This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/P12XKmajnQzt4TT10Louk6Kjyco.roa File: P12XKmajnQzt4TT10Louk6Kjyco.roa (raw, json) Hash identifier: KqnQ+RYQfRbLN2Brq+Uz+gVyYb0l27obpG7KQSdsmEk= Subject key identifier: 3F:5D:97:2A:66:A3:9D:0C:ED:E1:34:F5:D0:BA:2E:93:A2:A3:C9:CA Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec Certificate serial: 019B7C8061077039A7C77C4ABC31984CD3E3 Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/P12XKmajnQzt4TT10Louk6Kjyco.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202766 IP address blocks: 188.119.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:61:07:70:39:a7:c7:7c:4a:bc:31:98:4c:d3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f5d972a66a39d0cede134f5d0ba2e93a2a3c9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:35:71:2e:32:f0:cb:a9:99:e5:85:5a:22: 06:f2:59:8d:65:cc:7c:19:20:41:2e:9a:75:da:87: cb:5b:22:30:d9:38:17:8b:74:ea:22:65:17:b3:73: 1e:a2:b2:19:b0:2e:c3:bb:6a:e9:91:d3:78:3a:75: 49:8b:ba:09:61:71:fb:3e:e6:7e:b9:34:44:db:fd: 9d:c3:09:b2:6e:db:f9:97:b8:1b:9b:bf:d1:35:75: 15:2a:4f:91:b2:8f:13:e2:3b:b4:b6:68:db:27:04: dc:cb:8c:ae:46:b3:3b:9d:24:bd:4c:f7:c5:da:56: d9:53:ff:68:6c:19:06:05:fa:f3:e3:8c:9e:2b:cc: 98:26:61:e2:a0:99:39:ad:32:5a:db:0f:22:be:96: 68:11:0d:16:1b:5a:7e:3b:fd:81:cf:24:89:e2:a0: d2:1c:e4:03:f3:9f:4e:e7:bd:10:3c:54:7b:9b:5a: 8a:ff:2b:c8:af:1e:34:74:87:91:14:54:d7:a7:8f: 62:a9:f1:cc:68:96:bc:d3:b8:7d:ff:71:f8:34:bf: ac:cc:75:16:41:4c:f1:1d:61:5e:64:bd:d1:fe:9c: bb:ed:06:cb:fc:5b:9f:74:b7:9f:38:16:fa:23:b1: 52:01:3a:b8:f6:43:e8:00:b4:bb:69:b3:3c:05:d3: 07:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5D:97:2A:66:A3:9D:0C:ED:E1:34:F5:D0:BA:2E:93:A2:A3:C9:CA X509v3 Authority Key Identifier: keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/P12XKmajnQzt4TT10Louk6Kjyco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.119.105.0/24 Signature Algorithm: sha256WithRSAEncryption 12:6b:3a:95:ee:80:84:4b:dc:6f:0a:45:dd:9c:4f:da:94:68: 65:44:4e:0f:1f:cb:a4:90:e5:20:81:46:4e:ad:9b:d4:e4:6b: 9a:b9:2d:b2:ae:ca:39:6f:f2:f8:cc:3e:81:06:74:a9:49:66: 6c:5b:30:7f:ad:cf:06:17:8c:7b:46:b2:52:09:3e:68:f6:bc: 4d:b9:16:aa:69:44:8f:51:44:1a:11:ba:51:ff:67:31:44:06: 5b:8b:7c:f2:10:c5:95:39:27:8d:1f:8d:18:76:46:21:dd:e8: 97:80:f4:32:c9:29:48:f1:b3:35:e7:f6:2e:e7:a7:1a:76:9c: 37:fd:03:07:56:9d:f2:c5:e1:08:2a:b5:a8:6c:89:dc:15:38: 28:e4:c1:36:21:2a:68:6c:04:05:2d:00:ae:8e:af:35:65:78: e5:3e:c9:78:1b:5c:0b:2b:67:02:f3:31:59:31:a1:0f:df:6b: 3b:b9:2c:bb:5d:44:28:00:ac:4a:76:47:e0:8c:d4:6c:86:2d: dd:7d:ed:d9:51:18:b8:a4:55:35:56:4b:0c:fb:68:ce:d5:46: 57:f7:8e:d4:11:f1:f2:1d:96:b4:d9:ed:11:d9:a1:87:21:29: 08:67:07:f9:53:4c:8d:03:08:a4:5f:ac:00:89:31:ab:31:c6: 92:96:a1:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGEHcDmnx3xKvDGYTNPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjBkNTM1ZWViY2YyOGU2MGFjOThhZTQ5NWIzNDk4MWI1 YTkzZWMwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjVkOTcyYTY2YTM5ZDBjZWRlMTM0ZjVkMGJhMmU5M2EyYTNjOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVo1cS4y8MupmeWFWiIG8lmNZcx8 GSBBLpp12ofLWyIw2TgXi3TqImUXs3MeorIZsC7Du2rpkdN4OnVJi7oJYXH7PuZ+ uTRE2/2dwwmybtv5l7gbm7/RNXUVKk+Rso8T4ju0tmjbJwTcy4yuRrM7nSS9TPfF 2lbZU/9obBkGBfrz44yeK8yYJmHioJk5rTJa2w8ivpZoEQ0WG1p+O/2BzySJ4qDS HOQD859O570QPFR7m1qK/yvIrx40dIeRFFTXp49iqfHMaJa807h9/3H4NL+szHUW QUzxHWFeZL3R/py77QbL/FufdLefOBb6I7FSATq49kPoALS7abM8BdMHzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9dlypmo50M7eE09dC6LpOio8nKMB8GA1UdIwQY MBaAFMOw1TXuvPKOYKyYrklbNJgbWpPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdEVk5lNjg4bzVnckppdVNWczBtQnRhay13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NTFlOTItOTkyZC00MWRhLTk4NmIt OTUxOTY5M2VhYTdiLzEvUDEyWEttYWpuUXp0NFRUMTBMb3VrNktqeWNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81NTFlOTItOTkyZC00MWRhLTk4NmItOTUxOTY5M2VhYTdi LzEvdzdEVk5lNjg4bzVnckppdVNWczBtQnRhay13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHdpMA0G CSqGSIb3DQEBCwUAA4IBAQASazqV7oCES9xvCkXdnE/alGhlRE4PH8ukkOUggUZO rZvU5GuauS2yrso5b/L4zD6BBnSpSWZsWzB/rc8GF4x7RrJSCT5o9rxNuRaqaUSP UUQaEbpR/2cxRAZbi3zyEMWVOSeNH40YdkYh3eiXgPQyySlI8bM15/Yu56cadpw3 /QMHVp3yxeEIKrWobIncFTgo5ME2ISpobAQFLQCujq81ZXjlPsl4G1wLK2cC8zFZ MaEP32s7uSy7XUQoAKxKdkfgjNRshi3dfe3ZURi4pFU1VksM+2jO1UZX947UEfHy HZa02e0R2aGHISkIZwf5U0yNAwikX6wAiTGrMcaSlqHq -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:14 2026 by rpki-client