This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-xtKn9Zyfjouu02eTNwMjFTiDmk.roa File: 1-xtKn9Zyfjouu02eTNwMjFTiDmk.roa (raw, json) Hash identifier: Cbf7YAvQqckkOLFk9F1MxJbi+SfwKhwqMBKB5XNFtTU= Subject key identifier: FB:1B:4A:9F:D6:72:7E:3A:2E:BB:4D:9E:4C:DC:0C:8C:54:E2:0E:69 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35A027C123A093C0F5650D0855991A Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-xtKn9Zyfjouu02eTNwMjFTiDmk.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215339 IP address blocks: 194.102.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a0:27:c1:23:a0:93:c0:f5:65:0d:08:55:99:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb1b4a9fd6727e3a2ebb4d9e4cdc0c8c54e20e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:43:01:c0:9d:88:e1:06:ae:f4:9f:27:30:48: c3:53:a1:43:3b:c7:ef:1d:0c:c9:ce:13:7f:b5:dd: f1:16:7f:6f:c1:1c:06:66:24:a5:83:0d:c3:50:b3: 4a:70:95:2e:0d:0f:f6:a7:19:82:a7:e2:6b:c0:96: 9b:03:24:91:07:2f:42:0c:28:7a:c6:96:ef:c5:8e: 28:eb:5a:8b:ac:93:6d:47:21:34:43:58:5b:10:28: f0:80:5e:69:cd:5b:78:a7:76:0e:8a:38:af:96:50: de:1f:5e:2e:ee:f1:95:88:0f:42:5d:63:a6:86:2c: 97:9e:b8:06:8d:09:d3:07:27:a8:53:4b:3a:ff:ee: 4c:45:92:df:1a:bc:2d:e2:4d:00:fb:e6:c5:d6:5b: 38:c5:e9:43:29:e8:61:85:9f:95:42:fd:99:9f:b1: 1f:d2:6f:17:c2:5e:bb:d2:2b:89:37:2d:49:85:f8: a3:3b:2a:ad:ad:52:f7:ad:b3:2b:e9:23:a5:23:f2: 06:da:bd:57:b8:10:95:9a:23:e7:61:fd:96:db:e6: 08:14:10:02:ed:f2:14:41:fe:c5:5a:79:ed:f2:41: 88:b8:ab:6e:be:a4:00:05:5a:e0:84:8c:b3:d1:a9: d9:36:f1:72:ce:a4:ea:93:29:2c:4f:c6:4e:51:c9: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1B:4A:9F:D6:72:7E:3A:2E:BB:4D:9E:4C:DC:0C:8C:54:E2:0E:69 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-xtKn9Zyfjouu02eTNwMjFTiDmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.106.0/23 Signature Algorithm: sha256WithRSAEncryption 51:a9:e2:4f:73:50:8d:0b:e3:13:09:d5:c2:19:ed:99:24:db: df:cb:9e:fd:30:0a:32:b5:18:e1:60:1f:c1:5e:9a:7e:d3:44: 1d:03:95:78:2e:36:b5:8c:11:e5:70:ed:5c:8c:46:65:6e:ce: 3e:c6:77:f5:c4:50:fd:01:f9:f8:62:02:70:e2:52:82:c6:7a: 53:05:66:74:36:f0:f0:e2:8d:81:55:e4:f7:5e:07:0f:4b:2d: b9:45:0c:6e:06:b0:c8:9e:e9:61:b7:76:d1:b1:80:ad:1d:49: b3:c8:93:a6:ef:32:0f:c1:60:4c:e6:dc:f5:8d:5d:79:dd:b2: c1:0f:5f:73:c0:b5:6b:a6:ec:e2:d8:bd:66:59:05:8c:9d:06: 11:c2:49:2a:74:00:2b:47:a1:37:ba:98:c4:b5:b9:97:c3:3a: bd:a9:b7:c6:37:1f:4d:67:c1:93:13:cf:0a:1a:d9:c9:42:e9: f5:a0:78:3a:3e:ca:b8:69:9d:72:e5:52:83:11:48:98:d6:24: 0e:ed:4b:a4:b7:31:8c:0b:85:79:cb:5c:1c:2e:12:21:20:81: 6e:54:58:86:3a:46:11:21:d5:32:53:2c:a3:8d:13:c9:41:e2: 75:c3:a9:5e:81:a9:d8:9d:ac:42:8a:da:6b:be:3c:ba:58:45: b8:e1:4b:7b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NaAnwSOgk8D1ZQ0IVZkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjFiNGE5ZmQ2NzI3ZTNhMmViYjRkOWU0Y2RjMGM4YzU0ZTIwZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EMBwJ2I4Qau9J8nMEjDU6FDO8fv HQzJzhN/td3xFn9vwRwGZiSlgw3DULNKcJUuDQ/2pxmCp+JrwJabAySRBy9CDCh6 xpbvxY4o61qLrJNtRyE0Q1hbECjwgF5pzVt4p3YOijivllDeH14u7vGViA9CXWOm hiyXnrgGjQnTByeoU0s6/+5MRZLfGrwt4k0A++bF1ls4xelDKehhhZ+VQv2Zn7Ef 0m8Xwl670iuJNy1JhfijOyqtrVL3rbMr6SOlI/IG2r1XuBCVmiPnYf2W2+YIFBAC 7fIUQf7FWnnt8kGIuKtuvqQABVrghIyz0anZNvFyzqTqkyksT8ZOUcnmhwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsbSp/Wcn46LrtNnkzcDIxU4g5pMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvMS14dEtuOVp5ZmpvdXUwMmVUTndNakZUaURtay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVk Yi8xL01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcJmajAN BgkqhkiG9w0BAQsFAAOCAQEAUaniT3NQjQvjEwnVwhntmSTb38ue/TAKMrUY4WAf wV6aftNEHQOVeC42tYwR5XDtXIxGZW7OPsZ39cRQ/QH5+GICcOJSgsZ6UwVmdDbw 8OKNgVXk914HD0stuUUMbgawyJ7pYbd20bGArR1Js8iTpu8yD8FgTObc9Y1ded2y wQ9fc8C1a6bs4ti9ZlkFjJ0GEcJJKnQAK0ehN7qYxLW5l8M6vam3xjcfTWfBkxPP ChrZyULp9aB4Oj7KuGmdcuVSgxFImNYkDu1LpLcxjAuFectcHC4SISCBblRYhjpG ESHVMlMso40TyUHidcOpXoGp2J2sQoraa748ulhFuOFLew== -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:04 2026 by rpki-client