This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yS39BkXlKkMlc6z53EvDWzxZ3Ks.roa File: yS39BkXlKkMlc6z53EvDWzxZ3Ks.roa (raw, json) Hash identifier: MkD/Ka1eE2arjUiwuamPNi2Wpdhly5KSyiWISMcMiEg= Subject key identifier: C9:2D:FD:06:45:E5:2A:43:25:73:AC:F9:DC:4B:C3:5B:3C:59:DC:AB Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A30DD5C5160B3BA371FAB21AC34EE8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yS39BkXlKkMlc6z53EvDWzxZ3Ks.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59546 IP address blocks: 85.217.148.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0d:d5:c5:16:0b:3b:a3:71:fa:b2:1a:c3:4e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c92dfd0645e52a432573acf9dc4bc35b3c59dcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:4a:3a:08:c0:dc:bf:ab:76:7a:d3:9e:16: 87:11:87:68:c2:c0:c1:c3:5e:59:e9:d1:ab:f1:66: 83:91:1c:38:da:12:4a:af:ef:b3:74:39:c9:25:c5: f8:a4:53:dc:79:d9:bb:e2:80:71:88:98:84:cb:81: 88:c1:be:31:da:a9:92:ea:e4:a6:47:08:d7:bd:42: 6a:27:00:b3:80:97:2b:26:fb:ef:5f:d2:06:e8:e0: b6:40:62:56:00:83:bb:7f:a7:c2:cf:31:2a:4d:2e: 8a:06:a1:7b:19:47:97:50:df:9c:a5:c9:0a:c6:60: 33:5a:28:17:13:d7:3a:e5:d6:32:13:2a:ab:c5:15: ed:b1:82:91:fe:ea:cc:87:9d:5e:1b:65:66:eb:4f: 72:12:e7:8f:6f:45:d0:74:83:07:71:8e:28:5f:aa: 00:e1:8d:27:3e:dd:2b:e2:36:d1:51:3e:7a:d0:8f: c2:8b:04:e0:c1:56:f4:2b:9f:fb:c2:74:4a:98:3c: 16:f9:94:18:cf:6e:c2:e5:8f:36:75:cf:4d:7b:ee: cb:af:63:61:06:da:a8:79:a4:44:98:fd:31:45:85: 15:0d:78:0d:cc:dc:51:8f:b6:98:cc:5c:be:75:81: 06:01:c8:e5:ee:c0:8b:52:a6:b9:1e:9c:f1:24:00: cc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2D:FD:06:45:E5:2A:43:25:73:AC:F9:DC:4B:C3:5B:3C:59:DC:AB X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yS39BkXlKkMlc6z53EvDWzxZ3Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.148.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:32:05:cb:94:e3:5e:ac:52:5a:91:52:bc:13:66:69:85:bf: 6e:79:7a:ff:92:f6:85:be:b7:c5:40:9e:a4:4e:88:c0:c6:fb: 27:52:79:b7:63:83:8c:b3:d7:7d:d3:0f:18:c1:17:95:9a:55: 4c:90:64:c4:8d:c7:f7:14:34:a2:58:01:f0:d8:65:43:6a:82: c3:53:57:37:7a:ac:b2:9c:69:81:31:9a:91:c9:da:7a:c3:ab: ef:cd:f5:f7:d4:e1:b6:e3:0f:43:72:d7:0b:1f:4b:d6:e8:50: e7:a0:4a:48:f7:fc:c5:21:ee:0f:0d:e5:56:01:67:de:91:fb: 02:ce:9f:60:ef:ad:b2:4b:3c:13:0f:f8:98:55:aa:b2:d2:bb: 0c:3b:b9:6b:f2:c3:f4:10:c0:78:2d:b8:34:62:df:3d:41:d0: f5:a1:7d:26:4d:0c:28:4b:9e:79:30:d8:00:c8:a5:00:35:14: 62:75:b4:4d:43:9f:b3:07:01:6d:11:72:81:bb:f1:08:e2:b1: bb:a5:b3:44:bf:b7:3b:48:c6:d9:83:64:08:b6:27:e5:c2:3a: 20:8a:e7:65:39:d9:3e:c9:09:7f:1f:41:d9:04:93:a5:be:87: c0:bd:23:6f:c9:fe:44:f9:56:b0:f5:ff:d5:42:fc:d1:7f:a0: 22:61:ae:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ow3VxRYLO6Nx+rIaw07oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTJkZmQwNjQ1ZTUyYTQzMjU3M2FjZjlkYzRiYzM1YjNjNTlkY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhhKOgjA3L+rdnrTnhaHEYdowsDB w15Z6dGr8WaDkRw42hJKr++zdDnJJcX4pFPcedm74oBxiJiEy4GIwb4x2qmS6uSm RwjXvUJqJwCzgJcrJvvvX9IG6OC2QGJWAIO7f6fCzzEqTS6KBqF7GUeXUN+cpckK xmAzWigXE9c65dYyEyqrxRXtsYKR/urMh51eG2Vm609yEuePb0XQdIMHcY4oX6oA 4Y0nPt0r4jbRUT560I/CiwTgwVb0K5/7wnRKmDwW+ZQYz27C5Y82dc9Ne+7Lr2Nh BtqoeaREmP0xRYUVDXgNzNxRj7aYzFy+dYEGAcjl7sCLUqa5HpzxJADMQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMkt/QZF5SpDJXOs+dxLw1s8WdyrMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEveVMzOUJrWGxLa01sYzZ6NTNFdkRXenhaM0tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdmUMA0G CSqGSIb3DQEBCwUAA4IBAQA/MgXLlONerFJakVK8E2Zphb9ueXr/kvaFvrfFQJ6k TojAxvsnUnm3Y4OMs9d90w8YwReVmlVMkGTEjcf3FDSiWAHw2GVDaoLDU1c3eqyy nGmBMZqRydp6w6vvzfX31OG24w9DctcLH0vW6FDnoEpI9/zFIe4PDeVWAWfekfsC zp9g762ySzwTD/iYVaqy0rsMO7lr8sP0EMB4Lbg0Yt89QdD1oX0mTQwoS555MNgA yKUANRRidbRNQ5+zBwFtEXKBu/EI4rG7pbNEv7c7SMbZg2QItiflwjogiudlOdk+ yQl/H0HZBJOlvofAvSNvyf5E+Vaw9f/VQvzRf6AiYa4p -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:37 2026 by rpki-client