This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/3_x1fMTPoRvLX1TcN9jNkDdkszI.roa File: 3_x1fMTPoRvLX1TcN9jNkDdkszI.roa (raw, json) Hash identifier: qChZ12jGPt+igqR3YYtp2bz0dKJAKMPd592ma9NcCNg= Subject key identifier: DF:FC:75:7C:C4:CF:A1:1B:CB:5F:54:DC:37:D8:CD:90:37:64:B3:32 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B369A4DE90772B54E5D09AA14A60952 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/3_x1fMTPoRvLX1TcN9jNkDdkszI.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41370 IP address blocks: 31.172.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9a:4d:e9:07:72:b5:4e:5d:09:aa:14:a6:09:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dffc757cc4cfa11bcb5f54dc37d8cd903764b332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:3c:97:06:a5:eb:bf:71:87:e9:45:ce:c6: f4:27:80:42:ad:74:56:4e:a1:f1:4e:b1:40:cd:d8: 9c:f6:f5:e4:97:ef:0b:45:d4:a8:0e:d8:d5:a8:d0: 58:ac:6c:d2:bd:e6:e1:8a:25:45:c7:c4:69:ca:5e: 6a:f0:e6:73:ea:b5:01:78:2c:69:73:61:c2:dd:09: ea:bb:bb:a2:0c:20:c0:34:54:f4:32:68:fb:b9:71: 69:94:3b:4f:fe:da:69:04:57:91:74:5e:bc:82:db: d3:cf:d6:c2:a2:71:4f:19:44:58:9a:75:68:1f:d8: 83:6c:14:9c:d1:20:85:eb:66:2e:4e:35:80:93:12: c9:d3:b7:77:36:d8:83:c4:51:f3:bb:0a:9f:98:cb: 42:0e:f7:0a:dd:01:ea:8c:ef:b9:3d:4b:16:9f:bd: 99:96:6b:c9:69:ad:b1:ac:3f:9a:79:19:15:75:bb: 75:d1:04:d5:03:67:40:a6:4d:98:0d:0b:dd:e5:b1: c1:95:bd:a7:42:a8:45:79:c8:bb:9a:55:ba:1f:ea: 9f:b3:14:49:a0:40:bd:01:30:ab:cf:06:38:5d:27: 38:f5:5a:73:99:0b:ef:2e:2e:21:ce:83:e8:9b:ca: df:f6:99:37:2c:22:44:b6:2d:bd:de:06:77:e9:45: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FC:75:7C:C4:CF:A1:1B:CB:5F:54:DC:37:D8:CD:90:37:64:B3:32 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/3_x1fMTPoRvLX1TcN9jNkDdkszI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.161.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:12:a4:7e:d2:7a:09:fa:4e:53:75:18:fc:23:df:ba:80:d0: db:af:f5:c7:22:96:cc:88:7d:c4:5b:4a:cc:8b:26:64:37:d2: d0:f4:22:90:47:de:bd:7c:8b:73:28:fc:18:a0:21:af:db:98: bd:85:09:cb:42:0e:44:cd:1a:6f:5a:f0:f3:bf:5e:f2:fd:4e: b5:dc:a8:ce:ba:c4:85:77:c6:46:4a:09:d7:e8:33:de:a8:55: 1a:96:d3:f6:17:44:9a:c9:9d:d5:70:1e:08:db:a5:63:2b:27: e3:55:1f:b2:fa:0c:8c:1c:39:e6:f2:b6:60:f5:80:2e:35:cc: 32:74:13:34:27:61:3e:ed:d2:74:e3:e0:db:a2:ff:4e:83:c7: 59:e1:9f:f2:db:ba:fd:50:7a:46:5f:21:9f:f2:8b:80:91:20: 0c:95:34:fb:6b:59:20:2f:6f:f5:04:47:7f:79:e3:db:78:61: 96:b6:f0:4b:7a:4a:da:65:d6:64:12:b9:50:94:24:00:e0:00: 16:2e:c9:b5:c1:65:af:3c:c1:ba:ba:5d:02:dc:f7:68:a3:48: 40:e0:0a:2f:a4:25:27:0d:c1:03:cf:bd:72:79:30:97:af:89: e6:54:08:1f:12:38:a2:4d:b5:06:0d:39:20:5f:87:32:cd:83: 61:19:d3:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NppN6QdytU5dCaoUpglSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmZjNzU3Y2M0Y2ZhMTFiY2I1ZjU0ZGMzN2Q4Y2Q5MDM3NjRiMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArac8lwal679xh+lFzsb0J4BCrXRW TqHxTrFAzdic9vXkl+8LRdSoDtjVqNBYrGzSvebhiiVFx8Rpyl5q8OZz6rUBeCxp c2HC3Qnqu7uiDCDANFT0Mmj7uXFplDtP/tppBFeRdF68gtvTz9bConFPGURYmnVo H9iDbBSc0SCF62YuTjWAkxLJ07d3NtiDxFHzuwqfmMtCDvcK3QHqjO+5PUsWn72Z lmvJaa2xrD+aeRkVdbt10QTVA2dApk2YDQvd5bHBlb2nQqhFeci7mlW6H+qfsxRJ oEC9ATCrzwY4XSc49VpzmQvvLi4hzoPom8rf9pk3LCJEti293gZ36UVUEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/8dXzEz6Eby19U3DfYzZA3ZLMyMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvM194MWZNVFBvUnZMWDFUY045ak5rRGRrc3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6yhMA0G CSqGSIb3DQEBCwUAA4IBAQCKEqR+0noJ+k5TdRj8I9+6gNDbr/XHIpbMiH3EW0rM iyZkN9LQ9CKQR969fItzKPwYoCGv25i9hQnLQg5EzRpvWvDzv17y/U613KjOusSF d8ZGSgnX6DPeqFUaltP2F0SayZ3VcB4I26VjKyfjVR+y+gyMHDnm8rZg9YAuNcwy dBM0J2E+7dJ04+Dbov9Og8dZ4Z/y27r9UHpGXyGf8ouAkSAMlTT7a1kgL2/1BEd/ eePbeGGWtvBLekraZdZkErlQlCQA4AAWLsm1wWWvPMG6ul0C3Pdoo0hA4AovpCUn DcEDz71yeTCXr4nmVAgfEjiiTbUGDTkgX4cyzYNhGdMH -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:00 2026 by rpki-client