This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/ty6PndNE6v0aicb5nH7jK6LCpOM.roa File: ty6PndNE6v0aicb5nH7jK6LCpOM.roa (raw, json) Hash identifier: XKTIyXg8m6KS1U1qTQli91yAnTA7Vje4/FVAAtdNNEI= Subject key identifier: B7:2E:8F:9D:D3:44:EA:FD:1A:89:C6:F9:9C:7E:E3:2B:A2:C2:A4:E3 Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6 Certificate serial: 019B77C6673A96AA89DB3BF86B33812907B8 Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/ty6PndNE6v0aicb5nH7jK6LCpOM.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212476 IP address blocks: 193.3.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:67:3a:96:aa:89:db:3b:f8:6b:33:81:29:07:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6 Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b72e8f9dd344eafd1a89c6f99c7ee32ba2c2a4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:04:84:76:9e:bf:6e:6a:dc:66:85:b6:c2: e7:74:ca:05:82:57:9e:76:d1:40:ce:8c:5a:f1:9b: e5:33:cd:da:28:02:2f:7f:f9:72:3f:16:17:f3:8f: 45:a6:7a:02:12:da:e0:47:fb:60:e5:29:5b:98:ac: 51:a8:bc:d9:76:eb:a7:ba:5c:10:9a:ec:b9:28:ed: 07:e5:39:72:36:26:76:62:ec:7b:b9:b2:e1:93:0f: d0:08:6a:e5:a8:e0:1e:8e:41:61:b1:29:1e:09:22: 23:44:ac:96:38:9d:e8:7a:80:a2:b9:34:96:26:54: 6d:40:ea:49:d1:c0:86:4e:26:1a:c2:17:82:db:07: ae:b1:65:0d:7d:d3:26:f5:d1:d6:bd:70:2d:aa:a5: 8e:1a:30:11:36:2f:82:e0:0f:7d:e4:d4:8f:a2:8e: 56:e6:8d:76:ae:ce:e8:e0:23:64:a8:b8:c7:4b:7f: 67:fe:27:89:4f:14:2a:07:2e:9d:ba:09:19:9e:3c: 5a:b1:50:24:b8:19:de:21:82:00:24:44:91:5d:92: 74:77:a0:e3:58:41:66:a7:bf:bc:cf:09:e2:5f:41: d3:7f:78:f5:e9:08:5e:48:9d:fa:15:7f:ca:b4:05: 4f:2b:79:00:f8:03:ee:2a:4b:d7:90:f5:0a:62:5b: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2E:8F:9D:D3:44:EA:FD:1A:89:C6:F9:9C:7E:E3:2B:A2:C2:A4:E3 X509v3 Authority Key Identifier: keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/ty6PndNE6v0aicb5nH7jK6LCpOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.31.0/24 Signature Algorithm: sha256WithRSAEncryption 44:2d:6b:39:f9:88:71:cf:81:01:a6:f1:e3:89:40:46:7f:1c: 90:95:e7:0b:d6:d2:01:fe:a4:c6:4d:17:76:eb:73:b9:01:62: e1:54:cb:43:19:cc:07:47:3e:54:b5:f3:08:f4:38:07:d2:00: 2e:b2:a2:5e:59:03:0c:a4:13:c6:7a:20:3e:40:ec:17:bf:b2: 2d:8e:ad:07:e8:48:df:b9:87:2e:4e:c2:17:61:e9:2a:74:3b: 24:3b:ca:1c:1b:f5:e9:6d:1c:31:dd:9f:8a:75:f4:05:af:85: 01:44:f0:f3:a9:a8:5e:e6:aa:1d:bf:7c:ce:76:90:e8:92:56: 95:2c:22:93:76:9c:e9:48:b1:d7:29:e2:3a:40:38:07:79:12: 77:65:4d:4a:67:5f:57:ce:80:db:90:bc:00:e8:27:1b:e2:3d: aa:af:dd:69:70:9f:dd:50:57:39:9c:25:0a:87:48:01:a2:9b: 6c:14:16:90:5d:b7:8c:7a:9d:55:df:30:fc:cd:0b:30:e0:74: fc:65:f9:24:5c:fe:a7:47:41:94:6b:7a:ad:0d:5e:70:59:07: 35:cd:b4:e8:79:42:ed:96:d1:b9:58:10:20:73:d9:88:24:17: 0d:8d:83:c8:d1:2b:44:2f:56:36:d0:2f:26:83:db:74:06:09: 85:68:ae:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmc6lqqJ2zv4azOBKQe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNzA2M2E4NTQ0NTAxOWFiODQ1YTViN2U1NDM5NWNkZDM5 OTI3ZjYwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzJlOGY5ZGQzNDRlYWZkMWE4OWM2Zjk5YzdlZTMyYmEyYzJhNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvEEhHaev25q3GaFtsLndMoFglee dtFAzoxa8ZvlM83aKAIvf/lyPxYX849FpnoCEtrgR/tg5SlbmKxRqLzZduunulwQ muy5KO0H5TlyNiZ2Yux7ubLhkw/QCGrlqOAejkFhsSkeCSIjRKyWOJ3oeoCiuTSW JlRtQOpJ0cCGTiYawheC2weusWUNfdMm9dHWvXAtqqWOGjARNi+C4A995NSPoo5W 5o12rs7o4CNkqLjHS39n/ieJTxQqBy6dugkZnjxasVAkuBneIYIAJESRXZJ0d6Dj WEFmp7+8zwniX0HTf3j16QheSJ36FX/KtAVPK3kA+APuKkvXkPUKYluKSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLcuj53TROr9GonG+Zx+4yuiwqTjMB8GA1UdIwQY MBaAFPNwY6hURQGauEWlt+VDlc3TmSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgt YzM5NDdlNzZiZTc1LzEvdHk2UG5kTkU2djBhaWNiNW5IN2pLNkxDcE9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgtYzM5NDdlNzZiZTc1 LzEvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMfMA0G CSqGSIb3DQEBCwUAA4IBAQBELWs5+Yhxz4EBpvHjiUBGfxyQlecL1tIB/qTGTRd2 63O5AWLhVMtDGcwHRz5UtfMI9DgH0gAusqJeWQMMpBPGeiA+QOwXv7Itjq0H6Ejf uYcuTsIXYekqdDskO8ocG/XpbRwx3Z+KdfQFr4UBRPDzqahe5qodv3zOdpDoklaV LCKTdpzpSLHXKeI6QDgHeRJ3ZU1KZ19XzoDbkLwA6Ccb4j2qr91pcJ/dUFc5nCUK h0gBoptsFBaQXbeMep1V3zD8zQsw4HT8ZfkkXP6nR0GUa3qtDV5wWQc1zbToeULt ltG5WBAgc9mIJBcNjYPI0StEL1Y20C8mg9t0BgmFaK7e -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:30 2026 by rpki-client