This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa File: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (raw, json) Hash identifier: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek= Subject key identifier: EF:73:E5:73:D9:69:28:EF:2A:BE:AD:50:D2:E5:15:D6:66:C8:20:17 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC126DF19EA3DA8767E0261F84084 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200094 IP address blocks: 94.240.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c1:26:df:19:ea:3d:a8:76:7e:02:61:f8:40:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef73e573d96928ef2abead50d2e515d666c82017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:e7:2b:c1:16:20:7a:1c:fb:1d:a8:c9:18: 5e:95:5a:64:8c:f5:8e:b8:70:56:d6:45:fa:8a:d0: 4f:03:06:c4:82:d4:3f:59:bf:c4:4f:a7:2c:6d:6f: b5:61:e7:99:72:f6:be:a2:7b:19:d5:82:05:9c:2e: 00:70:2b:fd:03:35:09:5c:9a:7a:3e:af:13:b1:69: e0:83:ec:3d:cd:19:c7:f9:b6:0f:11:23:b3:23:6b: fd:44:dd:5d:9c:d0:a9:cf:ac:07:ca:e0:49:1c:2d: df:0c:79:bf:51:86:26:e2:3e:47:00:06:4f:82:c0: 0f:1a:88:04:21:50:0a:bc:ed:eb:83:24:c2:98:1d: 01:9e:f3:b4:24:01:cd:95:61:e8:ba:69:4f:27:c6: 41:9b:d1:5e:dc:53:51:d3:1f:2b:32:cb:5b:38:c7: fa:f4:61:84:37:17:16:78:d5:d9:6b:2d:9f:4f:2c: 2c:77:96:b4:50:ab:3f:41:91:95:08:ae:97:c7:ba: 1c:fc:8f:20:ca:5c:57:59:ee:f7:6f:68:87:57:22: 8e:23:61:2a:fd:53:b6:75:3e:75:5d:fd:c7:18:02: 24:3b:bc:dc:a2:e8:b6:4f:1a:6f:cb:f1:fd:b5:ea: 37:67:86:b7:7f:a5:e2:57:e1:5e:85:df:cd:99:1f: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:73:E5:73:D9:69:28:EF:2A:BE:AD:50:D2:E5:15:D6:66:C8:20:17 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.46.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:96:bb:c2:1f:36:6e:e3:7f:13:69:4a:a0:f7:5e:70:e8:5f: c4:8f:3b:15:8a:f2:ad:b5:3b:43:1c:2d:15:49:39:d7:ab:ab: 20:1d:36:b2:d8:fd:0a:e7:ce:1e:6c:c2:e2:8d:2c:0f:dd:bd: be:5f:ce:d4:b7:7a:e9:81:71:39:a8:82:3b:5e:0e:72:f6:85: 14:73:73:e2:2b:e1:69:6c:5d:5c:2f:08:47:5d:b6:f1:3b:e8: 6d:d7:4c:7e:31:c7:54:fc:7a:d4:5b:b9:7b:14:27:62:99:48: 8d:e8:a6:ad:46:54:a6:3a:5d:5b:89:d7:6f:79:63:1c:5f:d7: ee:fb:24:60:af:c3:d4:d4:c3:0e:b1:9c:f6:71:20:a9:53:30: 64:8c:9f:d5:d8:b4:9b:25:a4:cb:37:69:ad:39:de:62:67:ab: a6:47:38:db:70:86:ab:7c:96:fc:18:fe:d3:e2:cc:75:89:61: c3:74:3f:f3:a5:90:09:d6:8c:0d:34:c7:8e:73:f2:75:d8:79: fd:3f:6a:8d:f1:44:a3:e1:4d:ed:14:1c:82:38:92:93:53:f1: df:30:06:b9:e5:97:40:56:f9:ca:c6:57:40:33:59:eb:b5:3d: c0:f5:86:d3:65:b7:32:a5:d4:a2:4d:29:9d:fa:30:25:64:c2: 5a:d7:2a:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MEm3xnqPah2fgJh+ECEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjczZTU3M2Q5NjkyOGVmMmFiZWFkNTBkMmU1MTVkNjY2YzgyMDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv67nK8EWIHoc+x2oyRhelVpkjPWO uHBW1kX6itBPAwbEgtQ/Wb/ET6csbW+1YeeZcva+onsZ1YIFnC4AcCv9AzUJXJp6 Pq8TsWngg+w9zRnH+bYPESOzI2v9RN1dnNCpz6wHyuBJHC3fDHm/UYYm4j5HAAZP gsAPGogEIVAKvO3rgyTCmB0BnvO0JAHNlWHoumlPJ8ZBm9Fe3FNR0x8rMstbOMf6 9GGENxcWeNXZay2fTywsd5a0UKs/QZGVCK6Xx7oc/I8gylxXWe73b2iHVyKOI2Eq /VO2dT51Xf3HGAIkO7zcoui2Txpvy/H9teo3Z4a3f6XiV+Fehd/NmR+c1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO9z5XPZaSjvKr6tUNLlFdZmyCAXMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvNzNQbGM5bHBLTzhxdnExUTB1VVYxbWJJSUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvAuMA0G CSqGSIb3DQEBCwUAA4IBAQB+lrvCHzZu438TaUqg915w6F/EjzsVivKttTtDHC0V STnXq6sgHTay2P0K584ebMLijSwP3b2+X87Ut3rpgXE5qII7Xg5y9oUUc3PiK+Fp bF1cLwhHXbbxO+ht10x+McdU/HrUW7l7FCdimUiN6KatRlSmOl1biddveWMcX9fu +yRgr8PU1MMOsZz2cSCpUzBkjJ/V2LSbJaTLN2mtOd5iZ6umRzjbcIarfJb8GP7T 4sx1iWHDdD/zpZAJ1owNNMeOc/J12Hn9P2qN8USj4U3tFByCOJKTU/HfMAa55ZdA VvnKxldAM1nrtT3A9YbTZbcypdSiTSmd+jAlZMJa1yo3 -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:39 2026 by rpki-client