This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/1_3QPj2kcZJlDlUR0wUaWH0hnN4.roa File: 1_3QPj2kcZJlDlUR0wUaWH0hnN4.roa (raw, json) Hash identifier: HjpmYaddiFadOHWD4a1Uq/l0fBMZhg54vPDiEU9FmAo= Subject key identifier: D7:FD:D0:3E:3D:A4:71:92:65:0E:55:11:D3:05:1A:58:7D:21:9C:DE Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Certificate serial: 019B7C1252D81B9899E0A9CFDCB8F6CE2F29 Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/1_3QPj2kcZJlDlUR0wUaWH0hnN4.roa Signing time: Fri 02 Jan 2026 00:18:54 +0000 ROA not before: Fri 02 Jan 2026 00:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49915 IP address blocks: 62.69.150.0/24 maxlen: 24 91.216.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:52:d8:1b:98:99:e0:a9:cf:dc:b8:f6:ce:2f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7fdd03e3da47192650e5511d3051a587d219cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:fc:5c:65:ac:be:99:32:5d:0b:f7:2d:08: 24:4a:ef:8b:05:6d:da:2e:83:af:0a:65:39:8a:bc: f0:c0:87:91:a3:65:b9:c6:15:6b:f3:c9:ca:f0:49: 67:b2:6e:0d:ae:52:e8:bf:bf:a1:97:5c:0e:e6:91: 7a:00:49:cd:c3:5d:69:ec:ed:c5:06:f6:fd:d6:a5: a9:b9:dc:be:c6:09:cd:55:4b:aa:80:c2:d3:db:c1: ba:53:fa:99:5e:75:a4:2f:8c:67:69:cd:9e:2a:32: cf:74:bf:3e:29:03:9e:87:0f:c1:2a:d6:9c:c5:ec: a6:8b:ab:d8:50:24:67:5f:f5:70:17:c9:e6:8f:93: 08:7d:9e:46:1b:ee:fd:8f:6e:90:56:15:12:8a:6a: 9d:29:7b:0a:ce:9a:e1:5e:f7:a5:80:cf:8e:da:e6: 05:cf:d2:ce:62:65:90:23:a6:0d:3a:6a:b1:8f:b1: 7e:f4:b8:44:d8:35:45:89:95:98:a7:5a:ea:b8:bb: be:21:8e:30:99:2e:ec:5f:8b:3f:1b:c8:c7:4c:eb: 88:df:b6:d7:30:77:3f:41:18:eb:31:23:ab:56:5f: 7a:e9:17:bb:98:af:25:c5:d9:bf:0a:d4:1d:8f:4e: d8:35:41:85:08:d2:ed:69:e6:20:df:d2:74:11:7d: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FD:D0:3E:3D:A4:71:92:65:0E:55:11:D3:05:1A:58:7D:21:9C:DE X509v3 Authority Key Identifier: keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/1_3QPj2kcZJlDlUR0wUaWH0hnN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.69.150.0/24 91.216.158.0/24 Signature Algorithm: sha256WithRSAEncryption a2:a3:92:c8:b3:c0:18:9d:82:ba:8a:9a:eb:22:ee:a7:56:39: 6b:fa:d9:3e:95:52:7f:10:5d:03:65:b2:49:01:18:2c:78:f4: 02:b2:88:d0:10:86:7b:73:8f:8f:48:dc:5c:ae:9d:9e:38:80: a9:ae:6f:73:9d:d9:bc:05:80:9e:f4:4f:51:56:7c:31:2a:ce: a1:56:61:d5:98:82:4b:9e:f3:ed:37:01:ec:38:d7:62:68:a3: 87:37:df:1f:92:6f:11:0c:d7:f7:4d:43:a9:59:02:97:d0:11: b8:b4:23:7b:66:c6:a0:44:34:03:10:7d:60:6b:2d:4b:94:42: 86:96:a8:95:d3:8f:40:17:3f:93:78:15:01:cf:1c:47:1c:ab: 6d:70:d4:db:f1:cc:80:d3:86:a8:96:3d:f7:a5:51:b8:be:2b: 61:9a:94:c6:57:35:b9:e4:77:92:48:9d:5b:c0:66:d6:2c:8d: 04:fb:a9:b8:48:23:3b:69:8b:8c:ab:39:98:0a:23:32:25:da: cc:93:81:40:6d:3e:28:68:64:b1:15:c1:9a:de:2a:d9:85:2c: c5:16:ba:c6:cb:85:2d:02:4b:ff:74:05:b1:d6:30:84:b9:6e: b3:3f:52:56:ff:73:2b:ce:07:f6:66:a9:fe:ed:06:6f:7f:7c: 4c:18:1a:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ElLYG5iZ4KnP3Lj2zi8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjE1MjFhNzEyNzE1N2Y3ZGFmMGFkMDkxMzk0YWQ1YTFj Y2U3NzkwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2ZkZDAzZTNkYTQ3MTkyNjUwZTU1MTFkMzA1MWE1ODdkMjE5Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xf8XGWsvpkyXQv3LQgkSu+LBW3a LoOvCmU5irzwwIeRo2W5xhVr88nK8Elnsm4NrlLov7+hl1wO5pF6AEnNw11p7O3F Bvb91qWpudy+xgnNVUuqgMLT28G6U/qZXnWkL4xnac2eKjLPdL8+KQOehw/BKtac xeymi6vYUCRnX/VwF8nmj5MIfZ5GG+79j26QVhUSimqdKXsKzprhXvelgM+O2uYF z9LOYmWQI6YNOmqxj7F+9LhE2DVFiZWYp1rquLu+IY4wmS7sX4s/G8jHTOuI37bX MHc/QRjrMSOrVl966Re7mK8lxdm/CtQdj07YNUGFCNLtaeYg39J0EX1DjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNf90D49pHGSZQ5VEdMFGlh9IZzeMB8GA1UdIwQY MBaAFA8hUhpxJxV/fa8K0JE5StWhzOd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQt ZmFkNWZkNzk3MGJhLzEvMV8zUVBqMmtjWkpsRGxVUjB3VWFXSDBobk40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQtZmFkNWZkNzk3MGJh LzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkWWAwQA W9ieMA0GCSqGSIb3DQEBCwUAA4IBAQCio5LIs8AYnYK6iprrIu6nVjlr+tk+lVJ/ EF0DZbJJARgsePQCsojQEIZ7c4+PSNxcrp2eOICprm9zndm8BYCe9E9RVnwxKs6h VmHVmIJLnvPtNwHsONdiaKOHN98fkm8RDNf3TUOpWQKX0BG4tCN7ZsagRDQDEH1g ay1LlEKGlqiV049AFz+TeBUBzxxHHKttcNTb8cyA04aolj33pVG4vithmpTGVzW5 5HeSSJ1bwGbWLI0E+6m4SCM7aYuMqzmYCiMyJdrMk4FAbT4oaGSxFcGa3irZhSzF FrrGy4UtAkv/dAWx1jCEuW6zP1JW/3Mrzgf2Zqn+7QZvf3xMGBp1 -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:11 2026 by rpki-client