This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/r3dW9lAqMZzJ4q1ECWLy0uvljys.roa File: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (raw, json) Hash identifier: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE= Subject key identifier: AF:77:56:F6:50:2A:31:9C:C9:E2:AD:44:09:62:F2:D2:EB:E5:8F:2B Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC809943317BFF60D88842F230B6AFC Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/r3dW9lAqMZzJ4q1ECWLy0uvljys.roa Signing time: Thu 01 Jan 2026 18:18:08 +0000 ROA not before: Thu 01 Jan 2026 18:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33991 IP address blocks: 178.159.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:09:94:33:17:bf:f6:0d:88:84:2f:23:0b:6a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af7756f6502a319cc9e2ad440962f2d2ebe58f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:5d:78:26:5e:6a:a8:50:65:ab:ef:c1:24: 4c:e2:31:46:9f:fc:1d:1c:07:30:1c:ea:84:24:7d: b8:ac:1f:83:e1:cc:93:6b:b1:65:21:1e:fe:dc:20: 9a:4a:1e:c3:46:21:33:ba:47:30:e3:82:99:92:49: 6f:fe:6e:e1:11:2e:ec:5b:6d:f0:54:c2:a1:1c:bc: ac:58:97:6c:d8:a5:67:da:61:12:2a:17:4c:e5:9c: bf:18:ea:98:ff:55:25:34:c5:85:67:a4:01:28:bd: 57:09:ef:18:11:5b:cc:5e:b5:5f:ee:16:8c:db:5a: c4:5a:1f:41:10:d8:86:b9:80:47:8d:2d:4e:5c:07: 84:39:00:ed:7e:9f:b7:86:82:79:65:e6:eb:09:c0: 95:5f:e1:2a:30:e9:1b:e7:68:02:e7:4d:72:65:21: 1f:6a:17:36:7e:7b:05:1c:56:20:e5:b2:0f:c1:12: 64:06:4a:87:8d:55:a3:a5:74:25:90:80:1e:32:66: fa:91:2e:9f:93:62:4e:97:10:b9:e0:94:c2:94:5e: 73:b9:9e:2e:d7:dd:03:fb:27:82:d4:f5:a9:cd:02: 83:c0:fc:d2:09:95:33:03:c8:ed:6d:02:f4:9f:e8: 75:53:e6:bd:f0:5b:b8:2b:8d:4a:6e:e4:40:43:56: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:77:56:F6:50:2A:31:9C:C9:E2:AD:44:09:62:F2:D2:EB:E5:8F:2B X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/r3dW9lAqMZzJ4q1ECWLy0uvljys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.159.92.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:6a:90:49:07:99:9b:9e:2b:53:52:10:a2:ef:82:c2:37:e6: 71:80:c8:8c:d6:2e:99:ff:89:82:85:b3:9c:d6:fd:f5:fa:b4: 1a:9b:c2:85:63:a6:33:33:06:0b:5a:2e:51:19:c3:2e:29:60: b0:c3:cd:ee:9a:52:02:60:70:97:2f:3a:b4:14:7f:43:07:9c: 3a:95:23:39:6e:b6:67:10:4f:0b:ee:55:29:ad:a5:d3:c5:16: c2:91:73:d2:7c:e3:e2:0f:62:ed:66:a0:ad:4b:7a:f8:1a:be: db:94:1d:8b:d2:8b:d7:b7:bc:ef:3d:51:54:6d:c4:44:e0:87: 06:98:aa:f9:99:b3:a0:50:e3:91:54:04:0a:e5:37:49:6e:a0: 45:e6:35:e5:55:60:70:13:53:e7:2f:2c:c6:5f:08:04:37:7f: 09:17:1d:5a:b0:be:3e:36:a3:42:17:2c:d3:d9:46:04:fb:fc: 39:3c:20:35:2a:8a:9a:3d:80:62:d7:6a:d2:7b:21:1b:51:06: 22:48:b8:ec:01:bc:d0:78:23:36:aa:8a:95:ab:20:f5:2a:16: fd:3b:48:ea:ad:3e:9b:d6:84:8f:8c:9c:16:4c:48:a2:f0:7b: 19:0d:20:6f:a6:39:f3:bf:4f:26:bc:bb:50:26:a5:a9:56:f7: 78:2b:d6:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAmUMxe/9g2IhC8jC2r8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjc3NTZmNjUwMmEzMTljYzllMmFkNDQwOTYyZjJkMmViZTU4ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfZdeCZeaqhQZavvwSRM4jFGn/wd HAcwHOqEJH24rB+D4cyTa7FlIR7+3CCaSh7DRiEzukcw44KZkklv/m7hES7sW23w VMKhHLysWJds2KVn2mESKhdM5Zy/GOqY/1UlNMWFZ6QBKL1XCe8YEVvMXrVf7haM 21rEWh9BENiGuYBHjS1OXAeEOQDtfp+3hoJ5ZebrCcCVX+EqMOkb52gC501yZSEf ahc2fnsFHFYg5bIPwRJkBkqHjVWjpXQlkIAeMmb6kS6fk2JOlxC54JTClF5zuZ4u 190D+yeC1PWpzQKDwPzSCZUzA8jtbQL0n+h1U+a98Fu4K41KbuRAQ1akaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK93VvZQKjGcyeKtRAli8tLr5Y8rMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvcjNkVzlsQXFNWnpKNHExRUNXTHkwdXZsanlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsp9cMA0G CSqGSIb3DQEBCwUAA4IBAQAeapBJB5mbnitTUhCi74LCN+ZxgMiM1i6Z/4mChbOc 1v31+rQam8KFY6YzMwYLWi5RGcMuKWCww83umlICYHCXLzq0FH9DB5w6lSM5brZn EE8L7lUpraXTxRbCkXPSfOPiD2LtZqCtS3r4Gr7blB2L0ovXt7zvPVFUbcRE4IcG mKr5mbOgUOORVAQK5TdJbqBF5jXlVWBwE1PnLyzGXwgEN38JFx1asL4+NqNCFyzT 2UYE+/w5PCA1KoqaPYBi12rSeyEbUQYiSLjsAbzQeCM2qoqVqyD1Khb9O0jqrT6b 1oSPjJwWTEii8HsZDSBvpjnzv08mvLtQJqWpVvd4K9Yd -----END CERTIFICATE-----Generated at Tue Jan 20 17:25:32 2026 by rpki-client