This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/f3tAelSfrjtbwXNkrU-p9qfZWxU.roa File: f3tAelSfrjtbwXNkrU-p9qfZWxU.roa (raw, json) Hash identifier: OShTtHN/eSOshwx4hclkGBY5i0hC3YPjort+nwJu9SM= Subject key identifier: 7F:7B:40:7A:54:9F:AE:3B:5B:C1:73:64:AD:4F:A9:F6:A7:D9:5B:15 Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Certificate serial: 019B79ED5EC286F569D4BC05C54BA0032398 Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/f3tAelSfrjtbwXNkrU-p9qfZWxU.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58160 IP address blocks: 185.93.212.0/23 maxlen: 23 2a00:d900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5e:c2:86:f5:69:d4:bc:05:c5:4b:a0:03:23:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f7b407a549fae3b5bc17364ad4fa9f6a7d95b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:68:5a:61:79:f1:c0:55:be:c1:85:06:e7: c6:06:5f:70:69:1f:3e:49:16:55:c7:9f:8a:4d:cd: b5:d4:f3:5c:c9:64:7a:3a:22:c1:29:83:b1:02:47: be:48:25:40:b3:c4:de:53:a1:cf:d4:5d:ee:b0:30: 1c:b9:a9:36:74:0b:30:f5:85:ef:b3:2b:67:70:7c: 1d:e7:02:46:e8:1f:b3:6e:f9:a6:70:a7:73:80:19: de:98:32:8c:ee:53:fc:c9:93:82:99:d8:5d:14:46: 3d:ee:ba:0e:9f:7a:4a:7e:6e:0a:4c:32:f8:d2:c8: 41:21:d9:35:7c:03:bc:10:e0:35:1b:15:1c:8c:22: 64:0d:4c:27:ed:59:7c:66:d4:5c:f1:7d:fd:5a:33: 26:8d:37:3c:c6:02:eb:30:f8:55:c7:d6:46:28:49: 22:76:5c:d4:0b:cd:36:b5:c6:24:00:c1:7a:c1:ae: 4b:4b:82:37:29:65:39:28:c4:9f:cd:59:eb:b2:59: 8c:24:d4:8c:d1:c6:a2:79:9f:de:d1:7a:3f:bd:38: 76:f6:5a:9b:e4:89:fb:77:58:d7:44:b4:54:01:68: 8a:20:04:93:83:84:fd:60:1a:74:b7:26:79:10:c1: 45:4a:22:f3:e5:94:92:c9:72:ed:66:be:e4:1f:14: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7B:40:7A:54:9F:AE:3B:5B:C1:73:64:AD:4F:A9:F6:A7:D9:5B:15 X509v3 Authority Key Identifier: keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/f3tAelSfrjtbwXNkrU-p9qfZWxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.212.0/23 IPv6: 2a00:d900::/32 Signature Algorithm: sha256WithRSAEncryption 3f:06:72:96:93:30:ce:3d:05:f9:9b:b4:0d:1a:ca:3e:17:b9: c5:ea:99:da:d5:17:46:42:89:51:04:ad:eb:9a:2c:46:fc:02: 87:45:62:f3:38:2e:45:94:a1:fe:72:d2:3c:ce:7c:a5:a1:7d: e7:eb:92:98:f8:b1:c4:4a:ec:f6:e3:5b:04:fb:08:1d:53:87: 04:eb:fa:0f:0a:7d:8e:4e:7b:41:fa:a6:18:ea:e8:0f:5e:7d: 12:a2:23:ff:e5:ec:94:09:9f:08:9c:c1:bb:39:c0:56:5d:02: 13:07:a8:3b:fb:9e:ad:59:b8:8b:08:41:0d:b5:9d:08:29:af: e1:cd:63:fd:cb:cf:ac:df:99:12:b8:5b:99:14:33:d3:36:0c: e1:86:b0:c4:3d:1a:d6:15:ed:b3:ad:2f:01:4f:26:7a:3b:1a: 19:91:4a:1f:1a:2d:60:04:40:aa:59:8b:42:c6:e2:84:7f:64: c4:79:19:ba:6a:5c:05:69:9d:e0:e4:ad:3d:7a:fc:b8:6c:36: 82:c4:35:45:bb:6d:f6:bd:41:6e:1e:16:03:bb:4c:76:91:02: 8a:5c:1f:9f:f3:0f:99:27:5a:6c:95:e9:8e:7e:4b:ea:6a:35: d6:99:1f:75:fe:e7:c5:26:c0:72:62:0e:22:69:f6:9a:ef:09: 29:81:98:e0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57V7ChvVp1LwFxUugAyOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj YjhmNDgwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjdiNDA3YTU0OWZhZTNiNWJjMTczNjRhZDRmYTlmNmE3ZDk1YjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nZoWmF58cBVvsGFBufGBl9waR8+ SRZVx5+KTc211PNcyWR6OiLBKYOxAke+SCVAs8TeU6HP1F3usDAcuak2dAsw9YXv sytncHwd5wJG6B+zbvmmcKdzgBnemDKM7lP8yZOCmdhdFEY97roOn3pKfm4KTDL4 0shBIdk1fAO8EOA1GxUcjCJkDUwn7Vl8ZtRc8X39WjMmjTc8xgLrMPhVx9ZGKEki dlzUC802tcYkAMF6wa5LS4I3KWU5KMSfzVnrslmMJNSM0caieZ/e0Xo/vTh29lqb 5In7d1jXRLRUAWiKIASTg4T9YBp0tyZ5EMFFSiLz5ZSSyXLtZr7kHxQ2fQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH97QHpUn647W8FzZK1Pqfan2VsVMB8GA1UdIwQY MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt NzU0NjFhYmJiNWE0LzEvZjN0QWVsU2ZyanRid1hOa3JVLXA5cWZaV3hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0 LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuV3UMA0E AgACMAcDBQAqANkAMA0GCSqGSIb3DQEBCwUAA4IBAQA/BnKWkzDOPQX5m7QNGso+ F7nF6pna1RdGQolRBK3rmixG/AKHRWLzOC5FlKH+ctI8znyloX3n65KY+LHESuz2 41sE+wgdU4cE6/oPCn2OTntB+qYY6ugPXn0SoiP/5eyUCZ8InMG7OcBWXQITB6g7 +56tWbiLCEENtZ0IKa/hzWP9y8+s35kSuFuZFDPTNgzhhrDEPRrWFe2zrS8BTyZ6 OxoZkUofGi1gBECqWYtCxuKEf2TEeRm6alwFaZ3g5K09evy4bDaCxDVFu232vUFu HhYDu0x2kQKKXB+f8w+ZJ1pslemOfkvqajXWmR91/ufFJsByYg4iafaa7wkpgZjg -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:03 2026 by rpki-client