This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/3YlnqXzXRItsSLDrHhdeboBlrZ8.roa File: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (raw, json) Hash identifier: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug= Subject key identifier: DD:89:67:A9:7C:D7:44:8B:6C:48:B0:EB:1E:17:5E:6E:80:65:AD:9F Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4 Certificate serial: 019B7A5B9ADB23C5D02C9B289BA126E336B1 Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/3YlnqXzXRItsSLDrHhdeboBlrZ8.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12906 IP address blocks: 188.65.0.0/21 maxlen: 24 2a00:eea0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9a:db:23:c5:d0:2c:9b:28:9b:a1:26:e3:36:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08759158de234b754b7150f21933096c1094aac4 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd8967a97cd7448b6c48b0eb1e175e6e8065ad9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:31:22:7f:b9:b9:98:bf:89:5d:16:6f:7d: 5a:17:01:0b:19:50:36:80:74:37:10:f0:eb:f5:f0: 9e:9b:05:68:6c:50:f6:56:90:4a:d0:c3:1f:a4:f5: 4c:37:32:67:c6:76:2a:c1:23:ee:b9:95:6e:73:2b: 6a:50:49:1a:89:5b:c8:f6:c3:12:ab:92:3b:9e:d2: ee:32:91:7c:92:e5:f0:17:03:e6:d8:82:c3:87:df: 94:d5:f8:82:07:26:33:e8:e1:bb:7b:8c:84:2f:97: e4:f6:00:1b:bc:0a:99:2c:51:7f:e3:4e:62:c4:14: 6c:26:4c:cf:b9:1e:1b:0f:a2:85:2c:44:37:a2:a4: 3f:b5:10:63:d6:16:2d:da:20:6e:8c:73:b1:91:e8: f3:09:bb:6f:db:ac:73:7b:09:a7:fa:b5:fc:05:be: eb:22:c2:d2:97:7f:0d:a1:b4:fe:5a:c9:fa:ff:b1: 23:9d:31:f1:97:ea:5e:e8:24:4d:df:3f:64:4a:83: bf:bd:8b:80:aa:a0:2b:77:4b:4d:6b:81:32:78:44: 43:04:5b:b1:0b:d1:4f:34:b2:34:8c:4b:1e:2e:78: 9a:6d:ae:74:0a:56:46:b8:5a:22:bb:16:11:bd:24: 36:f8:02:bc:84:ab:66:06:1a:80:55:70:ca:a5:e4: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:89:67:A9:7C:D7:44:8B:6C:48:B0:EB:1E:17:5E:6E:80:65:AD:9F X509v3 Authority Key Identifier: keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/3YlnqXzXRItsSLDrHhdeboBlrZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.65.0.0/21 IPv6: 2a00:eea0::/29 Signature Algorithm: sha256WithRSAEncryption 4f:b0:91:67:d3:47:f1:68:98:5c:59:e7:d3:50:1d:1f:a0:b6: a4:8f:4b:79:9a:d2:84:85:b2:66:6e:b0:0d:dc:b4:f5:8f:ff: ce:01:2b:98:bd:94:6c:bd:65:6d:5f:52:c3:66:98:9e:e3:17: 52:d3:cc:ff:3c:fe:01:26:83:0e:75:b8:0a:c7:bb:5f:34:1d: 30:2d:26:1d:ac:63:3b:56:75:82:88:04:38:38:a1:92:10:0e: 23:7f:f9:bb:30:0b:cc:80:b2:f2:49:fe:fd:fb:83:93:3e:fe: ff:4f:7a:5e:32:bf:9b:41:12:58:3c:ba:c7:dc:e9:42:06:b5: d1:10:c8:36:d9:ab:12:f9:39:3f:19:87:cc:74:b7:cd:ee:cb: 04:37:14:d6:d6:21:cd:02:12:9b:35:16:6e:29:1d:8a:87:e7: 6f:cf:3b:d6:d2:fc:e9:f0:c8:5b:c9:8b:c2:88:22:9d:2f:b3: 38:04:a9:7c:4d:33:06:e9:aa:9f:8f:6c:39:3a:58:db:c3:f0: 78:2a:9e:2c:c1:dd:00:12:5a:ae:51:9a:9f:9e:d1:f7:c6:08: 47:32:46:8f:0f:1f:c6:48:b2:e8:21:7b:35:ff:cd:ed:f6:74: 1e:e9:a6:06:e4:49:40:6e:1b:2a:c2:6f:51:01:d2:7a:80:03: 7b:df:c6:2b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W5rbI8XQLJsom6Em4zaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NzU5MTU4ZGUyMzRiNzU0YjcxNTBmMjE5MzMwOTZjMTA5 NGFhYzQwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDg5NjdhOTdjZDc0NDhiNmM0OGIwZWIxZTE3NWU2ZTgwNjVhZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AcxIn+5uZi/iV0Wb31aFwELGVA2 gHQ3EPDr9fCemwVobFD2VpBK0MMfpPVMNzJnxnYqwSPuuZVucytqUEkaiVvI9sMS q5I7ntLuMpF8kuXwFwPm2ILDh9+U1fiCByYz6OG7e4yEL5fk9gAbvAqZLFF/405i xBRsJkzPuR4bD6KFLEQ3oqQ/tRBj1hYt2iBujHOxkejzCbtv26xzewmn+rX8Bb7r IsLSl38NobT+Wsn6/7EjnTHxl+pe6CRN3z9kSoO/vYuAqqArd0tNa4EyeERDBFux C9FPNLI0jEseLniaba50ClZGuFoiuxYRvSQ2+AK8hKtmBhqAVXDKpeRwDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN2JZ6l810SLbEiw6x4XXm6AZa2fMB8GA1UdIwQY MBaAFAh1kVjeI0t1S3FQ8hkzCWwQlKrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQt Y2Q5ZWNjZjkzYjMxLzEvM1lsbnFYelhSSXRzU0xEckhoZGVib0Jsclo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82YTcwMzItZTgwZS00YmE3LWI3MjQtY2Q5ZWNjZjkzYjMx LzEvQ0hXUldONGpTM1ZMY1ZEeUdUTUpiQkNVcXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDvEEAMA0E AgACMAcDBQMqAO6gMA0GCSqGSIb3DQEBCwUAA4IBAQBPsJFn00fxaJhcWefTUB0f oLakj0t5mtKEhbJmbrAN3LT1j//OASuYvZRsvWVtX1LDZpie4xdS08z/PP4BJoMO dbgKx7tfNB0wLSYdrGM7VnWCiAQ4OKGSEA4jf/m7MAvMgLLySf79+4OTPv7/T3pe Mr+bQRJYPLrH3OlCBrXREMg22asS+Tk/GYfMdLfN7ssENxTW1iHNAhKbNRZuKR2K h+dvzzvW0vzp8MhbyYvCiCKdL7M4BKl8TTMG6aqfj2w5Oljbw/B4Kp4swd0AElqu UZqfntH3xghHMkaPDx/GSLLoIXs1/83t9nQe6aYG5ElAbhsqwm9RAdJ6gAN738Yr -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:28 2026 by rpki-client