This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/1Y3Jx-pHnnlaAgkd81VS3ppPNg8.roa File: 1Y3Jx-pHnnlaAgkd81VS3ppPNg8.roa (raw, json) Hash identifier: tTjmMx7gS2w8jTpbpktEzeLgDcYSzx93pMRGzj4kGes= Subject key identifier: D5:8D:C9:C7:EA:47:9E:79:5A:02:09:1D:F3:55:52:DE:9A:4F:36:0F Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829 Certificate serial: 019B7D5C3A69C7BE2A6FFCD608151B3D3AAA Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/1Y3Jx-pHnnlaAgkd81VS3ppPNg8.roa Signing time: Fri 02 Jan 2026 06:19:14 +0000 ROA not before: Fri 02 Jan 2026 06:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1930 IP address blocks: 192.68.209.0/24 maxlen: 24 192.82.127.0/24 maxlen: 24 192.86.138.0/24 maxlen: 24 192.88.17.0/24 maxlen: 24 192.88.250.0/24 maxlen: 24 192.88.251.0/24 maxlen: 24 192.88.252.0/24 maxlen: 24 192.88.253.0/24 maxlen: 24 192.88.254.0/24 maxlen: 24 192.92.142.0/24 maxlen: 24 192.135.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:3a:69:c7:be:2a:6f:fc:d6:08:15:1b:3d:3a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829 Validity Not Before: Jan 2 06:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d58dc9c7ea479e795a02091df35552de9a4f360f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d4:35:66:f0:5b:bb:56:d9:35:01:ec:f1:d4: 03:47:ab:3f:cc:24:6d:27:db:27:eb:2d:f7:58:1e: c5:fe:58:e6:67:9a:d2:4f:73:6b:4e:87:31:26:84: 67:cf:6f:0e:88:bf:78:1d:c7:5f:b7:9d:7a:8f:08: 8e:2d:33:b8:c1:05:d6:0f:12:0d:7c:09:5b:0a:e8: 33:3d:d5:75:53:fb:1b:30:f9:6d:1b:7a:d1:73:7c: 83:35:48:42:d8:d9:48:c9:92:62:3b:23:08:19:ba: 30:10:b0:38:67:e9:06:ce:2f:23:60:7b:36:92:29: 40:fb:30:e7:da:73:4a:4b:0a:36:ac:38:25:32:3e: b9:af:72:75:19:3c:7d:dc:1c:72:c7:71:4d:80:73: e4:4e:36:d2:24:7b:5f:90:04:68:30:ae:89:00:4f: 6d:f4:4a:90:dc:b7:0b:f6:58:98:89:49:20:50:82: 29:7b:5f:b7:17:9d:2b:32:12:7c:71:3c:94:0f:bf: d1:6e:fc:45:8b:a3:83:54:37:d8:e8:40:f1:86:31: da:e4:d1:ad:e0:b2:e2:03:25:f1:b6:e5:72:be:59: 19:cd:57:4f:44:85:8d:cb:27:a7:94:27:cc:7a:a9: 2d:ff:f0:01:15:bd:27:d4:28:a5:fc:a5:c6:73:ad: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8D:C9:C7:EA:47:9E:79:5A:02:09:1D:F3:55:52:DE:9A:4F:36:0F X509v3 Authority Key Identifier: keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/1Y3Jx-pHnnlaAgkd81VS3ppPNg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.68.209.0/24 192.82.127.0/24 192.86.138.0/24 192.88.17.0/24 192.88.250.0-192.88.254.255 192.92.142.0/24 192.135.187.0/24 Signature Algorithm: sha256WithRSAEncryption 63:8e:4a:fa:28:89:91:d4:2b:ff:92:18:2e:d2:15:f8:1c:b1: 9a:1f:15:ab:5d:1d:c9:c5:70:4d:43:b6:9f:79:15:2d:ab:26: 54:7d:4f:0b:87:be:61:c0:80:8c:46:b7:5d:17:f3:01:86:0c: 12:46:bc:e1:d6:88:90:5d:50:0f:b6:4f:b7:55:f5:b7:5d:d4: 39:02:86:37:c5:11:ab:d2:1a:b0:42:f0:d1:4b:d0:25:73:5d: 6a:74:b8:d9:f8:21:0d:ea:39:a1:eb:27:8f:4f:07:4a:4b:71: 3c:94:05:32:7b:44:da:4d:23:40:1f:55:0c:ee:81:1e:4d:f4: 65:55:37:32:f8:13:b8:0f:59:88:fb:c2:c3:61:7a:39:95:17: 6e:c1:b0:bb:be:3b:89:24:1d:94:63:2a:5f:3f:93:c3:27:cb: 97:82:54:07:85:41:74:1e:85:0c:50:f7:37:25:33:7d:20:e6: c3:a3:e8:e4:e0:3f:ec:d3:99:c0:c7:2f:a2:2d:b8:5f:85:11: e4:24:53:b3:4a:79:ad:96:3f:90:e0:d3:4b:e6:6b:df:c9:3c: 14:5b:f8:26:1d:36:97:00:cb:e3:15:f5:d5:c8:94:64:08:58: e6:d3:65:d7:d0:25:27:cc:f2:d8:f3:42:08:31:5a:21:f9:d3: 0b:be:5d:d8 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt9XDppx74qb/zWCBUbPTqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMWQxNTE5NDI3OGEyOWFhZDU3Y2EzNzVmOTk1ODhiOTc2 ZWY4MjkwHhcNMjYwMTAyMDYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNThkYzljN2VhNDc5ZTc5NWEwMjA5MWRmMzU1NTJkZTlhNGYzNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NQ1ZvBbu1bZNQHs8dQDR6s/zCRt J9sn6y33WB7F/ljmZ5rST3NrTocxJoRnz28OiL94Hcdft516jwiOLTO4wQXWDxIN fAlbCugzPdV1U/sbMPltG3rRc3yDNUhC2NlIyZJiOyMIGbowELA4Z+kGzi8jYHs2 kilA+zDn2nNKSwo2rDglMj65r3J1GTx93Bxyx3FNgHPkTjbSJHtfkARoMK6JAE9t 9EqQ3LcL9liYiUkgUIIpe1+3F50rMhJ8cTyUD7/RbvxFi6ODVDfY6EDxhjHa5NGt 4LLiAyXxtuVyvlkZzVdPRIWNyyenlCfMeqkt//ABFb0n1Cil/KXGc60htwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFNWNycfqR555WgIJHfNVUt6aTzYPMB8GA1UdIwQY MBaAFMsdFRlCeKKarVfKN1+ZWIuXbvgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYjIzNjEtOGQzNC00ZmY0LWIzZDEt MWZiMzg0MzVhZjc3LzEvMVkzSngtcEhubmxhQWdrZDgxVlMzcHBQTmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lYjIzNjEtOGQzNC00ZmY0LWIzZDEtMWZiMzg0MzVhZjc3 LzEveXgwVkdVSjRvcHF0VjhvM1g1bFlpNWR1LUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAwETRAwQA wFJ/AwQAwFaKAwQAwFgRMAwDBAHAWPoDBADAWP4DBADAXI4DBADAh7swDQYJKoZI hvcNAQELBQADggEBAGOOSvooiZHUK/+SGC7SFfgcsZofFatdHcnFcE1Dtp95FS2r JlR9TwuHvmHAgIxGt10X8wGGDBJGvOHWiJBdUA+2T7dV9bdd1DkChjfFEavSGrBC 8NFL0CVzXWp0uNn4IQ3qOaHrJ49PB0pLcTyUBTJ7RNpNI0AfVQzugR5N9GVVNzL4 E7gPWYj7wsNhejmVF27BsLu+O4kkHZRjKl8/k8Mny5eCVAeFQXQehQxQ9zclM30g 5sOj6OTgP+zTmcDHL6ItuF+FEeQkU7NKea2WP5Dg00vma9/JPBRb+CYdNpcAy+MV 9dXIlGQIWObTZdfQJSfM8tjzQggxWiH50wu+Xdg= -----END CERTIFICATE-----Generated at Mon Jan 26 22:33:00 2026 by rpki-client