This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CySFg1dirUY_QqIN0wfjKTSeTNA.roa File: CySFg1dirUY_QqIN0wfjKTSeTNA.roa (raw, json) Hash identifier: KxBZjGvFS3bQC8cAHPO37o2BjPm81+sMBBv3HkTqAAo= Subject key identifier: 0B:24:85:83:57:62:AD:46:3F:42:A2:0D:D3:07:E3:29:34:9E:4C:D0 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A35801FEF9D59BD6F8C6C8989535BC Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CySFg1dirUY_QqIN0wfjKTSeTNA.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216285 IP address blocks: 84.54.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:58:01:fe:f9:d5:9b:d6:f8:c6:c8:98:95:35:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b2485835762ad463f42a20dd307e329349e4cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:13:8c:c8:90:f1:ff:47:14:57:b0:62:70: 51:fd:8d:e1:e9:86:d1:91:d0:f0:b2:24:05:09:26: e2:a9:1f:9d:41:42:35:04:42:01:bf:cb:47:f6:8b: db:c1:29:b2:e5:04:45:06:53:81:1a:f2:62:97:bf: 1b:05:05:f8:41:e6:1a:42:7a:e9:63:97:e0:ba:b7: ac:02:6f:07:2b:4a:97:aa:7b:94:01:6c:37:c6:f0: 62:49:33:83:9a:7c:5b:c7:e1:c5:cb:23:7e:5c:b0: d6:d1:38:73:be:4f:35:99:8b:72:7e:ea:10:84:e5: c5:e7:da:2c:e1:8d:61:46:44:a2:e4:b6:ea:1a:06: df:4f:cc:8f:0a:a5:c3:60:5c:16:b4:c4:09:dc:c0: 9e:94:84:38:3c:d8:45:68:2b:54:90:6d:d1:f3:8e: 8d:9d:b5:20:46:e6:4d:aa:3f:28:cc:f5:32:a0:67: be:90:ad:f5:1e:24:d3:9c:7d:8b:d2:d3:da:64:65: 21:51:c9:53:c0:f7:40:a4:0d:22:66:c6:ad:2b:77: 4a:02:33:00:34:b1:7a:73:63:df:f1:a2:be:47:96: 1f:ad:3b:91:32:61:e2:46:9d:70:7c:a0:fe:36:c9: 35:72:ba:98:8b:13:10:1a:8a:ec:df:0f:e1:9c:7b: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:24:85:83:57:62:AD:46:3F:42:A2:0D:D3:07:E3:29:34:9E:4C:D0 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CySFg1dirUY_QqIN0wfjKTSeTNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.49.0/24 Signature Algorithm: sha256WithRSAEncryption 73:e3:41:6a:8c:b8:2d:45:72:ba:f6:e2:82:e1:88:00:f1:bd: 10:44:78:a9:f1:a5:dd:51:75:ad:6e:60:93:e7:d9:e5:6c:17: 86:ad:40:e2:2b:fe:30:1d:16:d2:e6:74:43:5a:9e:84:d9:fc: f0:61:32:32:6f:4b:86:fb:16:93:da:e7:f2:00:26:36:e6:d6: 98:cd:9f:15:8b:c5:b7:52:e4:ad:8f:c6:69:fa:3b:57:d3:72: a8:d8:fe:f8:c5:26:0f:99:a2:87:72:01:7d:15:2c:29:8b:24: ff:d9:81:aa:f8:bb:fd:4a:d6:17:7e:c2:9e:e6:6a:8f:97:d8: b3:ad:55:e4:60:d4:12:91:ce:ad:56:80:65:dc:26:5e:d7:c0: 5a:e4:74:cc:4c:b2:2a:ff:71:9e:67:ea:1c:7c:33:ea:0a:ab: 51:20:da:9a:b1:39:47:28:0b:e2:ec:7d:71:61:5c:39:de:58: d4:f5:57:27:b9:7c:9a:6f:27:f1:3a:db:78:1f:7b:97:83:5f: d1:fc:79:5d:a8:9d:76:b0:c8:69:ea:0d:e0:6d:a2:9d:63:09: f4:8f:c3:c8:6c:d1:81:5b:c5:fa:41:b9:13:79:df:a5:e6:77: b8:5f:b7:8e:9b:08:3c:04:51:09:38:a5:43:f2:24:98:e0:3b: 01:33:17:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1gB/vnVm9b4xsiYlTW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjI0ODU4MzU3NjJhZDQ2M2Y0MmEyMGRkMzA3ZTMyOTM0OWU0Y2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oQTjMiQ8f9HFFewYnBR/Y3h6YbR kdDwsiQFCSbiqR+dQUI1BEIBv8tH9ovbwSmy5QRFBlOBGvJil78bBQX4QeYaQnrp Y5fguresAm8HK0qXqnuUAWw3xvBiSTODmnxbx+HFyyN+XLDW0Thzvk81mYtyfuoQ hOXF59os4Y1hRkSi5LbqGgbfT8yPCqXDYFwWtMQJ3MCelIQ4PNhFaCtUkG3R846N nbUgRuZNqj8ozPUyoGe+kK31HiTTnH2L0tPaZGUhUclTwPdApA0iZsatK3dKAjMA NLF6c2Pf8aK+R5YfrTuRMmHiRp1wfKD+Nsk1crqYixMQGors3w/hnHvrQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAskhYNXYq1GP0KiDdMH4yk0nkzQMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQ3lTRmcxZGlyVVlfUXFJTjB3ZmpLVFNlVE5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDYxMA0G CSqGSIb3DQEBCwUAA4IBAQBz40FqjLgtRXK69uKC4YgA8b0QRHip8aXdUXWtbmCT 59nlbBeGrUDiK/4wHRbS5nRDWp6E2fzwYTIyb0uG+xaT2ufyACY25taYzZ8Vi8W3 UuStj8Zp+jtX03Ko2P74xSYPmaKHcgF9FSwpiyT/2YGq+Lv9StYXfsKe5mqPl9iz rVXkYNQSkc6tVoBl3CZe18Ba5HTMTLIq/3GeZ+ocfDPqCqtRINqasTlHKAvi7H1x YVw53ljU9VcnuXyabyfxOtt4H3uXg1/R/HldqJ12sMhp6g3gbaKdYwn0j8PIbNGB W8X6QbkTed+l5ne4X7eOmwg8BFEJOKVD8iSY4DsBMxdl -----END CERTIFICATE-----Generated at Fri Jan 2 12:02:55 2026 by rpki-client