This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Y3783nUrRTFZBbngMY7aX-quJlo.roa File: Y3783nUrRTFZBbngMY7aX-quJlo.roa (raw, json) Hash identifier: 5p9sIZIS1RVqID7GzDJiyhaYF7TJdTLEzWd1pXiwNwY= Subject key identifier: 63:7E:FC:DE:75:2B:45:31:59:05:B9:E0:31:8E:DA:5F:EA:AE:26:5A Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019B7F839BCF977CB12B9A1EA76A078E5E20 Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Y3783nUrRTFZBbngMY7aX-quJlo.roa Signing time: Fri 02 Jan 2026 16:21:30 +0000 ROA not before: Fri 02 Jan 2026 16:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 193.135.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9b:cf:97:7c:b1:2b:9a:1e:a7:6a:07:8e:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Jan 2 16:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=637efcde752b45315905b9e0318eda5feaae265a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:bc:86:bd:92:dc:2b:fc:7f:33:d0:eb:e4: 1e:54:bb:26:84:f7:a4:aa:6e:1f:9b:75:10:cc:dd: 31:1d:f8:94:43:96:5f:8d:1a:c0:26:b7:b6:0b:a2: 3f:8b:f7:44:7d:30:f8:52:fc:10:1e:d5:14:fd:2a: d1:c3:8c:d1:05:d7:70:a8:72:94:1a:8f:39:87:b2: 17:90:28:88:f3:89:3a:86:7b:55:9d:f6:3f:7f:6d: 19:97:83:59:2b:92:1a:66:b7:ca:5b:8d:11:4c:f2: 38:ed:59:f8:c6:90:64:cd:2a:77:48:8b:2d:36:bc: b7:7e:e0:c1:c7:cc:70:5b:dc:78:f1:af:0e:45:df: bb:8a:a2:3f:10:3d:7d:01:7c:06:b3:a2:fa:6c:fd: a0:4b:c7:0a:73:14:d2:dd:c0:36:98:2b:9d:03:b7: c5:fe:98:da:14:3e:c2:54:a1:42:44:e8:a7:9e:6b: 6a:8b:64:0d:3e:b4:05:82:36:88:e9:81:dc:51:f4: b0:29:cc:06:a7:d2:4b:61:fd:a7:56:5d:80:9c:69: b8:cb:52:ce:76:b8:6a:46:03:7a:83:c1:a1:ba:01: ab:a2:eb:f6:9b:eb:4a:1a:0e:03:54:4c:bf:58:6d: f6:6c:e9:46:ea:1f:d5:08:58:2c:6a:67:9d:e2:75: 48:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7E:FC:DE:75:2B:45:31:59:05:B9:E0:31:8E:DA:5F:EA:AE:26:5A X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/Y3783nUrRTFZBbngMY7aX-quJlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.151.0/24 Signature Algorithm: sha256WithRSAEncryption 73:72:1b:92:d3:be:a9:ff:f5:8f:d4:e0:93:12:8e:0f:47:e6: c4:a5:0f:72:11:15:06:de:f3:7a:4f:27:e2:34:84:a3:2f:b7: 5e:ec:a2:b4:73:b5:05:8d:8f:65:9b:0c:0d:dc:92:67:22:51: 35:2b:cb:e0:8a:67:a7:59:11:41:8f:d2:d4:ae:ec:c3:cc:c0: 7a:be:6d:c9:f2:e2:92:a6:48:51:5e:4b:d1:8c:1c:5b:f8:1b: 08:33:dc:22:4c:e6:94:58:3e:94:70:e2:c5:61:d1:1d:ed:01: 4f:c3:12:4f:18:2a:f1:cb:2c:56:25:33:29:17:c3:48:56:5a: 03:8b:db:f3:cf:c5:07:1c:2c:8c:d1:9b:a6:b3:e0:4d:c4:70: 8e:0b:7e:78:bf:78:72:62:dc:18:6a:d5:71:8b:74:77:78:ef: 60:21:44:ba:58:a2:89:b5:d2:a8:59:01:f2:f8:f2:7e:49:54: 9f:51:6f:0e:f9:ed:2f:74:37:67:b0:ad:e1:62:dd:94:46:2a: 8c:83:5d:fa:e0:56:16:c0:83:3a:4a:e1:03:9b:68:58:ef:1f: 66:7f:ef:2f:d9:22:a3:b0:fe:2e:eb:53:95:4e:b7:68:c4:de: 56:e3:c3:06:09:e2:8e:d3:05:5c:2b:0b:d9:e2:46:50:a0:32: 5c:9b:d8:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5vPl3yxK5oep2oHjl4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjYwMTAyMTYyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzdlZmNkZTc1MmI0NTMxNTkwNWI5ZTAzMThlZGE1ZmVhYWUyNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiK8hr2S3Cv8fzPQ6+QeVLsmhPek qm4fm3UQzN0xHfiUQ5ZfjRrAJre2C6I/i/dEfTD4UvwQHtUU/SrRw4zRBddwqHKU Go85h7IXkCiI84k6hntVnfY/f20Zl4NZK5IaZrfKW40RTPI47Vn4xpBkzSp3SIst Nry3fuDBx8xwW9x48a8ORd+7iqI/ED19AXwGs6L6bP2gS8cKcxTS3cA2mCudA7fF /pjaFD7CVKFCROinnmtqi2QNPrQFgjaI6YHcUfSwKcwGp9JLYf2nVl2AnGm4y1LO drhqRgN6g8GhugGrouv2m+tKGg4DVEy/WG32bOlG6h/VCFgsamed4nVI8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGN+/N51K0UxWQW54DGO2l/qriZaMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvWTM3ODNuVXJSVEZaQmJuZ01ZN2FYLXF1SmxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYeXMA0G CSqGSIb3DQEBCwUAA4IBAQBzchuS076p//WP1OCTEo4PR+bEpQ9yERUG3vN6Tyfi NISjL7de7KK0c7UFjY9lmwwN3JJnIlE1K8vgimenWRFBj9LUruzDzMB6vm3J8uKS pkhRXkvRjBxb+BsIM9wiTOaUWD6UcOLFYdEd7QFPwxJPGCrxyyxWJTMpF8NIVloD i9vzz8UHHCyM0Zums+BNxHCOC354v3hyYtwYatVxi3R3eO9gIUS6WKKJtdKoWQHy +PJ+SVSfUW8O+e0vdDdnsK3hYt2URiqMg1364FYWwIM6SuEDm2hY7x9mf+8v2SKj sP4u61OVTrdoxN5W48MGCeKO0wVcKwvZ4kZQoDJcm9iu -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:36 2026 by rpki-client