This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y11xNtzRg1NU9IJvHeTCC88WZ8E.roa File: Y11xNtzRg1NU9IJvHeTCC88WZ8E.roa (raw, json) Hash identifier: MwioIc3BECc3jeqOCEqvwA+zYCWoNlCmxIWY3Qzw3+s= Subject key identifier: 63:5D:71:36:DC:D1:83:53:54:F4:82:6F:1D:E4:C2:0B:CF:16:67:C1 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA8AAAAC6F9B2BD7D1D2F82A07C36 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y11xNtzRg1NU9IJvHeTCC88WZ8E.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55720 IP address blocks: 82.163.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a8:aa:aa:c6:f9:b2:bd:7d:1d:2f:82:a0:7c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=635d7136dcd1835354f4826f1de4c20bcf1667c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:ee:d8:9b:84:3d:3e:e8:98:e4:f4:66:8d: 8e:8d:8b:83:a8:07:3d:5c:cf:04:18:24:3c:d9:46: e2:cb:e4:08:11:f3:4c:c1:77:8b:b1:9d:96:85:4c: be:eb:c4:4f:b5:6c:9a:fd:2b:ea:27:a8:01:56:88: c0:11:c4:6c:2e:49:66:65:48:55:58:51:74:bd:1e: 2f:a2:a7:a2:c2:f2:d3:52:5b:6d:cc:d1:b5:55:6e: 8e:bb:87:43:28:c9:c8:47:7c:cc:bf:b2:e4:33:30: cf:61:1c:aa:ca:e6:72:0f:73:33:d7:d1:9d:33:45: ec:6a:9f:16:e7:6c:76:93:31:a5:5f:fd:39:c5:05: 3d:39:f9:70:4b:ea:7d:9f:7c:1e:31:67:5a:ac:44: ce:e9:2f:c7:e7:d8:ab:d9:cf:62:83:f5:97:fa:84: b8:32:14:a4:55:7d:09:8e:a9:75:3d:2a:05:26:fe: 46:81:92:0a:bf:cd:39:6f:05:e6:c0:b7:35:1e:fe: 87:f6:2f:62:66:2e:07:61:72:03:76:47:90:e7:9f: 61:76:5a:84:b2:a6:9b:7b:8c:f9:24:d6:5d:1a:eb: 98:f3:1c:69:4f:91:97:19:07:40:38:22:46:5a:4d: 98:53:35:e7:0f:e9:11:3f:c3:74:94:19:46:49:c4: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5D:71:36:DC:D1:83:53:54:F4:82:6F:1D:E4:C2:0B:CF:16:67:C1 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Y11xNtzRg1NU9IJvHeTCC88WZ8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.22.0/24 Signature Algorithm: sha256WithRSAEncryption 51:ca:7a:e9:05:de:d6:e3:9f:25:dc:53:6d:d1:7f:56:5f:f0: 5b:68:ad:d7:6d:38:3e:b5:43:99:c3:7e:06:0c:86:bb:07:d4: 91:c7:24:7e:34:47:5b:13:d8:61:cf:c3:40:24:64:07:9f:43: af:56:c5:df:5a:e2:37:ae:83:b6:11:9a:71:65:6e:17:cc:4e: b6:1d:f3:c4:93:4a:a8:8e:ec:6c:0e:b2:83:49:0c:be:80:f2: c6:c1:e7:69:29:82:44:52:fb:21:e8:c8:fd:88:95:0e:0c:eb: a9:f7:63:4e:69:91:41:76:f9:21:e2:34:13:a4:d1:23:5b:2b: 6e:4b:a5:e4:42:aa:2b:34:96:1a:97:d9:48:fb:67:77:3b:26: 9b:1e:9c:5e:b3:ae:53:2b:88:ee:79:b2:18:12:51:b0:96:85: 4a:e4:0e:c9:e2:fd:f5:8a:17:10:e4:9d:4e:4c:f0:1f:c8:12: 85:e9:e9:fb:d9:42:0a:86:2e:50:53:cc:94:5f:cb:13:3f:16: 0f:e1:5a:ac:de:f6:29:29:39:78:5d:f6:07:2a:97:c9:68:32: e5:79:c1:4e:f4:57:b8:46:be:6c:3c:30:99:69:d4:6a:7d:ce: 73:86:9a:e2:ff:09:15:2c:9c:ac:01:9c:d8:52:df:6d:8c:66: b2:8a:6d:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wqiqqsb5sr19HS+CoHw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzVkNzEzNmRjZDE4MzUzNTRmNDgyNmYxZGU0YzIwYmNmMTY2N2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutvu2JuEPT7omOT0Zo2OjYuDqAc9 XM8EGCQ82Ubiy+QIEfNMwXeLsZ2WhUy+68RPtWya/SvqJ6gBVojAEcRsLklmZUhV WFF0vR4voqeiwvLTUlttzNG1VW6Ou4dDKMnIR3zMv7LkMzDPYRyqyuZyD3Mz19Gd M0Xsap8W52x2kzGlX/05xQU9OflwS+p9n3weMWdarETO6S/H59ir2c9ig/WX+oS4 MhSkVX0Jjql1PSoFJv5GgZIKv805bwXmwLc1Hv6H9i9iZi4HYXIDdkeQ559hdlqE sqabe4z5JNZdGuuY8xxpT5GXGQdAOCJGWk2YUzXnD+kRP8N0lBlGScSrdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGNdcTbc0YNTVPSCbx3kwgvPFmfBMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWTExeE50elJnMU5VOUlKdkhlVENDODhXWjhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUqMWMA0G CSqGSIb3DQEBCwUAA4IBAQBRynrpBd7W458l3FNt0X9WX/BbaK3XbTg+tUOZw34G DIa7B9SRxyR+NEdbE9hhz8NAJGQHn0OvVsXfWuI3roO2EZpxZW4XzE62HfPEk0qo juxsDrKDSQy+gPLGwedpKYJEUvsh6Mj9iJUODOup92NOaZFBdvkh4jQTpNEjWytu S6XkQqorNJYal9lI+2d3OyabHpxes65TK4juebIYElGwloVK5A7J4v31ihcQ5J1O TPAfyBKF6en72UIKhi5QU8yUX8sTPxYP4Vqs3vYpKTl4XfYHKpfJaDLlecFO9Fe4 Rr5sPDCZadRqfc5zhpri/wkVLJysAZzYUt9tjGayim2C -----END CERTIFICATE-----Generated at Sun Jan 18 04:09:26 2026 by rpki-client