This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/1-xMK4DdvzyhB-krONEqltikgBg0.roa File: 1-xMK4DdvzyhB-krONEqltikgBg0.roa (raw, json) Hash identifier: g4tuxw1k3rYBSc3hMJC6RVLR5yBR/1vY5hHFRctb5CY= Subject key identifier: FB:13:0A:E0:37:6F:CF:28:41:FA:4A:CE:34:4A:A5:B6:29:20:06:0D Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9 Certificate serial: 019B7758C671B3077591FB9436D79CFF29E4 Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/1-xMK4DdvzyhB-krONEqltikgBg0.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14630 IP address blocks: 193.23.124.0/24 maxlen: 24 194.35.32.0/24 maxlen: 24 194.35.33.0/24 maxlen: 24 194.35.34.0/24 maxlen: 24 194.35.35.0/24 maxlen: 24 2a0d:fd40::/29 maxlen: 48 2a0d:fd40:56::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c6:71:b3:07:75:91:fb:94:36:d7:9c:ff:29:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb130ae0376fcf2841fa4ace344aa5b62920060d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0a:47:69:8a:7a:ba:c8:11:54:1c:04:fa:5e: bb:50:65:1b:93:07:36:1f:4d:22:a2:8b:90:6a:43: 6e:da:5f:56:ba:94:ce:00:c0:87:bd:e8:43:3c:23: 55:d0:2b:11:af:c7:ee:8e:01:8a:95:fd:0c:e4:57: 89:69:db:8d:3b:e5:09:9c:f8:a8:64:d8:c2:f7:15: 9e:1b:b2:da:3f:58:1e:c6:10:75:df:31:b9:6b:fe: 54:cf:54:53:51:85:26:a2:c4:70:33:65:31:74:cd: bd:86:66:b2:aa:f8:90:06:4d:0b:8b:2a:91:b8:97: 97:d5:a4:8b:96:f8:b6:27:8c:dd:6e:4f:ac:75:5b: 50:86:fa:cf:23:48:a7:73:0f:15:e0:74:1d:c2:3c: 8e:58:33:ab:aa:65:8e:1f:34:1c:b0:7f:5e:a5:27: 85:79:eb:0f:93:01:06:b9:6e:47:68:dd:23:ee:90: b8:59:e7:3f:00:6f:11:88:75:5c:3b:24:68:64:3d: 61:3d:67:a3:f7:80:91:f9:e1:3a:ae:be:b8:6d:e2: 71:40:01:5b:b4:da:26:3e:a1:60:79:a5:a9:0f:97: e3:74:b2:3c:88:1f:d6:cf:3e:7e:f5:f1:a2:3a:a7: 96:c1:20:ea:44:55:6b:a5:3d:81:cb:7e:6e:63:44: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:0A:E0:37:6F:CF:28:41:FA:4A:CE:34:4A:A5:B6:29:20:06:0D X509v3 Authority Key Identifier: keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/1-xMK4DdvzyhB-krONEqltikgBg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.124.0/24 194.35.32.0/22 IPv6: 2a0d:fd40::/29 Signature Algorithm: sha256WithRSAEncryption 09:fa:a7:9c:85:0d:75:ee:33:fc:24:59:b7:6d:fe:2f:7f:b1: b2:b2:d3:86:7d:60:b7:4d:e6:ec:50:c8:b3:ae:b6:38:85:eb: d2:86:53:fa:11:8a:52:b7:ca:b3:11:55:fc:ba:a1:45:e7:7b: 45:80:55:39:21:73:df:6b:ec:2e:1b:e4:e9:60:45:f2:be:84: f9:64:a1:63:0c:d5:1a:d3:17:99:3a:29:a0:a4:a4:5b:a1:b6: 3b:1b:22:1b:9b:b6:71:39:f3:12:09:ce:73:d1:4e:69:8b:ed: a3:89:cb:a3:77:00:8d:84:91:0b:3a:16:5d:26:c7:69:72:ee: ba:cb:9d:2c:ce:86:18:3d:95:68:4c:75:3e:f5:b2:7f:e6:ce: 9a:77:d8:35:1c:dc:1b:74:76:17:9b:b9:7f:28:c4:13:12:4b: 9d:ee:0c:37:7e:4c:23:35:64:db:08:72:fd:a4:cb:e0:6a:53: e6:56:f0:42:3a:9a:10:65:b0:18:04:13:2e:2a:d8:02:8d:6a: 53:1e:7a:f7:86:f8:fc:42:fe:47:cb:00:f5:8a:6b:1a:96:7f: 3c:dd:29:9e:bd:35:d1:71:5e:84:ab:04:0a:ab:4f:e0:4f:29: dd:68:10:e6:8b:50:6e:0d:3f:e0:32:86:9a:f0:49:12:31:db: 6f:3c:13:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3WMZxswd1kfuUNtec/ynkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYzIwMDRhMWFmMDMwYmE5OWZjZjQ1MWYzYmQ4OGVmYzUz ODQ2YTkwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjEzMGFlMDM3NmZjZjI4NDFmYTRhY2UzNDRhYTViNjI5MjAwNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QpHaYp6usgRVBwE+l67UGUbkwc2 H00ioouQakNu2l9WupTOAMCHvehDPCNV0CsRr8fujgGKlf0M5FeJaduNO+UJnPio ZNjC9xWeG7LaP1gexhB13zG5a/5Uz1RTUYUmosRwM2UxdM29hmayqviQBk0LiyqR uJeX1aSLlvi2J4zdbk+sdVtQhvrPI0incw8V4HQdwjyOWDOrqmWOHzQcsH9epSeF eesPkwEGuW5HaN0j7pC4Wec/AG8RiHVcOyRoZD1hPWej94CR+eE6rr64beJxQAFb tNomPqFgeaWpD5fjdLI8iB/Wzz5+9fGiOqeWwSDqRFVrpT2By35uY0SWMwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPsTCuA3b88oQfpKzjRKpbYpIAYNMB8GA1UdIwQY MBaAFNzCAEoa8DC6mfz0UfO9iO/FOEapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUt NTZhMzMwNTc0OTdiLzEvMS14TUs0RGR2enloQi1rck9ORXFsdGlrZ0JnMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzEvNzEyYjQwLTUzYWUtNDk1My1hZmY1LTU2YTMzMDU3NDk3 Yi8xLzNNSUFTaHJ3TUxxWl9QUlI4NzJJNzhVNFJxay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAMEXfAME AsIjIDANBAIAAjAHAwUDKg39QDANBgkqhkiG9w0BAQsFAAOCAQEACfqnnIUNde4z /CRZt23+L3+xsrLThn1gt03m7FDIs662OIXr0oZT+hGKUrfKsxFV/LqhRed7RYBV OSFz32vsLhvk6WBF8r6E+WShYwzVGtMXmTopoKSkW6G2OxsiG5u2cTnzEgnOc9FO aYvto4nLo3cAjYSRCzoWXSbHaXLuusudLM6GGD2VaEx1PvWyf+bOmnfYNRzcG3R2 F5u5fyjEExJLne4MN35MIzVk2why/aTL4GpT5lbwQjqaEGWwGAQTLirYAo1qUx56 94b4/EL+R8sA9YprGpZ/PN0pnr010XFehKsECqtP4E8p3WgQ5otQbg0/4DKGmvBJ EjHbbzwTEw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:14 2026 by rpki-client