This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa File: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (raw, json) Hash identifier: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog= Subject key identifier: F9:0D:F1:0D:97:F3:41:CE:AD:57:6F:44:C4:45:71:64:C2:E1:12:B5 Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d Certificate serial: 019B79100FA9E159634826F467043532D701 Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa Signing time: Thu 01 Jan 2026 10:17:34 +0000 ROA not before: Thu 01 Jan 2026 10:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 151.97.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0f:a9:e1:59:63:48:26:f4:67:04:35:32:d7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f90df10d97f341cead576f44c4457164c2e112b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:df:73:ad:bf:ce:88:d8:51:5d:75:7b:85: 56:5e:f9:ae:02:5d:d0:da:ff:21:0d:2c:75:ae:5d: 10:66:d8:93:95:67:b2:10:39:88:55:db:89:bb:cc: a6:fc:69:7f:ff:c0:19:e4:be:0e:80:e6:f2:8e:6f: ea:e2:c4:83:6d:35:32:20:d7:ba:a7:66:9c:b8:d7: 4d:e8:70:5b:ea:d2:55:62:d9:ca:b5:44:f3:ac:9c: 42:28:42:75:ae:58:a0:98:9d:d2:80:ba:f1:82:b2: fc:b2:f7:cc:c7:63:06:64:b3:76:e1:e4:31:63:04: 4d:3a:e4:58:f9:1f:83:c2:23:72:25:6a:88:7b:f8: 3b:87:bc:98:19:5e:f5:49:94:e2:6d:34:16:7c:dd: 24:f4:20:7d:ce:25:33:4c:e9:a7:ca:a9:88:76:e7: 23:87:79:c1:a8:c2:84:8d:e3:4c:cf:eb:16:38:86: 2c:12:85:f7:c0:87:3e:31:d5:5b:40:90:c0:e9:50: d3:55:1e:51:18:11:0b:93:15:10:56:f0:d4:00:08: d0:d8:0f:8b:51:dd:6b:eb:d3:a4:44:e2:fa:69:c6: 5b:05:94:e5:e4:f6:57:e5:a9:ee:f8:23:72:6b:d9: 79:3c:29:01:07:46:94:17:c0:01:d7:1e:cb:8c:ff: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0D:F1:0D:97:F3:41:CE:AD:57:6F:44:C4:45:71:64:C2:E1:12:B5 X509v3 Authority Key Identifier: keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption 52:05:e5:4d:96:62:19:dc:1d:1b:02:74:b9:5a:ba:7b:9f:ee: 06:aa:5d:25:2b:2e:57:d8:df:56:83:75:55:9e:a7:36:70:bd: ef:c1:04:49:af:30:57:18:91:37:a0:7d:89:16:a3:62:66:d3: 49:71:44:16:82:39:09:b1:f1:d0:9c:2b:f5:72:ce:67:c6:dd: 2e:3a:32:d5:65:8d:a9:62:1d:99:09:f6:f3:de:2d:46:16:7e: 01:8c:33:57:c7:c5:82:3d:b3:4b:f9:99:b9:9e:84:83:c3:50: c0:7c:91:68:08:16:53:7e:77:a3:9e:f8:e9:8a:41:15:6a:2f: 96:3d:49:cf:35:09:89:d8:a3:51:31:ea:a0:96:d0:b9:27:56: c3:c6:ef:3d:fe:ee:f5:67:2a:6d:56:8c:71:cd:6a:78:66:4f: 46:ac:1d:3a:67:2b:8a:61:f6:65:e1:7f:53:a3:33:a1:d9:3c: aa:72:7d:ef:c8:d1:ef:a5:5e:c9:46:88:66:47:9a:d4:5c:38: c2:d3:2c:40:42:c8:36:c3:91:de:1f:c3:cd:aa:4b:90:e0:68: f1:33:f9:de:97:6b:1f:13:6c:63:67:55:8c:5d:c4:1a:d6:57: 6c:67:cb:89:57:76:35:34:c9:b9:56:f2:3d:95:78:67:4b:38: eb:5c:dc:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EA+p4VljSCb0ZwQ1MtcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MjM0ZWQzZDhjYTk2ZGM1MThkMzVjMWU3YzkyYmViZmNm NmNlNGQwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTBkZjEwZDk3ZjM0MWNlYWQ1NzZmNDRjNDQ1NzE2NGMyZTExMmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHnfc62/zojYUV11e4VWXvmuAl3Q 2v8hDSx1rl0QZtiTlWeyEDmIVduJu8ym/Gl//8AZ5L4OgObyjm/q4sSDbTUyINe6 p2acuNdN6HBb6tJVYtnKtUTzrJxCKEJ1rligmJ3SgLrxgrL8svfMx2MGZLN24eQx YwRNOuRY+R+DwiNyJWqIe/g7h7yYGV71SZTibTQWfN0k9CB9ziUzTOmnyqmIducj h3nBqMKEjeNMz+sWOIYsEoX3wIc+MdVbQJDA6VDTVR5RGBELkxUQVvDUAAjQ2A+L Ud1r69OkROL6acZbBZTl5PZX5anu+CNya9l5PCkBB0aUF8AB1x7LjP+p0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPkN8Q2X80HOrVdvRMRFcWTC4RK1MB8GA1UdIwQY MBaAFOYjTtPYypbcUY01wefJK+v89s5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85YjY3NGMtMzY1Ny00YzI1LTk5NTMt M2Y3MDQwOTk3NjgyLzEvMS1RM3hEWmZ6UWM2dFYyOUV4RVZ4Wk1MaEVyVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjgvOWI2NzRjLTM2NTctNGMyNS05OTUzLTNmNzA0MDk5NzY4 Mi8xLzVpTk8wOWpLbHR4UmpUWEI1OGtyNl96MnprMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJdhMA0G CSqGSIb3DQEBCwUAA4IBAQBSBeVNlmIZ3B0bAnS5Wrp7n+4Gql0lKy5X2N9Wg3VV nqc2cL3vwQRJrzBXGJE3oH2JFqNiZtNJcUQWgjkJsfHQnCv1cs5nxt0uOjLVZY2p Yh2ZCfbz3i1GFn4BjDNXx8WCPbNL+Zm5noSDw1DAfJFoCBZTfnejnvjpikEVai+W PUnPNQmJ2KNRMeqgltC5J1bDxu89/u71ZyptVoxxzWp4Zk9GrB06ZyuKYfZl4X9T ozOh2Tyqcn3vyNHvpV7JRohmR5rUXDjC0yxAQsg2w5HeH8PNqkuQ4GjxM/nel2sf E2xjZ1WMXcQa1ldsZ8uJV3Y1NMm5VvI9lXhnSzjrXNwU -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:20 2026 by rpki-client