This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/p1wmIAs2m6VXlrjI9FHbi34CCuM.roa File: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (raw, json) Hash identifier: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us= Subject key identifier: A7:5C:26:20:0B:36:9B:A5:57:96:B8:C8:F4:51:DB:8B:7E:02:0A:E3 Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a Certificate serial: 019B791019CA34920D74D07FCE73A7325541 Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/p1wmIAs2m6VXlrjI9FHbi34CCuM.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 128.127.169.0/24 maxlen: 24 128.127.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:19:ca:34:92:0d:74:d0:7f:ce:73:a7:32:55:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a75c26200b369ba55796b8c8f451db8b7e020ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9e:77:46:9e:32:d7:e7:c8:55:4f:91:a8:a8: 49:55:36:37:75:6c:e5:f9:98:d9:77:ca:5f:76:43: e5:73:b1:20:db:47:3d:e8:15:8c:9a:47:32:fb:07: 1e:78:e8:ad:e7:fd:a8:5b:03:d8:8e:50:41:58:d0: 64:60:01:70:34:5f:ab:ee:54:97:0d:0b:d2:94:95: a2:f2:62:14:93:d3:0c:51:60:0d:d3:d0:85:c2:b9: c3:f8:18:60:73:59:2b:08:81:43:e5:12:ee:d3:44: ae:c0:4d:c4:56:44:1b:ed:fd:b8:79:1c:24:01:47: 77:e6:56:b5:66:87:7d:0e:51:67:ae:b9:d7:28:d8: b6:28:4a:96:fe:93:4b:e2:5b:53:9d:3d:af:5a:03: e8:91:5d:51:17:ae:dc:d1:b5:6a:75:1a:ed:cf:dd: 65:8a:43:77:f6:9b:d7:f6:24:ed:6c:ad:a9:0a:ba: 63:c6:b6:d4:92:9d:04:7a:56:2e:b3:ae:3c:68:e1: 5f:55:75:29:81:b7:c8:74:01:cc:8b:93:da:a2:f4: 1d:63:a3:b7:04:97:16:f6:15:fb:10:f1:fd:b3:0a: 47:52:83:6f:5b:48:29:ef:b3:3c:a9:f3:cb:66:5d: 74:73:4b:4e:a4:5a:66:eb:af:a6:d3:87:65:6a:00: 04:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5C:26:20:0B:36:9B:A5:57:96:B8:C8:F4:51:DB:8B:7E:02:0A:E3 X509v3 Authority Key Identifier: keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/p1wmIAs2m6VXlrjI9FHbi34CCuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.127.169.0-128.127.170.255 Signature Algorithm: sha256WithRSAEncryption 58:7f:5f:ad:c9:7f:e8:a4:1d:81:2e:8c:a1:62:0f:46:19:7c: 62:a2:92:9e:3b:c0:05:a8:a0:2f:91:0c:1b:43:1d:2f:3f:7d: a5:c2:bd:1f:bd:48:08:1a:d9:31:d3:cb:d8:d2:28:c6:be:9b: f9:17:06:bb:7a:39:63:6f:a5:c0:69:4e:0c:c9:26:e0:44:b6: 6d:fa:14:a2:ed:de:51:7e:bf:bc:0c:f2:a1:7a:f7:52:dd:1a: b7:63:34:79:71:4f:0b:84:fa:39:41:aa:aa:f9:10:67:d0:78: 3c:27:ab:0d:1f:af:f1:ff:29:c0:57:da:0e:35:2d:61:40:45: b5:2d:b0:5d:85:89:3d:9c:d5:10:e9:37:bb:7c:0a:37:db:26: 58:86:17:cf:4c:18:85:ff:b4:ae:c4:30:a6:c0:11:ec:8f:7c: 53:a2:3b:69:db:54:17:cf:ba:8f:d2:2f:f2:4c:e9:ae:6a:37: c3:59:74:74:63:b8:08:a2:63:c4:b0:ec:57:68:95:16:d5:63: ca:74:62:c9:09:5e:f4:43:8e:f4:18:dc:3a:22:46:65:84:d4: 6a:05:e2:e9:1b:8a:ab:59:27:2e:12:f8:57:27:11:30:08:74: e1:d4:a4:8e:96:28:81:bc:4d:00:e7:35:52:a3:1e:c7:18:9b: 9f:ae:41:3e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EBnKNJINdNB/znOnMlVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGIxZTM4YzcwNGJkMDhlM2I5ZDE3ZjU5MDM2N2IxZDFm MDNjNGEwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzVjMjYyMDBiMzY5YmE1NTc5NmI4YzhmNDUxZGI4YjdlMDIwYWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ53Rp4y1+fIVU+RqKhJVTY3dWzl +ZjZd8pfdkPlc7Eg20c96BWMmkcy+wceeOit5/2oWwPYjlBBWNBkYAFwNF+r7lSX DQvSlJWi8mIUk9MMUWAN09CFwrnD+Bhgc1krCIFD5RLu00SuwE3EVkQb7f24eRwk AUd35la1Zod9DlFnrrnXKNi2KEqW/pNL4ltTnT2vWgPokV1RF67c0bVqdRrtz91l ikN39pvX9iTtbK2pCrpjxrbUkp0EelYus648aOFfVXUpgbfIdAHMi5PaovQdY6O3 BJcW9hX7EPH9swpHUoNvW0gp77M8qfPLZl10c0tOpFpm66+m04dlagAEGwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKdcJiALNpulV5a4yPRR24t+AgrjMB8GA1UdIwQY MBaAFAULHjjHBL0I47nRf1kDZ7HR8DxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYt YTAxZTllNmRjYmYyLzEvcDF3bUlBczJtNlZYbHJqSTlGSGJpMzRDQ3VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYtYTAxZTllNmRjYmYy LzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACAf6kD BACAf6owDQYJKoZIhvcNAQELBQADggEBAFh/X63Jf+ikHYEujKFiD0YZfGKikp47 wAWooC+RDBtDHS8/faXCvR+9SAga2THTy9jSKMa+m/kXBrt6OWNvpcBpTgzJJuBE tm36FKLt3lF+v7wM8qF691LdGrdjNHlxTwuE+jlBqqr5EGfQeDwnqw0fr/H/KcBX 2g41LWFARbUtsF2FiT2c1RDpN7t8CjfbJliGF89MGIX/tK7EMKbAEeyPfFOiO2nb VBfPuo/SL/JM6a5qN8NZdHRjuAiiY8Sw7FdolRbVY8p0YskJXvRDjvQY3DoiRmWE 1GoF4ukbiqtZJy4S+FcnETAIdOHUpI6WKIG8TQDnNVKjHscYm5+uQT4= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:34 2026 by rpki-client