This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/Y09xLkmt7VHTVYtC64eFlrK6j58.roa File: Y09xLkmt7VHTVYtC64eFlrK6j58.roa (raw, json) Hash identifier: iA768afUcGVOaqrvOSx3MnWnS2M+3J4maoqeEMVN/wE= Subject key identifier: 63:4F:71:2E:49:AD:ED:51:D3:55:8B:42:EB:87:85:96:B2:BA:8F:9F Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Certificate serial: 019B7EA4C49C0EBB24D8D3F4EED6171F4845 Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/Y09xLkmt7VHTVYtC64eFlrK6j58.roa Signing time: Fri 02 Jan 2026 12:18:05 +0000 ROA not before: Fri 02 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60458 IP address blocks: 46.175.128.0/24 maxlen: 24 193.84.177.0/24 maxlen: 24 195.60.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c4:9c:0e:bb:24:d8:d3:f4:ee:d6:17:1f:48:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Validity Not Before: Jan 2 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=634f712e49aded51d3558b42eb878596b2ba8f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d9:05:cc:79:99:3d:73:8a:d9:e0:5d:53:67: 8e:45:85:e1:29:49:ca:24:29:d9:1f:9d:99:b8:10: 0f:cc:62:5e:8b:8c:2d:2b:a5:12:6c:eb:f2:ca:46: 95:ff:44:48:1c:1a:d6:15:02:6f:03:04:29:d3:0d: e7:d2:2a:1f:53:d6:52:aa:35:b1:e0:f3:0a:d3:6b: 0e:c0:5c:43:80:f2:d0:f8:93:e2:19:0e:d3:39:49: f6:83:e2:8c:6e:a3:30:ce:82:af:d4:3f:c2:38:64: c0:0b:91:7a:73:45:5d:d0:5b:a4:54:7b:c7:f8:94: a7:c6:18:c5:d5:29:51:a2:cd:13:0a:ae:73:ba:b4: ab:3b:e1:bb:74:f5:41:f2:10:59:2a:c9:c1:01:6f: 37:61:a8:45:dd:88:f7:4d:4c:fb:3e:89:dc:41:ff: 3c:1a:22:8e:2c:ba:28:45:05:fa:c0:50:07:36:4e: a4:26:00:cb:a9:41:20:70:4a:45:4c:a1:99:75:c1: 5b:0e:1c:df:be:d2:f7:ec:7f:17:e9:9f:30:39:04: 75:bf:c6:a4:5d:60:16:e9:d7:2a:83:53:45:b3:b5: 80:cc:c8:dc:48:d4:f9:15:c9:3d:b8:23:66:de:d1: b9:58:86:89:11:6a:f8:24:de:21:7d:26:4e:f0:1a: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4F:71:2E:49:AD:ED:51:D3:55:8B:42:EB:87:85:96:B2:BA:8F:9F X509v3 Authority Key Identifier: keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/Y09xLkmt7VHTVYtC64eFlrK6j58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.128.0/24 193.84.177.0/24 195.60.239.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:49:69:e1:99:48:31:ca:e8:a3:77:fb:64:13:9f:07:e4:c8: 25:ab:fc:1e:b8:8e:d7:bf:08:75:42:ae:55:62:26:bd:3b:54: 86:20:b6:57:7d:91:84:83:f8:ff:28:40:ab:79:d8:57:e2:8a: 56:02:03:64:cb:95:da:37:0e:df:6c:62:42:c6:df:9f:a5:9e: af:9d:ac:ec:3d:55:97:55:0c:ab:f3:4b:c7:e0:7f:2f:9e:ac: 22:9d:bc:d2:25:bc:f2:eb:87:3b:74:40:18:ae:c0:3e:fe:34: fe:ef:78:5b:42:96:28:f9:86:eb:01:d4:8e:37:5e:e1:52:8e: 54:17:13:6a:10:97:21:a2:79:4c:5f:c5:3e:2c:a5:f4:37:a6: 09:c7:4d:05:22:26:9a:f4:ee:b8:c7:08:6b:2b:14:02:6d:c6: aa:2c:4c:04:a1:06:74:cd:38:7d:0f:61:bc:59:f0:7c:b4:3a: 27:cb:4e:3b:9c:3d:27:cf:1e:82:c8:8e:f2:12:c8:ef:b7:67: bf:f0:46:00:4f:6c:8f:a0:ad:51:2a:83:14:cf:8c:1f:5e:b4: 91:2e:b6:aa:f1:d9:ed:92:6e:5a:f5:86:98:86:69:16:a6:0a: 21:a0:76:60:65:3f:40:60:fe:f5:c2:d3:d1:1b:44:8c:c2:ab: 7b:5c:b5:fe -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pMScDrsk2NP07tYXH0hFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2NiMjBjNWNhN2M0ZWQ4ZTQyMDc4YjFhNjcyODdhMGQ5 OTFjZWMwHhcNMjYwMTAyMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzRmNzEyZTQ5YWRlZDUxZDM1NThiNDJlYjg3ODU5NmIyYmE4ZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNkFzHmZPXOK2eBdU2eORYXhKUnK JCnZH52ZuBAPzGJei4wtK6USbOvyykaV/0RIHBrWFQJvAwQp0w3n0iofU9ZSqjWx 4PMK02sOwFxDgPLQ+JPiGQ7TOUn2g+KMbqMwzoKv1D/COGTAC5F6c0Vd0FukVHvH +JSnxhjF1SlRos0TCq5zurSrO+G7dPVB8hBZKsnBAW83YahF3Yj3TUz7PoncQf88 GiKOLLooRQX6wFAHNk6kJgDLqUEgcEpFTKGZdcFbDhzfvtL37H8X6Z8wOQR1v8ak XWAW6dcqg1NFs7WAzMjcSNT5Fck9uCNm3tG5WIaJEWr4JN4hfSZO8Bo9ywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGNPcS5Jre1R01WLQuuHhZayuo+fMB8GA1UdIwQY MBaAFNw8sgxcp8TtjkIHixpnKHoNmRzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjkt ODI2NjBlZTRlYWM0LzEvWTA5eExrbXQ3VkhUVll0QzY0ZUZscks2ajU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjktODI2NjBlZTRlYWM0 LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALq+AAwQA wVSxAwQAwzzvMA0GCSqGSIb3DQEBCwUAA4IBAQCdSWnhmUgxyuijd/tkE58H5Mgl q/weuI7Xvwh1Qq5VYia9O1SGILZXfZGEg/j/KECredhX4opWAgNky5XaNw7fbGJC xt+fpZ6vnazsPVWXVQyr80vH4H8vnqwinbzSJbzy64c7dEAYrsA+/jT+73hbQpYo +YbrAdSON17hUo5UFxNqEJchonlMX8U+LKX0N6YJx00FIiaa9O64xwhrKxQCbcaq LEwEoQZ0zTh9D2G8WfB8tDony047nD0nzx6CyI7yEsjvt2e/8EYAT2yPoK1RKoMU z4wfXrSRLraq8dntkm5a9YaYhmkWpgohoHZgZT9AYP71wtPRG0SMwqt7XLX+ -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:00 2026 by rpki-client