This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lYkUdOiDYaJjN3UiyvbWF-SG8Vw.roa File: lYkUdOiDYaJjN3UiyvbWF-SG8Vw.roa (raw, json) Hash identifier: T6TkrSsM/DTi19/EB3CcQD4UPoSwFe2xK7QiaLd+JUw= Subject key identifier: 95:89:14:74:E8:83:61:A2:63:37:75:22:CA:F6:D6:17:E4:86:F1:5C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3433A16D2B57FD4B96A4C3B22CA72 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lYkUdOiDYaJjN3UiyvbWF-SG8Vw.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213514 IP address blocks: 45.84.90.0/24 maxlen: 24 93.123.80.0/24 maxlen: 24 94.156.6.0/24 maxlen: 24 185.226.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:43:3a:16:d2:b5:7f:d4:b9:6a:4c:3b:22:ca:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95891474e88361a263377522caf6d617e486f15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:44:3c:cf:d5:58:b2:54:4d:73:53:0f:8d: 4d:d6:7e:a6:03:48:b0:46:09:53:6f:84:31:f1:fe: 74:8b:14:9b:8f:cd:0b:7a:ef:dd:41:8a:4e:e5:fd: 6e:c5:1d:7d:ae:15:a8:66:25:60:6c:d0:e5:d3:df: e7:57:d3:e6:48:93:30:26:39:b2:bc:20:57:9b:e3: e7:cb:11:53:ec:46:0c:e9:cb:64:6d:10:b0:99:83: 14:9e:e1:bb:96:51:8b:cd:82:47:72:07:94:ca:ba: 04:5f:8d:de:13:db:f9:2a:c6:c6:35:00:ee:4f:ee: 33:cf:84:c2:16:50:d4:99:7d:aa:5b:90:74:91:c4: 35:92:c4:ba:53:54:ce:f6:e8:9d:3a:ea:19:a4:5e: b5:09:c1:52:03:7d:a6:9f:32:c9:eb:f1:17:bd:36: d5:9f:3e:5a:6a:4f:9f:f5:80:d4:f5:69:eb:3f:fd: c5:8d:1f:40:c5:56:36:d6:5c:30:55:fe:68:0f:c5: 84:a3:d2:e6:0f:d0:ce:4b:b1:85:4b:63:71:43:fe: 6e:80:01:76:a3:71:45:ea:e6:68:cc:7c:9a:31:19: 5c:a4:f2:9f:61:8b:bc:84:a4:4a:b3:7c:fd:62:cc: 25:c7:14:7f:33:68:b1:44:05:5f:e5:52:a4:b1:df: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:89:14:74:E8:83:61:A2:63:37:75:22:CA:F6:D6:17:E4:86:F1:5C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lYkUdOiDYaJjN3UiyvbWF-SG8Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.90.0/24 93.123.80.0/24 94.156.6.0/24 185.226.174.0/24 Signature Algorithm: sha256WithRSAEncryption 88:13:83:07:6b:0c:b3:02:37:aa:70:3b:b7:54:42:5d:12:1e: cc:64:d5:24:7a:76:a1:4c:1f:91:83:e3:5f:99:ea:47:53:7b: 2b:ec:05:9a:8e:f1:44:09:33:16:cc:10:32:38:1a:24:d3:aa: a9:8d:7f:c9:e3:3a:73:7e:31:aa:04:93:9b:e7:c7:12:d3:7b: aa:9e:39:45:f3:54:f5:80:0d:1f:99:86:b5:80:cb:2c:38:4f: b6:1a:02:af:43:7f:bf:1b:0e:b2:5a:41:94:1e:ea:27:bc:d8: 78:bc:4f:a4:d4:09:91:bb:2d:4d:68:7e:62:5f:8b:55:76:b1: 61:2a:e8:99:5c:15:d1:3d:18:ff:84:aa:50:5d:92:10:71:2b: a6:37:21:e7:4f:62:87:ce:73:fb:09:10:ce:b7:44:46:c9:e1: 58:c8:6b:f3:13:3d:18:d3:4a:ef:fc:61:b1:45:a5:d7:f4:5e: 36:88:7a:9a:4c:09:92:eb:17:fa:a2:01:e7:3c:7f:31:00:64: 0e:12:c1:5b:dd:a2:f1:cb:70:67:73:d5:be:71:04:e2:e3:4e: 0f:0d:92:c1:f2:3b:69:13:72:1a:95:6c:ef:74:04:2b:79:2b: 96:11:b5:d0:52:f2:b7:54:a3:55:de:c9:32:64:c6:e9:5f:9d: a2:75:62:4e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4o0M6FtK1f9S5akw7IspyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTg5MTQ3NGU4ODM2MWEyNjMzNzc1MjJjYWY2ZDYxN2U0ODZmMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGhEPM/VWLJUTXNTD41N1n6mA0iw RglTb4Qx8f50ixSbj80Leu/dQYpO5f1uxR19rhWoZiVgbNDl09/nV9PmSJMwJjmy vCBXm+PnyxFT7EYM6ctkbRCwmYMUnuG7llGLzYJHcgeUyroEX43eE9v5KsbGNQDu T+4zz4TCFlDUmX2qW5B0kcQ1ksS6U1TO9uidOuoZpF61CcFSA32mnzLJ6/EXvTbV nz5aak+f9YDU9WnrP/3FjR9AxVY21lwwVf5oD8WEo9LmD9DOS7GFS2NxQ/5ugAF2 o3FF6uZozHyaMRlcpPKfYYu8hKRKs3z9YswlxxR/M2ixRAVf5VKksd9KyQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJWJFHTog2GiYzd1Isr21hfkhvFcMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbFlrVWRPaURZYUpqTjNVaXl2YldGLVNHOFZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVRaAwQA XXtQAwQAXpwGAwQAueKuMA0GCSqGSIb3DQEBCwUAA4IBAQCIE4MHawyzAjeqcDu3 VEJdEh7MZNUkenahTB+Rg+NfmepHU3sr7AWajvFECTMWzBAyOBok06qpjX/J4zpz fjGqBJOb58cS03uqnjlF81T1gA0fmYa1gMssOE+2GgKvQ3+/Gw6yWkGUHuonvNh4 vE+k1AmRuy1NaH5iX4tVdrFhKuiZXBXRPRj/hKpQXZIQcSumNyHnT2KHznP7CRDO t0RGyeFYyGvzEz0Y00rv/GGxRaXX9F42iHqaTAmS6xf6ogHnPH8xAGQOEsFb3aLx y3Bnc9W+cQTi404PDZLB8jtpE3IalWzvdAQreSuWEbXQUvK3VKNV3skyZMbpX52i dWJO -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:50 2026 by rpki-client