This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/1-3_UXlI7lgTO61EleA3c64pzy4Q.roa File: 1-3_UXlI7lgTO61EleA3c64pzy4Q.roa (raw, json) Hash identifier: Uoifnsww6M0WWvrx79PWy9RRcFo0DQK8iBmjEiwNy+w= Subject key identifier: FB:7F:D4:5E:52:3B:96:04:CE:EB:51:25:78:0D:DC:EB:8A:73:CB:84 Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13 Certificate serial: 019B7CEE2F7AC3A82E647C7C09B2BB6EAE9A Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/1-3_UXlI7lgTO61EleA3c64pzy4Q.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213180 IP address blocks: 185.57.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2f:7a:c3:a8:2e:64:7c:7c:09:b2:bb:6e:ae:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13 Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb7fd45e523b9604ceeb5125780ddceb8a73cb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0d:aa:eb:7e:01:77:32:f2:ae:ef:e0:e1:f0: eb:81:84:b0:a7:cd:fe:93:16:28:a0:a9:f0:e3:09: 6c:c1:03:7b:2c:47:ee:b1:bd:76:00:cb:2c:3a:2f: 9e:fb:cb:db:3e:9a:8b:9e:fc:de:29:5b:6a:93:2d: 55:7c:c7:46:cc:86:9b:91:a9:6a:1b:de:1e:9d:97: 18:d3:29:44:12:7b:40:aa:ff:75:da:c5:55:a8:86: 9b:c6:0f:37:2d:55:21:83:68:b1:86:32:12:e8:85: 80:2e:cd:26:51:84:4f:ac:8e:09:2c:80:05:fb:80: 06:6f:9e:84:90:64:39:8f:03:d5:3d:a3:f1:77:4e: 59:ca:ab:61:96:cd:47:4c:ab:a4:f0:72:40:d7:40: 80:35:1e:f1:c6:3b:b5:8b:93:f2:7d:b3:f0:bd:84: a9:42:3e:5b:61:73:89:93:65:7f:96:5c:1f:90:60: ed:b3:c4:b6:b0:6c:34:09:25:c8:83:ee:e7:ed:4e: 9c:99:e5:43:d8:fa:8c:8a:8f:8b:5f:a2:5c:55:b4: 05:08:46:be:21:b0:3b:6a:05:02:7e:46:d2:fd:17: 60:60:0a:5b:fe:0e:7c:15:7e:b0:f9:70:a6:d0:25: da:c3:fb:31:e0:26:72:00:98:f8:d3:43:6b:67:f6: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7F:D4:5E:52:3B:96:04:CE:EB:51:25:78:0D:DC:EB:8A:73:CB:84 X509v3 Authority Key Identifier: keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/1-3_UXlI7lgTO61EleA3c64pzy4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.19.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:26:68:fb:53:68:63:10:5e:f1:16:2a:26:f8:ef:61:b7:e8: e1:42:1a:e3:8b:17:e6:65:fa:c9:17:71:a1:5e:d6:34:20:dd: b3:dc:7d:79:a9:e2:e6:23:7d:b3:87:58:b5:a3:29:d7:06:2a: a6:47:66:14:49:60:d3:b4:6d:a9:5a:00:b1:88:bb:8c:3a:7f: a4:ea:9e:3a:ed:71:6f:b3:b0:ec:32:ea:83:e6:c3:2d:22:82: 26:bf:94:94:ab:da:45:2e:77:8f:85:aa:f5:78:72:38:08:19: 7c:f1:d9:aa:08:4e:91:0c:0e:ca:e4:df:db:07:09:00:23:76: 86:4d:16:70:9e:a2:90:39:95:5f:e2:ea:ab:5d:41:e2:40:92: b3:d2:fe:5c:0a:6e:8c:53:e1:9b:60:e6:1d:c7:29:8b:b3:b9: 5b:9d:9b:97:8c:0e:b5:82:e8:47:19:09:ba:3d:4f:ce:d7:95: 3d:25:c9:c5:6f:5b:ae:73:f2:69:14:92:7e:61:76:f3:64:b4: ab:7d:9f:66:6c:6a:3c:94:26:e5:19:1c:1e:f9:96:8f:4a:55: 7e:fe:85:50:aa:ee:c2:9c:4a:38:ca:94:5c:5e:82:cd:81:80: 2e:6b:70:0e:d2:36:c5:17:55:9b:34:31:16:09:e7:a1:d6:82: 9b:42:f7:5e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87i96w6guZHx8CbK7bq6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZjQ5MDJkMjQwYjI1ZDdlYjc3ZjRmMDJlMjRmMjMzZjQ0 YTlhMTMwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjdmZDQ1ZTUyM2I5NjA0Y2VlYjUxMjU3ODBkZGNlYjhhNzNjYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ2q634BdzLyru/g4fDrgYSwp83+ kxYooKnw4wlswQN7LEfusb12AMssOi+e+8vbPpqLnvzeKVtqky1VfMdGzIabkalq G94enZcY0ylEEntAqv912sVVqIabxg83LVUhg2ixhjIS6IWALs0mUYRPrI4JLIAF +4AGb56EkGQ5jwPVPaPxd05Zyqthls1HTKuk8HJA10CANR7xxju1i5PyfbPwvYSp Qj5bYXOJk2V/llwfkGDts8S2sGw0CSXIg+7n7U6cmeVD2PqMio+LX6JcVbQFCEa+ IbA7agUCfkbS/RdgYApb/g58FX6w+XCm0CXaw/sx4CZyAJj400NrZ/bVCwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPt/1F5SO5YEzutRJXgN3OuKc8uEMB8GA1UdIwQY MBaAFPf0kC0kCyXX63f08C4k8jP0SpoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAt NTNhYjg4YzVmMmM3LzEvMS0zX1VYbEk3bGdUTzYxRWxlQTNjNjRwenk0US5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzEvYzZhNGZlLWE3NjAtNGM0Yy04MWIwLTUzYWI4OGM1ZjJj Ny8xLzlfU1FMU1FMSmRmcmRfVHdMaVR5TV9SS21oTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALk5EzAN BgkqhkiG9w0BAQsFAAOCAQEAXiZo+1NoYxBe8RYqJvjvYbfo4UIa44sX5mX6yRdx oV7WNCDds9x9eani5iN9s4dYtaMp1wYqpkdmFElg07RtqVoAsYi7jDp/pOqeOu1x b7Ow7DLqg+bDLSKCJr+UlKvaRS53j4Wq9XhyOAgZfPHZqghOkQwOyuTf2wcJACN2 hk0WcJ6ikDmVX+Lqq11B4kCSs9L+XApujFPhm2DmHccpi7O5W52bl4wOtYLoRxkJ uj1PzteVPSXJxW9brnPyaRSSfmF282S0q32fZmxqPJQm5RkcHvmWj0pVfv6FUKru wpxKOMqUXF6CzYGALmtwDtI2xRdVmzQxFgnnodaCm0L3Xg== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:44 2026 by rpki-client