This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/RYNiV948DLV1Ez8aZtWra-uSAIU.roa File: RYNiV948DLV1Ez8aZtWra-uSAIU.roa (raw, json) Hash identifier: iZJYlFMS/Nvt7xPVWg2S8RzagBzGleb0zYSMcRXDFSg= Subject key identifier: 45:83:62:57:DE:3C:0C:B5:75:13:3F:1A:66:D5:AB:6B:EB:92:00:85 Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694 Certificate serial: 019B79EBAD441E5BD39DBB0CE5745877B4C7 Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/RYNiV948DLV1Ez8aZtWra-uSAIU.roa Signing time: Thu 01 Jan 2026 14:17:26 +0000 ROA not before: Thu 01 Jan 2026 14:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42893 IP address blocks: 146.66.160.0/19 maxlen: 19 146.66.192.0/20 maxlen: 20 178.252.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ad:44:1e:5b:d3:9d:bb:0c:e5:74:58:77:b4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03196c89e554dbe4774522759906e2581a174694 Validity Not Before: Jan 1 14:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45836257de3c0cb575133f1a66d5ab6beb920085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:b0:c9:86:c1:7b:4b:fc:9e:cb:67:b1:78: ba:aa:28:f0:9b:4c:8d:99:01:89:03:bb:dd:db:45: 0c:bd:5b:ca:36:35:b0:30:e8:49:87:dd:0c:1d:8f: d6:6f:0d:93:d6:18:ae:19:16:a1:3d:db:85:94:37: 13:6c:4e:74:49:fd:66:91:c0:23:4a:d5:9a:08:34: 50:10:56:3c:58:29:d6:77:51:5a:c3:12:78:ad:9d: 18:1d:01:2f:77:37:4b:f8:09:1f:1c:cd:b8:47:6a: 3c:f0:de:bf:d9:8d:4f:25:6b:b7:ae:d9:3b:f7:e9: 18:2a:42:0e:a3:82:72:69:74:88:97:b0:da:b6:99: ef:47:15:94:8d:0a:7d:c5:41:9f:01:98:3a:aa:cf: b3:79:9a:a3:cc:21:31:6a:a9:27:94:ae:03:d4:b3: 63:9d:1d:12:fc:0f:2e:73:60:c6:c7:c9:6d:73:2d: bf:f9:1e:88:6b:b7:30:11:2f:22:48:01:03:3b:73: 03:a2:bd:1b:be:ac:d9:4a:89:26:0d:82:01:2d:7c: 4d:98:81:db:e9:91:af:d0:5b:96:39:06:5b:68:66: cb:58:ac:f7:4a:62:85:03:e2:52:ba:c0:e5:fc:28: ad:95:8b:3d:8b:23:e8:fd:90:c1:7e:f1:b2:83:cf: ee:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:83:62:57:DE:3C:0C:B5:75:13:3F:1A:66:D5:AB:6B:EB:92:00:85 X509v3 Authority Key Identifier: keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/RYNiV948DLV1Ez8aZtWra-uSAIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.66.160.0-146.66.207.255 178.252.64.0/18 Signature Algorithm: sha256WithRSAEncryption b5:70:8a:d5:86:38:da:0f:71:5c:14:4c:d6:f7:b1:60:20:1e: d2:93:85:b4:2c:8d:e1:68:14:a5:76:54:53:b7:0e:57:80:2e: a6:01:d8:21:7e:3a:aa:39:40:4c:00:6b:e9:e7:4e:7c:d2:ad: 47:83:d9:dd:8c:ea:6b:71:63:07:7e:6b:cc:e3:d6:9f:dd:92: 89:04:b6:10:47:94:e2:24:82:58:38:dd:12:7d:a7:34:cf:c0: 73:4f:15:e5:98:61:42:73:cb:ac:a7:6f:d3:b5:c3:60:46:6f: 4c:c2:1b:da:ad:e8:3e:b4:60:4e:80:34:aa:99:ed:0e:78:90: a8:9c:6b:50:e7:31:c9:25:6f:44:98:b4:38:9d:cd:4d:06:57: 6f:90:11:bd:6f:8d:cb:77:d0:22:69:2a:be:16:db:c9:1f:80: a1:90:f3:6e:48:13:73:01:67:cf:46:e1:90:4f:06:75:99:9c: 06:21:8b:05:15:a7:75:3e:2c:0b:c8:f6:00:ca:cf:64:c0:7e: ad:b4:5a:39:d6:e4:44:f8:bc:a0:65:19:ab:97:07:7a:1d:9b: c1:94:a8:25:bf:95:09:74:a8:aa:db:5e:59:4a:25:a3:ec:8c: bf:2b:2e:8b:15:7e:97:df:2c:d9:88:27:7b:5d:e7:9d:eb:66: f4:83:dc:4e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5661EHlvTnbsM5XRYd7THMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMTk2Yzg5ZTU1NGRiZTQ3NzQ1MjI3NTk5MDZlMjU4MWEx NzQ2OTQwHhcNMjYwMTAxMTQxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTgzNjI1N2RlM2MwY2I1NzUxMzNmMWE2NmQ1YWI2YmViOTIwMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbCwyYbBe0v8nstnsXi6qijwm0yN mQGJA7vd20UMvVvKNjWwMOhJh90MHY/Wbw2T1hiuGRahPduFlDcTbE50Sf1mkcAj StWaCDRQEFY8WCnWd1FawxJ4rZ0YHQEvdzdL+AkfHM24R2o88N6/2Y1PJWu3rtk7 9+kYKkIOo4JyaXSIl7DatpnvRxWUjQp9xUGfAZg6qs+zeZqjzCExaqknlK4D1LNj nR0S/A8uc2DGx8ltcy2/+R6Ia7cwES8iSAEDO3MDor0bvqzZSokmDYIBLXxNmIHb 6ZGv0FuWOQZbaGbLWKz3SmKFA+JSusDl/CitlYs9iyPo/ZDBfvGyg8/uVQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEWDYlfePAy1dRM/GmbVq2vrkgCFMB8GA1UdIwQY MBaAFAMZbInlVNvkd0UidZkG4lgaF0aUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYt ODUxN2E4ZjM1NWFlLzEvUllOaVY5NDhETFYxRXo4YVp0V3JhLXVTQUlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYtODUxN2E4ZjM1NWFl LzEvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAWSQqAD BASSQsADBAay/EAwDQYJKoZIhvcNAQELBQADggEBALVwitWGONoPcVwUTNb3sWAg HtKThbQsjeFoFKV2VFO3DleALqYB2CF+Oqo5QEwAa+nnTnzSrUeD2d2M6mtxYwd+ a8zj1p/dkokEthBHlOIkglg43RJ9pzTPwHNPFeWYYUJzy6ynb9O1w2BGb0zCG9qt 6D60YE6ANKqZ7Q54kKica1DnMcklb0SYtDidzU0GV2+QEb1vjct30CJpKr4W28kf gKGQ825IE3MBZ89G4ZBPBnWZnAYhiwUVp3U+LAvI9gDKz2TAfq20WjnW5ET4vKBl GauXB3odm8GUqCW/lQl0qKrbXllKJaPsjL8rLosVfpffLNmIJ3td553rZvSD3E4= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:00 2026 by rpki-client