This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IYY75M5FyYLSuaEO76gEYgYB9VU.roa File: IYY75M5FyYLSuaEO76gEYgYB9VU.roa (raw, json) Hash identifier: CGe0bZtGkP3bftVpyoBEeTg3JHSPOrqkizGPtdOOINc= Subject key identifier: 21:86:3B:E4:CE:45:C9:82:D2:B9:A1:0E:EF:A8:04:62:06:01:F5:55 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85666DB656A555CC5801A0D73811C0 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IYY75M5FyYLSuaEO76gEYgYB9VU.roa Signing time: Fri 02 Jan 2026 16:23:27 +0000 ROA not before: Fri 02 Jan 2026 16:23:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206216 IP address blocks: 212.193.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:66:6d:b6:56:a5:55:cc:58:01:a0:d7:38:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21863be4ce45c982d2b9a10eefa804620601f555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:cf:42:88:81:a7:76:92:9f:64:f4:d3:a8: d4:af:a4:92:bd:be:64:7e:ab:1d:ff:a9:4b:c8:33: 16:e9:c6:86:19:ff:b9:52:34:94:f7:3b:5e:3c:20: 14:82:b3:1b:99:13:c9:bb:08:0f:66:da:38:52:98: cb:4b:3c:6c:c3:6f:ef:5a:13:dd:91:83:2f:3f:07: 9f:98:29:ed:65:0d:32:fe:a2:41:68:eb:58:30:ef: 35:89:98:71:67:be:27:26:7c:29:66:f2:a5:01:83: 78:f2:0f:be:2c:74:c0:cd:6e:13:c1:a9:a3:35:d3: bb:c5:a0:5f:25:2f:15:c2:1b:7b:5c:4a:fc:c3:d8: 3e:cf:9b:75:cb:ae:43:3d:81:f8:4b:0a:ce:23:69: 60:3b:c8:37:5b:d1:9a:78:e8:d0:28:4b:65:14:f3: 6e:e7:10:c5:d9:94:b6:78:f0:a3:b1:e3:f5:26:b5: 07:f1:b4:5e:64:68:68:9c:44:fd:01:ff:a1:ac:86: 41:ce:e7:a5:7e:f9:4d:d5:25:88:30:c4:c0:33:69: 71:de:e0:e8:75:bf:3b:0e:ae:aa:ae:7a:00:2c:53: e0:e1:86:83:49:23:56:be:e6:af:c8:53:21:ce:8b: 39:e5:0d:80:94:7c:7f:09:ac:1d:a5:d3:06:7f:81: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:86:3B:E4:CE:45:C9:82:D2:B9:A1:0E:EF:A8:04:62:06:01:F5:55 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IYY75M5FyYLSuaEO76gEYgYB9VU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.193.3.0/24 Signature Algorithm: sha256WithRSAEncryption 85:53:e4:17:ed:41:36:dc:38:25:49:7b:af:ff:80:6b:7d:9d: 8c:d8:97:6d:e8:02:1d:80:b0:97:63:ca:b7:29:d8:18:de:39: c9:1f:7e:8f:c9:8b:8a:f4:f8:e8:8f:77:c9:6c:47:64:5a:1d: c5:70:28:f5:a9:c2:e2:62:94:5b:7a:87:18:a9:15:f7:39:4d: 4e:92:b9:47:91:be:3b:ce:b2:e9:bf:1f:b4:07:a9:15:4d:1b: 24:be:41:5c:da:cf:bd:76:80:b6:1f:63:02:41:f5:ac:8d:50: 04:a6:85:65:0b:65:24:bc:30:11:f8:4d:39:64:f4:34:9e:c1: eb:7e:cc:6b:b4:90:70:bb:40:31:a8:0b:07:82:c9:d8:31:41: 2f:65:74:4d:58:fd:aa:95:b4:d9:78:0b:ec:de:8a:65:0e:e1: 54:07:22:66:3d:18:c9:35:43:c4:9e:bc:74:16:72:f5:c5:15: 1b:f7:89:8d:53:bd:bf:8f:d7:2c:17:5a:5d:18:97:0d:23:23: 6c:8e:38:fd:4b:48:c0:c2:a8:e9:5f:86:1e:98:c6:a8:60:47: 32:f4:ee:eb:e2:c6:a6:35:43:f0:27:ff:73:ec:7f:34:0a:86: 19:0f:33:47:a5:83:00:b9:ea:19:be:50:7f:9a:48:91:65:dc: 4b:d6:ef:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hWZttlalVcxYAaDXOBHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTg2M2JlNGNlNDVjOTgyZDJiOWExMGVlZmE4MDQ2MjA2MDFmNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rLPQoiBp3aSn2T006jUr6SSvb5k fqsd/6lLyDMW6caGGf+5UjSU9ztePCAUgrMbmRPJuwgPZto4UpjLSzxsw2/vWhPd kYMvPwefmCntZQ0y/qJBaOtYMO81iZhxZ74nJnwpZvKlAYN48g++LHTAzW4Twamj NdO7xaBfJS8Vwht7XEr8w9g+z5t1y65DPYH4SwrOI2lgO8g3W9GaeOjQKEtlFPNu 5xDF2ZS2ePCjseP1JrUH8bReZGhonET9Af+hrIZBzuelfvlN1SWIMMTAM2lx3uDo db87Dq6qrnoALFPg4YaDSSNWvuavyFMhzos55Q2AlHx/CawdpdMGf4G6rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCGGO+TORcmC0rmhDu+oBGIGAfVVMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvSVlZNzVNNUZ5WUxTdWFFTzc2Z0VZZ1lCOVZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MEDMA0G CSqGSIb3DQEBCwUAA4IBAQCFU+QX7UE23DglSXuv/4BrfZ2M2Jdt6AIdgLCXY8q3 KdgY3jnJH36PyYuK9Pjoj3fJbEdkWh3FcCj1qcLiYpRbeocYqRX3OU1OkrlHkb47 zrLpvx+0B6kVTRskvkFc2s+9doC2H2MCQfWsjVAEpoVlC2UkvDAR+E05ZPQ0nsHr fsxrtJBwu0AxqAsHgsnYMUEvZXRNWP2qlbTZeAvs3oplDuFUByJmPRjJNUPEnrx0 FnL1xRUb94mNU72/j9csF1pdGJcNIyNsjjj9S0jAwqjpX4YemMaoYEcy9O7r4sam NUPwJ/9z7H80CoYZDzNHpYMAueoZvlB/mkiRZdxL1u+4 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:18 2026 by rpki-client