This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/yF3cvECO3ZPhk5RL38Usnf_w7zQ.roa File: yF3cvECO3ZPhk5RL38Usnf_w7zQ.roa (raw, json) Hash identifier: dQz6DpgzE93vbwSPAPy5s6ZmxUE3vTqFatyJPnJweWE= Subject key identifier: C8:5D:DC:BC:40:8E:DD:93:E1:93:94:4B:DF:C5:2C:9D:FF:F0:EF:34 Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33 Certificate serial: 019B77590F1EC3D8B40310E864F794252694 Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/yF3cvECO3ZPhk5RL38Usnf_w7zQ.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51139 IP address blocks: 178.249.224.0/22 maxlen: 22 178.249.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0f:1e:c3:d8:b4:03:10:e8:64:f7:94:25:26:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c85ddcbc408edd93e193944bdfc52c9dfff0ef34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:e9:ea:0a:3b:53:27:3a:c7:67:45:6f:15: db:a4:bf:29:7f:d5:fa:07:e4:a0:5b:ea:0e:8f:64: ea:75:ff:9b:de:5c:41:fc:87:86:26:3c:ab:7b:d0: ca:87:9e:44:ca:e8:10:fd:ac:11:de:32:c3:2d:9f: a4:80:42:73:fb:25:b9:1f:49:a0:08:36:0a:e0:f4: 7b:9e:58:03:2a:15:75:8a:a1:88:be:f4:c3:09:2c: 81:75:44:1b:2a:11:aa:e5:17:14:1b:fd:65:e4:e2: 4e:ee:a0:00:1a:98:94:09:41:44:59:fd:83:15:d6: 3f:d7:7e:95:a8:7d:af:66:ec:d4:cf:1b:3f:04:1a: b8:2a:7f:cd:20:ea:b1:19:93:fe:54:b7:a3:8c:34: 40:cc:e9:33:71:76:1b:00:33:f8:33:0e:bf:f7:17: a3:98:80:8a:2d:e9:4e:1d:43:8d:fe:d7:6d:f4:ec: 16:79:d9:90:8f:60:b3:bb:91:fd:d4:05:ce:48:6b: 1b:be:9d:d3:be:6e:42:14:45:ba:7f:fc:59:40:53: 15:9d:bf:b5:37:50:8e:c6:f5:4a:e1:3d:60:c2:a0: d8:2c:06:26:fb:94:c5:da:d3:3e:85:97:b0:4d:87: d3:29:f5:64:6f:8b:16:4d:38:36:42:ed:41:43:7b: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5D:DC:BC:40:8E:DD:93:E1:93:94:4B:DF:C5:2C:9D:FF:F0:EF:34 X509v3 Authority Key Identifier: keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/yF3cvECO3ZPhk5RL38Usnf_w7zQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.249.224.0/21 Signature Algorithm: sha256WithRSAEncryption 72:1f:65:d3:88:96:57:59:19:c6:97:fd:84:75:76:63:84:63: 6d:60:c4:05:c5:93:ea:70:8d:40:fb:37:ad:db:d0:49:0a:db: b8:f5:76:93:c6:5b:8a:5a:bc:06:1b:6a:02:4f:33:a0:b9:4a: c6:ed:6b:a2:6b:15:1a:a6:2b:84:56:de:85:d1:48:4f:fb:f9: 71:c8:0d:b6:d6:de:ed:ea:66:e3:ca:95:59:ff:e5:94:5d:f8: 76:f7:8c:93:30:6a:a7:4c:dc:96:02:42:b0:8f:42:6f:d7:57: 71:ad:f5:29:61:db:c3:db:0e:6e:1f:04:f2:6f:6d:7f:66:73: 5e:9e:e5:03:45:11:8c:81:95:65:70:f7:1b:d1:b7:ae:86:49: 25:eb:c2:f8:7c:d7:da:25:2d:ff:5b:3d:64:00:cb:fb:19:c5: 3c:5d:f6:37:65:31:99:a2:b1:a7:04:39:61:33:f7:5b:d0:f9: e5:d4:4c:df:02:7b:57:bc:29:ae:de:5c:5b:bd:31:9d:19:48: 72:31:6b:0e:01:49:29:fb:3f:ba:6b:c3:43:cb:16:2d:09:2a: 06:11:aa:23:3c:12:10:0a:52:c0:d9:1d:c0:70:99:4d:38:9a: 9c:99:df:0f:45:bd:59:18:62:c7:a6:6b:28:73:c1:98:74:65: a5:9e:a5:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQ8ew9i0AxDoZPeUJSaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWVmOWRiOTNkZTExYTAyNTNkNWFhOGM1M2VjY2FlMGY5 YzNkMzMwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODVkZGNiYzQwOGVkZDkzZTE5Mzk0NGJkZmM1MmM5ZGZmZjBlZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrfp6go7Uyc6x2dFbxXbpL8pf9X6 B+SgW+oOj2Tqdf+b3lxB/IeGJjyre9DKh55EyugQ/awR3jLDLZ+kgEJz+yW5H0mg CDYK4PR7nlgDKhV1iqGIvvTDCSyBdUQbKhGq5RcUG/1l5OJO7qAAGpiUCUFEWf2D FdY/136VqH2vZuzUzxs/BBq4Kn/NIOqxGZP+VLejjDRAzOkzcXYbADP4Mw6/9xej mICKLelOHUON/tdt9OwWedmQj2Czu5H91AXOSGsbvp3Tvm5CFEW6f/xZQFMVnb+1 N1COxvVK4T1gwqDYLAYm+5TF2tM+hZewTYfTKfVkb4sWTTg2Qu1BQ3tFLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMhd3LxAjt2T4ZOUS9/FLJ3/8O80MB8GA1UdIwQY MBaAFLLu+duT3hGgJT1aqMU+zK4PnD0zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3U3NTI1UGVFYUFsUFZxb3hUN01yZy1jUFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83M2U5MGQtMDU1My00ZmU2LTk2ZGUt ZGVlZjhkMTU0OTUwLzEveUYzY3ZFQ08zWlBoazVSTDM4VXNuZl93N3pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83M2U5MGQtMDU1My00ZmU2LTk2ZGUtZGVlZjhkMTU0OTUw LzEvc3U3NTI1UGVFYUFsUFZxb3hUN01yZy1jUFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvngMA0G CSqGSIb3DQEBCwUAA4IBAQByH2XTiJZXWRnGl/2EdXZjhGNtYMQFxZPqcI1A+zet 29BJCtu49XaTxluKWrwGG2oCTzOguUrG7WuiaxUapiuEVt6F0UhP+/lxyA221t7t 6mbjypVZ/+WUXfh294yTMGqnTNyWAkKwj0Jv11dxrfUpYdvD2w5uHwTyb21/ZnNe nuUDRRGMgZVlcPcb0beuhkkl68L4fNfaJS3/Wz1kAMv7GcU8XfY3ZTGZorGnBDlh M/db0Pnl1EzfAntXvCmu3lxbvTGdGUhyMWsOAUkp+z+6a8NDyxYtCSoGEaojPBIQ ClLA2R3AcJlNOJqcmd8PRb1ZGGLHpmsoc8GYdGWlnqWB -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:38 2026 by rpki-client