This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/3DD7IN1RUhoFtGejl5QLGTUPcbE.roa File: 3DD7IN1RUhoFtGejl5QLGTUPcbE.roa (raw, json) Hash identifier: 9QU9RS48p4Gk8eFQ8qLmQJqFrlkSGfDL9zyv/+59Y7I= Subject key identifier: DC:30:FB:20:DD:51:52:1A:05:B4:67:A3:97:94:0B:19:35:0F:71:B1 Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991 Certificate serial: 019B7A5AAA6B8993CD55B467ACBC563D3EA7 Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/3DD7IN1RUhoFtGejl5QLGTUPcbE.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197382 IP address blocks: 94.141.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:aa:6b:89:93:cd:55:b4:67:ac:bc:56:3d:3e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc30fb20dd51521a05b467a397940b19350f71b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:90:95:3a:1a:0a:20:e1:52:d9:74:7e:a6: fc:97:33:1d:6c:9d:b1:f3:bf:78:25:6e:72:84:d7: ae:31:bb:bb:b0:82:0b:bc:c7:07:7b:37:c5:c1:90: ec:e5:a5:50:f4:59:fb:28:fd:24:5c:b7:40:6e:52: f6:57:85:6c:79:f3:d1:9d:23:ae:94:55:9c:6d:75: 6d:cc:35:16:2c:ae:8c:7d:b8:47:c3:2b:50:df:63: 92:fe:df:52:12:58:a1:a8:f5:95:c8:1d:c6:fb:94: 2c:49:c1:f3:78:b3:ce:d1:80:36:b1:89:6f:6a:98: c5:38:35:d4:ba:f2:d4:58:aa:03:28:d0:3f:67:62: 14:40:93:01:cc:61:39:04:76:6a:96:83:9b:24:5c: 72:03:48:25:7e:e8:0a:36:4d:44:79:b1:3e:5a:44: f7:60:65:17:02:33:27:d5:cd:ef:61:37:25:0d:ec: bb:96:96:e4:b4:b8:c2:36:77:d6:65:8a:16:4f:89: 59:1e:4c:67:7f:c4:ca:02:7c:e6:37:e7:f4:fa:3f: fe:c9:0d:68:80:4a:55:99:83:49:13:e8:c0:19:8d: ff:67:3f:df:25:00:02:b9:f0:f2:53:94:da:07:fc: 9f:2f:b2:1b:11:07:e0:16:4d:ae:eb:0b:62:5b:89: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:30:FB:20:DD:51:52:1A:05:B4:67:A3:97:94:0B:19:35:0F:71:B1 X509v3 Authority Key Identifier: keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/3DD7IN1RUhoFtGejl5QLGTUPcbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.141.121.0/24 Signature Algorithm: sha256WithRSAEncryption 44:3c:eb:14:a5:09:01:c0:f9:e5:25:92:20:53:64:5c:45:fc: 97:ca:6a:73:b8:aa:07:c4:33:11:74:5d:4b:53:93:df:ed:0f: d7:4c:90:da:d1:58:c6:99:a7:81:37:e8:f3:12:26:bf:41:4f: 98:cd:26:7c:8d:33:f8:b4:80:51:81:5d:5d:1d:c9:15:bf:8f: 3d:fe:65:dc:42:15:23:3f:c9:28:10:53:e1:ca:78:44:72:c3: 56:7b:e3:04:8a:a4:28:c8:e8:a4:35:71:c4:80:66:bc:59:1d: 7a:ac:33:24:2c:2f:d9:f7:ee:1b:56:f4:b1:e4:52:1c:20:37: 3e:0a:f1:45:97:13:e7:84:cf:6d:eb:55:12:41:7a:38:74:29: 4a:60:c1:ca:3f:55:8b:3a:58:e0:4d:b8:4f:1a:a8:ed:f1:12: 35:f6:75:ed:dc:10:de:bb:83:ba:16:ae:68:93:d4:e8:5b:c5: 32:44:82:5e:4c:3b:c3:6c:76:9d:34:16:59:94:4d:cc:45:34: d8:c0:53:e6:f6:b9:7a:b1:58:dd:cb:14:69:fa:04:ef:61:15: 7b:c2:6b:33:71:51:6b:1f:8c:3e:44:9e:f3:11:95:65:3a:24: 09:2a:35:66:c5:f4:48:f0:ae:38:ab:b9:32:5f:83:c0:cd:42: e9:30:01:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqpriZPNVbRnrLxWPT6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZmU5YmNlYmFlMjI4YjM2Yzg4M2MyN2VhNTUxOGU3MDRj MTA5OTEwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzMwZmIyMGRkNTE1MjFhMDViNDY3YTM5Nzk0MGIxOTM1MGY3MWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hyQlToaCiDhUtl0fqb8lzMdbJ2x 8794JW5yhNeuMbu7sIILvMcHezfFwZDs5aVQ9Fn7KP0kXLdAblL2V4VsefPRnSOu lFWcbXVtzDUWLK6MfbhHwytQ32OS/t9SElihqPWVyB3G+5QsScHzeLPO0YA2sYlv apjFODXUuvLUWKoDKNA/Z2IUQJMBzGE5BHZqloObJFxyA0glfugKNk1EebE+WkT3 YGUXAjMn1c3vYTclDey7lpbktLjCNnfWZYoWT4lZHkxnf8TKAnzmN+f0+j/+yQ1o gEpVmYNJE+jAGY3/Zz/fJQACufDyU5TaB/yfL7IbEQfgFk2u6wtiW4nPRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNww+yDdUVIaBbRno5eUCxk1D3GxMB8GA1UdIwQY MBaAFBP+m8664iizbIg8J+pVGOcEwQmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQt NWUyZDYwNzBlZjgzLzEvM0REN0lOMVJVaG9GdEdlamw1UUxHVFVQY2JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQtNWUyZDYwNzBlZjgz LzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo15MA0G CSqGSIb3DQEBCwUAA4IBAQBEPOsUpQkBwPnlJZIgU2RcRfyXympzuKoHxDMRdF1L U5Pf7Q/XTJDa0VjGmaeBN+jzEia/QU+YzSZ8jTP4tIBRgV1dHckVv489/mXcQhUj P8koEFPhynhEcsNWe+MEiqQoyOikNXHEgGa8WR16rDMkLC/Z9+4bVvSx5FIcIDc+ CvFFlxPnhM9t61USQXo4dClKYMHKP1WLOljgTbhPGqjt8RI19nXt3BDeu4O6Fq5o k9ToW8UyRIJeTDvDbHadNBZZlE3MRTTYwFPm9rl6sVjdyxRp+gTvYRV7wmszcVFr H4w+RJ7zEZVlOiQJKjVmxfRI8K44q7kyX4PAzULpMAHo -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:32 2026 by rpki-client