O4MAlKGNnb5PDWR3rPqWS2dFTZl1T59W9W8sEHuZtzIBiBBeiN/Y8qPka rRcpmIh9JnpCyJG9tbPg7MvuJPZfwXMNlADQ/1OBski8JQeyuuPEIyqMHC0G1+S7 X0EI8WsfZmw6kAUB/gtDcN/4GF7A5MQ5NsEBmSEJuxymipyiUCVZyy709lRBD8sl 8VgDAiagPg7tZLDJgna1XFj5HN2lfZE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:09 2026 by rpki-client