This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/lyz6iuf4JGtbAu9BeJxnOZjF2ms.roa File: lyz6iuf4JGtbAu9BeJxnOZjF2ms.roa (raw, json) Hash identifier: TgwyZxbFQ9ut+q2aRYKSU6Q7/lQuAo4M6Hkg8edvJeg= Subject key identifier: 97:2C:FA:8A:E7:F8:24:6B:5B:02:EF:41:78:9C:67:39:98:C5:DA:6B Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA55B28D905944887EC63D11E304B42 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/lyz6iuf4JGtbAu9BeJxnOZjF2ms.roa Signing time: Thu 01 Jan 2026 22:19:52 +0000 ROA not before: Thu 01 Jan 2026 22:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203268 IP address blocks: 136.144.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:5b:28:d9:05:94:48:87:ec:63:d1:1e:30:4b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=972cfa8ae7f8246b5b02ef41789c673998c5da6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:fe:af:79:dd:e4:a7:c5:b0:c5:97:c4:00: ba:d4:0a:a0:31:31:13:4c:70:4c:0b:50:11:70:b1: ac:88:7a:b5:a6:56:78:24:b4:92:88:fc:4a:26:31: 43:51:30:1b:10:25:d4:8e:f2:eb:29:45:43:04:37: 11:4b:17:72:54:38:c1:92:29:a1:df:be:7b:59:1b: a8:4b:19:b9:b3:d1:3f:71:75:23:8e:70:4e:6a:ed: 4e:8c:94:e8:e9:23:14:56:16:1d:61:07:74:a6:12: ab:7e:9d:a1:58:6e:5d:41:90:d6:b5:01:db:c3:de: f5:2f:bb:f6:3f:ab:94:79:b1:9e:50:cd:4e:1b:fb: af:5c:3d:ac:9a:a0:75:22:6e:48:89:da:43:20:8b: a7:ea:22:b2:a7:68:4a:04:9c:e8:46:49:94:9e:d6: 46:f9:80:14:28:4b:49:04:e2:2c:f5:3b:8c:df:f7: c3:f8:ed:59:38:41:c8:b8:07:7c:04:ce:21:6f:8c: df:70:c0:2a:7f:73:6b:99:04:0b:51:b4:4e:d3:dd: 14:6e:c2:75:87:82:c3:5c:f1:88:e2:78:fc:76:d6: dc:f7:9d:66:5e:f2:13:a9:02:16:4d:2d:e6:07:8e: 9e:a3:ef:c7:ab:6c:ca:92:82:76:9c:59:b2:ed:ec: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2C:FA:8A:E7:F8:24:6B:5B:02:EF:41:78:9C:67:39:98:C5:DA:6B X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/lyz6iuf4JGtbAu9BeJxnOZjF2ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.144.44.0/22 Signature Algorithm: sha256WithRSAEncryption bf:4d:1e:34:6a:08:9e:71:3a:13:b7:2c:89:08:9e:39:f2:0f: d9:8b:49:be:6c:ed:54:c2:fd:17:70:51:ef:ad:e1:c6:72:70: a6:88:78:71:af:c4:6d:c0:eb:87:f3:92:d1:0b:21:8b:ed:cb: 5e:ad:38:ab:02:77:83:b6:ac:b6:5b:35:e9:e7:f5:67:22:b6: 53:f8:07:7a:2c:9b:d8:f8:55:24:a6:bd:56:2d:06:13:ae:9a: 19:07:f9:7a:2d:3a:a4:f5:68:70:03:5d:1d:4a:2d:cc:44:b6: 87:da:ff:68:f4:f4:c5:14:98:ad:2a:6f:be:e9:a4:ec:23:b4: 08:81:7b:6f:8e:5a:a2:51:87:bb:69:4e:f8:f8:9e:cf:2c:5e: 39:e6:85:48:50:fb:8f:7b:c9:1b:7d:b3:e9:a1:dd:22:1e:11: e7:57:07:e0:99:85:6c:40:8d:df:a2:29:86:22:34:f7:d5:b9: f3:66:1a:35:66:29:fd:7e:d1:eb:2a:5e:02:3f:7d:c4:43:83: d0:e9:6a:98:1e:ae:06:cb:68:d0:a1:d7:af:23:52:4f:33:e7: 72:ea:85:a7:76:df:6f:bc:ba:62:36:5b:c1:53:f1:68:38:b9: 7e:ac:2b:ec:ec:88:94:9c:5f:04:06:e3:78:48:eb:68:ce:b1: b4:ba:0c:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pVso2QWUSIfsY9EeMEtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzJjZmE4YWU3ZjgyNDZiNWIwMmVmNDE3ODljNjczOTk4YzVkYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04/+r3nd5KfFsMWXxAC61AqgMTET THBMC1ARcLGsiHq1plZ4JLSSiPxKJjFDUTAbECXUjvLrKUVDBDcRSxdyVDjBkimh 3757WRuoSxm5s9E/cXUjjnBOau1OjJTo6SMUVhYdYQd0phKrfp2hWG5dQZDWtQHb w971L7v2P6uUebGeUM1OG/uvXD2smqB1Im5IidpDIIun6iKyp2hKBJzoRkmUntZG +YAUKEtJBOIs9TuM3/fD+O1ZOEHIuAd8BM4hb4zfcMAqf3NrmQQLUbRO090UbsJ1 h4LDXPGI4nj8dtbc951mXvITqQIWTS3mB46eo+/Hq2zKkoJ2nFmy7ez/8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJcs+orn+CRrWwLvQXicZzmYxdprMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvbHl6Nml1ZjRKR3RiQXU5QmVKeG5PWmpGMm1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiJAsMA0G CSqGSIb3DQEBCwUAA4IBAQC/TR40agiecToTtyyJCJ458g/Zi0m+bO1Uwv0XcFHv reHGcnCmiHhxr8RtwOuH85LRCyGL7cterTirAneDtqy2WzXp5/VnIrZT+Ad6LJvY +FUkpr1WLQYTrpoZB/l6LTqk9WhwA10dSi3MRLaH2v9o9PTFFJitKm++6aTsI7QI gXtvjlqiUYe7aU74+J7PLF455oVIUPuPe8kbfbPpod0iHhHnVwfgmYVsQI3foimG IjT31bnzZho1Zin9ftHrKl4CP33EQ4PQ6WqYHq4Gy2jQodevI1JPM+dy6oWndt9v vLpiNlvBU/FoOLl+rCvs7IiUnF8EBuN4SOtozrG0ugxG -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:07 2026 by rpki-client