This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/1-Txs3OfJBF0-L5N04u9viiEkExs.roa File: 1-Txs3OfJBF0-L5N04u9viiEkExs.roa (raw, json) Hash identifier: yCRGF/dCmsVFPH4M1prjAs/Ch8adr1cnpUiJaDaeRHw= Subject key identifier: F9:3C:6C:DC:E7:C9:04:5D:3E:2F:93:74:E2:EF:6F:8A:21:24:13:1B Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Certificate serial: 019B7B36BC74D81AA63DAC1742E3698612EC Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/1-Txs3OfJBF0-L5N04u9viiEkExs.roa Signing time: Thu 01 Jan 2026 20:19:03 +0000 ROA not before: Thu 01 Jan 2026 20:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 5.183.173.0/24 maxlen: 24 5.183.174.0/23 maxlen: 23 45.155.244.0/22 maxlen: 24 77.244.240.0/20 maxlen: 24 83.137.112.0/21 maxlen: 24 84.242.8.0/21 maxlen: 24 92.42.136.0/21 maxlen: 24 146.255.56.0/21 maxlen: 24 192.166.241.0/24 maxlen: 24 192.166.242.0/23 maxlen: 23 212.232.24.0/21 maxlen: 24 217.74.8.0/21 maxlen: 24 2a02:1b8::/29 maxlen: 48 2a02:1b9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bc:74:d8:1a:a6:3d:ac:17:42:e3:69:86:12:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f93c6cdce7c9045d3e2f9374e2ef6f8a2124131b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:81:51:95:92:b9:64:67:3c:c1:87:c0:b8: 99:2d:6a:ed:28:21:70:d3:fd:4c:95:f9:2a:d3:df: 5a:24:aa:67:bf:a5:d1:21:f4:f3:c4:e6:9b:b5:85: 7d:95:02:83:d8:5b:79:95:6c:d0:21:91:3c:45:c6: a7:d6:30:5e:5c:3a:65:a2:c1:a8:84:6c:24:7d:b9: e0:f4:24:b6:fb:b2:58:ff:50:bf:cb:93:41:18:15: 7a:e0:f1:23:66:5c:b0:43:da:e6:08:f3:47:ef:aa: 6a:8e:26:04:b3:91:f2:ea:06:6d:36:e0:d5:e8:ad: 1d:ca:6d:6b:5c:17:79:5f:b9:23:00:11:45:a0:92: ba:65:bd:22:99:c4:45:00:c0:29:07:a9:b8:74:d7: 31:6b:57:83:7c:ed:c2:c0:45:c1:c7:d3:90:65:c7: 11:8e:28:b4:69:57:8a:d1:3d:d7:6c:2b:94:42:31: 98:40:8d:bd:a7:48:f7:bd:7a:7c:02:e1:6f:73:eb: 90:ee:ba:f2:1e:5f:3f:04:32:eb:d6:40:f6:0b:36: af:61:70:5c:39:68:56:48:ad:48:f6:6b:53:82:e2: 3e:d8:c7:c5:75:3d:54:d8:32:88:b2:59:d2:9d:ca: f2:d0:2c:17:ff:e1:fd:93:7e:a0:01:90:40:d2:a2: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3C:6C:DC:E7:C9:04:5D:3E:2F:93:74:E2:EF:6F:8A:21:24:13:1B X509v3 Authority Key Identifier: keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/1-Txs3OfJBF0-L5N04u9viiEkExs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.173.0-5.183.175.255 45.155.244.0/22 77.244.240.0/20 83.137.112.0/21 84.242.8.0/21 92.42.136.0/21 146.255.56.0/21 192.166.241.0-192.166.243.255 212.232.24.0/21 217.74.8.0/21 IPv6: 2a02:1b8::/29 Signature Algorithm: sha256WithRSAEncryption 9c:6f:34:01:d5:46:63:c6:a8:cb:a2:a3:ab:da:11:8e:12:00: 12:39:2b:9e:a5:35:74:c5:15:13:44:98:2c:ee:17:10:8b:9f: eb:60:ac:b3:e6:81:c7:90:e3:c2:d8:53:d2:75:86:89:ea:37: 5a:df:4f:27:50:4e:86:c9:b5:49:cd:87:6c:af:0d:24:95:b4: d2:4c:5b:d1:13:ef:51:a8:f9:44:aa:52:6d:43:fa:88:36:e9: 20:63:1f:54:4c:cc:3d:b9:a8:62:15:20:74:38:bc:d7:09:09: 2c:7e:ba:22:b1:20:37:3b:99:83:13:30:5f:18:f2:95:d4:07: 2b:3b:7b:ca:0a:7d:78:d6:2b:55:4c:7a:d3:e9:49:48:7a:b3: b1:f3:55:a0:49:f3:d4:3f:34:f5:79:2f:cd:8a:17:b5:03:dc: 60:70:ec:f4:c7:09:b3:da:bc:58:4b:78:c6:dd:2c:f0:1c:4a: 25:aa:ca:f2:7c:9b:d1:8a:4b:03:7a:e4:32:8f:6e:f4:78:10: 97:b3:9e:dc:2c:e0:51:21:05:bc:b6:14:c2:33:ff:c7:e2:03: 28:29:05:80:e0:45:6f:e3:b2:8e:c1:a7:04:1d:6b:7f:59:ef: fd:93:fe:a4:6f:1a:a7:80:e9:67:9c:d4:f9:a4:84:d3:7e:4d: 08:04:fa:64 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt7Nrx02BqmPawXQuNphhLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2ExZTg0NjViZmM0ZGY3MDA4OTQzNzJkMGI5ODA4ZThi NjI5ZWEwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTNjNmNkY2U3YzkwNDVkM2UyZjkzNzRlMmVmNmY4YTIxMjQxMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7+BUZWSuWRnPMGHwLiZLWrtKCFw 0/1Mlfkq099aJKpnv6XRIfTzxOabtYV9lQKD2Ft5lWzQIZE8Rcan1jBeXDplosGo hGwkfbng9CS2+7JY/1C/y5NBGBV64PEjZlywQ9rmCPNH76pqjiYEs5Hy6gZtNuDV 6K0dym1rXBd5X7kjABFFoJK6Zb0imcRFAMApB6m4dNcxa1eDfO3CwEXBx9OQZccR jii0aVeK0T3XbCuUQjGYQI29p0j3vXp8AuFvc+uQ7rryHl8/BDLr1kD2CzavYXBc OWhWSK1I9mtTguI+2MfFdT1U2DKIslnSncry0CwX/+H9k36gAZBA0qIq/wIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFPk8bNznyQRdPi+TdOLvb4ohJBMbMB8GA1UdIwQY MBaAFP06HoRlv8TfcAiUNy0LmAjotinqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYt OTU1NWQzMGY2ZjhmLzEvMS1UeHMzT2ZKQkYwLUw1TjA0dTl2aWlFa0V4cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDEvNTEzNzM0LWE0ODUtNGMyOC04YWE2LTk1NTVkMzBmNmY4 Zi8xL19Ub2VoR1dfeE45d0NKUTNMUXVZQ09pMktlby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjB0BggrBgEFBQcBBwEB/wRlMGMwUgQCAAEwTDAMAwQABbet AwQEBbegAwQCLZv0AwQETfTwAwQDU4lwAwQDVPIIAwQDXCqIAwQDkv84MAwDBADA pvEDBALApvADBAPU6BgDBAPZSggwDQQCAAIwBwMFAyoCAbgwDQYJKoZIhvcNAQEL BQADggEBAJxvNAHVRmPGqMuio6vaEY4SABI5K56lNXTFFRNEmCzuFxCLn+tgrLPm gceQ48LYU9J1honqN1rfTydQTobJtUnNh2yvDSSVtNJMW9ET71Go+USqUm1D+og2 6SBjH1RMzD25qGIVIHQ4vNcJCSx+uiKxIDc7mYMTMF8Y8pXUBys7e8oKfXjWK1VM etPpSUh6s7HzVaBJ89Q/NPV5L82KF7UD3GBw7PTHCbPavFhLeMbdLPAcSiWqyvJ8 m9GKSwN65DKPbvR4EJezntws4FEhBby2FMIz/8fiAygpBYDgRW/jso7BpwQda39Z 7/2T/qRvGqeA6Wec1PmkhNN+TQgE+mQ= -----END CERTIFICATE-----Generated at Sun Jan 25 13:09:13 2026 by rpki-client