This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/p3pP3dOyf2cCJltMCKS_paxbHz0.roa File: p3pP3dOyf2cCJltMCKS_paxbHz0.roa (raw, json) Hash identifier: CYVLNXeH3sa1PM2bKW5nAtzQIxQ3G5ZrltRrz/bdEN0= Subject key identifier: A7:7A:4F:DD:D3:B2:7F:67:02:26:5B:4C:08:A4:BF:A5:AC:5B:1F:3D Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BB30CA676BEFF02B2B56577F4B4A Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/p3pP3dOyf2cCJltMCKS_paxbHz0.roa Signing time: Fri 02 Jan 2026 16:20:32 +0000 ROA not before: Fri 02 Jan 2026 16:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39458 IP address blocks: 193.34.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:bb:30:ca:67:6b:ef:f0:2b:2b:56:57:7f:4b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a77a4fddd3b27f6702265b4c08a4bfa5ac5b1f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:c5:f3:f7:7b:5b:92:33:be:d2:56:27:df: 64:8c:92:b3:1d:f7:79:1c:f4:39:70:81:dc:7f:3c: a2:61:29:e1:8f:f6:6a:8a:04:b5:aa:30:34:78:43: f4:0a:5b:64:71:c2:ca:c9:e7:96:00:c4:63:dd:e0: bf:03:fd:e8:db:96:c2:ac:ff:d7:ce:c5:44:5f:02: 83:dc:4a:5b:b9:26:1c:31:9e:44:f2:41:82:01:b1: c1:bf:98:40:eb:c5:70:ee:9a:68:b6:10:0f:be:83: 52:5c:fe:d9:7c:cc:d4:9a:6b:88:7a:f7:48:34:bd: 00:d5:e6:62:23:f7:9c:98:05:10:07:3f:f8:50:f6: e2:74:12:1a:ba:84:93:f2:96:af:7d:7d:60:ab:66: 06:1c:48:30:c6:5e:44:34:b7:2a:b1:b5:2d:3f:58: dc:14:49:a0:50:c4:b3:66:97:ba:2f:56:13:84:e6: f1:8b:5b:8d:53:36:ce:9b:8e:cc:17:b4:c6:a5:c8: 01:5e:70:49:43:f9:4d:1e:6f:8d:90:e9:bc:c2:1e: f0:23:8c:9e:4d:25:a2:34:62:29:c7:b8:18:2d:70: 32:6e:87:0d:22:a4:79:da:ab:75:3e:dc:0b:ab:ae: 32:d4:ba:f2:77:f0:6d:cd:ce:ac:fa:f7:ab:33:a9: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7A:4F:DD:D3:B2:7F:67:02:26:5B:4C:08:A4:BF:A5:AC:5B:1F:3D X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/p3pP3dOyf2cCJltMCKS_paxbHz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.78.0/24 Signature Algorithm: sha256WithRSAEncryption c8:d0:68:e9:65:92:13:e3:db:69:ca:41:c4:c3:e7:d0:05:03: d0:01:7d:02:6d:fc:79:1f:a3:cb:f6:94:03:2c:04:85:ce:a5: 41:1a:1c:cc:10:e8:d4:b4:ce:16:a1:84:83:79:9c:17:a6:2a: e1:08:a8:02:a3:5f:1d:e7:3a:0a:7d:df:97:8d:17:2c:1c:74: ba:87:fd:19:4d:11:29:1a:79:8e:24:2e:00:e5:0c:99:4e:1d: ee:d0:3a:82:3a:ec:10:6f:eb:e2:76:c5:de:a3:48:5f:df:22: e0:2d:f4:54:d3:14:0e:a7:16:e1:8a:d6:67:ed:b0:a7:f5:d0: 5c:0b:d5:08:ba:d8:38:b8:c6:59:86:b0:d6:a1:64:17:f6:25: 7d:8c:c8:b2:df:2c:d6:94:ff:64:01:17:cf:87:96:b4:72:d8: b7:3a:e3:af:a1:22:a5:0e:ee:a0:8d:6d:31:e0:f8:e6:c7:2c: 3e:b5:e6:13:07:89:0d:30:de:ad:55:5e:e2:ce:35:50:a0:51: 6e:08:d6:2f:38:23:04:b3:ca:84:4c:90:76:2b:4d:17:46:d4: f4:df:4e:59:bf:75:21:38:a0:e3:69:d6:19:9b:e1:c8:3e:d1: ad:ac:73:12:07:b7:57:18:29:ba:15:83:43:ee:21:37:56:30: 45:a9:c4:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grswymdr7/ArK1ZXf0tKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzdhNGZkZGQzYjI3ZjY3MDIyNjViNGMwOGE0YmZhNWFjNWIxZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrHF8/d7W5IzvtJWJ99kjJKzHfd5 HPQ5cIHcfzyiYSnhj/ZqigS1qjA0eEP0CltkccLKyeeWAMRj3eC/A/3o25bCrP/X zsVEXwKD3EpbuSYcMZ5E8kGCAbHBv5hA68Vw7ppothAPvoNSXP7ZfMzUmmuIevdI NL0A1eZiI/ecmAUQBz/4UPbidBIauoST8pavfX1gq2YGHEgwxl5ENLcqsbUtP1jc FEmgUMSzZpe6L1YThObxi1uNUzbOm47MF7TGpcgBXnBJQ/lNHm+NkOm8wh7wI4ye TSWiNGIpx7gYLXAybocNIqR52qt1PtwLq64y1Lryd/Btzc6s+verM6nZ4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKd6T93Tsn9nAiZbTAikv6WsWx89MB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvcDNwUDNkT3lmMmNDSmx0TUNLU19wYXhiSHowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSJOMA0G CSqGSIb3DQEBCwUAA4IBAQDI0GjpZZIT49tpykHEw+fQBQPQAX0Cbfx5H6PL9pQD LASFzqVBGhzMEOjUtM4WoYSDeZwXpirhCKgCo18d5zoKfd+XjRcsHHS6h/0ZTREp GnmOJC4A5QyZTh3u0DqCOuwQb+vidsXeo0hf3yLgLfRU0xQOpxbhitZn7bCn9dBc C9UIutg4uMZZhrDWoWQX9iV9jMiy3yzWlP9kARfPh5a0cti3OuOvoSKlDu6gjW0x 4Pjmxyw+teYTB4kNMN6tVV7izjVQoFFuCNYvOCMEs8qETJB2K00XRtT0305Zv3Uh OKDjadYZm+HIPtGtrHMSB7dXGCm6FYND7iE3VjBFqcSg -----END CERTIFICATE-----Generated at Tue Jan 20 15:18:01 2026 by rpki-client