This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/1-p3HaYx4IqX4cWvi0vNEwtBCaHk.roa File: 1-p3HaYx4IqX4cWvi0vNEwtBCaHk.roa (raw, json) Hash identifier: i3bN04ehC6KNjZ/mU1aU2Jp/6ScotgzMImvrL9el+ok= Subject key identifier: FA:9D:C7:69:8C:78:22:A5:F8:71:6B:E2:D2:F3:44:C2:D0:42:68:79 Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3 Certificate serial: 019B7DCA0C4DD219066453ECEFE886B796C1 Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/1-p3HaYx4IqX4cWvi0vNEwtBCaHk.roa Signing time: Fri 02 Jan 2026 08:19:11 +0000 ROA not before: Fri 02 Jan 2026 08:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44419 IP address blocks: 188.127.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:0c:4d:d2:19:06:64:53:ec:ef:e8:86:b7:96:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3 Validity Not Before: Jan 2 08:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa9dc7698c7822a5f8716be2d2f344c2d0426879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:a3:63:41:e0:04:7a:8d:0b:9a:ef:16:e8: 87:33:2b:85:99:d9:8b:0e:ff:25:2a:b6:b5:a7:4e: 50:fe:38:5b:5f:e2:68:0b:5f:85:bc:9f:4a:cf:3b: f2:c7:47:a3:4d:1f:9b:63:a4:cc:f5:de:30:c0:24: 95:77:32:47:f2:57:96:dc:91:a6:25:4f:1d:e9:34: 07:ab:65:69:48:60:76:a0:ab:6c:4e:b0:a2:6b:43: 94:bb:2d:38:f7:37:48:20:24:9b:75:76:65:fd:c7: 87:1f:b8:3a:d6:23:c2:82:ba:7f:53:32:54:d2:42: ca:e6:76:9e:01:f1:0f:1f:dc:38:6e:86:41:4b:dd: 94:2b:3c:2f:b7:53:df:32:d7:8e:ed:62:4f:01:77: 48:ab:e1:cc:89:6b:62:23:75:c6:9e:f8:4e:8c:d3: da:56:7c:17:57:b3:e1:19:b7:a3:df:c1:3e:28:2d: e9:d9:89:4d:76:63:1c:48:25:9b:62:65:36:80:82: eb:a4:81:11:03:59:96:c7:0e:62:cf:a0:de:ca:5c: ba:00:0c:0c:21:35:a3:d2:bf:d9:05:74:38:f5:92: 9b:32:15:d9:1a:22:65:fe:4e:2d:01:5e:d9:84:03: 0d:16:53:61:7f:e4:02:47:39:40:29:72:4f:68:36: 38:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:C7:69:8C:78:22:A5:F8:71:6B:E2:D2:F3:44:C2:D0:42:68:79 X509v3 Authority Key Identifier: keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/1-p3HaYx4IqX4cWvi0vNEwtBCaHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.127.128.0/19 Signature Algorithm: sha256WithRSAEncryption 63:cf:b2:01:8f:97:84:c4:cf:b4:cc:b4:48:ba:53:ab:4e:11: 5c:5e:31:e2:08:ed:b0:79:d2:92:81:6e:e0:85:b0:bc:fd:ff: 71:b1:51:ca:25:13:c9:de:2b:e0:9f:d9:75:c7:2b:82:fb:59: 69:fb:77:7b:b8:76:f9:64:be:8b:4c:42:58:b8:c4:43:47:81: a2:d8:dc:d9:dc:23:9d:64:1c:5d:39:ff:f2:02:02:54:30:d1: 73:5c:81:12:60:9c:9e:63:c6:65:1c:fc:3a:16:eb:db:97:70: 37:16:55:6c:07:fc:5a:92:41:bb:29:58:51:cd:25:bb:bd:96: 90:d5:0f:f1:32:2e:72:38:88:58:db:42:f7:4b:b3:57:f7:7a: 39:06:cf:bb:66:3a:53:6d:89:19:f6:22:16:c1:25:a9:e2:d7: 4a:41:75:e4:52:00:e2:18:16:28:66:23:80:29:fe:dc:10:f5: 80:16:75:eb:6d:8c:87:ce:8e:16:41:6f:1a:8f:1a:d6:7c:5d: 3b:55:32:49:8e:a6:77:2d:2e:7a:f9:27:7d:76:e6:eb:f0:fd: 59:b2:df:e8:5c:61:48:dd:5e:1e:e7:01:1e:ce:6d:e6:21:85: 0c:14:c1:42:c8:bd:13:ed:8a:73:01:1b:e0:9d:57:f2:6f:34: 7f:aa:a9:c3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9ygxN0hkGZFPs7+iGt5bBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxY2IwMGQyZjg0NDAxODEwYzMyMDBiNTJmYTM4OGU5MzY1 MWRkZjMwHhcNMjYwMTAyMDgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTlkYzc2OThjNzgyMmE1Zjg3MTZiZTJkMmYzNDRjMmQwNDI2ODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bWjY0HgBHqNC5rvFuiHMyuFmdmL Dv8lKra1p05Q/jhbX+JoC1+FvJ9Kzzvyx0ejTR+bY6TM9d4wwCSVdzJH8leW3JGm JU8d6TQHq2VpSGB2oKtsTrCia0OUuy049zdIICSbdXZl/ceHH7g61iPCgrp/UzJU 0kLK5naeAfEPH9w4boZBS92UKzwvt1PfMteO7WJPAXdIq+HMiWtiI3XGnvhOjNPa VnwXV7PhGbej38E+KC3p2YlNdmMcSCWbYmU2gILrpIERA1mWxw5iz6Deyly6AAwM ITWj0r/ZBXQ49ZKbMhXZGiJl/k4tAV7ZhAMNFlNhf+QCRzlAKXJPaDY4YwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqdx2mMeCKl+HFr4tLzRMLQQmh5MB8GA1UdIwQY MBaAFDHLANL4RAGBDDIAtS+jiOk2Ud3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUt ODBlNDI3NTk2YjVkLzEvMS1wM0hhWXg0SXFYNGNXdmkwdk5Fd3RCQ2FIay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTEvZWU5NTE5LWZmNjEtNDY3OS05MDE1LTgwZTQyNzU5NmI1 ZC8xL01jc0EwdmhFQVlFTU1nQzFMNk9JNlRaUjNmTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbx/gDAN BgkqhkiG9w0BAQsFAAOCAQEAY8+yAY+XhMTPtMy0SLpTq04RXF4x4gjtsHnSkoFu 4IWwvP3/cbFRyiUTyd4r4J/ZdccrgvtZaft3e7h2+WS+i0xCWLjEQ0eBotjc2dwj nWQcXTn/8gICVDDRc1yBEmCcnmPGZRz8Ohbr25dwNxZVbAf8WpJBuylYUc0lu72W kNUP8TIucjiIWNtC90uzV/d6OQbPu2Y6U22JGfYiFsElqeLXSkF15FIA4hgWKGYj gCn+3BD1gBZ1622Mh86OFkFvGo8a1nxdO1UySY6mdy0uevknfXbm6/D9WbLf6Fxh SN1eHucBHs5t5iGFDBTBQsi9E+2KcwEb4J1X8m80f6qpww== -----END CERTIFICATE-----Generated at Mon Jan 26 21:16:24 2026 by rpki-client