This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/1-eiN7B-RFScdE21_gJKHIITSXjg.roa File: 1-eiN7B-RFScdE21_gJKHIITSXjg.roa (raw, json) Hash identifier: 1ehBu7W42prULVp42w/k9Sm9INGVI1W18EKu86GiRBg= Subject key identifier: F9:E8:8D:EC:1F:91:15:27:1D:13:6D:7F:80:92:87:20:84:D2:5E:38 Certificate issuer: /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3 Certificate serial: 019B78349E49E8514572A7E53570F93626FC Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/1-eiN7B-RFScdE21_gJKHIITSXjg.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3330 IP address blocks: 193.43.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9e:49:e8:51:45:72:a7:e5:35:70:f9:36:26:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3 Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e88dec1f9115271d136d7f8092872084d25e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:63:f3:fb:e8:f6:3d:e5:9b:78:1f:a2:5d: fe:28:42:48:c8:b4:51:96:e6:b8:ca:e6:66:8e:07: 64:7c:31:f4:21:f9:03:9e:16:b2:91:c2:e8:53:26: e1:ec:28:e8:d4:de:c6:13:c9:34:ba:67:ef:a9:95: 1e:cd:0b:38:43:d2:c1:af:87:ff:df:53:72:bd:ce: 48:d5:8e:c9:71:da:ee:23:bb:8b:e8:01:ee:21:05: b3:61:a3:9a:37:85:25:de:12:5a:fb:ec:4c:fc:4e: 80:1a:dd:96:33:db:6d:9c:44:38:08:2e:3a:32:de: 1b:dd:3d:e6:dd:6d:88:49:91:be:d0:80:60:c9:50: 09:68:cb:ea:a4:2a:72:54:26:61:2b:74:64:ba:47: be:82:3e:15:d3:63:c9:83:79:6c:dd:6a:8d:0f:2e: 85:93:f6:5a:4b:44:43:cf:83:03:7f:e4:2f:0a:d0: 11:0c:bb:e5:d9:30:5d:3e:dd:35:d1:06:26:9b:90: f3:6a:b8:39:b9:2a:1f:73:87:5d:be:0b:c8:7c:19: f3:76:93:1d:5f:21:f9:ae:ab:f6:4d:31:c0:e7:bf: a2:e3:13:4a:e4:42:4f:5c:4d:11:d8:88:f1:ea:0e: 25:54:47:b2:54:48:a4:1e:cc:1d:c2:eb:48:0a:f6: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E8:8D:EC:1F:91:15:27:1D:13:6D:7F:80:92:87:20:84:D2:5E:38 X509v3 Authority Key Identifier: keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/1-eiN7B-RFScdE21_gJKHIITSXjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.212.0/23 Signature Algorithm: sha256WithRSAEncryption ba:cc:c3:59:1d:f1:c0:63:6f:75:8e:cc:fe:c7:62:af:6f:09: 22:24:a3:78:2d:d0:7b:87:ea:63:d6:02:ff:5f:30:f4:2c:75: a8:97:d7:b8:fc:60:0e:32:d2:e6:bd:31:d3:71:c4:d4:e5:fa: bb:77:d6:b6:dd:ac:6a:25:df:37:95:11:f2:a3:9d:de:95:81: d0:2b:b5:78:1d:e7:7a:bd:5f:30:a1:42:e4:a5:f4:86:01:1a: 6e:01:b3:1b:66:a3:90:a0:54:89:96:55:b6:d2:f6:a3:7c:34: 9b:b1:92:72:0a:fc:cf:9e:d0:0b:6a:ce:04:e3:00:28:cc:e9: d5:a0:38:84:e2:f7:00:5b:81:ac:89:ba:60:e9:96:0f:f3:f3: 65:3c:13:1d:43:b1:34:ad:c4:bb:2b:c6:42:80:c9:c6:c1:cd: 83:01:e3:f7:a2:e9:0d:e8:7e:6f:21:89:23:1f:99:3f:3b:d7: d0:8f:e5:6a:1b:ff:b3:f6:59:b4:09:3d:50:6c:32:33:28:9b: 7d:db:c9:78:52:4e:53:10:c7:47:5e:3a:e1:c7:d5:2d:da:d5: 12:f0:b9:74:3f:68:f5:d3:8d:b0:8e:7e:5a:a1:b2:93:bc:a9: 7b:0b:4a:a3:8e:27:11:58:e6:0f:4b:71:f3:7b:77:15:3d:04: c2:a9:c0:6d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NJ5J6FFFcqflNXD5Nib8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjU5NWYyNjY1OWZjNzRkYjg4MzJkNWRhMjNiMGU5ZTM2 N2ZjYjMwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWU4OGRlYzFmOTExNTI3MWQxMzZkN2Y4MDkyODcyMDg0ZDI1ZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Rj8/vo9j3lm3gfol3+KEJIyLRR lua4yuZmjgdkfDH0IfkDnhaykcLoUybh7Cjo1N7GE8k0umfvqZUezQs4Q9LBr4f/ 31Nyvc5I1Y7JcdruI7uL6AHuIQWzYaOaN4Ul3hJa++xM/E6AGt2WM9ttnEQ4CC46 Mt4b3T3m3W2ISZG+0IBgyVAJaMvqpCpyVCZhK3Rkuke+gj4V02PJg3ls3WqNDy6F k/ZaS0RDz4MDf+QvCtARDLvl2TBdPt010QYmm5Dzarg5uSofc4ddvgvIfBnzdpMd XyH5rqv2TTHA57+i4xNK5EJPXE0R2Ijx6g4lVEeyVEikHswdwutICvb2/wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnojewfkRUnHRNtf4CShyCE0l44MB8GA1UdIwQY MBaAFD8llfJmWfx024gy1dojsOnjZ/yzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yOTNjYmYtY2Q1Yy00ZWU4LWI3MWUt ZjY2NjY5MDlkZDRhLzEvMS1laU43Qi1SRlNjZEUyMV9nSktISUlUU1hqZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDgvMjkzY2JmLWNkNWMtNGVlOC1iNzFlLWY2NjY2OTA5ZGQ0 YS8xL1B5V1Y4bVpaX0hUYmlETFYyaU93NmVObl9MTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcEr1DAN BgkqhkiG9w0BAQsFAAOCAQEAuszDWR3xwGNvdY7M/sdir28JIiSjeC3Qe4fqY9YC /18w9Cx1qJfXuPxgDjLS5r0x03HE1OX6u3fWtt2saiXfN5UR8qOd3pWB0Cu1eB3n er1fMKFC5KX0hgEabgGzG2ajkKBUiZZVttL2o3w0m7GScgr8z57QC2rOBOMAKMzp 1aA4hOL3AFuBrIm6YOmWD/PzZTwTHUOxNK3EuyvGQoDJxsHNgwHj96LpDeh+byGJ Ix+ZPzvX0I/lahv/s/ZZtAk9UGwyMyibfdvJeFJOUxDHR1464cfVLdrVEvC5dD9o 9dONsI5+WqGyk7ypewtKo44nEVjmD0tx83t3FT0EwqnAbQ== -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:27 2026 by rpki-client