This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/03ILpCkUnmq5BI8Qbjtxy23Vm3w.roa File: 03ILpCkUnmq5BI8Qbjtxy23Vm3w.roa (raw, json) Hash identifier: so/wDftuCuhVwNVUjhg5MbT2/4hCaRH4nYQ0u3BjKb0= Subject key identifier: D3:72:0B:A4:29:14:9E:6A:B9:04:8F:10:6E:3B:71:CB:6D:D5:9B:7C Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B625F770F1DDFDCC431B9EE1D6B07 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/03ILpCkUnmq5BI8Qbjtxy23Vm3w.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210067 IP address blocks: 176.124.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:62:5f:77:0f:1d:df:dc:c4:31:b9:ee:1d:6b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3720ba429149e6ab9048f106e3b71cb6dd59b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:33:60:38:9f:3c:cb:f6:cd:31:09:54:5c:8c: ef:7c:08:4a:23:ef:93:d0:6f:06:57:ea:4b:42:ed: 6b:98:16:b1:76:dd:9f:c6:a3:90:e2:71:30:7c:e9: 2d:5d:d9:3f:13:e9:c9:97:f3:57:65:99:df:df:2b: a7:b1:3a:0e:68:02:80:bc:25:ab:66:15:d0:3e:9c: 42:ae:3c:6a:68:c4:aa:9f:20:32:c7:c4:ea:27:67: bb:bb:d8:51:e2:23:d0:2c:54:ea:7f:5c:2a:31:9b: 2c:f0:2a:88:19:a5:d6:9e:fd:17:88:06:a9:28:b1: b1:88:0a:98:ca:57:d9:85:71:8d:2a:50:ef:90:e9: 6a:f9:1f:51:2d:7d:2e:27:ef:fd:ab:53:08:62:60: 4b:80:33:e5:c3:59:75:e2:be:d1:c4:40:a5:55:83: e1:7f:49:a0:b4:3f:db:8f:0c:83:7e:f9:dc:25:6f: 00:92:14:f6:09:86:ea:e9:a5:e4:37:ce:12:b9:f8: 65:34:2b:71:8a:d1:e1:00:7c:f9:eb:3a:86:cc:33: bf:63:d4:7a:50:7a:ef:76:07:92:a9:47:ca:c2:fa: 5c:3c:7d:e1:ff:a3:cc:9d:6b:76:07:50:e6:98:ce: f0:4c:09:f9:13:fe:ee:3b:63:e0:f5:50:35:3b:31: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:72:0B:A4:29:14:9E:6A:B9:04:8F:10:6E:3B:71:CB:6D:D5:9B:7C X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/03ILpCkUnmq5BI8Qbjtxy23Vm3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.31.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:a5:2f:37:0c:59:f9:f8:eb:23:2c:43:8f:e8:03:35:c3:fb: a6:1f:74:28:b0:84:45:49:8b:48:d5:b0:bb:28:4d:fb:96:45: 8c:4d:79:5e:fb:f3:9a:fb:11:4d:3b:1f:f0:9c:c1:32:68:7b: d9:29:dd:3f:9c:3d:f8:8b:43:f7:3b:86:7a:6b:08:4c:97:ed: a0:86:c7:58:83:83:4f:1f:ed:e6:d6:3b:8e:03:37:c3:40:22: d3:35:f2:e5:1c:53:8d:dd:f9:f7:46:c8:3f:19:e4:df:58:ff: 3c:25:09:4e:52:ab:78:4c:d7:e3:83:91:c6:11:83:4c:ba:38: dc:0a:f6:f0:19:f6:a4:9c:aa:d8:28:7c:9a:8a:b6:bf:12:d7: f9:cf:c1:0b:43:3e:fc:20:58:f3:52:1c:e2:6e:2b:12:4e:07: bf:ab:1f:f2:29:e9:de:60:fb:ea:83:4d:b1:38:eb:04:be:2f: 34:7a:f5:0e:63:10:fb:3d:3a:7a:57:e7:88:b4:69:26:17:d4: 58:90:1f:55:53:70:64:56:99:2d:43:1f:50:d1:29:af:e0:41: 3a:5d:6c:b8:7d:49:91:9a:12:33:18:02:b0:2f:45:a6:09:50: 27:e9:12:59:b0:27:c7:a0:38:93:fc:39:f7:0c:9f:78:21:cc: 7c:38:a8:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2Jfdw8d39zEMbnuHWsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzcyMGJhNDI5MTQ5ZTZhYjkwNDhmMTA2ZTNiNzFjYjZkZDU5YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DNgOJ88y/bNMQlUXIzvfAhKI++T 0G8GV+pLQu1rmBaxdt2fxqOQ4nEwfOktXdk/E+nJl/NXZZnf3yunsToOaAKAvCWr ZhXQPpxCrjxqaMSqnyAyx8TqJ2e7u9hR4iPQLFTqf1wqMZss8CqIGaXWnv0XiAap KLGxiAqYylfZhXGNKlDvkOlq+R9RLX0uJ+/9q1MIYmBLgDPlw1l14r7RxEClVYPh f0mgtD/bjwyDfvncJW8AkhT2CYbq6aXkN84SufhlNCtxitHhAHz56zqGzDO/Y9R6 UHrvdgeSqUfKwvpcPH3h/6PMnWt2B1DmmM7wTAn5E/7uO2Pg9VA1OzF6YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNyC6QpFJ5quQSPEG47cctt1Zt8MB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvMDNJTHBDa1VubXE1Qkk4UWJqdHh5MjNWbTN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHwfMA0G CSqGSIb3DQEBCwUAA4IBAQAtpS83DFn5+OsjLEOP6AM1w/umH3QosIRFSYtI1bC7 KE37lkWMTXle+/Oa+xFNOx/wnMEyaHvZKd0/nD34i0P3O4Z6awhMl+2ghsdYg4NP H+3m1juOAzfDQCLTNfLlHFON3fn3Rsg/GeTfWP88JQlOUqt4TNfjg5HGEYNMujjc CvbwGfaknKrYKHyaira/Etf5z8ELQz78IFjzUhzibisSTge/qx/yKeneYPvqg02x OOsEvi80evUOYxD7PTp6V+eItGkmF9RYkB9VU3BkVpktQx9Q0Smv4EE6XWy4fUmR mhIzGAKwL0WmCVAn6RJZsCfHoDiT/Dn3DJ94Icx8OKji -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:13 2026 by rpki-client