This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3ybPfrYa86lxQywkqbA5Bzk2NNA.roa File: 3ybPfrYa86lxQywkqbA5Bzk2NNA.roa (raw, json) Hash identifier: ZTDNaUAdsnb22hIrbhessndohWwSrnSU0lroCPP0B4o= Subject key identifier: DF:26:CF:7E:B6:1A:F3:A9:71:43:2C:24:A9:B0:39:07:39:36:34:D0 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019AC47E14A9BA08448D48FD8CEC27709E2E Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3ybPfrYa86lxQywkqbA5Bzk2NNA.roa Signing time: Thu 27 Nov 2025 08:46:28 +0000 ROA not before: Thu 27 Nov 2025 08:46:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199768 IP address blocks: 192.36.20.0/24 maxlen: 24 193.235.28.0/23 maxlen: 24 194.103.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:7e:14:a9:ba:08:44:8d:48:fd:8c:ec:27:70:9e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Nov 27 08:46:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df26cf7eb61af3a971432c24a9b03907393634d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:8b:2d:e3:68:ed:42:9d:21:58:43:bd:34: 24:b9:b5:1a:6b:54:60:c4:3c:e3:f0:1d:9e:6b:5c: 50:c7:77:7e:7a:84:5c:08:75:7d:85:05:82:1e:3f: 34:59:f9:a0:c3:73:c0:72:c3:f3:93:f3:72:0f:a2: 3b:b5:b8:22:01:67:29:d9:9e:39:1d:3d:6e:c4:6d: 31:df:bc:c5:28:c5:42:ce:33:13:5e:7c:d1:69:e4: 24:6a:11:fb:65:42:e4:7a:36:de:03:fb:b3:9a:1a: 82:f2:88:24:39:d4:b2:9c:17:0d:43:43:27:52:00: 89:dc:e1:25:9a:d5:e9:ab:0c:84:f0:cb:b3:4f:94: 33:fb:58:7b:bb:a7:86:08:1e:89:ec:8f:e0:89:c4: 79:ad:67:cb:aa:81:05:fe:44:fb:21:d9:ec:41:7b: 09:02:e6:53:d0:a7:77:95:54:0a:98:51:44:e6:55: 90:b1:a2:d8:40:f5:10:a1:30:4b:32:86:13:69:7d: 8d:9a:43:e6:94:e5:f3:6c:0e:13:07:a0:f7:26:b0: a3:ba:18:12:1f:3e:f7:26:ea:94:ab:19:93:1c:52: 0e:47:83:6a:f3:68:69:92:11:43:6c:14:5f:45:17: 61:41:40:62:3b:bb:af:7d:15:33:1d:36:41:75:43: cb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:26:CF:7E:B6:1A:F3:A9:71:43:2C:24:A9:B0:39:07:39:36:34:D0 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3ybPfrYa86lxQywkqbA5Bzk2NNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.20.0/24 193.235.28.0/23 194.103.28.0/22 Signature Algorithm: sha256WithRSAEncryption 87:d0:9e:98:41:bc:fd:e3:5e:b6:7a:3c:ce:a2:bb:45:61:f0: 17:71:c5:30:15:e1:87:54:24:ce:36:4b:00:68:a2:f6:47:46: 60:c2:e7:78:93:87:78:d1:c5:01:69:60:2c:d6:e6:79:19:a3: fb:e7:43:05:99:7d:3e:9b:df:d5:46:33:a5:79:62:69:ae:2a: a1:42:61:c0:5f:e2:ad:7f:a7:2e:61:75:40:5d:a8:35:2e:d5: 33:d0:a4:df:d8:f3:8f:ac:e7:75:56:62:c2:72:18:3a:4b:44: 10:dc:02:f7:7b:69:31:da:1c:33:14:fe:09:9e:66:88:58:83: 44:35:66:fc:3b:27:0b:9e:16:83:4b:24:3b:2b:6e:65:8e:73: d3:2d:02:9c:d4:f8:53:5f:9d:b1:a0:f6:19:8b:01:9a:b7:9d: 2b:1f:3b:61:9a:08:8b:3e:14:06:2d:61:e1:7e:5f:14:3f:83: 6f:ea:a4:88:32:b1:b0:25:66:92:0e:4f:22:ed:53:b9:ad:71: ad:33:fb:8f:a1:75:f6:39:30:46:93:35:7c:6c:d0:57:8c:8d: 37:a7:bd:ce:37:44:a5:0f:29:b8:41:82:d4:aa:8c:0b:a0:69: 1c:07:af:72:85:39:58:92:b5:27:34:11:f3:81:e1:99:79:1b: 42:d5:b9:dd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrEfhSpughEjUj9jOwncJ4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMTI3MDg0NjI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjI2Y2Y3ZWI2MWFmM2E5NzE0MzJjMjRhOWIwMzkwNzM5MzYzNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro2LLeNo7UKdIVhDvTQkubUaa1Rg xDzj8B2ea1xQx3d+eoRcCHV9hQWCHj80Wfmgw3PAcsPzk/NyD6I7tbgiAWcp2Z45 HT1uxG0x37zFKMVCzjMTXnzRaeQkahH7ZULkejbeA/uzmhqC8ogkOdSynBcNQ0Mn UgCJ3OElmtXpqwyE8MuzT5Qz+1h7u6eGCB6J7I/gicR5rWfLqoEF/kT7IdnsQXsJ AuZT0Kd3lVQKmFFE5lWQsaLYQPUQoTBLMoYTaX2NmkPmlOXzbA4TB6D3JrCjuhgS Hz73JuqUqxmTHFIOR4Nq82hpkhFDbBRfRRdhQUBiO7uvfRUzHTZBdUPLowIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN8mz362GvOpcUMsJKmwOQc5NjTQMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvM3liUGZyWWE4Nmx4UXl3a3FiQTVCemsyTk5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwCQUAwQB wescAwQCwmccMA0GCSqGSIb3DQEBCwUAA4IBAQCH0J6YQbz94162ejzOortFYfAX ccUwFeGHVCTONksAaKL2R0Zgwud4k4d40cUBaWAs1uZ5GaP750MFmX0+m9/VRjOl eWJpriqhQmHAX+Ktf6cuYXVAXag1LtUz0KTf2POPrOd1VmLCchg6S0QQ3AL3e2kx 2hwzFP4JnmaIWINENWb8OycLnhaDSyQ7K25ljnPTLQKc1PhTX52xoPYZiwGat50r HzthmgiLPhQGLWHhfl8UP4Nv6qSIMrGwJWaSDk8i7VO5rXGtM/uPoXX2OTBGkzV8 bNBXjI03p73ON0SlDym4QYLUqowLoGkcB69yhTlYkrUnNBHzgeGZeRtC1bnd -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:00 2025 by rpki-client