This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/_tWKsocuF_rpwquYOU5lc0O3uJM.roa File: _tWKsocuF_rpwquYOU5lc0O3uJM.roa (raw, json) Hash identifier: MmXxKOM+EuL1eSrHg+bnsKdzlf0fumiR/2fZPfIg4qU= Subject key identifier: FE:D5:8A:B2:87:2E:17:FA:E9:C2:AB:98:39:4E:65:73:43:B7:B8:93 Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e Certificate serial: 019B7AC78C3FAFBF3F0FEB87FDFA88FC5218 Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/_tWKsocuF_rpwquYOU5lc0O3uJM.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 145.43.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8c:3f:af:bf:3f:0f:eb:87:fd:fa:88:fc:52:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fed58ab2872e17fae9c2ab98394e657343b7b893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:e7:1f:52:e4:81:5e:95:06:9e:3d:f3:f9: 38:3b:78:b6:fd:1d:76:dd:06:f6:71:b1:c1:33:1d: 5b:c9:21:33:53:96:1e:d1:e3:51:19:68:9b:a0:f6: 93:6f:72:90:49:c4:f9:dc:88:a4:54:ae:d9:eb:ee: 50:f9:2f:9c:25:88:7a:45:78:c7:19:8a:35:42:89: e5:09:c1:38:9b:eb:e7:03:37:49:29:12:92:8a:be: 4b:68:b3:7f:fe:3b:d6:59:d1:c7:8d:0d:c4:67:7b: 40:93:36:61:b3:b8:63:5d:4a:c3:eb:36:5e:06:28: 57:e3:a3:05:de:49:84:ca:48:31:6a:02:28:cc:5e: 32:d1:18:27:0e:03:73:be:ac:fc:51:68:23:cd:34: e8:f3:48:06:aa:f0:ad:b0:b2:2d:9c:95:05:42:5d: 6e:85:41:4e:6c:b8:13:7c:34:5e:83:1c:e4:b1:5a: 41:5d:91:6f:15:a0:f4:b4:2b:b1:1c:bb:e0:1c:f1: 8a:d4:1f:69:d2:97:92:85:51:72:32:67:f8:1e:d2: 53:c0:d4:17:65:d3:bc:c1:05:e8:5e:f3:a6:59:b3: 76:8b:db:1f:69:0e:17:71:78:31:f5:53:bc:8a:87: 96:3c:bc:52:e5:82:6f:26:a4:1c:2a:99:de:be:f7: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D5:8A:B2:87:2E:17:FA:E9:C2:AB:98:39:4E:65:73:43:B7:B8:93 X509v3 Authority Key Identifier: keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/_tWKsocuF_rpwquYOU5lc0O3uJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.43.251.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:2f:b5:bb:70:b0:0c:18:1c:fc:b2:ba:c5:ca:84:59:d8:fe: 71:b3:a3:4e:30:c9:b0:c9:ef:06:22:57:54:9e:3a:52:09:ac: 3b:67:20:af:53:8e:bd:8e:63:e8:1e:21:14:72:95:c6:4a:71: 0e:e6:13:d3:26:56:2c:a6:4d:34:a0:85:aa:d2:59:d0:c5:0e: 31:be:db:b7:fc:20:e4:c8:ea:8b:b0:77:8f:a8:cb:94:02:1b: 2f:76:20:b1:3c:ca:c6:ca:07:4f:69:f0:03:47:2a:7a:40:af: 79:f1:6f:9d:58:91:c0:91:cd:03:53:5e:86:2f:61:44:41:13: 03:af:80:7c:1f:fb:7d:de:c1:a0:c4:ca:83:53:4c:bf:e7:c8: d4:86:68:36:c1:dc:c6:54:c0:0e:0d:89:44:45:a2:77:98:da: 84:00:bd:b4:90:dc:71:95:fc:ce:17:4f:ea:89:e0:75:c0:e0: 1f:03:ea:c8:12:3e:38:7f:19:3c:06:f8:5f:27:d3:46:bf:10: 6f:5d:07:ef:91:1b:47:e7:e4:7d:f4:b6:a0:c1:06:aa:bb:58: e9:7a:e6:d2:e4:8d:fa:69:80:4d:f4:9d:ae:22:eb:07:fc:f7: 84:b6:1f:b5:17:11:cc:d7:9e:10:e3:a0:3a:d3:b4:e9:5d:6c: 67:0a:02:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4w/r78/D+uH/fqI/FIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1 ZTg5MGUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWQ1OGFiMjg3MmUxN2ZhZTljMmFiOTgzOTRlNjU3MzQzYjdiODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2rnH1LkgV6VBp498/k4O3i2/R12 3Qb2cbHBMx1bySEzU5Ye0eNRGWiboPaTb3KQScT53IikVK7Z6+5Q+S+cJYh6RXjH GYo1QonlCcE4m+vnAzdJKRKSir5LaLN//jvWWdHHjQ3EZ3tAkzZhs7hjXUrD6zZe BihX46MF3kmEykgxagIozF4y0RgnDgNzvqz8UWgjzTTo80gGqvCtsLItnJUFQl1u hUFObLgTfDRegxzksVpBXZFvFaD0tCuxHLvgHPGK1B9p0peShVFyMmf4HtJTwNQX ZdO8wQXoXvOmWbN2i9sfaQ4XcXgx9VO8ioeWPLxS5YJvJqQcKpnevvcrFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP7VirKHLhf66cKrmDlOZXNDt7iTMB8GA1UdIwQY MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt ZTBhYzcyNjNkYjEyLzEvX3RXS3NvY3VGX3Jwd3F1WU9VNWxjME8zdUpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkSv7MA0G CSqGSIb3DQEBCwUAA4IBAQCbL7W7cLAMGBz8srrFyoRZ2P5xs6NOMMmwye8GIldU njpSCaw7ZyCvU469jmPoHiEUcpXGSnEO5hPTJlYspk00oIWq0lnQxQ4xvtu3/CDk yOqLsHePqMuUAhsvdiCxPMrGygdPafADRyp6QK958W+dWJHAkc0DU16GL2FEQRMD r4B8H/t93sGgxMqDU0y/58jUhmg2wdzGVMAODYlERaJ3mNqEAL20kNxxlfzOF0/q ieB1wOAfA+rIEj44fxk8BvhfJ9NGvxBvXQfvkRtH5+R99LagwQaqu1jpeubS5I36 aYBN9J2uIusH/PeEth+1FxHM154Q46A607TpXWxnCgKB -----END CERTIFICATE-----Generated at Fri Jan 2 16:22:39 2026 by rpki-client