This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/RI1PUJj0Q_MD3P8uweukuXuYhlU.roa File: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (raw, json) Hash identifier: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ= Subject key identifier: 44:8D:4F:50:98:F4:43:F3:03:DC:FF:2E:C1:EB:A4:B9:7B:98:86:55 Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9 Certificate serial: 019B7834D66702318A47F28D6FCF333CC9FC Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/RI1PUJj0Q_MD3P8uweukuXuYhlU.roa Signing time: Thu 01 Jan 2026 06:18:07 +0000 ROA not before: Thu 01 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 193.43.92.0/24 maxlen: 24 193.242.108.0/24 maxlen: 24 195.242.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d6:67:02:31:8a:47:f2:8d:6f:cf:33:3c:c9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=448d4f5098f443f303dcff2ec1eba4b97b988655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:03:16:38:86:4a:bf:b9:75:fa:41:de:e4: c0:d9:5f:96:e4:65:54:b8:6a:e0:db:4b:3a:b8:bf: 6b:03:cb:2b:d5:6e:40:2d:c6:cb:6d:d5:e9:9a:f8: 78:ff:27:cf:40:6e:27:f6:94:0d:b0:fd:07:25:1c: 6f:a8:83:53:71:92:e9:77:79:d2:46:07:ed:31:3d: a3:f9:1e:87:08:38:5c:c2:6e:3d:40:71:77:e0:4b: 65:2f:05:23:9a:51:e7:58:86:71:b5:b6:70:95:2f: 71:7f:00:b9:89:8b:ff:86:0f:ed:a9:92:73:98:7f: f8:6c:82:8c:84:cf:d4:e5:64:a8:50:d8:16:52:f3: 9a:2a:d8:cb:d0:a2:12:90:bd:7f:c2:e9:b7:57:ac: ef:95:0a:87:a1:9e:d5:eb:71:98:ef:1b:df:fe:7f: 7d:d2:b5:40:5c:7e:28:7f:77:37:9a:a7:5d:a0:f7: 2b:b9:40:a8:fe:c7:84:2d:fe:20:35:4e:30:62:0a: 00:26:d4:36:2e:fc:10:d8:93:9d:56:76:b1:f1:ad: 82:c6:69:36:e0:61:c6:cf:48:3f:a1:27:a1:a5:00: 35:1c:d3:59:05:f2:13:05:e8:e1:fd:3b:00:b8:95: 0c:e9:b6:d1:65:90:7b:e1:01:26:86:b0:5d:d8:ba: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:4F:50:98:F4:43:F3:03:DC:FF:2E:C1:EB:A4:B9:7B:98:86:55 X509v3 Authority Key Identifier: keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/RI1PUJj0Q_MD3P8uweukuXuYhlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.92.0/24 193.242.108.0/24 195.242.98.0/23 Signature Algorithm: sha256WithRSAEncryption 07:76:cf:fb:0f:77:db:53:cc:e1:27:db:a2:c3:b2:a5:ba:1d: 45:0a:65:aa:7a:6f:37:68:df:eb:02:a3:7b:31:e4:92:38:ef: e2:1c:87:92:19:af:ee:26:15:9d:93:7f:e1:fd:0f:56:28:36: f9:ab:51:41:3a:12:5e:6a:8d:a9:68:3a:ef:50:d5:25:82:27: 30:a1:89:3e:ea:0c:d2:15:a0:50:c0:14:8d:75:26:38:45:fc: ab:ba:5c:05:6b:d8:e7:0e:91:62:fc:33:2a:18:40:76:d0:b8: ff:e5:3f:c4:73:fe:93:62:7b:81:60:1b:c0:ec:d7:9a:8f:d6: f8:7f:19:12:1e:66:a5:42:0a:0c:3b:5d:25:36:52:91:43:05: da:bc:e6:6c:56:d8:15:0e:35:f2:e4:c7:ed:18:d7:b0:e4:f5: 9a:5f:fb:8a:0d:90:e3:2e:07:3a:ea:33:07:80:88:f6:fd:3e: 77:77:91:3c:9b:5e:ce:7c:39:24:b2:f9:2d:35:79:7a:cc:ce: 65:a7:8a:d1:10:96:08:cb:7c:f7:71:43:53:ae:a8:d2:95:6e: a1:ca:92:d2:5a:9f:42:88:bf:b1:85:0f:3b:83:29:a6:c3:3c: 6a:03:3b:aa:a8:de:66:59:dc:b9:06:05:8d:27:df:06:62:0d: c1:63:16:15 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NNZnAjGKR/KNb88zPMn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWJhZjFkMzdmMGExNDFhODE0Y2EwMmZjMDFlM2Q5NjIx YzczZDkwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDhkNGY1MDk4ZjQ0M2YzMDNkY2ZmMmVjMWViYTRiOTdiOTg4NjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BUDFjiGSr+5dfpB3uTA2V+W5GVU uGrg20s6uL9rA8sr1W5ALcbLbdXpmvh4/yfPQG4n9pQNsP0HJRxvqINTcZLpd3nS RgftMT2j+R6HCDhcwm49QHF34EtlLwUjmlHnWIZxtbZwlS9xfwC5iYv/hg/tqZJz mH/4bIKMhM/U5WSoUNgWUvOaKtjL0KISkL1/wum3V6zvlQqHoZ7V63GY7xvf/n99 0rVAXH4of3c3mqddoPcruUCo/seELf4gNU4wYgoAJtQ2LvwQ2JOdVnax8a2Cxmk2 4GHGz0g/oSehpQA1HNNZBfITBejh/TsAuJUM6bbRZZB74QEmhrBd2LoYawIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFESNT1CY9EPzA9z/LsHrpLl7mIZVMB8GA1UdIwQY MBaAFKSrrx038KFBqBTKAvwB49liHHPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgt OTNjZjY0Zjg4OTkwLzEvUkkxUFVKajBRX01EM1A4dXdldWt1WHVZaGxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgtOTNjZjY0Zjg4OTkw LzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwStcAwQA wfJsAwQBw/JiMA0GCSqGSIb3DQEBCwUAA4IBAQAHds/7D3fbU8zhJ9uiw7Kluh1F CmWqem83aN/rAqN7MeSSOO/iHIeSGa/uJhWdk3/h/Q9WKDb5q1FBOhJeao2paDrv UNUlgicwoYk+6gzSFaBQwBSNdSY4RfyrulwFa9jnDpFi/DMqGEB20Lj/5T/Ec/6T YnuBYBvA7Neaj9b4fxkSHmalQgoMO10lNlKRQwXavOZsVtgVDjXy5MftGNew5PWa X/uKDZDjLgc66jMHgIj2/T53d5E8m17OfDkksvktNXl6zM5lp4rREJYIy3z3cUNT rqjSlW6hypLSWp9CiL+xhQ87gymmwzxqAzuqqN5mWdy5BgWNJ98GYg3BYxYV -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:22 2026 by rpki-client