This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/3yNd9VkULSQcG9kJM76wCWWOkVk.roa File: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (raw, json) Hash identifier: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo= Subject key identifier: DF:23:5D:F5:59:14:2D:24:1C:1B:D9:09:33:BE:B0:09:65:8E:91:59 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B7E970124ABDF1DA003DB275EAF0E Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/3yNd9VkULSQcG9kJM76wCWWOkVk.roa Signing time: Fri 02 Jan 2026 06:18:26 +0000 ROA not before: Fri 02 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30933 IP address blocks: 80.253.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7e:97:01:24:ab:df:1d:a0:03:db:27:5e:af:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df235df559142d241c1bd90933beb009658e9159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4c:b2:1d:e1:47:a2:42:68:52:3b:66:b7:f6: 2e:0b:1d:be:b8:54:92:21:9c:ec:3f:a2:51:3f:ba: c1:20:25:b2:32:bf:12:14:1f:f4:60:6f:7f:49:a7: c3:42:2d:47:cb:fa:98:bb:7c:00:6e:59:09:19:75: 06:66:fb:0c:a9:ae:77:a0:6f:a2:bd:a7:95:19:b5: f8:08:1c:2f:23:a0:ca:0b:9c:b6:18:e0:46:50:55: cb:25:31:57:65:44:87:06:db:d0:d8:c6:8f:85:4d: 63:be:40:ea:6b:2d:5e:7f:e0:3f:21:a5:cc:3a:4e: 03:52:3b:9b:c6:8b:29:e1:bf:29:b1:1e:29:88:21: 1d:02:54:10:e5:ca:28:88:7a:99:c1:33:38:b5:5e: 1c:bb:a5:c6:0f:cf:58:a8:70:31:5c:0c:35:2f:2c: 0a:d8:d3:0e:6d:1a:aa:cd:da:94:6d:27:34:cc:5b: 68:3e:85:56:a1:a0:39:25:ba:f3:fa:a7:e6:de:40: e5:8f:da:30:ad:71:ce:00:bd:77:6d:81:df:55:d2: 0f:ce:96:d8:97:53:1b:c1:d8:b1:2a:81:f2:43:45: 36:af:8d:ba:fd:c7:b0:2b:ee:f4:59:63:89:e6:e5: b8:0c:cd:c7:85:ee:92:c4:f0:fb:e0:f4:ed:98:e1: 06:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:23:5D:F5:59:14:2D:24:1C:1B:D9:09:33:BE:B0:09:65:8E:91:59 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/3yNd9VkULSQcG9kJM76wCWWOkVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.99.0/24 Signature Algorithm: sha256WithRSAEncryption 01:03:92:5e:6e:f0:c9:03:ad:a6:6d:a3:e8:ce:5a:57:2f:2b: 99:51:f9:a2:b1:63:74:25:9c:6a:29:a4:2a:a8:39:75:1f:fe: 00:b9:e5:34:47:c3:5e:d1:a9:f3:f4:70:21:56:98:d3:1d:bb: b4:43:0b:f4:17:fd:16:aa:2e:3f:21:6e:d9:48:17:b7:1a:4a: 0f:0c:f0:8e:6e:66:c1:91:db:87:31:7d:50:11:db:72:46:03: e8:fd:24:fe:9a:71:cb:9c:54:c0:61:57:04:20:04:ab:e0:a2: 4a:6b:d0:25:01:b2:e9:28:f4:3d:b9:3a:f8:40:0f:61:8f:b6: 7c:64:08:e6:be:a8:3e:46:8d:c5:d7:ee:4f:48:8c:26:4d:e3: 9b:af:85:66:a0:dd:0b:33:7a:dd:d1:8e:85:99:f8:44:07:53: fd:9e:58:86:5f:78:97:79:0d:19:3f:3d:53:c8:3c:45:8c:ca: a1:de:d2:2f:cf:44:dc:e7:c5:2c:57:87:3d:0f:ac:14:78:a8: 4b:ee:8b:31:5a:e7:7c:f6:aa:d2:9e:b4:3f:b6:32:1c:70:3f: 4b:f1:8f:79:22:61:1c:1f:a5:f5:42:4e:29:68:73:2a:7a:e1: fd:c1:cd:27:a3:cc:c2:cd:7e:a5:5b:1b:30:34:9b:11:50:92: af:cc:fc:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W36XASSr3x2gA9snXq8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjIzNWRmNTU5MTQyZDI0MWMxYmQ5MDkzM2JlYjAwOTY1OGU5MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkyyHeFHokJoUjtmt/YuCx2+uFSS IZzsP6JRP7rBICWyMr8SFB/0YG9/SafDQi1Hy/qYu3wAblkJGXUGZvsMqa53oG+i vaeVGbX4CBwvI6DKC5y2GOBGUFXLJTFXZUSHBtvQ2MaPhU1jvkDqay1ef+A/IaXM Ok4DUjubxosp4b8psR4piCEdAlQQ5cooiHqZwTM4tV4cu6XGD89YqHAxXAw1LywK 2NMObRqqzdqUbSc0zFtoPoVWoaA5Jbrz+qfm3kDlj9owrXHOAL13bYHfVdIPzpbY l1MbwdixKoHyQ0U2r426/cewK+70WWOJ5uW4DM3Hhe6SxPD74PTtmOEGCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8jXfVZFC0kHBvZCTO+sAlljpFZMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvM3lOZDlWa1VMU1FjRzlrSk03NndDV1dPa1ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUP1jMA0G CSqGSIb3DQEBCwUAA4IBAQABA5JebvDJA62mbaPozlpXLyuZUfmisWN0JZxqKaQq qDl1H/4AueU0R8Ne0anz9HAhVpjTHbu0Qwv0F/0Wqi4/IW7ZSBe3GkoPDPCObmbB kduHMX1QEdtyRgPo/ST+mnHLnFTAYVcEIASr4KJKa9AlAbLpKPQ9uTr4QA9hj7Z8 ZAjmvqg+Ro3F1+5PSIwmTeObr4VmoN0LM3rd0Y6FmfhEB1P9nliGX3iXeQ0ZPz1T yDxFjMqh3tIvz0Tc58UsV4c9D6wUeKhL7osxWud89qrSnrQ/tjIccD9L8Y95ImEc H6X1Qk4paHMqeuH9wc0no8zCzX6lWxswNJsRUJKvzPzj -----END CERTIFICATE-----Generated at Sun Jan 25 15:06:06 2026 by rpki-client