This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1K3a80emflTO45lzvnmJ3OAEO50.roa File: 1K3a80emflTO45lzvnmJ3OAEO50.roa (raw, json) Hash identifier: OWlsFaEaJW4eIdgqOOWju23LUymUnL5lghjf4rKE3+Y= Subject key identifier: D4:AD:DA:F3:47:A6:7E:54:CE:E3:99:73:BE:79:89:DC:E0:04:3B:9D Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C73797110A9C02D33149C0677EFA30 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1K3a80emflTO45lzvnmJ3OAEO50.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47445 IP address blocks: 193.232.236.0/24 maxlen: 24 2a0c:a9c7:236::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:37:97:11:0a:9c:02:d3:31:49:c0:67:7e:fa:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4addaf347a67e54cee39973be7989dce0043b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d1:45:58:46:02:d2:0a:75:b2:99:71:d5:a4: 7d:0d:ac:54:2c:da:a9:24:27:a6:e4:65:87:70:3e: 98:3e:64:a6:a4:8e:a0:ac:f1:51:d3:89:76:4a:de: b2:ca:8a:91:f4:48:bf:3b:fe:b0:98:29:94:a7:15: 3a:fb:ad:b7:34:d3:b4:0e:7a:e8:e8:16:a8:74:19: 4e:d7:ba:bf:34:9e:9d:9f:b6:7b:6b:2a:59:eb:f5: 76:29:19:4d:7e:63:6a:b9:93:27:e4:0e:c3:24:41: f0:2e:eb:27:83:b4:ad:9e:98:03:6e:14:ee:db:bb: c4:66:d9:83:c3:5d:19:c5:eb:0a:92:c4:4a:7c:60: cc:e4:ce:55:04:21:89:4e:85:13:ac:d1:62:9e:b8: 22:2d:d6:8e:ec:de:98:87:91:ad:7b:84:25:38:41: 8e:29:de:35:bf:12:33:5a:83:36:bf:72:95:44:40: f8:c5:7a:96:a8:50:b6:56:39:9f:46:b3:9d:72:09: a5:bc:59:ea:ea:4d:d7:d6:3c:cd:29:23:4c:b0:0f: b3:bf:f6:c6:0b:9f:11:2a:32:8e:17:19:f5:09:76: 55:09:61:34:1f:83:b9:17:57:fd:77:25:9c:9d:ba: c5:7e:28:d5:b8:0e:66:8e:09:b1:07:fb:31:72:e0: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AD:DA:F3:47:A6:7E:54:CE:E3:99:73:BE:79:89:DC:E0:04:3B:9D X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1K3a80emflTO45lzvnmJ3OAEO50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.236.0/24 IPv6: 2a0c:a9c7:236::/48 Signature Algorithm: sha256WithRSAEncryption 7e:f3:c2:61:ef:04:f2:bb:59:ed:f7:40:ef:71:87:e7:d7:88: 4e:d3:cb:e1:d7:3e:9c:39:ea:78:75:af:a3:45:c4:3f:85:da: 01:6f:d2:f3:77:ef:7c:7d:d9:eb:fe:8d:be:23:dd:73:2a:b0: a6:9d:19:94:15:27:c9:7b:6c:7e:25:a0:f6:e7:f9:26:8a:0f: 9b:e4:80:47:9f:62:70:44:2f:1a:e9:c7:33:b9:e2:50:fc:ec: 90:6b:89:97:04:08:79:af:28:e8:1c:d5:0a:f3:d5:02:16:d3: 84:69:6a:01:79:d0:65:60:0b:d8:f3:11:54:9e:61:bd:e0:9b: 0e:46:8f:4f:c7:2f:77:1c:c5:52:12:eb:40:09:f7:dc:f2:41: 4a:c3:9e:b2:6c:f8:b3:43:95:27:2c:19:94:84:db:9f:a8:08: 16:eb:ec:01:32:9d:1b:6d:5d:6a:17:b2:31:f8:9e:a8:49:fd: a8:02:ed:a6:fa:60:e8:f6:60:45:1f:09:87:7a:ac:96:c1:fe: 84:31:de:6a:aa:22:df:c8:6a:f2:4e:51:fd:8d:54:90:ef:eb: f4:f3:1e:5a:10:84:df:18:69:a9:b6:98:d2:82:a8:81:b0:cd: a9:f2:f7:39:7b:dd:3c:af:b8:22:82:b7:6c:35:e4:47:71:3f: d4:d0:0c:81 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xzeXEQqcAtMxScBnfvowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGFkZGFmMzQ3YTY3ZTU0Y2VlMzk5NzNiZTc5ODlkY2UwMDQzYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdFFWEYC0gp1splx1aR9DaxULNqp JCem5GWHcD6YPmSmpI6grPFR04l2St6yyoqR9Ei/O/6wmCmUpxU6+623NNO0Dnro 6BaodBlO17q/NJ6dn7Z7aypZ6/V2KRlNfmNquZMn5A7DJEHwLusng7StnpgDbhTu 27vEZtmDw10ZxesKksRKfGDM5M5VBCGJToUTrNFinrgiLdaO7N6Yh5Gte4QlOEGO Kd41vxIzWoM2v3KVRED4xXqWqFC2VjmfRrOdcgmlvFnq6k3X1jzNKSNMsA+zv/bG C58RKjKOFxn1CXZVCWE0H4O5F1f9dyWcnbrFfijVuA5mjgmxB/sxcuAVnQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNSt2vNHpn5UzuOZc755idzgBDudMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvMUszYTgwZW1mbFRPNDVsenZubUozT0FFTzUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwejsMA8E AgACMAkDBwAqDKnHAjYwDQYJKoZIhvcNAQELBQADggEBAH7zwmHvBPK7We33QO9x h+fXiE7Ty+HXPpw56nh1r6NFxD+F2gFv0vN373x92ev+jb4j3XMqsKadGZQVJ8l7 bH4loPbn+SaKD5vkgEefYnBELxrpxzO54lD87JBriZcECHmvKOgc1Qrz1QIW04Rp agF50GVgC9jzEVSeYb3gmw5Gj0/HL3ccxVIS60AJ99zyQUrDnrJs+LNDlScsGZSE 25+oCBbr7AEynRttXWoXsjH4nqhJ/agC7ab6YOj2YEUfCYd6rJbB/oQx3mqqIt/I avJOUf2NVJDv6/TzHloQhN8Yaam2mNKCqIGwzany9zl73TyvuCKCt2w15EdxP9TQ DIE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:29 2026 by rpki-client