This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/P1yj3gjDhxChJcFO8Skm9pkXt48.roa File: P1yj3gjDhxChJcFO8Skm9pkXt48.roa (raw, json) Hash identifier: xfZq4sva3XVYvdr878z0V/BBEkb+f01RPeig0MyhrEo= Subject key identifier: 3F:5C:A3:DE:08:C3:87:10:A1:25:C1:4E:F1:29:26:F6:99:17:B7:8F Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68 Certificate serial: 019B7F15B964569086F345E218FB4DA7F13C Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/P1yj3gjDhxChJcFO8Skm9pkXt48.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29208 IP address blocks: 193.84.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b9:64:56:90:86:f3:45:e2:18:fb:4d:a7:f1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f5ca3de08c38710a125c14ef12926f69917b78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:3e:f5:b7:b6:44:2d:2d:9f:79:4c:63:d1: c4:29:a3:5c:ef:a2:ef:b6:07:f0:be:1c:8d:8c:39: 42:ea:9e:8f:1b:0d:7a:c8:ce:bf:82:04:a2:02:c1: 1e:f3:9d:4c:b3:4f:c5:6c:ce:cd:2e:fa:0f:96:0d: 47:8f:85:83:d6:27:e0:eb:0d:a0:17:c2:93:14:ac: 60:12:21:12:ab:59:04:5e:e2:0a:b9:20:9c:56:d3: 30:e8:29:bc:e3:d3:f4:59:7a:7a:4d:ba:0a:4b:da: d8:98:6f:a2:4e:54:de:95:b5:d7:50:8e:b3:37:d1: 18:7f:fa:c0:88:1f:e4:57:f0:d3:25:40:f9:a2:a6: 61:53:ce:61:12:6f:90:92:d2:89:ef:9f:e4:d7:e5: aa:a3:fb:7b:2d:5c:01:1a:f0:03:a0:e9:20:64:72: c8:6e:31:3f:67:12:e7:97:e7:0c:df:ea:c3:e5:86: 47:8c:58:b3:64:f8:df:f4:76:54:63:41:4e:33:6a: 06:05:d0:20:bb:20:31:47:39:77:76:8f:f3:61:eb: 05:05:05:65:19:ee:a7:e7:e0:57:75:fe:1c:f4:ef: 3a:51:9b:53:aa:02:ec:b4:3c:03:f7:96:a1:3b:9b: f3:d3:68:65:dd:51:c7:54:a1:9f:d2:38:3f:00:c9: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5C:A3:DE:08:C3:87:10:A1:25:C1:4E:F1:29:26:F6:99:17:B7:8F X509v3 Authority Key Identifier: keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/P1yj3gjDhxChJcFO8Skm9pkXt48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.68.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:eb:fd:66:45:6f:34:05:0d:48:30:03:bd:74:26:45:a6:9f: 42:08:74:40:82:42:46:78:8e:5c:cc:32:6a:bd:38:51:f9:6b: b7:70:49:40:e4:21:60:67:b3:5a:eb:82:a9:80:f2:9b:17:ef: b7:ed:f1:b4:70:39:9c:9a:e9:72:c7:1b:5b:a3:ab:c3:64:18: 74:6e:7a:7a:c8:60:99:c3:3b:d6:42:90:80:81:5d:e0:f7:bf: 0b:b3:10:a6:61:b2:08:d1:c1:8e:51:78:78:52:cb:fe:0b:b5: 78:c4:f0:8c:7d:09:c5:79:bc:09:7c:2b:43:24:11:95:56:39: 8c:a3:f0:1e:3f:61:55:79:a8:c1:ce:9a:c1:47:2a:e2:1c:4a: 15:b4:95:c4:e3:22:6f:84:72:fc:aa:be:2e:ba:31:ee:14:be: 90:da:0a:3f:e8:1a:e4:5c:1d:80:b4:89:38:43:33:f7:f4:74: c3:39:65:96:e2:c2:fa:b9:a9:ad:98:a4:09:f5:a9:3d:3f:fa: 7a:1a:5f:c7:22:71:3e:7e:c6:e0:6a:cd:97:56:0a:dc:54:f9: 61:16:02:d3:8d:bc:54:47:93:2b:62:e9:3b:f1:00:81:78:05: 2f:47:fb:98:ea:8e:8a:38:fb:f6:8a:3a:b9:88:09:34:b1:a6: 65:87:95:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FblkVpCG80XiGPtNp/E8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDJhZjcxM2UzNmU1MmM3MTg2NmM4YTllYmRhY2YzZDg2 MjliNjgwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjVjYTNkZTA4YzM4NzEwYTEyNWMxNGVmMTI5MjZmNjk5MTdiNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVA+9be2RC0tn3lMY9HEKaNc76Lv tgfwvhyNjDlC6p6PGw16yM6/ggSiAsEe851Ms0/FbM7NLvoPlg1Hj4WD1ifg6w2g F8KTFKxgEiESq1kEXuIKuSCcVtMw6Cm849P0WXp6TboKS9rYmG+iTlTelbXXUI6z N9EYf/rAiB/kV/DTJUD5oqZhU85hEm+QktKJ75/k1+Wqo/t7LVwBGvADoOkgZHLI bjE/ZxLnl+cM3+rD5YZHjFizZPjf9HZUY0FOM2oGBdAguyAxRzl3do/zYesFBQVl Ge6n5+BXdf4c9O86UZtTqgLstDwD95ahO5vz02hl3VHHVKGf0jg/AMn2sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9co94Iw4cQoSXBTvEpJvaZF7ePMB8GA1UdIwQY MBaAFBUCr3E+NuUscYZsip69rPPYYptoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDkt NWE4MjMwZTc2NDNhLzEvUDF5ajNnakRoeENoSmNGTzhTa205cGtYdDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDktNWE4MjMwZTc2NDNh LzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVREMA0G CSqGSIb3DQEBCwUAA4IBAQCe6/1mRW80BQ1IMAO9dCZFpp9CCHRAgkJGeI5czDJq vThR+Wu3cElA5CFgZ7Na64KpgPKbF++37fG0cDmcmulyxxtbo6vDZBh0bnp6yGCZ wzvWQpCAgV3g978LsxCmYbII0cGOUXh4Usv+C7V4xPCMfQnFebwJfCtDJBGVVjmM o/AeP2FVeajBzprBRyriHEoVtJXE4yJvhHL8qr4uujHuFL6Q2go/6BrkXB2AtIk4 QzP39HTDOWWW4sL6uamtmKQJ9ak9P/p6Gl/HInE+fsbgas2XVgrcVPlhFgLTjbxU R5MrYuk78QCBeAUvR/uY6o6KOPv2ijq5iAk0saZlh5Vf -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:54 2026 by rpki-client