This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-jH0g_JDLp_7206NgV5uijHSTJE.roa File: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (raw, json) Hash identifier: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ= Subject key identifier: FA:31:F4:83:F2:43:2E:9F:FB:DB:4E:8D:81:5E:6E:8A:31:D2:4C:91 Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 019B78A2A3B9C69FF6922A772FBAC97D14C3 Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-jH0g_JDLp_7206NgV5uijHSTJE.roa Signing time: Thu 01 Jan 2026 08:18:03 +0000 ROA not before: Thu 01 Jan 2026 08:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2792 IP address blocks: 80.159.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a3:b9:c6:9f:f6:92:2a:77:2f:ba:c9:7d:14:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa31f483f2432e9ffbdb4e8d815e6e8a31d24c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:db:82:72:89:cb:50:41:a0:73:24:35:ae: c1:dd:af:a1:9a:45:70:64:b1:60:f1:98:98:e2:54: 0e:e9:c4:63:3a:e0:6e:d9:86:fd:49:70:18:b5:d3: c6:df:45:b1:dc:82:18:d4:b2:b6:b1:48:85:63:79: 39:0e:6c:ec:0d:52:4a:21:81:dc:ef:53:5a:26:25: 96:d7:91:39:cd:0e:7e:17:35:70:0e:40:e7:38:97: fb:cb:0a:62:15:98:28:07:0f:29:e7:93:f3:e6:ca: 9d:60:39:92:d9:a3:d5:a8:9d:7e:ec:f5:dc:df:b0: c4:89:5f:4d:9b:99:54:7b:94:1d:f0:97:e0:cc:2d: 05:f3:89:18:eb:0e:aa:85:e8:0a:6d:fa:07:18:0b: db:09:4d:c6:8e:7d:03:67:dc:55:5b:14:79:81:9c: 9d:79:b5:1c:68:5c:87:d8:ac:4c:7c:c5:96:3e:6f: 07:c2:eb:b8:ab:2d:d0:40:9c:ad:71:d7:32:09:d5: 7b:3e:d2:9b:0c:df:46:67:d8:fe:bb:a4:2d:23:aa: ed:63:82:3c:e5:12:65:74:cf:36:c6:27:36:da:3c: f6:3b:13:91:56:cc:53:f2:9a:5f:43:b4:99:72:5c: 12:6c:57:07:96:f4:18:62:4c:d5:42:95:bf:1f:d9: 9e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:31:F4:83:F2:43:2E:9F:FB:DB:4E:8D:81:5E:6E:8A:31:D2:4C:91 X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-jH0g_JDLp_7206NgV5uijHSTJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.159.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:2b:39:42:03:9e:f3:f1:e6:04:3f:39:46:5e:fd:36:4e:e2: 72:83:25:0d:e0:9d:ad:ca:57:66:b9:55:f0:b3:d0:ec:6b:c2: e9:18:99:cc:62:23:d4:47:9d:a6:11:60:a4:25:4c:80:09:fc: a1:e4:37:a9:50:70:06:a5:62:36:1b:b6:af:7d:12:c0:c7:f9: 5b:f2:1a:90:2b:69:b5:5a:f2:77:c1:2b:55:3b:a1:b7:dd:b0: 4b:d8:e5:09:44:69:cd:4f:2a:bf:22:dd:3c:f5:30:9d:6b:d6: f3:0d:a1:2f:7c:d8:31:c6:3f:fc:37:5d:0a:5e:38:9a:43:c8: c2:4f:e8:fd:4a:05:1a:4e:ad:a4:99:fa:aa:77:0b:55:35:75: 7f:22:a7:97:d3:08:72:54:07:0f:90:6a:4a:bb:b1:88:9b:14: 69:ff:97:ba:fd:7c:03:4e:cd:e4:ad:b7:66:af:d2:c7:38:dc: b9:08:dd:25:b8:46:24:7f:54:50:83:40:23:4b:ee:ea:ad:5e: 26:5a:b6:27:b2:f3:27:08:1d:08:d9:bd:ad:89:ac:ca:ac:f6: 02:b6:b3:c5:66:18:2b:d6:25:91:82:62:cc:8f:5c:d0:eb:ae: f6:70:e0:85:ce:de:17:17:10:92:3e:1b:b9:9c:ea:82:c5:16: 0d:3d:1a:82 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oqO5xp/2kip3L7rJfRTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTMxZjQ4M2YyNDMyZTlmZmJkYjRlOGQ4MTVlNmU4YTMxZDI0YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJHbgnKJy1BBoHMkNa7B3a+hmkVw ZLFg8ZiY4lQO6cRjOuBu2Yb9SXAYtdPG30Wx3IIY1LK2sUiFY3k5DmzsDVJKIYHc 71NaJiWW15E5zQ5+FzVwDkDnOJf7ywpiFZgoBw8p55Pz5sqdYDmS2aPVqJ1+7PXc 37DEiV9Nm5lUe5Qd8JfgzC0F84kY6w6qhegKbfoHGAvbCU3Gjn0DZ9xVWxR5gZyd ebUcaFyH2KxMfMWWPm8Hwuu4qy3QQJytcdcyCdV7PtKbDN9GZ9j+u6QtI6rtY4I8 5RJldM82xic22jz2OxORVsxT8ppfQ7SZclwSbFcHlvQYYkzVQpW/H9mewwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPox9IPyQy6f+9tOjYFeboox0kyRMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtakgwZ19KRExwXzcyMDZOZ1Y1dWlqSFNUSkUucm9h MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUJ/g MA0GCSqGSIb3DQEBCwUAA4IBAQBLKzlCA57z8eYEPzlGXv02TuJygyUN4J2tyldm uVXws9Dsa8LpGJnMYiPUR52mEWCkJUyACfyh5DepUHAGpWI2G7avfRLAx/lb8hqQ K2m1WvJ3wStVO6G33bBL2OUJRGnNTyq/It089TCda9bzDaEvfNgxxj/8N10KXjia Q8jCT+j9SgUaTq2kmfqqdwtVNXV/IqeX0whyVAcPkGpKu7GImxRp/5e6/XwDTs3k rbdmr9LHONy5CN0luEYkf1RQg0AjS+7qrV4mWrYnsvMnCB0I2b2tiazKrPYCtrPF Zhgr1iWRgmLMj1zQ6672cOCFzt4XFxCSPhu5nOqCxRYNPRqC -----END CERTIFICATE-----Generated at Sat Jan 10 04:35:46 2026 by rpki-client