This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/mS3XkJ4Q1gQOb2HyUmXLd_7xoqM.roa File: mS3XkJ4Q1gQOb2HyUmXLd_7xoqM.roa (raw, json) Hash identifier: b9RP78cWIQGh4Wfub2kbb9UWqKpzH9C6agCfF1Zol/M= Subject key identifier: 99:2D:D7:90:9E:10:D6:04:0E:6F:61:F2:52:65:CB:77:FE:F1:A2:A3 Certificate issuer: /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d Certificate serial: 019B7E3841579F4D57E7BD89AE65F98B6C57 Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/mS3XkJ4Q1gQOb2HyUmXLd_7xoqM.roa Signing time: Fri 02 Jan 2026 10:19:34 +0000 ROA not before: Fri 02 Jan 2026 10:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 160.98.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:41:57:9f:4d:57:e7:bd:89:ae:65:f9:8b:6c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d Validity Not Before: Jan 2 10:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=992dd7909e10d6040e6f61f25265cb77fef1a2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1e:1b:b3:ef:53:61:7a:30:f9:fc:bf:f9:fd: 6f:8f:a9:2d:23:7e:ff:38:d8:0e:5d:2d:af:cd:72: 80:cf:11:c9:1a:bb:c2:13:9c:9a:a6:a1:c6:07:0c: 1d:00:f0:58:ac:6c:a3:ec:36:db:b5:4f:f3:13:ab: 70:34:4c:5c:1c:25:13:a4:ac:62:3d:61:ea:8a:88: bf:3b:c4:0a:aa:b1:dd:1e:bf:07:1c:01:d4:20:cd: 52:e4:2f:5a:4a:38:25:ed:fd:4f:02:a6:31:a3:94: 3f:94:00:d7:64:64:78:fc:0d:53:ff:61:eb:e1:59: 3e:20:b7:6f:25:3a:13:9a:4a:fa:5d:9d:85:34:cb: 15:c5:0c:01:8b:4c:9a:1e:b6:ba:f4:b2:88:df:35: 0b:b7:7c:da:ea:65:c8:25:96:0c:59:b2:29:3b:97: 06:a8:7f:fd:d1:ff:a5:58:f7:dd:bf:c3:7d:61:e4: b9:88:e3:a6:82:44:16:66:2a:98:75:e0:f1:ca:e8: 02:bc:c1:23:f2:bb:80:2f:ac:e3:91:05:1b:07:01: b7:b1:15:7d:7b:05:5d:70:72:c1:89:16:37:a2:43: 07:f2:ff:ee:25:9b:ee:d5:a5:5a:a9:54:a9:af:93: b0:db:a9:3f:3f:c1:5c:23:e7:05:41:44:b6:83:0a: f4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2D:D7:90:9E:10:D6:04:0E:6F:61:F2:52:65:CB:77:FE:F1:A2:A3 X509v3 Authority Key Identifier: keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/mS3XkJ4Q1gQOb2HyUmXLd_7xoqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.98.0.0/16 Signature Algorithm: sha256WithRSAEncryption ea:ec:02:03:0a:82:46:7f:05:15:e5:c7:64:0e:8c:31:c8:b8: 1a:00:72:04:b9:9e:c5:3f:9d:f7:db:c0:18:e5:ae:37:c7:4d: 92:89:88:8a:ab:b1:8c:e1:5e:24:70:05:0a:b9:e9:93:6e:39: 3d:e4:97:7b:14:99:21:26:c8:9b:f8:63:16:d1:94:b6:83:43: 52:2f:25:fe:ca:b2:e8:6a:8f:0a:3f:91:f8:ac:d6:1d:b6:26: fa:1f:95:d1:57:63:56:96:f0:44:05:55:72:21:ef:d7:60:21: 00:5c:1f:c4:af:d4:9c:92:ce:37:45:19:64:93:d7:70:ae:fa: 1d:57:e3:ce:70:49:f0:d6:62:d3:f3:5a:86:0f:f0:6f:4a:6a: de:ab:97:12:f4:cd:79:bf:83:29:a6:51:7d:1a:17:be:59:3b: a7:d0:7e:49:95:97:e2:bf:41:98:d8:22:30:44:36:9e:93:e4: 5b:29:71:63:6f:49:ae:f2:8c:7d:e4:45:7b:a7:5c:0a:62:52: 56:4b:49:58:e9:28:a5:fe:9b:38:4d:15:2c:04:c5:07:6d:53: 2f:28:bd:46:37:17:a8:ae:b2:49:29:ac:1c:48:7c:07:4b:b5: 6a:47:c4:92:d4:03:22:11:13:1e:3e:39:4a:dc:eb:72:19:34: fa:9f:5c:ae -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+OEFXn01X572JrmX5i2xXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYWZjMDkzYzNjNDI1NmQxMTRhOGVkYzBkMDZjNzNjYjYz ZTE4NmQwHhcNMjYwMTAyMTAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTJkZDc5MDllMTBkNjA0MGU2ZjYxZjI1MjY1Y2I3N2ZlZjFhMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h4bs+9TYXow+fy/+f1vj6ktI37/ ONgOXS2vzXKAzxHJGrvCE5yapqHGBwwdAPBYrGyj7DbbtU/zE6twNExcHCUTpKxi PWHqioi/O8QKqrHdHr8HHAHUIM1S5C9aSjgl7f1PAqYxo5Q/lADXZGR4/A1T/2Hr 4Vk+ILdvJToTmkr6XZ2FNMsVxQwBi0yaHra69LKI3zULt3za6mXIJZYMWbIpO5cG qH/90f+lWPfdv8N9YeS5iOOmgkQWZiqYdeDxyugCvMEj8ruAL6zjkQUbBwG3sRV9 ewVdcHLBiRY3okMH8v/uJZvu1aVaqVSpr5Ow26k/P8FcI+cFQUS2gwr0YQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFJkt15CeENYEDm9h8lJly3f+8aKjMB8GA1UdIwQY MBaAFMqvwJPDxCVtEUqO3A0Gxzy2PhhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXFfQWs4UEVKVzBSU283Y0RRYkhQTFktR0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84ODI1YjQtZmYwOC00OTE2LWFlMDUt ODkzZmJlNTkxMWIwLzEvbVMzWGtKNFExZ1FPYjJIeVVtWExkXzd4b3FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84ODI1YjQtZmYwOC00OTE2LWFlMDUtODkzZmJlNTkxMWIw LzEveXFfQWs4UEVKVzBSU283Y0RRYkhQTFktR0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoGIwDQYJ KoZIhvcNAQELBQADggEBAOrsAgMKgkZ/BRXlx2QOjDHIuBoAcgS5nsU/nffbwBjl rjfHTZKJiIqrsYzhXiRwBQq56ZNuOT3kl3sUmSEmyJv4YxbRlLaDQ1IvJf7Ksuhq jwo/kfis1h22JvofldFXY1aW8EQFVXIh79dgIQBcH8Sv1JySzjdFGWST13Cu+h1X 485wSfDWYtPzWoYP8G9Kat6rlxL0zXm/gymmUX0aF75ZO6fQfkmVl+K/QZjYIjBE Np6T5FspcWNvSa7yjH3kRXunXApiUlZLSVjpKKX+mzhNFSwExQdtUy8ovUY3F6iu skkprBxIfAdLtWpHxJLUAyIREx4+OUrc63IZNPqfXK4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:47 2026 by rpki-client