This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/3wuiCij5qtORMNXWWGeF1LYERZs.roa File: 3wuiCij5qtORMNXWWGeF1LYERZs.roa (raw, json) Hash identifier: 524skBJUgutH4M3bafS4opDM/U9Zv4uQ0hTvbNYnIpA= Subject key identifier: DF:0B:A2:0A:28:F9:AA:D3:91:30:D5:D6:58:67:85:D4:B6:04:45:9B Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B79ED1B7CCCEA04D9CC6F097E337307DE Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/3wuiCij5qtORMNXWWGeF1LYERZs.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39886 IP address blocks: 109.94.32.0/19 maxlen: 24 213.111.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1b:7c:cc:ea:04:d9:cc:6f:09:7e:33:73:07:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df0ba20a28f9aad39130d5d6586785d4b604459b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:72:96:ee:ff:82:b3:81:3d:40:f0:6a:01: 2f:04:8d:5e:27:cb:77:07:19:19:9f:ae:08:51:95: be:c7:06:a6:bc:57:81:3d:1a:3b:69:eb:75:d9:8f: 46:e0:0b:8e:f4:1a:4b:8c:33:76:71:e0:22:91:21: b4:7f:fe:54:81:1c:d8:ad:ac:11:1e:e9:76:b5:81: ca:93:b3:58:31:9d:2b:16:7c:cd:16:d3:90:81:e4: 04:34:63:7c:7a:e3:74:c5:57:ae:f1:22:d4:86:63: dc:e3:66:f8:0c:fc:1e:a8:07:7a:94:1d:6a:a7:63: 5e:18:fc:02:c2:73:fb:57:45:1a:d2:da:76:b0:6b: 40:91:89:59:eb:c7:d1:b1:4b:dd:c4:c6:65:b6:76: 04:7a:ac:fc:07:90:41:8d:03:c5:b4:54:28:e0:b9: 16:5c:4b:62:81:d6:4e:48:99:11:26:48:4b:90:34: 27:5b:51:41:9e:25:9f:8f:4a:5c:4a:9a:25:e4:7c: 55:52:bb:29:df:c0:b7:5c:ad:78:9f:07:73:8f:0b: 13:60:f7:c6:3f:fe:d5:da:3d:b3:c3:9e:3a:e6:10: e5:35:e6:7a:0f:7d:0e:9d:58:05:81:4a:e5:d6:cf: cf:c4:af:7a:ab:26:3a:e6:ad:ec:f2:35:18:37:e1: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0B:A2:0A:28:F9:AA:D3:91:30:D5:D6:58:67:85:D4:B6:04:45:9B X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/3wuiCij5qtORMNXWWGeF1LYERZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.94.32.0/19 213.111.0.0/18 Signature Algorithm: sha256WithRSAEncryption 41:08:e4:1d:be:27:fa:4d:ea:73:ba:f9:43:21:89:21:cf:8f: a8:78:08:e0:4b:24:e5:6f:64:6f:27:36:33:77:bd:a1:db:6a: c4:da:e1:53:ab:ee:2f:cd:c3:2d:2d:b7:d7:41:e6:ac:73:ca: 74:d1:c6:60:bb:f6:42:71:0b:95:d4:02:2b:27:bf:1e:56:42: 6c:e5:4c:7a:68:52:5e:8f:4c:7c:f2:9f:d2:41:32:54:d4:25: ef:c8:aa:70:a3:c4:df:4b:c9:70:c5:0e:96:c4:3b:9a:fa:d5: d0:aa:45:98:24:79:b7:86:33:f4:75:c7:ca:0e:a7:c3:38:56: d0:10:2f:db:86:7e:3b:3c:f1:a5:92:ee:3c:8f:0a:13:c4:a4: df:00:cb:d5:a4:88:f3:59:71:52:55:e1:a4:05:8c:1b:7c:e6: f7:4a:b6:36:03:0d:77:84:88:e8:2a:3d:4f:80:ab:74:d6:f1: 02:a5:dd:e5:8e:58:b2:1e:af:d9:16:0b:5f:fa:39:66:e5:c8: 88:5a:0a:0c:45:4c:d7:0e:21:f3:7c:a3:0d:89:40:59:f2:ba: a4:1c:e5:ec:e0:8d:aa:cf:c8:92:1b:4e:e2:09:4a:58:68:5c: 13:b1:c5:fb:fe:22:d4:da:7b:f5:dc:a6:26:a4:4d:27:9d:d3: 70:57:0e:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57Rt8zOoE2cxvCX4zcwfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjBiYTIwYTI4ZjlhYWQzOTEzMGQ1ZDY1ODY3ODVkNGI2MDQ0NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts5ylu7/grOBPUDwagEvBI1eJ8t3 BxkZn64IUZW+xwamvFeBPRo7aet12Y9G4AuO9BpLjDN2ceAikSG0f/5UgRzYrawR Hul2tYHKk7NYMZ0rFnzNFtOQgeQENGN8euN0xVeu8SLUhmPc42b4DPweqAd6lB1q p2NeGPwCwnP7V0Ua0tp2sGtAkYlZ68fRsUvdxMZltnYEeqz8B5BBjQPFtFQo4LkW XEtigdZOSJkRJkhLkDQnW1FBniWfj0pcSpol5HxVUrsp38C3XK14nwdzjwsTYPfG P/7V2j2zw5465hDlNeZ6D30OnVgFgUrl1s/PxK96qyY65q3s8jUYN+GW+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN8Logoo+arTkTDV1lhnhdS2BEWbMB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvM3d1aUNpajVxdE9STU5YV1dHZUYxTFlFUlpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFbV4gAwQG 1W8AMA0GCSqGSIb3DQEBCwUAA4IBAQBBCOQdvif6TepzuvlDIYkhz4+oeAjgSyTl b2RvJzYzd72h22rE2uFTq+4vzcMtLbfXQeasc8p00cZgu/ZCcQuV1AIrJ78eVkJs 5Ux6aFJej0x88p/SQTJU1CXvyKpwo8TfS8lwxQ6WxDua+tXQqkWYJHm3hjP0dcfK DqfDOFbQEC/bhn47PPGlku48jwoTxKTfAMvVpIjzWXFSVeGkBYwbfOb3SrY2Aw13 hIjoKj1PgKt01vECpd3ljliyHq/ZFgtf+jlm5ciIWgoMRUzXDiHzfKMNiUBZ8rqk HOXs4I2qz8iSG07iCUpYaFwTscX7/iLU2nv13KYmpE0nndNwVw4w -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:43 2026 by rpki-client