This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Y3N6Z7jLymNUfr8K9xKIoYyXpnc.roa File: Y3N6Z7jLymNUfr8K9xKIoYyXpnc.roa (raw, json) Hash identifier: 8y6bBCS91xJG9xrT7f/ihGOiVHzCrKux982EuqWnP0I= Subject key identifier: 63:73:7A:67:B8:CB:CA:63:54:7E:BF:0A:F7:12:88:A1:8C:97:A6:77 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345A448915341849F26CDD5E730105 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Y3N6Z7jLymNUfr8K9xKIoYyXpnc.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41949 IP address blocks: 193.183.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5a:44:89:15:34:18:49:f2:6c:dd:5e:73:01:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63737a67b8cbca63547ebf0af71288a18c97a677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:1a:d4:5c:64:54:cb:80:5f:c6:a6:54:50: 47:0c:e1:e7:23:73:36:c3:2e:50:4c:e1:ed:d2:84: 00:89:cf:49:3e:61:98:42:60:e9:1e:f3:f4:71:bf: 5d:6b:3d:52:ce:5e:60:08:e5:b7:8c:6c:9f:fe:da: 0b:98:ee:8f:14:08:94:fc:d8:c3:05:b7:65:f4:bf: 25:db:c2:45:cd:f8:35:38:41:c8:76:62:02:fd:97: 10:b8:99:95:87:3d:59:12:45:b1:b1:e2:4b:71:7f: 43:13:44:89:3c:dd:4b:be:69:44:5e:45:6c:5f:21: 46:7b:d6:d3:d5:2a:7e:73:9e:c4:8c:c9:1b:3b:a5: 1e:72:87:f5:de:22:ad:90:32:68:fd:dc:32:c1:2f: 07:24:a1:50:04:88:4f:7a:a5:63:00:81:b5:01:89: 94:87:c1:3c:c3:ec:4f:63:85:42:4a:49:23:98:cf: ea:25:3d:b8:dc:a5:ad:db:40:4e:12:5f:90:88:44: 29:07:a6:2f:72:77:83:f4:96:6d:29:f7:b2:e4:0d: 4b:f2:e4:da:9a:f2:22:e3:41:32:3c:ad:9d:31:5f: 01:af:36:f4:e1:8a:e9:90:96:94:8b:2c:a7:bb:a2: 63:6e:59:b2:0c:6c:1c:56:61:4c:5f:c2:46:3b:8a: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:73:7A:67:B8:CB:CA:63:54:7E:BF:0A:F7:12:88:A1:8C:97:A6:77 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Y3N6Z7jLymNUfr8K9xKIoYyXpnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.183.112.0/24 Signature Algorithm: sha256WithRSAEncryption 76:47:1a:3a:90:69:73:3b:39:42:69:35:22:66:6c:27:3d:b0: 08:64:87:71:a1:b5:f3:ee:c9:17:24:a8:10:f8:7b:2c:c2:ab: 67:d4:cc:c6:16:30:8d:bf:02:f5:b6:c9:16:33:d1:14:9a:ac: 19:3e:02:54:8c:06:b3:29:18:ec:fa:56:e4:c2:aa:07:81:f9: 02:12:13:df:61:f3:fd:b0:2a:18:65:05:bd:59:af:92:65:3b: d8:cd:9d:8e:6f:99:cb:89:ba:b3:bc:6c:78:bc:d5:e8:54:d7: 79:ea:23:ff:9c:f9:65:75:22:58:9d:91:87:a9:46:39:ea:cc: 0c:d4:64:64:f6:57:ab:bb:e4:8e:21:c5:eb:f3:fa:6b:a9:e3: 42:d5:a2:ff:f9:69:57:55:23:c0:58:c6:3e:1a:56:2f:54:e9: 00:da:f0:70:44:ea:97:a0:7a:d6:5a:fd:fe:50:e5:26:52:fb: 74:8c:b2:d3:9e:b5:33:9c:5b:10:42:dc:59:bd:8c:5f:b5:63: 9a:d1:3f:e0:b8:96:67:63:32:97:a7:69:ba:e1:ef:2b:1b:f5: 7a:73:ab:a5:76:cb:be:c2:10:5c:91:93:5f:73:c5:fa:ec:df: ca:2e:d8:23:78:dd:88:c3:87:9f:65:5b:b2:57:ff:9b:e4:73: 86:47:41:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFpEiRU0GEnybN1ecwEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzczN2E2N2I4Y2JjYTYzNTQ3ZWJmMGFmNzEyODhhMThjOTdhNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B8a1FxkVMuAX8amVFBHDOHnI3M2 wy5QTOHt0oQAic9JPmGYQmDpHvP0cb9daz1Szl5gCOW3jGyf/toLmO6PFAiU/NjD Bbdl9L8l28JFzfg1OEHIdmIC/ZcQuJmVhz1ZEkWxseJLcX9DE0SJPN1LvmlEXkVs XyFGe9bT1Sp+c57EjMkbO6Uecof13iKtkDJo/dwywS8HJKFQBIhPeqVjAIG1AYmU h8E8w+xPY4VCSkkjmM/qJT243KWt20BOEl+QiEQpB6YvcneD9JZtKfey5A1L8uTa mvIi40EyPK2dMV8Brzb04YrpkJaUiyynu6JjblmyDGwcVmFMX8JGO4pQnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGNzeme4y8pjVH6/CvcSiKGMl6Z3MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvWTNONlo3akx5bU5VZnI4Szl4S0lvWXlYcG5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbdwMA0G CSqGSIb3DQEBCwUAA4IBAQB2Rxo6kGlzOzlCaTUiZmwnPbAIZIdxobXz7skXJKgQ +Hsswqtn1MzGFjCNvwL1tskWM9EUmqwZPgJUjAazKRjs+lbkwqoHgfkCEhPfYfP9 sCoYZQW9Wa+SZTvYzZ2Ob5nLibqzvGx4vNXoVNd56iP/nPlldSJYnZGHqUY56swM 1GRk9leru+SOIcXr8/prqeNC1aL/+WlXVSPAWMY+GlYvVOkA2vBwROqXoHrWWv3+ UOUmUvt0jLLTnrUznFsQQtxZvYxftWOa0T/guJZnYzKXp2m64e8rG/V6c6uldsu+ whBckZNfc8X67N/KLtgjeN2Iw4efZVuyV/+b5HOGR0Go -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:04 2026 by rpki-client