This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1jyFax3BfqXGXY-ttviRObWDxiA.roa File: 1jyFax3BfqXGXY-ttviRObWDxiA.roa (raw, json) Hash identifier: HSmkK5DqcHE4MaFXj6JUZgF6Y+omzpvp2J1KTkpwe0g= Subject key identifier: D6:3C:85:6B:1D:C1:7E:A5:C6:5D:8F:AD:B6:F8:91:39:B5:83:C6:20 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C801323DB80414F4D7DFC7CECF98D45 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1jyFax3BfqXGXY-ttviRObWDxiA.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24954 IP address blocks: 195.25.79.0/24 maxlen: 24 195.25.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:23:db:80:41:4f:4d:7d:fc:7c:ec:f9:8d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d63c856b1dc17ea5c65d8fadb6f89139b583c620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:9f:39:ca:70:44:4b:1c:7f:0f:10:ec:a5: b0:63:3a:ed:02:4a:76:d0:34:b6:e7:f8:aa:fd:a4: d7:be:9b:14:12:36:ec:ed:ab:f8:a3:5d:60:63:4c: e5:dd:e9:fb:6a:08:06:48:d0:7e:9d:25:35:6f:e9: c9:4e:e2:65:48:c8:1f:aa:2e:21:79:60:a7:79:91: c2:83:4d:2b:bb:e7:34:3a:30:30:b7:d8:70:1b:76: 13:48:1e:5c:3a:91:7a:bc:18:12:ef:5f:3f:ce:f1: 15:03:e7:fa:2a:54:da:39:0d:13:7c:a5:38:0f:a7: e0:0a:f5:15:20:1c:60:6e:0e:b0:74:10:78:39:41: 6e:57:ba:d5:0d:c5:ae:05:8e:59:ac:d1:22:b6:91: 5c:b4:f0:59:29:98:91:84:a1:f7:e3:66:10:dc:85: ad:c1:1b:b7:46:2b:87:88:32:31:6e:6f:47:49:6c: ca:dd:02:28:93:7c:54:cf:d4:45:50:e6:ea:23:25: c8:d0:6d:43:43:ab:5a:7d:d8:4d:17:41:3d:b0:64: 69:db:1e:45:ef:d3:79:39:54:64:5d:ad:20:2f:84: f4:a7:bf:5e:9a:41:6d:2d:55:6a:e5:bd:e6:6b:de: b2:84:cb:17:2f:b0:8a:e0:29:76:b6:da:11:a0:b2: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3C:85:6B:1D:C1:7E:A5:C6:5D:8F:AD:B6:F8:91:39:B5:83:C6:20 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1jyFax3BfqXGXY-ttviRObWDxiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.25.79.0-195.25.80.255 Signature Algorithm: sha256WithRSAEncryption 6c:fa:f7:d4:03:e0:af:93:dd:a5:74:2b:11:b9:ff:e1:a5:48: 3e:b7:45:1d:ef:34:82:1b:e0:ac:36:9a:80:ff:a7:b0:da:ad: bb:96:d4:1a:84:70:c0:fe:73:97:ce:23:ef:88:a2:07:a8:16: fa:de:af:09:92:96:dc:a2:0c:1f:b7:e2:05:12:87:58:22:70: 3a:23:21:b1:39:18:30:de:31:29:a4:31:1e:a9:80:92:11:53: b8:c9:b3:4b:0d:f7:b4:b9:0c:1b:75:9a:ed:4e:59:ef:44:ae: e3:97:1c:d5:3c:8c:60:31:46:2f:ec:e5:9c:49:c6:63:c8:2b: fe:79:bc:04:68:41:b9:81:01:92:af:45:3b:cd:d5:ae:05:eb: d5:ed:0f:70:4c:2b:b0:49:19:06:68:9f:4a:4e:ff:82:48:d0: 1d:e3:96:26:e0:77:c5:55:81:30:19:01:8a:6c:63:f4:ca:43: 8a:a8:91:49:7b:0f:28:f4:22:e2:91:ac:2d:bd:e4:ba:54:d7: a5:a0:00:de:89:a9:14:3a:79:d3:1f:b7:ad:72:4d:28:14:95: 7a:2a:c1:9a:d1:c8:6c:2e:84:a0:e6:16:4e:6d:1e:e0:6a:df: d6:0e:5b:6e:77:10:85:64:6d:d5:87:bc:02:ad:70:8c:e7:5e: 7a:74:a6:33 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gBMj24BBT019/Hzs+Y1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjNjODU2YjFkYzE3ZWE1YzY1ZDhmYWRiNmY4OTEzOWI1ODNjNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM6fOcpwREscfw8Q7KWwYzrtAkp2 0DS25/iq/aTXvpsUEjbs7av4o11gY0zl3en7aggGSNB+nSU1b+nJTuJlSMgfqi4h eWCneZHCg00ru+c0OjAwt9hwG3YTSB5cOpF6vBgS718/zvEVA+f6KlTaOQ0TfKU4 D6fgCvUVIBxgbg6wdBB4OUFuV7rVDcWuBY5ZrNEitpFctPBZKZiRhKH342YQ3IWt wRu3RiuHiDIxbm9HSWzK3QIok3xUz9RFUObqIyXI0G1DQ6tafdhNF0E9sGRp2x5F 79N5OVRkXa0gL4T0p79emkFtLVVq5b3ma96yhMsXL7CK4Cl2ttoRoLJ64QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNY8hWsdwX6lxl2Prbb4kTm1g8YgMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvMWp5RmF4M0JmcVhHWFktdHR2aVJPYldEeGlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADDGU8D BADDGVAwDQYJKoZIhvcNAQELBQADggEBAGz699QD4K+T3aV0KxG5/+GlSD63RR3v NIIb4Kw2moD/p7DarbuW1BqEcMD+c5fOI++IogeoFvrerwmSltyiDB+34gUSh1gi cDojIbE5GDDeMSmkMR6pgJIRU7jJs0sN97S5DBt1mu1OWe9EruOXHNU8jGAxRi/s 5ZxJxmPIK/55vARoQbmBAZKvRTvN1a4F69XtD3BMK7BJGQZon0pO/4JI0B3jlibg d8VVgTAZAYpsY/TKQ4qokUl7Dyj0IuKRrC295LpU16WgAN6JqRQ6edMft61yTSgU lXoqwZrRyGwuhKDmFk5tHuBq39YOW253EIVkbdWHvAKtcIznXnp0pjM= -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:17 2026 by rpki-client