This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/o3zLYzfT2580u-9CLddXhuyulyE.roa File: o3zLYzfT2580u-9CLddXhuyulyE.roa (raw, json) Hash identifier: mwi/4c6LgdDRlLk19tfzSF9ChskElpBtCMQAXkoaQJk= Subject key identifier: A3:7C:CB:63:37:D3:DB:9F:34:BB:EF:42:2D:D7:57:86:EC:AE:97:21 Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8 Certificate serial: 019B7B3660A5C5B92801052CF89ED67A32F1 Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/o3zLYzfT2580u-9CLddXhuyulyE.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15363 IP address blocks: 193.101.11.0/24 maxlen: 24 193.101.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:60:a5:c5:b9:28:01:05:2c:f8:9e:d6:7a:32:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8 Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a37ccb6337d3db9f34bbef422dd75786ecae9721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:47:d8:3f:51:2c:0a:a9:29:83:a6:7a:b9:09: 88:80:56:5f:ca:1f:2b:77:36:82:1b:78:5d:9c:5e: 88:d4:b1:41:9d:44:a9:4c:40:e8:00:57:43:68:2c: 7e:59:0a:2f:55:45:a0:c3:d4:38:16:e5:48:ec:31: f4:34:15:fa:d9:97:9b:f6:b1:f0:08:97:ac:8a:96: ab:73:d6:36:92:0b:77:d5:d1:b7:c2:42:df:2f:4c: a0:17:d9:48:8f:4a:ad:8d:bd:7a:cf:ce:be:51:9f: ed:58:e8:ad:fb:e9:4c:7b:f3:12:68:c8:dd:26:d4: a7:be:f6:ce:b8:c6:8c:fb:57:eb:7c:32:1d:9b:34: 8e:c2:f6:08:24:fd:c7:b4:da:92:bf:b9:da:b8:90: 26:cc:84:0e:6e:24:a4:70:44:47:62:a7:54:2b:80: 30:c5:75:77:3a:6a:5d:e9:12:07:32:b0:af:12:9b: 43:7c:15:04:de:15:78:53:f8:e9:7c:29:a9:c6:a3: c1:b2:59:5e:72:d6:84:19:7b:92:c2:6f:09:02:9e: f2:4f:01:6b:a2:e8:01:32:05:cd:b4:52:88:92:f3: 45:20:09:4d:bc:3e:0a:37:61:75:82:07:49:b9:0a: 98:ec:16:c3:1e:18:77:4d:dd:bb:a8:46:b0:6f:1c: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:CB:63:37:D3:DB:9F:34:BB:EF:42:2D:D7:57:86:EC:AE:97:21 X509v3 Authority Key Identifier: keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/o3zLYzfT2580u-9CLddXhuyulyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.11.0/24 193.101.24.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:76:54:68:c9:07:eb:d2:34:22:f7:3f:c6:1f:8c:ab:bd:76: 9d:f1:3e:3a:18:65:89:aa:e7:39:c8:0f:85:88:d0:d1:41:19: df:00:54:9a:12:b5:41:43:b8:46:5b:a0:0b:6a:78:31:8f:b0: b1:0b:08:3d:40:4b:32:64:d9:92:ea:81:88:f5:57:33:38:cb: 13:41:10:65:c4:db:86:5e:20:7f:91:58:6c:1f:06:0f:cc:ad: 46:18:41:49:bf:24:43:26:4d:80:7b:d7:c4:4b:22:34:66:56: dd:f2:3e:82:14:3a:66:f1:34:f0:f5:7c:cc:93:dc:7f:fb:99: 2c:13:65:8e:22:44:68:ae:c5:82:7a:1b:fa:c5:4e:4b:bb:4b: 60:48:e0:36:84:1d:18:e1:01:dc:c6:37:7c:7d:75:18:0e:37: cb:26:a3:46:bf:4d:84:65:fd:c7:1e:a7:2c:a3:cf:94:b1:26: e1:a8:4f:3d:61:c0:bc:b9:98:65:9f:65:73:86:1f:06:45:89: 76:f5:5d:66:5b:98:27:48:82:1c:7f:3c:77:1f:06:3e:20:a9: d8:e5:7a:2d:cc:bb:21:15:cc:9c:35:db:0e:1e:c7:f6:2a:49: 14:2d:89:0b:75:5c:a0:3f:9a:e0:b9:e5:c3:34:16:7e:12:98: d7:ce:46:95 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NmClxbkoAQUs+J7WejLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1 ZTcyYTgwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzdjY2I2MzM3ZDNkYjlmMzRiYmVmNDIyZGQ3NTc4NmVjYWU5NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEfYP1EsCqkpg6Z6uQmIgFZfyh8r dzaCG3hdnF6I1LFBnUSpTEDoAFdDaCx+WQovVUWgw9Q4FuVI7DH0NBX62Zeb9rHw CJesiparc9Y2kgt31dG3wkLfL0ygF9lIj0qtjb16z86+UZ/tWOit++lMe/MSaMjd JtSnvvbOuMaM+1frfDIdmzSOwvYIJP3HtNqSv7nauJAmzIQObiSkcERHYqdUK4Aw xXV3Ompd6RIHMrCvEptDfBUE3hV4U/jpfCmpxqPBsllectaEGXuSwm8JAp7yTwFr ougBMgXNtFKIkvNFIAlNvD4KN2F1ggdJuQqY7BbDHhh3Td27qEawbxxo5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKN8y2M309ufNLvvQi3XV4bsrpchMB8GA1UdIwQY MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt NzQ5OWE4MjMxZjU2LzEvbzN6TFl6ZlQyNTgwdS05Q0xkZFhodXl1bHlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2 LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWULAwQD wWUYMA0GCSqGSIb3DQEBCwUAA4IBAQB8dlRoyQfr0jQi9z/GH4yrvXad8T46GGWJ quc5yA+FiNDRQRnfAFSaErVBQ7hGW6ALangxj7CxCwg9QEsyZNmS6oGI9VczOMsT QRBlxNuGXiB/kVhsHwYPzK1GGEFJvyRDJk2Ae9fESyI0Zlbd8j6CFDpm8TTw9XzM k9x/+5ksE2WOIkRorsWCehv6xU5Lu0tgSOA2hB0Y4QHcxjd8fXUYDjfLJqNGv02E Zf3HHqcso8+UsSbhqE89YcC8uZhln2Vzhh8GRYl29V1mW5gnSIIcfzx3HwY+IKnY 5XotzLshFcycNdsOHsf2KkkULYkLdVygP5rgueXDNBZ+EpjXzkaV -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:30 2026 by rpki-client