This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/sy5oGQjck-d2g9h80CULm1W8bto.roa File: sy5oGQjck-d2g9h80CULm1W8bto.roa (raw, json) Hash identifier: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA= Subject key identifier: B3:2E:68:19:08:DC:93:E7:76:83:D8:7C:D0:25:0B:9B:55:BC:6E:DA Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373 Certificate serial: 019B7C11CCE9C58DBEC8A05132A528A80E5A Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/sy5oGQjck-d2g9h80CULm1W8bto.roa Signing time: Fri 02 Jan 2026 00:18:19 +0000 ROA not before: Fri 02 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29684 IP address blocks: 91.213.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:cc:e9:c5:8d:be:c8:a0:51:32:a5:28:a8:0e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373 Validity Not Before: Jan 2 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b32e681908dc93e77683d87cd0250b9b55bc6eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:40:99:d8:66:8e:49:ea:3d:3f:f6:47:a9: 77:f1:2e:ec:22:3a:cf:e3:af:a2:0b:3a:fb:40:85: 1c:3f:88:c5:7a:ce:83:e9:c8:1d:24:e5:f2:b9:ea: c4:a3:ee:99:e4:f4:61:02:d9:b2:91:0a:75:2e:34: 06:e9:b8:b3:84:c9:0a:85:6f:c4:e8:b9:e1:5a:19: ae:a8:6f:ed:38:f3:d6:3a:01:cc:a0:85:67:9b:d6: e0:44:53:f2:33:0e:b4:10:a5:eb:93:d9:fb:41:2c: 7a:ad:0b:dd:ee:4b:70:f0:08:70:1d:41:02:36:75: 4b:65:22:d8:df:94:f7:4e:03:2c:a6:cd:42:e3:68: 28:4d:2b:e2:b6:6e:d4:c1:76:a9:f0:5f:62:ca:ca: 96:03:12:c8:fd:41:3b:dd:5c:a0:e1:e3:2c:ba:7b: 46:83:ae:e6:42:b7:07:d1:cb:c1:e5:d6:ce:12:c5: 83:8c:7f:ff:f1:8a:5a:47:ed:5c:90:0e:9b:04:3d: c9:8c:87:65:d2:a8:f1:1f:1c:b7:d9:68:77:b9:c4: be:33:73:1a:45:f3:0b:18:e5:3f:60:1b:d2:16:de: e0:3b:a3:eb:47:a6:98:1c:4b:b7:00:30:57:c4:7e: 6a:c7:2b:7d:d9:68:df:c9:17:92:56:29:09:c7:4c: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2E:68:19:08:DC:93:E7:76:83:D8:7C:D0:25:0B:9B:55:BC:6E:DA X509v3 Authority Key Identifier: keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/sy5oGQjck-d2g9h80CULm1W8bto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.205.0/24 Signature Algorithm: sha256WithRSAEncryption 12:f5:98:d7:06:0a:97:60:b5:b6:da:e2:d8:de:52:d6:f7:e7: 11:eb:a9:46:d7:52:70:35:c5:51:24:f6:6c:46:cd:1e:45:b5: be:52:6c:3d:83:52:70:89:b4:ac:db:ef:dd:e8:bb:f9:03:06: 80:c6:76:fe:dc:b9:02:30:7d:09:05:af:d4:e4:34:90:89:ce: 32:35:1b:eb:59:bf:3f:0c:9b:c7:d4:87:57:b6:b4:53:62:57: 52:eb:a9:37:d9:fe:86:60:49:ea:0f:4e:00:16:9f:f7:12:e4: 29:8d:68:3d:c1:96:a8:75:65:88:6c:f4:56:09:e2:1e:cf:8d: db:6d:45:6f:71:d7:91:57:f1:9f:a9:6f:9a:6a:e9:63:f9:05: c0:e8:0c:22:5d:7e:20:7e:5e:f1:14:7e:b8:8c:0b:83:63:74: 07:ce:ec:b4:0a:f8:85:ed:4f:41:01:be:7e:81:66:a9:2f:f3: f3:9b:29:2e:f8:f4:cd:18:02:cf:af:33:f4:63:fc:fe:a2:9c: ae:67:e5:4b:bc:69:43:e7:da:76:a8:64:54:8b:c3:20:5b:02: 64:ee:49:f0:01:ab:9d:b7:71:ee:63:6a:e6:80:0d:a4:76:bf: 4f:15:bf:50:91:a5:86:d1:ee:3d:60:a3:c0:10:b3:f5:e5:d3: 48:15:67:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EczpxY2+yKBRMqUoqA5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDNiMzQ4NmRlNzgyNmZkNmIwZTJhZWMwMjY1OTdiNjIw N2IzNzMwHhcNMjYwMTAyMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzJlNjgxOTA4ZGM5M2U3NzY4M2Q4N2NkMDI1MGI5YjU1YmM2ZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HNAmdhmjknqPT/2R6l38S7sIjrP 46+iCzr7QIUcP4jFes6D6cgdJOXyuerEo+6Z5PRhAtmykQp1LjQG6bizhMkKhW/E 6LnhWhmuqG/tOPPWOgHMoIVnm9bgRFPyMw60EKXrk9n7QSx6rQvd7ktw8AhwHUEC NnVLZSLY35T3TgMsps1C42goTSvitm7UwXap8F9iysqWAxLI/UE73Vyg4eMsuntG g67mQrcH0cvB5dbOEsWDjH//8YpaR+1ckA6bBD3JjIdl0qjxHxy32Wh3ucS+M3Ma RfMLGOU/YBvSFt7gO6PrR6aYHEu3ADBXxH5qxyt92WjfyReSVikJx0z+VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLMuaBkI3JPndoPYfNAlC5tVvG7aMB8GA1UdIwQY MBaAFLRDs0ht54Jv1rDirsAmWXtiB7NzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQt MmExNDUxZTdlM2MxLzEvc3k1b0dRamNrLWQyZzloODBDVUxtMVc4YnRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83NDI3MWMtNjlhNy00YTg2LTk2NmQtMmExNDUxZTdlM2Mx LzEvdEVPelNHM25nbV9Xc09LdXdDWlplMklIczNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9XNMA0G CSqGSIb3DQEBCwUAA4IBAQAS9ZjXBgqXYLW22uLY3lLW9+cR66lG11JwNcVRJPZs Rs0eRbW+Umw9g1JwibSs2+/d6Lv5AwaAxnb+3LkCMH0JBa/U5DSQic4yNRvrWb8/ DJvH1IdXtrRTYldS66k32f6GYEnqD04AFp/3EuQpjWg9wZaodWWIbPRWCeIez43b bUVvcdeRV/GfqW+aaulj+QXA6AwiXX4gfl7xFH64jAuDY3QHzuy0CviF7U9BAb5+ gWapL/Pzmyku+PTNGALPrzP0Y/z+opyuZ+VLvGlD59p2qGRUi8MgWwJk7knwAaud t3HuY2rmgA2kdr9PFb9QkaWG0e49YKPAELP15dNIFWdy -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:28 2026 by rpki-client