This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1_2juw-qDimXAKUKlW77G6-l8VU.roa File: 1_2juw-qDimXAKUKlW77G6-l8VU.roa (raw, json) Hash identifier: U6J2P9E4X9+41K3VGKQYqBsbobF7Sfdc1rr2uj0ww1Y= Subject key identifier: D7:FD:A3:BB:0F:AA:0E:29:97:00:A5:0A:95:6E:FB:1B:AF:A5:F1:55 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B78349A21097EEFDDDD02123ECB55FB8D Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1_2juw-qDimXAKUKlW77G6-l8VU.roa Signing time: Thu 01 Jan 2026 06:17:51 +0000 ROA not before: Thu 01 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35793 IP address blocks: 93.127.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9a:21:09:7e:ef:dd:dd:02:12:3e:cb:55:fb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7fda3bb0faa0e299700a50a956efb1bafa5f155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bf:ba:c1:e1:e4:34:af:9e:92:8a:cf:ec:d4: 8a:46:9c:e3:2b:e7:8c:69:84:07:01:74:8b:c5:24: 57:94:f7:04:d8:db:30:4a:a0:39:c3:c0:c8:57:01: 4e:e2:87:82:bc:7c:bb:a0:ea:5c:a1:9c:54:f6:ea: 57:e5:b8:93:15:59:91:52:82:33:16:d3:5d:a3:45: 8c:32:09:58:70:3c:b3:fc:11:7e:8b:38:69:67:10: 7c:f9:88:21:38:1e:bb:47:dd:f7:2d:5d:7b:6e:e5: 4e:ae:27:78:43:32:86:8c:84:1f:fb:00:51:63:97: 25:70:99:7c:95:7b:8d:b5:c3:32:38:bd:ac:af:75: 22:b7:9f:33:7c:74:07:4f:08:18:e8:5d:ab:97:1e: 05:f0:68:83:8c:49:af:90:6c:a0:a1:66:14:59:89: e1:69:11:a4:1b:ec:00:e8:6e:6b:14:a1:8b:18:e9: 53:b9:fb:d8:bc:6c:10:ce:60:12:26:65:23:68:7b: 39:ad:73:86:db:02:95:d8:be:77:2f:e8:23:82:fe: 16:e9:2a:7e:f4:43:9e:2d:a3:7b:3b:e3:67:04:02: d7:11:67:0f:55:38:a9:94:22:39:f6:eb:e7:9f:6c: 0e:ad:9a:ef:55:46:85:91:de:a1:cb:86:62:28:42: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FD:A3:BB:0F:AA:0E:29:97:00:A5:0A:95:6E:FB:1B:AF:A5:F1:55 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1_2juw-qDimXAKUKlW77G6-l8VU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.127.161.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:ba:49:36:2c:b1:a2:c7:7b:e6:a1:56:9d:ad:3d:9b:c7:8f: e2:b1:23:cd:b2:ae:f8:42:db:71:92:04:5f:74:31:12:09:8e: f5:7d:30:85:28:74:0d:ea:d2:3a:3a:bf:03:e8:1b:0d:11:6e: a7:29:c0:1a:9b:c5:ac:04:0d:c2:d8:f3:e3:99:45:d7:91:2c: 9a:1f:f5:a1:ea:5d:0d:51:ab:5a:3f:87:fb:09:a7:d9:cd:12: 45:96:a0:c9:0a:ad:57:ad:43:78:21:f5:4d:8c:f5:e9:ae:7c: b5:3e:77:df:4f:60:7f:b0:4f:55:6f:43:c2:d6:21:c0:48:bb: f0:7c:b0:7a:ab:31:94:5e:3d:80:6f:7f:2e:89:76:27:b6:60: 64:6f:aa:27:c7:32:d4:a5:e6:5b:24:aa:12:60:04:99:5d:18: 9a:f2:ee:80:64:d5:95:e3:b0:e4:e8:d9:94:39:b9:52:cf:45: 31:df:9b:97:26:86:57:3c:c0:87:37:77:5f:74:54:0e:71:2c: 06:3d:98:83:58:d0:d7:7c:fe:e5:16:f7:13:65:e9:6d:e8:4b: 11:a0:d9:3f:75:40:85:a5:5d:f1:ee:4a:54:90:74:32:04:bc: 1c:5c:0e:6a:db:83:4a:c2:ba:71:b8:79:e7:f3:3b:ad:eb:dd: 49:9c:a1:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJohCX7v3d0CEj7LVfuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2ZkYTNiYjBmYWEwZTI5OTcwMGE1MGE5NTZlZmIxYmFmYTVmMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L+6weHkNK+ekorP7NSKRpzjK+eM aYQHAXSLxSRXlPcE2NswSqA5w8DIVwFO4oeCvHy7oOpcoZxU9upX5biTFVmRUoIz FtNdo0WMMglYcDyz/BF+izhpZxB8+YghOB67R933LV17buVOrid4QzKGjIQf+wBR Y5clcJl8lXuNtcMyOL2sr3Uit58zfHQHTwgY6F2rlx4F8GiDjEmvkGygoWYUWYnh aRGkG+wA6G5rFKGLGOlTufvYvGwQzmASJmUjaHs5rXOG2wKV2L53L+gjgv4W6Sp+ 9EOeLaN7O+NnBALXEWcPVTiplCI59uvnn2wOrZrvVUaFkd6hy4ZiKEJl7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNf9o7sPqg4plwClCpVu+xuvpfFVMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvMV8yanV3LXFEaW1YQUtVS2xXNzdHNi1sOFZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXX+hMA0G CSqGSIb3DQEBCwUAA4IBAQCeukk2LLGix3vmoVadrT2bx4/isSPNsq74QttxkgRf dDESCY71fTCFKHQN6tI6Or8D6BsNEW6nKcAam8WsBA3C2PPjmUXXkSyaH/Wh6l0N UataP4f7CafZzRJFlqDJCq1XrUN4IfVNjPXprny1PnffT2B/sE9Vb0PC1iHASLvw fLB6qzGUXj2Ab38uiXYntmBkb6onxzLUpeZbJKoSYASZXRia8u6AZNWV47Dk6NmU OblSz0Ux35uXJoZXPMCHN3dfdFQOcSwGPZiDWNDXfP7lFvcTZelt6EsRoNk/dUCF pV3x7kpUkHQyBLwcXA5q24NKwrpxuHnn8zut691JnKEC -----END CERTIFICATE-----Generated at Sun Jan 25 15:51:55 2026 by rpki-client