This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/d9SsK9JFe4erW3mFTzDPmAS0ODY.roa File: d9SsK9JFe4erW3mFTzDPmAS0ODY.roa (raw, json) Hash identifier: eDnr+btVqcRjIrpyGoGoaGlmtxJe33quRXxSlU0qhfA= Subject key identifier: 77:D4:AC:2B:D2:45:7B:87:AB:5B:79:85:4F:30:CF:98:04:B4:38:36 Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253 Certificate serial: 019B7F80FC586B3013417DFAA69C5AFC712B Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/d9SsK9JFe4erW3mFTzDPmAS0ODY.roa Signing time: Fri 02 Jan 2026 16:18:38 +0000 ROA not before: Fri 02 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35169 IP address blocks: 145.226.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:fc:58:6b:30:13:41:7d:fa:a6:9c:5a:fc:71:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253 Validity Not Before: Jan 2 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77d4ac2bd2457b87ab5b79854f30cf9804b43836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:a9:97:2e:e7:c3:77:6b:f6:03:14:cf:54: 73:71:e6:de:50:84:32:8b:51:7d:ed:7c:a5:3d:cd: 45:11:19:aa:d5:2d:28:54:d6:8d:ef:dc:96:ac:e9: 70:6f:90:a7:24:1c:f5:58:00:4c:31:1c:48:31:97: d2:bc:f2:07:df:d1:01:3d:46:8c:c7:fc:99:7f:9e: 77:0e:55:c9:72:33:e9:f9:39:ea:c7:3f:74:e4:2d: 07:1d:67:2e:27:85:70:6b:8e:d6:38:34:72:eb:48: d3:ae:a9:b7:6a:f1:71:b5:f3:a0:34:f4:c5:fd:3c: 99:1a:38:13:d8:29:cf:94:e6:19:93:2e:a6:01:61: 11:31:b0:4a:3e:b6:9c:8a:ad:a0:67:b4:78:6a:50: 3d:97:c5:ef:ea:08:de:7d:cf:5b:df:e8:f1:de:54: b4:c7:f9:84:d7:80:ce:7d:ab:45:a8:62:ed:de:a5: b6:80:ec:4f:e9:ac:10:87:2c:5a:be:36:3b:40:08: 36:b2:10:46:b6:dd:c0:1d:8b:ee:8f:b2:49:52:4c: ff:c3:a0:81:16:29:35:3d:9a:77:47:9c:69:7e:55: 2f:3f:5f:e6:23:7b:01:ce:4a:6b:3a:8a:83:01:3c: 45:b5:2c:b2:be:0a:49:0e:40:c8:d0:bf:e1:0b:c6: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D4:AC:2B:D2:45:7B:87:AB:5B:79:85:4F:30:CF:98:04:B4:38:36 X509v3 Authority Key Identifier: keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/d9SsK9JFe4erW3mFTzDPmAS0ODY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.226.103.0/24 Signature Algorithm: sha256WithRSAEncryption 14:c1:e0:15:8b:0c:c4:9f:c0:7b:1e:4b:8d:59:96:88:c9:48: fd:ae:14:5e:31:18:ba:f6:22:4a:7f:c2:46:4b:e3:2f:7e:75: 31:13:d2:86:3f:f0:93:1b:0d:31:3c:c2:e9:c0:3f:1e:71:39: 2b:42:c9:6a:5a:9b:70:80:31:e9:ef:c1:fb:e4:82:38:cf:09: 7e:8c:48:a9:93:ba:d3:94:52:b9:d6:53:4f:ff:af:86:8c:ae: ee:27:5b:8c:11:69:57:cc:b6:c4:df:61:ee:9e:84:91:af:b2: b7:a8:e0:dd:55:57:19:5f:6a:c4:e5:82:df:2a:fc:f9:34:26: 68:d0:46:57:07:ac:f9:e4:eb:56:be:78:78:e7:89:a6:9a:d1: e6:83:dc:03:84:fd:63:ff:c6:95:02:33:a3:04:17:68:94:7c: 85:1f:9c:c2:92:92:75:32:b3:53:01:31:30:f4:97:5b:d2:37: 55:96:a4:75:b5:e0:52:ab:de:6f:41:f5:18:06:cb:78:42:66: 18:cc:92:35:58:55:8f:1d:6a:37:d3:d2:6e:08:cc:12:c0:45: dd:08:8c:ec:94:8d:75:7a:c6:5c:ca:d2:60:e0:b4:f0:1c:f2: c5:26:78:7e:f1:5f:c7:1f:e7:91:c6:af:fe:c6:7e:11:87:63: 1b:91:f8:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gPxYazATQX36ppxa/HErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OGY1YThlMjk1YWQxZDdiNDhhMWUxMTk1ODc5MDA1MmI1 N2EyNTMwHhcNMjYwMTAyMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2Q0YWMyYmQyNDU3Yjg3YWI1Yjc5ODU0ZjMwY2Y5ODA0YjQzODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhSply7nw3dr9gMUz1RzcebeUIQy i1F97XylPc1FERmq1S0oVNaN79yWrOlwb5CnJBz1WABMMRxIMZfSvPIH39EBPUaM x/yZf553DlXJcjPp+Tnqxz905C0HHWcuJ4Vwa47WODRy60jTrqm3avFxtfOgNPTF /TyZGjgT2CnPlOYZky6mAWERMbBKPraciq2gZ7R4alA9l8Xv6gjefc9b3+jx3lS0 x/mE14DOfatFqGLt3qW2gOxP6awQhyxavjY7QAg2shBGtt3AHYvuj7JJUkz/w6CB Fik1PZp3R5xpflUvP1/mI3sBzkprOoqDATxFtSyyvgpJDkDI0L/hC8bc9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHfUrCvSRXuHq1t5hU8wz5gEtDg2MB8GA1UdIwQY MBaAFCWPWo4pWtHXtIoeEZWHkAUrV6JTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzkt NDU4YTI3MzYxNTdhLzEvZDlTc0s5SkZlNGVyVzNtRlR6RFBtQVMwT0RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzktNDU4YTI3MzYxNTdh LzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkeJnMA0G CSqGSIb3DQEBCwUAA4IBAQAUweAViwzEn8B7HkuNWZaIyUj9rhReMRi69iJKf8JG S+MvfnUxE9KGP/CTGw0xPMLpwD8ecTkrQslqWptwgDHp78H75II4zwl+jEipk7rT lFK51lNP/6+GjK7uJ1uMEWlXzLbE32HunoSRr7K3qODdVVcZX2rE5YLfKvz5NCZo 0EZXB6z55OtWvnh454mmmtHmg9wDhP1j/8aVAjOjBBdolHyFH5zCkpJ1MrNTATEw 9Jdb0jdVlqR1teBSq95vQfUYBst4QmYYzJI1WFWPHWo309JuCMwSwEXdCIzslI11 esZcytJg4LTwHPLFJnh+8V/HH+eRxq/+xn4Rh2MbkfjC -----END CERTIFICATE-----Generated at Fri Jan 9 12:08:13 2026 by rpki-client