This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/y6k3BxxnUy9kVc1135zJn5vDqY4.roa File: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (raw, json) Hash identifier: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44= Subject key identifier: CB:A9:37:07:1C:67:53:2F:64:55:CD:75:DF:9C:C9:9F:9B:C3:A9:8E Certificate issuer: /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf Certificate serial: 019B77C6A6ECA431CC8A9BFA887B9ADBA2F7 Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/y6k3BxxnUy9kVc1135zJn5vDqY4.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29384 IP address blocks: 86.36.48.0/24 maxlen: 24 86.36.49.0/24 maxlen: 24 86.36.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a6:ec:a4:31:cc:8a:9b:fa:88:7b:9a:db:a2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cba937071c67532f6455cd75df9cc99f9bc3a98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:d4:d0:07:8c:fe:67:1d:8e:e1:cb:aa:21: 6f:b3:70:7c:b1:d5:d5:64:da:a9:aa:7f:98:24:0c: 2b:02:41:0f:08:15:1d:12:59:cf:e1:93:db:a2:f3: e4:23:c9:b7:a5:9a:82:31:3d:ac:3e:b0:f4:b0:68: 71:d0:37:bd:17:ca:fd:13:a9:c1:d3:06:07:6e:c5: c5:f8:bf:c0:ab:3a:04:a8:a6:ac:09:5e:b3:cb:ac: 51:6e:6a:a8:fc:ee:07:ed:f1:28:b0:11:8d:f1:68: 60:5a:54:59:36:7e:b6:ac:11:fa:36:c0:81:2f:6e: 7f:5d:cb:48:32:18:1d:6d:65:cb:80:7e:02:c8:94: 12:df:ba:4b:53:19:e7:6c:35:96:f5:44:b7:9e:93: 5f:f6:44:2a:cc:75:09:82:88:3c:b1:e8:ad:ee:fd: 4d:e6:44:a3:51:3e:62:52:01:3b:1e:bf:e7:84:11: 65:16:81:91:c5:1e:29:e0:6a:59:8c:4f:47:b5:5a: 55:4a:84:89:13:22:e4:8a:4a:60:03:22:63:af:ec: b9:48:05:a4:93:e4:a4:e6:96:7b:28:c6:22:40:34: e5:a4:b4:3c:57:71:e8:9e:d7:5e:7f:31:df:1b:ce: 64:55:37:26:01:f8:1e:7d:1e:01:a7:f1:ca:f9:91: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A9:37:07:1C:67:53:2F:64:55:CD:75:DF:9C:C9:9F:9B:C3:A9:8E X509v3 Authority Key Identifier: keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/y6k3BxxnUy9kVc1135zJn5vDqY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.36.48.0/23 86.36.104.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:81:49:d2:15:35:89:46:33:5f:a6:ae:df:c5:30:b3:c9:54: 22:04:d8:64:3d:39:bb:a1:1b:6d:c3:37:4d:5d:ba:2a:88:f6: e2:f5:f2:9e:e2:c2:24:fd:4d:9d:07:98:7f:38:46:79:4e:55: ba:eb:9e:24:ee:91:a7:e3:d4:a7:d5:16:f7:2c:ef:8e:df:df: 7c:fe:5e:1f:7a:46:11:05:37:c3:f8:30:34:4f:a6:2d:4a:b8: 70:26:c2:b5:b3:39:50:a0:66:93:5e:c8:7c:78:23:0b:40:9a: 27:09:3e:88:1c:6c:f2:c6:6d:cf:bc:4c:3a:21:4b:10:7b:02: 67:45:b2:cc:11:42:91:b4:95:84:c0:0b:c9:53:fa:6d:19:84: 8c:a3:db:40:55:d9:04:1a:ad:80:34:a0:28:21:a4:69:14:82: ed:9e:1d:8c:cb:a7:2a:69:aa:00:83:7d:4f:e9:e8:cf:cd:9b: 11:5e:88:4b:c5:9d:7c:b5:90:52:9b:e1:23:62:c5:c5:9f:68: c8:ff:62:87:50:a0:28:36:f9:b3:d0:9f:5c:99:4b:d3:f5:20: 7d:fe:0c:56:2b:1f:ba:7d:fb:39:0f:28:7c:1f:5a:19:ef:70: a6:90:1c:97:b9:d9:34:4e:4b:a8:f8:cc:84:87:a3:03:09:f8: e6:2a:9d:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xqbspDHMipv6iHua26L3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGQzZmIwNDRlYjFjMGExMWJlMDYwMmFjZWVmODhlNWY1 ZDJkZGYwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmE5MzcwNzFjNjc1MzJmNjQ1NWNkNzVkZjljYzk5ZjliYzNhOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/rU0AeM/mcdjuHLqiFvs3B8sdXV ZNqpqn+YJAwrAkEPCBUdElnP4ZPbovPkI8m3pZqCMT2sPrD0sGhx0De9F8r9E6nB 0wYHbsXF+L/AqzoEqKasCV6zy6xRbmqo/O4H7fEosBGN8WhgWlRZNn62rBH6NsCB L25/XctIMhgdbWXLgH4CyJQS37pLUxnnbDWW9US3npNf9kQqzHUJgog8seit7v1N 5kSjUT5iUgE7Hr/nhBFlFoGRxR4p4GpZjE9HtVpVSoSJEyLkikpgAyJjr+y5SAWk k+Sk5pZ7KMYiQDTlpLQ8V3HontdefzHfG85kVTcmAfgefR4Bp/HK+ZEXJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMupNwccZ1MvZFXNdd+cyZ+bw6mOMB8GA1UdIwQY MBaAFDxNP7BE6xwKEb4GAqzu+I5fXS3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEt YjE4NGUzZjRiNTBlLzEveTZrM0J4eG5VeTlrVmMxMTM1ekpuNXZEcVk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEtYjE4NGUzZjRiNTBl LzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBViQwAwQA ViRoMA0GCSqGSIb3DQEBCwUAA4IBAQBsgUnSFTWJRjNfpq7fxTCzyVQiBNhkPTm7 oRttwzdNXboqiPbi9fKe4sIk/U2dB5h/OEZ5TlW6654k7pGn49Sn1Rb3LO+O3998 /l4fekYRBTfD+DA0T6YtSrhwJsK1szlQoGaTXsh8eCMLQJonCT6IHGzyxm3PvEw6 IUsQewJnRbLMEUKRtJWEwAvJU/ptGYSMo9tAVdkEGq2ANKAoIaRpFILtnh2My6cq aaoAg31P6ejPzZsRXohLxZ18tZBSm+EjYsXFn2jI/2KHUKAoNvmz0J9cmUvT9SB9 /gxWKx+6ffs5Dyh8H1oZ73CmkByXudk0Tkuo+MyEh6MDCfjmKp3b -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:49 2026 by rpki-client