This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Y3c1Ak3JjLBatsrW2gTMq42unDs.roa File: Y3c1Ak3JjLBatsrW2gTMq42unDs.roa (raw, json) Hash identifier: V3CWN+tjhR644j/TU9W4RO+YGp9W+J2N1VVBE6r43Ds= Subject key identifier: 63:77:35:02:4D:C9:8C:B0:5A:B6:CA:D6:DA:04:CC:AB:8D:AE:9C:3B Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758BD6D8170C15B0F65A8B159A3E37A Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Y3c1Ak3JjLBatsrW2gTMq42unDs.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212369 IP address blocks: 193.223.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bd:6d:81:70:c1:5b:0f:65:a8:b1:59:a3:e3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=637735024dc98cb05ab6cad6da04ccab8dae9c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:d1:7d:2d:59:3f:53:45:37:54:ed:91:62: 50:4f:4f:01:c5:a0:3a:b0:3d:93:a0:2a:71:b1:f1: 0d:08:20:48:8b:7b:c8:e6:93:6d:69:bf:41:ec:fc: a8:12:c2:94:ca:11:45:bc:44:4f:e8:8b:2d:90:d2: 66:69:db:f1:b6:d6:5c:ea:01:61:c5:86:79:63:ca: a9:8e:ce:c7:59:ac:00:f2:a9:53:65:9a:32:f8:8a: 66:b5:8c:ec:83:4f:01:6c:3a:86:89:89:b3:9d:c4: 08:13:5a:d0:91:96:c9:20:1d:50:d7:3d:df:27:3b: b0:85:92:51:cd:d6:81:f7:08:82:3f:c0:11:88:d4: da:59:47:d1:a5:56:4e:d0:43:49:43:04:d7:6a:1e: 33:ee:ff:67:40:4b:6a:63:8a:02:f4:3b:d4:43:ee: d3:4f:08:25:68:ba:84:94:45:2e:09:09:a6:cf:f5: 6c:42:20:b2:44:f8:6a:75:68:8b:ad:57:16:18:82: a4:d0:6a:1f:2f:e3:1f:94:17:cb:46:90:e8:9a:4d: 96:d2:7b:4f:13:89:8a:a7:a2:14:27:4d:55:8e:b7: 19:0e:fd:19:8f:3f:82:5f:80:6b:55:3d:64:f2:03: 70:92:b4:96:e0:3c:b1:bb:2d:e9:35:f9:b4:ed:43: 45:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:77:35:02:4D:C9:8C:B0:5A:B6:CA:D6:DA:04:CC:AB:8D:AE:9C:3B X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Y3c1Ak3JjLBatsrW2gTMq42unDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.107.0/24 Signature Algorithm: sha256WithRSAEncryption 15:4e:01:40:82:ed:c2:3f:a6:fd:b2:ad:53:9b:87:d2:56:b8: 1b:02:9d:bc:58:40:12:7e:c6:3d:ca:e3:e3:ca:73:41:1b:20: 40:73:c8:72:7f:86:2e:3e:b2:03:e6:30:3f:40:fc:53:64:a0: b6:d3:42:4b:67:21:52:bd:63:4b:8a:81:33:d5:09:df:2f:12: cc:16:7d:ba:88:f7:60:a7:fc:8c:68:d6:0f:58:c8:5c:2b:d7: b6:a1:c5:c1:fe:d5:5c:4d:c1:45:bc:5e:8c:3a:04:b3:95:b9: f1:e3:96:dd:ad:a5:20:e1:54:a0:93:13:72:4d:99:f6:6d:3a: b1:cf:96:4f:e2:45:37:b3:32:72:bf:49:a1:cd:7d:a5:b2:a6: 23:37:d2:ed:9b:78:43:e7:9b:79:8a:f4:b7:6d:ed:0c:d3:fa: 7d:10:5d:45:6c:24:6b:cc:34:ba:c5:bc:eb:89:58:32:8e:fb: 34:26:04:96:c6:e3:72:52:dd:3d:4f:a8:0d:b6:06:48:fe:61: 31:ae:32:2d:fd:4c:a2:3e:01:9b:87:bb:24:84:fa:ab:a4:ab: 0f:ea:13:b8:b4:fc:b1:98:ce:65:d6:4f:7c:8d:14:b7:75:cc: 82:ac:ea:e0:7a:e5:af:55:ec:80:a5:5d:43:bc:8c:81:6d:9c: db:ad:62:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WL1tgXDBWw9lqLFZo+N6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzc3MzUwMjRkYzk4Y2IwNWFiNmNhZDZkYTA0Y2NhYjhkYWU5YzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV7RfS1ZP1NFN1TtkWJQT08BxaA6 sD2ToCpxsfENCCBIi3vI5pNtab9B7PyoEsKUyhFFvERP6IstkNJmadvxttZc6gFh xYZ5Y8qpjs7HWawA8qlTZZoy+IpmtYzsg08BbDqGiYmzncQIE1rQkZbJIB1Q1z3f JzuwhZJRzdaB9wiCP8ARiNTaWUfRpVZO0ENJQwTXah4z7v9nQEtqY4oC9DvUQ+7T TwglaLqElEUuCQmmz/VsQiCyRPhqdWiLrVcWGIKk0GofL+MflBfLRpDomk2W0ntP E4mKp6IUJ01VjrcZDv0Zjz+CX4BrVT1k8gNwkrSW4Dyxuy3pNfm07UNF5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGN3NQJNyYywWrbK1toEzKuNrpw7MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvWTNjMUFrM0pqTEJhdHNyVzJnVE1xNDJ1bkRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd9rMA0G CSqGSIb3DQEBCwUAA4IBAQAVTgFAgu3CP6b9sq1Tm4fSVrgbAp28WEASfsY9yuPj ynNBGyBAc8hyf4YuPrID5jA/QPxTZKC200JLZyFSvWNLioEz1QnfLxLMFn26iPdg p/yMaNYPWMhcK9e2ocXB/tVcTcFFvF6MOgSzlbnx45bdraUg4VSgkxNyTZn2bTqx z5ZP4kU3szJyv0mhzX2lsqYjN9Ltm3hD55t5ivS3be0M0/p9EF1FbCRrzDS6xbzr iVgyjvs0JgSWxuNyUt09T6gNtgZI/mExrjIt/UyiPgGbh7skhPqrpKsP6hO4tPyx mM5l1k98jRS3dcyCrOrgeuWvVeyApV1DvIyBbZzbrWK+ -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:55 2026 by rpki-client