This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/1x-3tsB1_AOxE933WH10Ae6nC30.roa File: 1x-3tsB1_AOxE933WH10Ae6nC30.roa (raw, json) Hash identifier: pncP3kxQqa4DeviiREhtgTst9RCDJ5mYO5yW2euMwGU= Subject key identifier: D7:1F:B7:B6:C0:75:FC:03:B1:13:DD:F7:58:7D:74:01:EE:A7:0B:7D Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC8303A5880818021D682523F880E49 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/1x-3tsB1_AOxE933WH10Ae6nC30.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200019 IP address blocks: 5.181.0.0/23 maxlen: 24 45.150.110.0/24 maxlen: 24 45.150.111.0/24 maxlen: 24 91.199.133.0/24 maxlen: 24 91.229.239.0/24 maxlen: 24 146.19.213.0/24 maxlen: 24 159.253.120.0/24 maxlen: 24 194.110.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:30:3a:58:80:81:80:21:d6:82:52:3f:88:0e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d71fb7b6c075fc03b113ddf7587d7401eea70b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:5d:bf:a7:e5:26:ce:a2:8c:51:d5:cb:59: 9c:08:a8:9e:33:37:47:3b:98:36:23:07:c9:1a:b6: 79:02:99:ab:10:c8:4d:5b:1a:b3:ad:a2:b5:4b:7f: 0e:9b:0c:4c:b9:7a:4d:7e:52:dd:b6:82:91:a3:64: d3:09:34:8d:00:08:41:d9:a3:0d:10:f7:71:8f:77: 00:9f:82:8c:75:3c:f7:d0:be:67:37:64:8c:a2:bb: 3c:b5:c5:7a:a6:85:54:82:b2:e6:58:21:a1:a1:0c: a0:35:fd:69:7f:dc:01:12:62:ec:68:4a:df:63:03: e3:88:63:51:98:50:a2:21:84:2c:16:94:71:ef:43: 3d:22:1a:42:17:bb:82:f4:b8:b6:77:f9:98:b2:28: df:7e:b6:6f:72:ce:60:18:35:db:93:e6:84:9a:17: 92:82:20:3b:34:61:4a:56:38:24:df:12:95:38:0c: 99:7f:91:c2:d8:3e:7a:47:58:05:bb:74:45:b4:17: 1c:ba:be:b7:a4:52:c0:eb:dc:0f:fb:27:4a:37:1c: 8f:6b:a5:f8:46:f8:23:a2:9d:f1:c3:cb:ee:58:a8: ff:19:77:98:02:2f:da:aa:0d:c8:2a:89:53:fb:3c: 60:da:56:fe:d6:44:8d:ca:87:28:bd:42:8b:01:62: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1F:B7:B6:C0:75:FC:03:B1:13:DD:F7:58:7D:74:01:EE:A7:0B:7D X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/1x-3tsB1_AOxE933WH10Ae6nC30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.0.0/23 45.150.110.0/23 91.199.133.0/24 91.229.239.0/24 146.19.213.0/24 159.253.120.0/24 194.110.247.0/24 Signature Algorithm: sha256WithRSAEncryption 23:db:86:72:31:63:2a:7b:5f:74:b0:9f:20:f2:53:93:cf:7c: 6e:90:fa:4f:a8:8d:bb:5c:10:a1:49:20:a7:2e:fe:1a:fb:92: 33:0d:5b:de:67:3f:15:73:f8:59:18:73:07:21:0a:a0:0a:8b: be:27:f6:77:10:55:6f:9e:11:bd:4f:93:66:66:07:5e:ce:7a: ec:5c:b7:89:45:29:09:93:13:28:5b:0c:20:71:3a:cd:cf:07: 8f:07:c3:6c:dd:05:56:3a:c6:6a:5d:e9:c7:19:27:fd:d6:84: 75:7b:47:18:55:c4:83:71:84:0d:95:7e:af:c5:c0:50:a7:14: 2e:39:71:b0:4c:4f:5e:b0:ae:a8:1b:7b:5d:63:10:29:c9:0e: 72:70:9b:48:9a:6f:33:5d:81:18:08:e5:c5:18:af:a1:01:f1: 30:dc:b8:c9:0b:b7:f2:b7:b9:cb:6e:60:31:3c:2b:b6:20:84: b5:19:ea:d7:64:b0:74:5f:c4:03:52:9f:af:73:91:44:65:49: 05:6a:4e:c9:c7:2d:64:f1:02:0e:6f:36:8f:a6:66:df:ba:cf: af:36:79:f9:de:59:5f:28:4d:d7:6d:f5:8e:f4:67:7f:3c:b5: 05:08:c0:c3:e0:78:2a:f7:fb:b9:55:98:c3:4b:0d:d9:14:83: 89:b5:c8:52 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6yDA6WICBgCHWglI/iA5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzFmYjdiNmMwNzVmYzAzYjExM2RkZjc1ODdkNzQwMWVlYTcwYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPldv6flJs6ijFHVy1mcCKieMzdH O5g2IwfJGrZ5ApmrEMhNWxqzraK1S38OmwxMuXpNflLdtoKRo2TTCTSNAAhB2aMN EPdxj3cAn4KMdTz30L5nN2SMors8tcV6poVUgrLmWCGhoQygNf1pf9wBEmLsaErf YwPjiGNRmFCiIYQsFpRx70M9IhpCF7uC9Li2d/mYsijffrZvcs5gGDXbk+aEmheS giA7NGFKVjgk3xKVOAyZf5HC2D56R1gFu3RFtBccur63pFLA69wP+ydKNxyPa6X4 Rvgjop3xw8vuWKj/GXeYAi/aqg3IKolT+zxg2lb+1kSNyocovUKLAWKx3wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFNcft7bAdfwDsRPd91h9dAHupwt9MB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvMXgtM3RzQjFfQU94RTkzM1dIMTBBZTZuQzMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBBbUAAwQB LZZuAwQAW8eFAwQAW+XvAwQAkhPVAwQAn/14AwQAwm73MA0GCSqGSIb3DQEBCwUA A4IBAQAj24ZyMWMqe190sJ8g8lOTz3xukPpPqI27XBChSSCnLv4a+5IzDVveZz8V c/hZGHMHIQqgCou+J/Z3EFVvnhG9T5NmZgdeznrsXLeJRSkJkxMoWwwgcTrNzweP B8Ns3QVWOsZqXenHGSf91oR1e0cYVcSDcYQNlX6vxcBQpxQuOXGwTE9esK6oG3td YxApyQ5ycJtImm8zXYEYCOXFGK+hAfEw3LjJC7fyt7nLbmAxPCu2IIS1GerXZLB0 X8QDUp+vc5FEZUkFak7Jxy1k8QIObzaPpmbfus+vNnn53llfKE3XbfWO9Gd/PLUF CMDD4Hgq9/u5VZjDSw3ZFIOJtchS -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:54 2026 by rpki-client