This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/A1p3BrbicGWcrqJ7iBGLEbx6TY4.roa File: A1p3BrbicGWcrqJ7iBGLEbx6TY4.roa (raw, json) Hash identifier: Gai9jQoSPI3MpN27V7u93QMmPyJdle9aT1OKl5jQdDQ= Subject key identifier: 03:5A:77:06:B6:E2:70:65:9C:AE:A2:7B:88:11:8B:11:BC:7A:4D:8E Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019BE18A37390F5841C71F7F92B6F02058C5 Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/A1p3BrbicGWcrqJ7iBGLEbx6TY4.roa Signing time: Wed 21 Jan 2026 17:11:30 +0000 ROA not before: Wed 21 Jan 2026 17:11:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399195 IP address blocks: 150.107.48.0/22 maxlen: 22 150.107.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:8a:37:39:0f:58:41:c7:1f:7f:92:b6:f0:20:58:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Jan 21 17:11:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=035a7706b6e270659caea27b88118b11bc7a4d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f9:aa:e4:07:46:33:d7:36:44:ba:4c:65:e2: d6:d2:1a:45:19:1c:c7:a2:d3:dd:fb:9b:38:b7:94: db:9f:79:a9:35:5c:79:99:18:25:b8:a7:ff:14:26: cc:eb:ff:21:c3:33:70:31:09:c2:c9:14:c9:12:a9: 45:6c:d9:80:78:0a:89:78:e3:70:f2:69:46:ee:82: a1:c1:4b:7c:ab:47:93:ee:6e:08:66:7c:72:9a:d0: 5a:a0:25:f8:c7:e3:9d:c0:1b:da:6b:ff:45:82:2c: 21:3c:80:70:4c:73:b9:af:84:0b:82:3f:85:34:dd: e9:0f:b3:f7:cc:ce:ee:15:18:1f:ef:a6:09:b6:d8: ad:b4:48:51:9a:c2:35:ca:0b:df:79:01:18:de:22: 03:d2:54:27:36:e0:42:e4:1e:33:4b:a3:e5:d4:30: 39:36:dc:aa:69:59:ad:b3:2d:94:9c:f6:99:bd:2d: 01:9a:6d:43:35:57:d0:84:04:3e:23:ef:e8:d9:ca: f4:12:1e:3f:90:6e:c9:81:d4:e5:43:1f:d4:7b:ae: de:01:bf:eb:4c:9d:08:de:28:fd:74:1c:61:15:fb: da:ae:57:e0:f3:39:27:3c:29:6d:d3:72:62:70:60: 91:f9:d7:56:f5:d9:74:f4:68:96:b3:0a:2c:c4:d4: f6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5A:77:06:B6:E2:70:65:9C:AE:A2:7B:88:11:8B:11:BC:7A:4D:8E X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/A1p3BrbicGWcrqJ7iBGLEbx6TY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.48.0/22 Signature Algorithm: sha256WithRSAEncryption 61:a8:14:49:98:dc:40:83:a1:5c:23:99:85:6e:51:0d:d9:fb: 69:2a:3b:f6:fe:4a:17:95:ca:8f:84:ac:52:37:2a:d6:77:45: e9:82:02:de:57:10:7f:9b:81:2b:3a:8a:53:fa:0f:6d:43:d2: 0f:c3:b3:9f:ce:31:f2:24:84:99:b4:5a:af:18:cb:fc:dd:ed: ab:fd:20:ac:d3:f9:62:b6:d8:1f:95:d2:1c:e1:41:85:0c:54: 79:d4:09:d8:02:ab:b9:d1:42:7c:0f:64:11:22:48:9b:58:6e: d6:80:60:5c:bd:f5:e2:d5:65:07:cd:25:99:04:4c:7e:e8:4a: ce:60:fc:34:62:3f:3c:13:11:b5:fc:c4:d7:19:26:c1:fe:48: 78:ea:04:2b:d0:9f:02:5a:71:09:a4:7a:c9:51:f6:de:a9:6b: d9:bd:69:ab:27:e5:16:d7:a9:95:e5:c9:d9:2b:a6:ba:b7:f8: 0a:9e:28:c1:42:fb:3f:d9:cf:6f:cd:e6:0f:73:f4:5f:e6:64: 9f:6d:22:39:20:49:63:b1:b8:d4:82:49:e6:92:20:51:25:58: 2a:f2:11:dd:02:99:e0:5b:2f:26:1a:2a:17:47:d3:f0:ba:f8: 9e:1c:2c:33:9a:bd:69:09:fa:3c:86:30:02:4a:a6:fb:94:a6: 7d:c6:74:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvhijc5D1hBxx9/krbwIFjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMTIxMTcxMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzVhNzcwNmI2ZTI3MDY1OWNhZWEyN2I4ODExOGIxMWJjN2E0ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Pmq5AdGM9c2RLpMZeLW0hpFGRzH otPd+5s4t5Tbn3mpNVx5mRgluKf/FCbM6/8hwzNwMQnCyRTJEqlFbNmAeAqJeONw 8mlG7oKhwUt8q0eT7m4IZnxymtBaoCX4x+OdwBvaa/9FgiwhPIBwTHO5r4QLgj+F NN3pD7P3zM7uFRgf76YJttittEhRmsI1ygvfeQEY3iID0lQnNuBC5B4zS6Pl1DA5 NtyqaVmtsy2UnPaZvS0Bmm1DNVfQhAQ+I+/o2cr0Eh4/kG7JgdTlQx/Ue67eAb/r TJ0I3ij9dBxhFfvarlfg8zknPClt03JicGCR+ddW9dl09GiWswosxNT2LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANadwa24nBlnK6ie4gRixG8ek2OMB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvQTFwM0JyYmljR1djcnFKN2lCR0xFYng2VFk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmswMA0G CSqGSIb3DQEBCwUAA4IBAQBhqBRJmNxAg6FcI5mFblEN2ftpKjv2/koXlcqPhKxS NyrWd0XpggLeVxB/m4ErOopT+g9tQ9IPw7OfzjHyJISZtFqvGMv83e2r/SCs0/li ttgfldIc4UGFDFR51AnYAqu50UJ8D2QRIkibWG7WgGBcvfXi1WUHzSWZBEx+6ErO YPw0Yj88ExG1/MTXGSbB/kh46gQr0J8CWnEJpHrJUfbeqWvZvWmrJ+UW16mV5cnZ K6a6t/gKnijBQvs/2c9vzeYPc/Rf5mSfbSI5IEljsbjUgknmkiBRJVgq8hHdApng Wy8mGioXR9PwuvieHCwzmr1pCfo8hjACSqb7lKZ9xnQo -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:06 2026 by rpki-client