This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/y3zfP0q93ofdDmTML3d9ibPYDE0.roa File: y3zfP0q93ofdDmTML3d9ibPYDE0.roa (raw, json) Hash identifier: lXR/PGnLiIZR28DvXpTTFej/rrLITeIePZus7we16Gw= Subject key identifier: CB:7C:DF:3F:4A:BD:DE:87:DD:0E:64:CC:2F:77:7D:89:B3:D8:0C:4D Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Certificate serial: 019B7758CB220E4951CB84A76F37A9B182DB Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/y3zfP0q93ofdDmTML3d9ibPYDE0.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43541 IP address blocks: 185.231.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cb:22:0e:49:51:cb:84:a7:6f:37:a9:b1:82:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb7cdf3f4abdde87dd0e64cc2f777d89b3d80c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ad:9e:78:21:ee:15:18:8b:f1:aa:fc:75:9d: fa:ed:4d:49:35:8c:dd:23:a0:eb:af:c0:54:64:6f: c3:fd:fb:00:3e:f0:64:b3:ce:b1:d6:6a:6f:14:99: bc:7b:28:ba:45:0e:59:54:94:bb:50:81:da:59:e4: cf:05:5c:4f:05:d1:06:06:71:f2:17:eb:29:1f:f2: 9c:54:ea:04:3d:9f:12:a8:11:d2:19:6f:89:06:23: 7f:bc:89:e6:47:fc:6d:99:49:15:26:74:9d:c2:3f: 9b:fa:05:0b:7f:d5:85:1f:82:17:a1:17:a9:98:1a: 1e:cc:04:c5:6f:fb:90:34:68:d5:89:93:6a:3c:ba: 9d:c8:f4:22:70:ae:33:33:37:0a:06:00:09:a4:94: e4:fe:8f:c4:c6:e6:57:f8:f5:f2:4f:83:70:e0:5d: 12:e1:f0:19:49:17:a5:93:74:a8:3c:a0:e7:b5:3a: 14:bd:f9:55:0f:3c:2a:62:3a:76:ae:82:27:1e:c0: 9a:b2:eb:41:7a:e0:62:fa:6d:0c:fd:a2:89:ab:e2: 21:5c:a5:16:54:a9:bc:44:10:ad:fb:1f:27:82:69: ba:ea:ef:9e:fb:b1:f2:93:37:6f:6c:e9:e5:91:df: a9:81:d6:39:e2:87:b5:a3:9e:2f:98:34:e9:3d:6c: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7C:DF:3F:4A:BD:DE:87:DD:0E:64:CC:2F:77:7D:89:B3:D8:0C:4D X509v3 Authority Key Identifier: keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/y3zfP0q93ofdDmTML3d9ibPYDE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.223.0/24 Signature Algorithm: sha256WithRSAEncryption be:07:43:c6:65:33:4d:ce:87:c5:5e:7a:1e:dc:db:8a:19:de: 91:0a:f8:d6:75:d5:89:46:4c:c0:27:10:e5:4b:e7:68:4f:cf: 27:28:11:5a:07:77:3d:16:e9:56:6f:e4:68:2c:eb:8d:b2:05: 23:a5:8f:1c:19:c9:24:b2:f1:54:ee:8a:f4:ba:a7:a4:e7:6c: 65:ff:b2:53:0a:c4:87:88:a0:c1:2b:23:54:08:af:24:80:e8: ad:6e:44:27:6d:e0:b7:40:90:eb:02:70:04:11:b2:40:3d:23: e3:ec:f0:80:b8:77:64:91:c6:96:bb:83:fd:3e:ee:b0:18:af: ec:b8:e8:04:1b:96:63:08:8f:d5:4a:aa:5f:8a:8f:ce:ac:bc: f6:b5:0a:28:09:1e:0e:2e:64:4e:08:57:af:ce:f6:8b:a6:9a: 6f:f0:fc:75:89:fd:44:3b:08:86:e7:4a:8c:0f:08:b5:08:8f: 43:b4:9e:d3:13:10:fd:d8:41:d5:26:dd:40:fe:47:a4:80:07: 17:8e:b5:68:81:06:9b:19:3e:a2:17:09:7f:de:a1:4e:a7:b4: ee:56:a8:cf:3c:3c:ba:60:d9:10:49:d9:b9:b3:d8:e8:e8:df: 51:ec:c0:ec:32:c6:69:75:0d:36:7c:4e:5d:f7:42:62:65:17: 93:52:7f:5e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WMsiDklRy4SnbzepsYLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMmU3MmFiZjdiMTcyOGZkYTZhYTBiMDQxM2Q4ODU0ODEy ZWEzNjEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjdjZGYzZjRhYmRkZTg3ZGQwZTY0Y2MyZjc3N2Q4OWIzZDgwYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K2eeCHuFRiL8ar8dZ367U1JNYzd I6Drr8BUZG/D/fsAPvBks86x1mpvFJm8eyi6RQ5ZVJS7UIHaWeTPBVxPBdEGBnHy F+spH/KcVOoEPZ8SqBHSGW+JBiN/vInmR/xtmUkVJnSdwj+b+gULf9WFH4IXoRep mBoezATFb/uQNGjViZNqPLqdyPQicK4zMzcKBgAJpJTk/o/ExuZX+PXyT4Nw4F0S 4fAZSRelk3SoPKDntToUvflVDzwqYjp2roInHsCasutBeuBi+m0M/aKJq+IhXKUW VKm8RBCt+x8ngmm66u+e+7HykzdvbOnlkd+pgdY54oe1o54vmDTpPWzSuQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMt83z9Kvd6H3Q5kzC93fYmz2AxNMB8GA1UdIwQY MBaAFPoucqv3sXKP2mqgsEE9iFSBLqNhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pNXlxX2V4Y29fYWFxQ3dRVDJJVklFdW8yRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlm LWEzNjZkYTI1MWE4My8xL3kzemZQMHE5M29mZERtVE1MM2Q5aWJQWURFMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlmLWEzNjZkYTI1MWE4 My8xLzEtaTV5cV9leGNvX2FhcUN3UVQySVZJRXVvMkUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5598w DQYJKoZIhvcNAQELBQADggEBAL4HQ8ZlM03Oh8Veeh7c24oZ3pEK+NZ11YlGTMAn EOVL52hPzycoEVoHdz0W6VZv5Ggs642yBSOljxwZySSy8VTuivS6p6TnbGX/slMK xIeIoMErI1QIrySA6K1uRCdt4LdAkOsCcAQRskA9I+Ps8IC4d2SRxpa7g/0+7rAY r+y46AQblmMIj9VKql+Kj86svPa1CigJHg4uZE4IV6/O9oummm/w/HWJ/UQ7CIbn SowPCLUIj0O0ntMTEP3YQdUm3UD+R6SABxeOtWiBBpsZPqIXCX/eoU6ntO5WqM88 PLpg2RBJ2bmz2Ojo31HswOwyxml1DTZ8Tl33QmJlF5NSf14= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:32 2026 by rpki-client