This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa File: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (raw, json) Hash identifier: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos= Subject key identifier: D7:2F:AF:C1:95:6B:31:84:90:E4:F1:07:3E:88:B6:42:F7:A1:43:32 Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11 Certificate serial: 019B79ED5B464F666821B329B570B518C278 Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28952 IP address blocks: 31.3.32.0/19 maxlen: 19 37.58.0.0/20 maxlen: 20 37.152.96.0/19 maxlen: 19 46.34.224.0/19 maxlen: 19 151.236.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5b:46:4f:66:68:21:b3:29:b5:70:b5:18:c2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d72fafc1956b318490e4f1073e88b642f7a14332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:fa:ff:dd:6b:09:2c:f3:de:2a:e6:a4:44: 28:3b:31:62:31:b7:49:0c:e6:4d:11:cf:2e:e4:69: c9:0c:37:a2:83:d2:22:fc:33:95:7b:5f:a1:fb:ba: 16:fd:8a:b3:a5:27:45:c8:cd:05:79:90:0f:e5:47: e0:7d:79:b0:a3:7d:64:d7:3c:1a:96:86:91:89:a2: d5:8a:75:82:a9:a3:66:57:59:f9:b3:e4:24:83:1e: 61:f5:86:da:ac:bc:2b:3a:8c:6b:0d:99:4e:14:04: c1:5f:1e:59:ad:c9:a9:0c:82:f9:93:fc:0a:b6:01: 9b:38:cc:1e:51:e7:4e:25:50:6f:0b:a4:fb:cc:b8: 42:7f:5c:4e:de:3e:82:10:1b:25:3d:7b:50:40:d5: e2:d6:80:35:5e:71:22:28:57:54:73:d4:bf:77:f5: 28:86:82:f0:66:ab:67:f9:ad:33:2a:17:3e:6f:8d: b2:d2:bd:5a:41:e0:08:de:61:35:29:5e:ff:87:e1: f6:87:1d:84:43:0f:35:01:0e:10:6a:78:7b:c5:1d: f8:19:be:28:ba:85:5a:55:dc:a8:52:6d:f4:7b:e8: 9d:4c:fd:a2:8f:87:62:eb:2f:6e:4d:44:39:24:af: f5:a9:d5:05:98:93:72:e1:10:47:f2:c5:07:07:85: eb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2F:AF:C1:95:6B:31:84:90:E4:F1:07:3E:88:B6:42:F7:A1:43:32 X509v3 Authority Key Identifier: keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.32.0/19 37.58.0.0/20 37.152.96.0/19 46.34.224.0/19 151.236.224.0/20 Signature Algorithm: sha256WithRSAEncryption 0e:74:b3:58:52:06:db:a8:0d:0c:1d:51:7b:78:fb:4a:c7:c7: 36:d0:11:f9:87:95:ee:3f:37:84:a4:7d:8e:a4:e9:29:21:87: 0d:23:38:cd:24:f7:2c:54:ef:78:f3:8e:5c:85:15:1d:0c:05: 54:00:ea:c8:9c:c5:4c:2d:b0:57:1d:2c:fb:82:34:8f:65:09: c7:aa:0c:82:5f:a9:7d:a3:85:f5:00:2d:c6:e1:02:4a:d9:cf: 52:88:82:fb:dd:d8:13:30:29:23:b9:ca:7a:84:21:5a:7d:0f: 84:17:0a:b5:d9:f8:5b:9d:f9:4e:b1:9a:0a:60:fc:05:c9:57: 97:e0:5d:8f:b1:28:a2:cf:62:c3:df:a7:55:24:f1:41:d7:12: 2d:38:2b:b1:d9:17:a0:d4:b7:23:32:55:7f:8b:df:05:a5:2c: f5:5a:ec:f9:80:cc:0a:4a:97:7f:35:f5:b9:98:4f:8e:32:db: ea:99:dd:80:63:4f:df:35:9e:db:50:e4:35:60:22:e5:24:d5: c5:16:6d:b1:ae:45:d6:d6:57:3c:bc:4a:b4:b4:9e:4e:26:65: 75:f9:a8:94:60:de:c4:6a:70:64:e3:45:53:3d:9b:85:7f:ff: 59:0c:95:6e:a2:c6:58:e3:dd:0b:9e:83:b0:c1:2d:47:9c:dd: 91:82:6f:62 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt57VtGT2ZoIbMptXC1GMJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1N2Q0Y2ZlNjBmOGEzMGE0ZDBmZjk0Yjk0ZWJhZGZjODhj OWFjMTEwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzJmYWZjMTk1NmIzMTg0OTBlNGYxMDczZTg4YjY0MmY3YTE0MzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mz6/91rCSzz3irmpEQoOzFiMbdJ DOZNEc8u5GnJDDeig9Ii/DOVe1+h+7oW/YqzpSdFyM0FeZAP5UfgfXmwo31k1zwa loaRiaLVinWCqaNmV1n5s+Qkgx5h9YbarLwrOoxrDZlOFATBXx5ZrcmpDIL5k/wK tgGbOMweUedOJVBvC6T7zLhCf1xO3j6CEBslPXtQQNXi1oA1XnEiKFdUc9S/d/Uo hoLwZqtn+a0zKhc+b42y0r1aQeAI3mE1KV7/h+H2hx2EQw81AQ4Qanh7xR34Gb4o uoVaVdyoUm30e+idTP2ij4di6y9uTUQ5JK/1qdUFmJNy4RBH8sUHB4XrYQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNcvr8GVazGEkOTxBz6ItkL3oUMyMB8GA1UdIwQY MBaAFKV9TP5g+KMKTQ/5S5TrrfyIyawRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgt ZTgwZjMyMDczZjNkLzEvMXktdndaVnJNWVNRNVBFSFBvaTJRdmVoUXpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgtZTgwZjMyMDczZjNk LzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFHwMgAwQE JToAAwQFJZhgAwQFLiLgAwQEl+zgMA0GCSqGSIb3DQEBCwUAA4IBAQAOdLNYUgbb qA0MHVF7ePtKx8c20BH5h5XuPzeEpH2OpOkpIYcNIzjNJPcsVO94845chRUdDAVU AOrInMVMLbBXHSz7gjSPZQnHqgyCX6l9o4X1AC3G4QJK2c9SiIL73dgTMCkjucp6 hCFafQ+EFwq12fhbnflOsZoKYPwFyVeX4F2PsSiiz2LD36dVJPFB1xItOCux2Reg 1LcjMlV/i98FpSz1Wuz5gMwKSpd/NfW5mE+OMtvqmd2AY0/fNZ7bUOQ1YCLlJNXF Fm2xrkXW1lc8vEq0tJ5OJmV1+aiUYN7EanBk40VTPZuFf/9ZDJVuosZY490LnoOw wS1HnN2Rgm9i -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:43 2026 by rpki-client