This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/01b-_lSQYswp0XJqCFkWTN3FBao.roa File: 01b-_lSQYswp0XJqCFkWTN3FBao.roa (raw, json) Hash identifier: ewH/zDZQ3rLluYv2guw0C+nvriPG/1vP0wlE4tPc+1Y= Subject key identifier: D3:56:FE:FE:54:90:62:CC:29:D1:72:6A:08:59:16:4C:DD:C5:05:AA Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b Certificate serial: 019B77C6D3D9C5895F4809C698EC05072F2C Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/01b-_lSQYswp0XJqCFkWTN3FBao.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47798 IP address blocks: 94.124.216.0/21 maxlen: 21 94.124.216.0/22 maxlen: 22 94.124.220.0/22 maxlen: 22 109.203.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d3:d9:c5:89:5f:48:09:c6:98:ec:05:07:2f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d356fefe549062cc29d1726a0859164cddc505aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d1:ed:14:0f:09:8f:e0:53:be:ce:e0:f9:3f: 1e:16:d3:6e:22:f3:ce:c6:94:1f:ca:a9:fc:ac:95: c1:1c:97:0d:c9:22:5b:83:f4:0f:0c:b4:8e:1d:bb: 3a:34:52:42:4e:e0:0e:36:f2:0f:e9:3d:c2:98:a8: d4:79:7d:75:90:db:d4:e2:af:f1:91:1a:a3:27:b7: 22:aa:52:04:19:a9:97:bf:be:4e:85:9b:2c:08:6c: 5e:4e:40:a8:cf:a0:0a:ae:38:71:88:1e:8a:38:49: bf:fb:af:1c:e2:cc:cd:60:b5:a3:3e:d8:6b:aa:17: c4:52:69:0e:1a:0b:97:1a:86:ac:3d:ce:ce:56:70: 79:ee:26:11:58:99:e0:39:b0:ee:5d:a2:d1:f6:0a: 18:bb:06:ca:0f:60:3d:1d:b6:75:76:c7:7c:25:38: 89:dd:c5:b5:bb:c1:9d:1c:35:ed:de:0d:1a:ce:f5: bd:ac:6b:cd:e2:b0:70:67:71:ed:47:81:ad:58:ca: 6c:76:b6:2c:8e:ff:10:99:af:c3:59:e2:20:75:c3: c3:e8:d9:30:5b:00:8a:54:07:2a:f0:64:6c:bc:b7: ba:79:cf:16:05:f5:83:72:5c:16:7e:f4:f1:e4:a1: 26:c8:2e:be:39:e7:da:1b:0d:0f:02:dc:22:23:56: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:56:FE:FE:54:90:62:CC:29:D1:72:6A:08:59:16:4C:DD:C5:05:AA X509v3 Authority Key Identifier: keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/01b-_lSQYswp0XJqCFkWTN3FBao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.216.0/21 109.203.224.0/19 Signature Algorithm: sha256WithRSAEncryption 80:7f:c8:61:02:c2:1f:80:09:cc:1b:b0:3d:39:e6:3f:44:1e: dd:ff:e0:e1:99:5c:8f:67:b8:91:5e:e0:1c:fe:eb:d4:6d:da: 4d:e3:84:9c:c8:fc:e4:04:98:fe:ec:f8:db:58:62:b8:3e:bd: 7e:ae:f4:1c:4e:5f:b1:3d:6c:97:18:4e:09:1f:81:02:cc:d9: 82:9f:98:f8:79:03:f3:b1:65:9b:b0:d3:84:2d:0b:a1:12:9b: 9d:32:1e:9b:67:b1:f8:1d:9f:ec:de:c3:03:84:21:cd:ec:a0: f2:00:ef:99:6f:51:42:8f:86:67:c5:0d:cf:96:dd:57:8e:be: db:a4:6d:58:99:71:87:3d:7a:e4:81:b7:35:81:3e:a5:31:f8: 9c:11:f6:fe:3d:4a:d4:5a:ec:82:8e:63:b0:02:29:f8:d4:bf: bb:87:1d:7e:5d:5a:c2:01:e5:c0:df:ed:fb:79:1a:f1:6b:3d: 8f:66:3d:6d:ee:7b:57:a7:1e:07:45:f6:2c:53:0c:1e:9d:e7: bc:fb:e7:44:af:48:29:3b:9e:27:25:8c:23:c7:29:c9:7a:f3: f8:69:62:cd:bd:ea:89:63:6e:06:29:f8:50:8d:9f:a2:0e:25: 2c:5a:b3:bc:cc:3a:79:dd:9b:5f:69:98:68:e1:c4:63:5f:79: 0a:57:1b:88 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xtPZxYlfSAnGmOwFBy8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjczYjY4NjFjZjdjZjQ2NDZjYzVlMDQyNzVkNjYxNzYz NWYwN2IwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzU2ZmVmZTU0OTA2MmNjMjlkMTcyNmEwODU5MTY0Y2RkYzUwNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNHtFA8Jj+BTvs7g+T8eFtNuIvPO xpQfyqn8rJXBHJcNySJbg/QPDLSOHbs6NFJCTuAONvIP6T3CmKjUeX11kNvU4q/x kRqjJ7ciqlIEGamXv75OhZssCGxeTkCoz6AKrjhxiB6KOEm/+68c4szNYLWjPthr qhfEUmkOGguXGoasPc7OVnB57iYRWJngObDuXaLR9goYuwbKD2A9HbZ1dsd8JTiJ 3cW1u8GdHDXt3g0azvW9rGvN4rBwZ3HtR4GtWMpsdrYsjv8Qma/DWeIgdcPD6Nkw WwCKVAcq8GRsvLe6ec8WBfWDclwWfvTx5KEmyC6+OefaGw0PAtwiI1aeWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNNW/v5UkGLMKdFyaghZFkzdxQWqMB8GA1UdIwQY MBaAFD8nO2hhz3z0ZGzF4EJ11mF2NfB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEt OGI3YzU3YzU2MjE1LzEvMDFiLV9sU1FZc3dwMFhKcUNGa1dUTjNGQmFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC83NTQ2NWYtNjc5Ny00MTQxLWI5NjEtOGI3YzU3YzU2MjE1 LzEvUHljN2FHSFBmUFJrYk1YZ1FuWFdZWFkxOEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXnzYAwQF bcvgMA0GCSqGSIb3DQEBCwUAA4IBAQCAf8hhAsIfgAnMG7A9OeY/RB7d/+DhmVyP Z7iRXuAc/uvUbdpN44ScyPzkBJj+7PjbWGK4Pr1+rvQcTl+xPWyXGE4JH4ECzNmC n5j4eQPzsWWbsNOELQuhEpudMh6bZ7H4HZ/s3sMDhCHN7KDyAO+Zb1FCj4ZnxQ3P lt1Xjr7bpG1YmXGHPXrkgbc1gT6lMficEfb+PUrUWuyCjmOwAin41L+7hx1+XVrC AeXA3+37eRrxaz2PZj1t7ntXpx4HRfYsUwwenee8++dEr0gpO54nJYwjxynJevP4 aWLNveqJY24GKfhQjZ+iDiUsWrO8zDp53ZtfaZho4cRjX3kKVxuI -----END CERTIFICATE-----Generated at Mon Jan 26 21:00:55 2026 by rpki-client