This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-_zxSlcEE0Hb1TJ3BOSBiipvwuM.roa File: 1-_zxSlcEE0Hb1TJ3BOSBiipvwuM.roa (raw, json) Hash identifier: nBdtxF2ZZjrNMWJOqZRorrfagmfHOgPLUdSPzRU+Q4M= Subject key identifier: FB:FC:F1:4A:57:04:13:41:DB:D5:32:77:04:E4:81:8A:2A:6F:C2:E3 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BD5B4EF0A6E8C6F54C8B91BA931DE3683 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-_zxSlcEE0Hb1TJ3BOSBiipvwuM.roa Signing time: Mon 19 Jan 2026 10:02:43 +0000 ROA not before: Mon 19 Jan 2026 10:02:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135391 IP address blocks: 109.176.248.0/24 maxlen: 24 109.176.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:b4:ef:0a:6e:8c:6f:54:c8:b9:1b:a9:31:de:36:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 19 10:02:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbfcf14a57041341dbd5327704e4818a2a6fc2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:87:b5:31:fd:39:f6:04:8a:09:ba:f9:b9: c9:7b:bc:56:d1:a9:71:61:c5:13:62:88:9b:9d:5d: e8:c2:33:b1:39:8b:f6:1d:c3:b1:44:bb:2c:ba:6c: a0:a3:89:9d:7d:c2:c6:e4:77:ff:29:43:f8:c0:f3: 75:f7:2f:c1:16:0f:d3:55:d6:02:d7:39:12:bb:47: b5:10:87:1b:da:d1:02:f7:f1:02:e4:79:ab:8b:ab: f5:84:79:c8:41:34:ca:62:90:6a:c6:9f:71:11:64: 55:83:b6:38:24:c0:38:a1:10:0c:b9:c6:ad:6a:d3: 5f:ae:dc:18:93:0e:43:36:67:c2:3f:a1:9f:40:96: dd:b1:8f:63:c8:8f:1d:2d:39:29:e6:44:79:ca:45: 58:0a:c2:53:b0:64:d4:45:f4:6a:60:82:90:aa:53: 11:b2:5e:0e:ff:c8:12:42:46:21:c8:19:26:cf:0c: 00:9d:0a:2d:e7:02:7e:a4:98:22:b8:a4:08:72:92: 6d:4f:f1:44:2c:24:0a:c9:e0:a2:0d:5a:23:1b:8c: fc:3c:1c:4a:9e:55:4b:f9:ab:0b:0e:90:da:18:02: 5b:4e:b5:21:0a:e9:a2:93:60:7c:b5:3b:6c:1f:4e: bd:fd:9f:e0:f3:f5:01:b0:59:e5:83:af:39:db:d9: 12:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FC:F1:4A:57:04:13:41:DB:D5:32:77:04:E4:81:8A:2A:6F:C2:E3 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-_zxSlcEE0Hb1TJ3BOSBiipvwuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.248.0/24 109.176.252.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:43:4b:f2:4b:96:f2:c2:95:84:fe:17:91:b5:2b:ca:d2:c3: 0e:7f:b8:51:e7:67:5f:2f:a0:51:38:4b:5d:5a:e2:87:a1:b8: dd:35:d7:d7:5c:4b:2b:6c:99:cd:5f:70:7f:02:e2:f3:43:3b: 27:fd:e9:38:a8:df:80:53:04:38:2f:25:67:90:53:f1:6e:91: 4d:cd:73:32:fd:8d:35:ee:04:24:58:7b:ef:dc:f2:28:1f:f9: ba:9a:62:c8:d5:8f:2e:38:3e:1c:5a:bd:2d:87:d5:18:27:39: 2c:1b:c3:35:e6:2c:c0:9c:e6:d8:22:0c:92:1e:8f:23:bd:9a: ca:c5:ca:dc:df:bd:ef:62:71:88:f5:72:1b:a5:4a:06:97:60: c2:74:e6:a9:f3:20:f4:6f:2e:1b:21:e7:59:13:4f:52:56:54: f7:72:a3:4f:9a:1a:4e:bc:6e:c0:6b:a7:ea:e7:c4:d4:96:fe: 1b:a6:2b:ba:66:82:99:76:90:0e:1a:7b:37:77:c1:7f:d5:69: 8f:3e:42:e6:f9:74:06:9e:76:51:d9:fb:9f:25:42:dd:e9:dc: 0e:3c:ef:eb:85:24:6d:d5:16:ef:91:2f:41:f4:6b:25:42:e6: 95:e6:5e:15:ac:c9:e4:5b:88:2b:75:2c:56:08:2c:22:81:46: 48:42:12:9e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZvVtO8KboxvVMi5G6kx3jaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTE5MTAwMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmZjZjE0YTU3MDQxMzQxZGJkNTMyNzcwNGU0ODE4YTJhNmZjMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwSHtTH9OfYEigm6+bnJe7xW0alx YcUTYoibnV3owjOxOYv2HcOxRLssumygo4mdfcLG5Hf/KUP4wPN19y/BFg/TVdYC 1zkSu0e1EIcb2tEC9/EC5Hmri6v1hHnIQTTKYpBqxp9xEWRVg7Y4JMA4oRAMucat atNfrtwYkw5DNmfCP6GfQJbdsY9jyI8dLTkp5kR5ykVYCsJTsGTURfRqYIKQqlMR sl4O/8gSQkYhyBkmzwwAnQot5wJ+pJgiuKQIcpJtT/FELCQKyeCiDVojG4z8PBxK nlVL+asLDpDaGAJbTrUhCumik2B8tTtsH069/Z/g8/UBsFnlg68529kS1wIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPv88UpXBBNB29UydwTkgYoqb8LjMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMS1fenhTbGNFRTBIYjFUSjNCT1NCaWlwdnd1TS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGEvNDlkYzAwLTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3 Yy8xL1A5TU5pbjRTX0h2Mkxnd1NIbnpDSnQ2bE81cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAG2w+AME AG2w/DANBgkqhkiG9w0BAQsFAAOCAQEAOkNL8kuW8sKVhP4XkbUrytLDDn+4Uedn Xy+gUThLXVrih6G43TXX11xLK2yZzV9wfwLi80M7J/3pOKjfgFMEOC8lZ5BT8W6R Tc1zMv2NNe4EJFh779zyKB/5uppiyNWPLjg+HFq9LYfVGCc5LBvDNeYswJzm2CIM kh6PI72aysXK3N+972JxiPVyG6VKBpdgwnTmqfMg9G8uGyHnWRNPUlZU93KjT5oa TrxuwGun6ufE1Jb+G6YrumaCmXaQDhp7N3fBf9Vpjz5C5vl0Bp52Udn7nyVC3enc Djzv64UkbdUW75EvQfRrJULmleZeFazJ5FuIK3UsVggsIoFGSEISng== -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:01 2026 by rpki-client