This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YT5KkZfWostycbpj9XYEAtW9V7A.roa File: YT5KkZfWostycbpj9XYEAtW9V7A.roa (raw, json) Hash identifier: 6UORpqeHqP4jHDEPlpqc8eMcy8WBVOgCNbUqHSu4Btw= Subject key identifier: 61:3E:4A:91:97:D6:A2:CB:72:71:BA:63:F5:76:04:02:D5:BD:57:B0 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A32507A5E0340EBDD06EAEB215CE22 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YT5KkZfWostycbpj9XYEAtW9V7A.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200033 IP address blocks: 94.156.134.0/24 maxlen: 24 94.156.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:25:07:a5:e0:34:0e:bd:d0:6e:ae:b2:15:ce:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=613e4a9197d6a2cb7271ba63f5760402d5bd57b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:19:93:46:85:d5:67:61:83:9b:c6:0a:e2: a1:9c:d0:91:ea:95:81:3f:dc:3d:8d:cd:b5:6b:a1: 8d:0b:07:ec:9f:b3:7b:4c:92:b9:17:a1:c4:fe:40: 02:df:46:13:df:49:a7:ee:fb:f3:4c:82:95:d4:df: d6:4b:19:5b:c6:ec:ac:2c:1b:73:9b:1d:d5:ac:33: 60:17:7e:de:56:c9:25:4c:2a:4a:6d:ac:3c:19:65: 8d:31:00:0a:6d:d6:03:81:af:02:eb:2b:1e:aa:8b: 95:54:71:e1:1f:06:de:c3:84:ba:89:53:86:97:74: 05:13:be:f4:f5:b9:86:4d:ad:43:95:5c:86:96:94: e2:82:f7:42:62:02:a8:a2:c4:ef:14:cf:41:96:fd: ae:2a:a0:86:55:e6:a4:32:99:2d:08:9b:a3:12:27: 5d:59:5d:29:1a:43:91:a6:9c:ba:76:74:58:c0:49: 5f:5c:e7:df:a3:22:de:d5:ee:18:77:ac:3f:ba:f3: b4:14:9d:a3:00:45:76:41:e0:88:51:37:86:78:ce: 90:14:33:6f:82:48:70:b5:aa:83:cf:33:d0:33:18: 35:6c:95:8e:e3:19:61:9d:33:67:f9:06:b7:07:8a: b9:7b:f9:3f:10:f3:35:9c:f2:0a:36:20:b2:9a:8e: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3E:4A:91:97:D6:A2:CB:72:71:BA:63:F5:76:04:02:D5:BD:57:B0 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YT5KkZfWostycbpj9XYEAtW9V7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.134.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:e2:96:e4:6b:dc:d2:04:1f:82:82:d1:a1:0d:28:51:02:7b: 08:cc:9d:6f:e6:40:9b:89:62:0c:af:74:4a:8c:8a:5a:7a:34: 06:38:58:35:76:a8:51:6a:32:91:3b:ea:b3:b6:9e:e1:db:ea: 7d:0e:0e:48:73:d6:c0:b1:87:f2:9b:4f:77:9e:ea:fc:74:27: 0d:86:f3:6b:2d:71:ee:ff:59:66:40:7b:ee:05:18:11:54:29: af:99:e1:33:3c:44:5b:34:92:b5:7e:ef:7c:52:aa:90:96:c8: 00:a6:76:c3:9f:05:63:35:d1:59:b1:3d:7c:2b:94:ba:ad:b2: 15:0e:02:f5:ac:53:bd:21:3d:a8:66:28:4a:cf:f8:3e:7b:91: bf:b7:56:7c:a9:d3:43:17:3c:d3:b3:99:b5:8e:b1:53:56:db: 4a:3f:7e:80:b0:6a:1d:5a:65:af:53:bc:32:c3:56:d8:9e:70: 91:fd:84:83:d5:d0:fc:da:f3:21:d1:42:c4:71:e6:71:95:d4: fa:09:d3:2b:3d:dd:6d:98:7b:c2:81:6b:c9:32:0f:ac:89:5e: 61:d3:12:9e:56:b3:92:bc:e5:98:60:89:0f:0a:01:a0:4c:cc: 2b:ed:10:45:0e:91:0c:5d:7a:b1:55:fc:ff:82:f7:94:41:54: b9:85:81:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyUHpeA0Dr3Qbq6yFc4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTNlNGE5MTk3ZDZhMmNiNzI3MWJhNjNmNTc2MDQwMmQ1YmQ1N2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraMZk0aF1Wdhg5vGCuKhnNCR6pWB P9w9jc21a6GNCwfsn7N7TJK5F6HE/kAC30YT30mn7vvzTIKV1N/WSxlbxuysLBtz mx3VrDNgF37eVsklTCpKbaw8GWWNMQAKbdYDga8C6yseqouVVHHhHwbew4S6iVOG l3QFE7709bmGTa1DlVyGlpTigvdCYgKoosTvFM9Blv2uKqCGVeakMpktCJujEidd WV0pGkORppy6dnRYwElfXOffoyLe1e4Yd6w/uvO0FJ2jAEV2QeCIUTeGeM6QFDNv gkhwtaqDzzPQMxg1bJWO4xlhnTNn+Qa3B4q5e/k/EPM1nPIKNiCymo5EuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGE+SpGX1qLLcnG6Y/V2BALVvVewMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvWVQ1S2taZldvc3R5Y2JwajlYWUVBdFc5VjdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXpyGMA0G CSqGSIb3DQEBCwUAA4IBAQCc4pbka9zSBB+CgtGhDShRAnsIzJ1v5kCbiWIMr3RK jIpaejQGOFg1dqhRajKRO+qztp7h2+p9Dg5Ic9bAsYfym093nur8dCcNhvNrLXHu /1lmQHvuBRgRVCmvmeEzPERbNJK1fu98UqqQlsgApnbDnwVjNdFZsT18K5S6rbIV DgL1rFO9IT2oZihKz/g+e5G/t1Z8qdNDFzzTs5m1jrFTVttKP36AsGodWmWvU7wy w1bYnnCR/YSD1dD82vMh0ULEceZxldT6CdMrPd1tmHvCgWvJMg+siV5h0xKeVrOS vOWYYIkPCgGgTMwr7RBFDpEMXXqxVfz/gveUQVS5hYEC -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:03 2026 by rpki-client