This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/S3ly6OpAOrIt_7luoCILOFS7SJ0.roa File: S3ly6OpAOrIt_7luoCILOFS7SJ0.roa (raw, json) Hash identifier: MI6S4+JLe7VwJwm81yAr9HyDfPieJGPwWA3IVqKAm4s= Subject key identifier: 4B:79:72:E8:EA:40:3A:B2:2D:FF:B9:6E:A0:22:0B:38:54:BB:48:9D Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41 Certificate serial: 019B7E3854CDAA70DAA7EB1FF234B4984758 Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/S3ly6OpAOrIt_7luoCILOFS7SJ0.roa Signing time: Fri 02 Jan 2026 10:19:39 +0000 ROA not before: Fri 02 Jan 2026 10:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.36.216.0/22 maxlen: 24 194.247.26.0/23 maxlen: 24 2001:67c:2024::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:54:cd:aa:70:da:a7:eb:1f:f2:34:b4:98:47:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41 Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b7972e8ea403ab22dffb96ea0220b3854bb489d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:3c:e4:a9:9a:12:a3:3f:6e:0c:a4:c4:76: 4b:68:ec:e2:f7:70:04:96:bd:fc:78:87:b5:92:7a: 6f:0c:b8:6b:1a:44:b5:80:31:be:f6:65:e1:3e:53: e7:d2:74:27:07:e2:6d:b2:26:72:07:03:8c:4e:e1: c9:11:f9:62:c5:df:81:1b:22:52:13:35:06:16:c0: 3f:b8:1b:f2:e5:d0:ef:3d:e1:22:70:d0:a3:33:0c: ad:2e:55:47:04:33:f6:51:da:14:04:27:d0:fe:12: be:c3:1d:30:93:f6:2a:9c:9a:c2:f3:60:14:88:3f: b9:79:5a:99:ec:d6:7d:b4:28:6f:d5:85:4c:f2:68: cf:ce:26:88:ff:74:49:2b:db:26:94:0b:1d:a0:04: dd:cd:15:14:14:db:41:3e:51:c6:44:34:78:1a:7f: 94:bc:ec:4d:01:6c:76:78:91:07:0d:b9:50:8b:6a: da:da:8d:90:49:7f:57:19:45:54:62:8a:49:27:45: 61:44:0a:b2:e5:84:37:2a:01:bb:18:48:cc:16:79: cc:b3:33:74:f2:47:d9:09:ba:dd:f2:32:04:81:ae: 00:ae:24:97:4f:c2:20:c6:a7:41:d1:e8:36:10:2c: 86:be:93:ca:bd:7b:a7:b5:ff:16:15:eb:36:f5:fb: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:72:E8:EA:40:3A:B2:2D:FF:B9:6E:A0:22:0B:38:54:BB:48:9D X509v3 Authority Key Identifier: keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/S3ly6OpAOrIt_7luoCILOFS7SJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.216.0/22 194.247.26.0/23 IPv6: 2001:67c:2024::/48 Signature Algorithm: sha256WithRSAEncryption 4f:71:c6:c8:c6:1f:4a:5e:3d:1b:ab:10:89:ff:74:03:04:cd: 30:98:1f:d9:a1:d0:09:fc:81:21:d2:08:31:3a:7e:1a:69:f3: 89:86:b7:78:de:37:2d:f7:32:49:ec:b0:57:f4:18:29:3f:1f: 0e:0a:df:f6:88:28:fe:40:0c:9e:f7:a3:a4:00:5e:c5:d5:de: 6b:7d:0d:6f:2f:a7:ac:c0:6a:67:eb:ee:5d:ad:92:f4:60:78: fa:f2:3a:7a:ab:9f:2f:ea:01:c8:c7:6e:a0:79:10:8f:63:09: 38:44:4c:70:4d:75:55:1f:3b:68:e1:e6:5a:28:ed:13:97:62: f2:13:7a:72:99:f1:c9:8b:69:cb:a5:07:9f:3f:39:45:1a:74: b9:01:88:82:46:b0:13:b6:6b:cd:07:34:cf:86:a0:16:b5:e6: d1:ac:64:f7:1e:3a:84:50:7b:25:96:4a:0d:d4:dd:d2:f9:10: 04:fd:1f:90:7a:70:39:8e:11:74:39:9f:1b:df:82:c7:25:e0: f4:bf:31:62:bc:0c:36:e5:2d:cd:57:a4:ae:21:b4:10:56:28: 08:ef:91:9b:8b:e0:51:74:5e:c4:1b:71:84:06:55:cd:92:e4: ea:49:f4:25:fb:44:19:3b:82:33:f2:37:70:fd:e3:f0:3e:6f: a9:a4:fc:4c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+OFTNqnDap+sf8jS0mEdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NDcwYWU0MThlZWRkZDZiMzlkYWU5ZTdhMTc3YTE5Yzc3 OTljNDEwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjc5NzJlOGVhNDAzYWIyMmRmZmI5NmVhMDIyMGIzODU0YmI0ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Q85KmaEqM/bgykxHZLaOzi93AE lr38eIe1knpvDLhrGkS1gDG+9mXhPlPn0nQnB+JtsiZyBwOMTuHJEflixd+BGyJS EzUGFsA/uBvy5dDvPeEicNCjMwytLlVHBDP2UdoUBCfQ/hK+wx0wk/YqnJrC82AU iD+5eVqZ7NZ9tChv1YVM8mjPziaI/3RJK9smlAsdoATdzRUUFNtBPlHGRDR4Gn+U vOxNAWx2eJEHDblQi2ra2o2QSX9XGUVUYopJJ0VhRAqy5YQ3KgG7GEjMFnnMszN0 8kfZCbrd8jIEga4AriSXT8IgxqdB0eg2ECyGvpPKvXuntf8WFes29fvt4wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEt5cujqQDqyLf+5bqAiCzhUu0idMB8GA1UdIwQY MBaAFMlHCuQY7t3Ws52unnoXehnHeZxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMt YjA5MTIxNWQ1ZTRkLzEvUzNseTZPcEFPckl0XzdsdW9DSUxPRlM3U0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMtYjA5MTIxNWQ1ZTRk LzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuSTYAwQB wvcaMA8EAgACMAkDBwAgAQZ8ICQwDQYJKoZIhvcNAQELBQADggEBAE9xxsjGH0pe PRurEIn/dAMEzTCYH9mh0An8gSHSCDE6fhpp84mGt3jeNy33MknssFf0GCk/Hw4K 3/aIKP5ADJ73o6QAXsXV3mt9DW8vp6zAamfr7l2tkvRgePryOnqrny/qAcjHbqB5 EI9jCThETHBNdVUfO2jh5loo7ROXYvITenKZ8cmLaculB58/OUUadLkBiIJGsBO2 a80HNM+GoBa15tGsZPceOoRQeyWWSg3U3dL5EAT9H5B6cDmOEXQ5nxvfgscl4PS/ MWK8DDblLc1XpK4htBBWKAjvkZuL4FF0XsQbcYQGVc2S5OpJ9CX7RBk7gjPyN3D9 4/A+b6mk/Ew= -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:31 2026 by rpki-client