This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/3yh-cYJ83qkN3q-7nEdcSlIj_20.roa File: 3yh-cYJ83qkN3q-7nEdcSlIj_20.roa (raw, json) Hash identifier: dzEvA83A9jCVdqMsmWHuaDF5o7orRdQLIGhwCqyVCPI= Subject key identifier: DF:28:7E:71:82:7C:DE:A9:0D:DE:AF:BB:9C:47:5C:4A:52:23:FF:6D Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7C35B6AAC0141F60D380F72784B9 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/3yh-cYJ83qkN3q-7nEdcSlIj_20.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 139.28.173.0/24 maxlen: 24 139.28.175.0/24 maxlen: 24 185.169.228.0/22 maxlen: 22 193.37.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7c:35:b6:aa:c0:14:1f:60:d3:80:f7:27:84:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df287e71827cdea90ddeafbb9c475c4a5223ff6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:f0:85:4b:0d:5c:36:79:a5:6c:62:80:79: 73:2b:64:88:9a:97:e4:06:ee:94:4a:0e:74:f0:8d: 67:03:e1:67:65:01:00:83:57:b5:7f:77:18:ed:08: 5e:25:e3:e6:4a:f5:2c:4e:50:3e:5b:75:4d:d4:ab: 7a:db:48:48:92:89:07:83:0d:a3:48:3d:31:7d:6c: bc:7d:fe:0b:6e:ce:bd:1c:52:56:d5:b3:00:c0:6a: 25:a0:2d:3f:5a:be:d7:18:df:d5:f0:cc:b8:44:ba: d0:2a:2d:45:bd:ee:c3:d1:ef:1e:cd:93:f1:b4:fc: 48:bc:13:f1:fe:9d:86:39:4c:fa:16:eb:a4:c0:2b: f4:9d:eb:2e:b6:e8:32:d9:28:b0:20:77:2e:e4:1c: 36:d7:cd:fb:05:7e:66:f2:b6:3a:f9:99:05:7d:52: 4e:ca:40:4f:51:b3:00:cf:d1:a6:5b:e0:49:90:b8: 4a:34:c7:ef:fb:46:9b:30:f2:4c:aa:8d:7a:ae:0b: 5b:cd:47:36:36:a1:08:e5:27:e3:1b:02:a7:84:e2: 67:07:b7:90:12:dd:40:df:90:45:09:93:ae:5c:33: 84:63:75:da:f7:51:e6:10:a2:d3:5f:dd:61:8a:97: ae:9e:14:0b:25:5d:2e:57:cc:f1:62:e1:12:33:3d: 41:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:28:7E:71:82:7C:DE:A9:0D:DE:AF:BB:9C:47:5C:4A:52:23:FF:6D X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/3yh-cYJ83qkN3q-7nEdcSlIj_20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.173.0/24 139.28.175.0/24 185.169.228.0/22 193.37.220.0/22 Signature Algorithm: sha256WithRSAEncryption 55:d4:49:d3:74:58:3b:31:e0:2d:26:d5:c5:e0:5d:b8:d3:b5: 8e:ea:77:b9:36:eb:0a:11:27:7f:58:e6:aa:1e:8e:82:4d:41: 5e:ab:f6:31:bb:c8:73:1c:8a:98:e0:64:ce:45:45:ab:cb:66: b0:e3:9d:4f:ba:68:8e:0d:6d:9f:dc:d9:36:44:b8:03:a5:46: 71:31:d9:0f:0e:db:35:07:fb:9b:db:02:8f:73:b5:75:49:6a: c0:0e:da:81:e8:07:94:0b:88:68:3b:2b:e6:a5:9e:30:10:13: 73:bd:42:82:c6:ed:80:53:47:50:b2:86:84:58:a9:60:2a:4e: d1:30:64:2f:32:41:1a:89:40:53:0b:fc:93:e0:a6:17:f9:2c: 9d:0d:b5:f9:e1:30:db:c1:12:8e:e0:4f:5d:26:5f:5d:77:7f: 95:84:fc:ee:6d:ff:2d:59:77:a0:5c:b8:51:54:96:e9:f0:5a: 86:1d:fd:ec:a7:84:65:82:ad:d8:9f:25:46:b6:d6:99:a2:29: 5a:02:44:f3:a3:ef:4d:3d:69:de:52:1c:5a:16:2c:4b:ee:d7: 15:a8:8e:30:14:75:10:e2:d5:bf:bd:4a:91:d4:13:8b:d3:93: a2:09:b3:b8:bf:72:59:29:ac:21:7c:a4:52:45:0d:7f:46:45: c1:8f:2b:ed -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8f3w1tqrAFB9g04D3J4S5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjI4N2U3MTgyN2NkZWE5MGRkZWFmYmI5YzQ3NWM0YTUyMjNmZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwvwhUsNXDZ5pWxigHlzK2SImpfk Bu6USg508I1nA+FnZQEAg1e1f3cY7QheJePmSvUsTlA+W3VN1Kt620hIkokHgw2j SD0xfWy8ff4Lbs69HFJW1bMAwGoloC0/Wr7XGN/V8My4RLrQKi1Fve7D0e8ezZPx tPxIvBPx/p2GOUz6FuukwCv0nesutugy2SiwIHcu5Bw21837BX5m8rY6+ZkFfVJO ykBPUbMAz9GmW+BJkLhKNMfv+0abMPJMqo16rgtbzUc2NqEI5SfjGwKnhOJnB7eQ Et1A35BFCZOuXDOEY3Xa91HmEKLTX91hipeunhQLJV0uV8zxYuESMz1BmQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN8ofnGCfN6pDd6vu5xHXEpSI/9tMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvM3loLWNZSjgzcWtOM3EtN25FZGNTbElqXzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAixytAwQA ixyvAwQCuankAwQCwSXcMA0GCSqGSIb3DQEBCwUAA4IBAQBV1EnTdFg7MeAtJtXF 4F2407WO6ne5NusKESd/WOaqHo6CTUFeq/Yxu8hzHIqY4GTORUWry2aw451PumiO DW2f3Nk2RLgDpUZxMdkPDts1B/ub2wKPc7V1SWrADtqB6AeUC4hoOyvmpZ4wEBNz vUKCxu2AU0dQsoaEWKlgKk7RMGQvMkEaiUBTC/yT4KYX+SydDbX54TDbwRKO4E9d Jl9dd3+VhPzubf8tWXegXLhRVJbp8FqGHf3sp4Rlgq3YnyVGttaZoilaAkTzo+9N PWneUhxaFixL7tcVqI4wFHUQ4tW/vUqR1BOL05OiCbO4v3JZKawhfKRSRQ1/RkXB jyvt -----END CERTIFICATE-----Generated at Mon Jan 19 17:09:58 2026 by rpki-client