This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/inml3L03xIauQlJGO46V2UMm26s.roa File: inml3L03xIauQlJGO46V2UMm26s.roa (raw, json) Hash identifier: uC5z4338cf0GTmyx65YZk6M9xFym5K53g0vMfAL6ehk= Subject key identifier: 8A:79:A5:DC:BD:37:C4:86:AE:42:52:46:3B:8E:95:D9:43:26:DB:AB Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78C9C0222A66FD1DD405633A71257 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/inml3L03xIauQlJGO46V2UMm26s.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41957 IP address blocks: 85.209.10.0/24 maxlen: 24 185.21.141.0/24 maxlen: 24 185.191.213.0/24 maxlen: 24 194.93.59.0/24 maxlen: 24 194.147.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8c:9c:02:22:a6:6f:d1:dd:40:56:33:a7:12:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a79a5dcbd37c486ae4252463b8e95d94326dbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:d3:cc:d4:b1:73:29:27:30:7f:78:cf:e7: fc:06:94:a3:57:01:9b:4c:a7:85:10:81:f9:0e:de: fe:5b:54:5c:3b:49:14:80:c6:9d:f3:d3:9f:a1:32: b9:b3:a0:d6:63:8d:5c:b9:04:ad:ca:83:23:a2:e7: 5a:8b:10:20:b2:3f:5c:f4:52:25:3f:d3:b6:8b:b7: 7b:25:0a:4a:62:61:0a:3b:74:61:5e:68:e5:d7:41: 5e:be:51:4a:a7:1d:99:1e:44:ef:30:ec:cd:e6:2a: 95:13:39:24:8b:74:56:a3:1a:c5:2c:3e:f6:95:0b: 89:5e:16:cf:a2:23:c4:c0:54:86:de:d9:ec:98:b8: 9d:53:92:8d:e6:0a:92:b0:82:ff:8f:8d:60:3b:1f: a0:c6:d7:a3:dc:35:ca:3c:ff:eb:bd:28:ed:37:dd: c3:90:88:20:86:42:2a:6b:db:b6:94:4a:d4:0d:68: d9:7b:91:e2:b9:86:c3:cf:02:3c:4f:d0:66:98:75: 8e:13:6f:4e:5f:ea:db:e9:36:f8:82:13:bc:6d:43: 2a:eb:37:2e:84:39:3b:2d:7e:e3:59:8d:39:c7:bb: 08:3c:91:68:93:ed:d1:fe:a3:ec:50:94:33:79:aa: 5c:f5:e0:32:f2:b6:06:c1:80:5c:83:f0:dc:04:c1: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:79:A5:DC:BD:37:C4:86:AE:42:52:46:3B:8E:95:D9:43:26:DB:AB X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/inml3L03xIauQlJGO46V2UMm26s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.10.0/24 185.21.141.0/24 185.191.213.0/24 194.93.59.0/24 194.147.89.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:48:5b:3b:a1:08:4a:23:6a:34:d6:e7:a8:3b:ce:13:35:88: b6:95:9a:09:f5:a0:1b:1d:4c:0f:a6:67:23:94:19:e5:6f:3a: 76:54:70:82:42:36:27:7a:f2:36:ad:74:e2:9b:0b:88:f5:e2: b0:3c:1f:57:2f:e2:74:04:65:24:5e:3a:75:bd:6e:fa:cc:aa: 41:0d:6e:ce:00:d0:81:1e:f0:32:ba:eb:97:64:fc:9d:b7:ff: 30:9c:15:f7:8d:c3:b9:49:79:5c:b3:94:05:81:ec:9c:b2:8d: c6:ca:3f:e3:d4:f1:3e:72:e5:34:b6:09:2b:4d:e7:ff:1c:e5: fc:cb:84:54:01:b3:54:f4:b9:65:8c:b5:42:e9:6e:51:4f:2c: 13:94:88:13:7c:71:b5:fd:b6:7c:8d:66:93:0f:c0:78:47:ef: 7b:f3:38:0b:83:d7:d7:a2:ec:49:cc:77:bd:78:58:ab:fd:f5: c6:c8:18:4f:ed:69:01:60:95:86:41:73:0e:57:18:45:50:b8: cd:c7:9c:4b:66:4c:e5:05:92:1d:92:dd:d8:95:7d:21:27:2b: e1:0e:cb:48:15:61:44:fa:88:8e:8e:79:ad:94:2f:c5:01:14: 0c:22:e8:24:97:7b:4e:fa:85:3a:d9:9e:00:2d:86:cd:ef:47: d8:9b:13:a6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6x4ycAiKmb9HdQFYzpxJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTc5YTVkY2JkMzdjNDg2YWU0MjUyNDYzYjhlOTVkOTQzMjZkYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2nTzNSxcyknMH94z+f8BpSjVwGb TKeFEIH5Dt7+W1RcO0kUgMad89OfoTK5s6DWY41cuQStyoMjoudaixAgsj9c9FIl P9O2i7d7JQpKYmEKO3RhXmjl10FevlFKpx2ZHkTvMOzN5iqVEzkki3RWoxrFLD72 lQuJXhbPoiPEwFSG3tnsmLidU5KN5gqSsIL/j41gOx+gxtej3DXKPP/rvSjtN93D kIgghkIqa9u2lErUDWjZe5HiuYbDzwI8T9BmmHWOE29OX+rb6Tb4ghO8bUMq6zcu hDk7LX7jWY05x7sIPJFok+3R/qPsUJQzeapc9eAy8rYGwYBcg/DcBMEf5wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIp5pdy9N8SGrkJSRjuOldlDJturMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvaW5tbDNMMDN4SWF1UWxKR080NlYyVU1tMjZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVdEKAwQA uRWNAwQAub/VAwQAwl07AwQAwpNZMA0GCSqGSIb3DQEBCwUAA4IBAQCcSFs7oQhK I2o01ueoO84TNYi2lZoJ9aAbHUwPpmcjlBnlbzp2VHCCQjYnevI2rXTimwuI9eKw PB9XL+J0BGUkXjp1vW76zKpBDW7OANCBHvAyuuuXZPydt/8wnBX3jcO5SXlcs5QF geycso3Gyj/j1PE+cuU0tgkrTef/HOX8y4RUAbNU9LlljLVC6W5RTywTlIgTfHG1 /bZ8jWaTD8B4R+978zgLg9fXouxJzHe9eFir/fXGyBhP7WkBYJWGQXMOVxhFULjN x5xLZkzlBZIdkt3YlX0hJyvhDstIFWFE+oiOjnmtlC/FARQMIugkl3tO+oU62Z4A LYbN70fYmxOm -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:19 2026 by rpki-client