This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/1-Ty7nHprcve9vsYQ96HHmH_jrn0.roa File: 1-Ty7nHprcve9vsYQ96HHmH_jrn0.roa (raw, json) Hash identifier: Lp5p688sS4VmSs0h9xl5NhAvHxt6zU/ln7WnYTne3/w= Subject key identifier: F9:3C:BB:9C:7A:6B:72:F7:BD:BE:C6:10:F7:A1:C7:98:7F:E3:AE:7D Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39 Certificate serial: 019B7EA5845A07982F373CA5AFD4BC5522AD Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/1-Ty7nHprcve9vsYQ96HHmH_jrn0.roa Signing time: Fri 02 Jan 2026 12:18:55 +0000 ROA not before: Fri 02 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 212.39.32.0/24 maxlen: 24 212.39.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:84:5a:07:98:2f:37:3c:a5:af:d4:bc:55:22:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39 Validity Not Before: Jan 2 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f93cbb9c7a6b72f7bdbec610f7a1c7987fe3ae7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:c3:c1:51:13:93:05:e9:17:0c:83:e5:07: 98:94:8a:8e:61:4b:0a:5f:53:1a:06:b5:cb:12:f9: fb:80:1c:30:cc:2a:6d:ef:1e:29:6c:8c:a8:39:0e: ef:db:d7:8b:e0:56:fc:9c:9a:1f:f2:51:b9:7b:a1: 12:74:ac:c3:3e:43:08:6a:5f:e1:11:3a:20:fe:51: bc:cb:ef:b4:fa:c5:22:ab:4d:78:02:52:39:ca:11: de:20:81:62:7c:f9:9f:7d:27:b5:dc:63:fe:33:c4: ee:be:ac:69:90:7a:f6:3f:4b:7e:81:23:48:56:98: c7:c3:05:a5:bc:f6:f0:72:d4:9a:27:54:81:56:2a: 28:38:3e:58:7b:5a:d7:ea:8c:78:db:69:54:f7:70: e0:b4:c5:5a:05:da:73:86:88:3a:c4:6a:3b:28:7e: db:67:7a:2d:34:00:69:86:0a:a6:43:46:69:8f:9d: 37:22:36:c1:3c:e1:dd:95:95:fe:48:e2:4a:81:4f: d4:59:6f:0b:0d:f7:d1:0e:a7:d9:df:c6:dd:ae:72: 9a:7a:8f:e1:6b:34:d7:7f:4b:88:0f:84:af:d0:5f: 79:a7:6a:58:68:0c:cf:eb:a4:12:23:65:e7:31:50: fe:62:be:53:41:6b:d6:94:49:0d:0c:c4:70:8d:c9: f0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3C:BB:9C:7A:6B:72:F7:BD:BE:C6:10:F7:A1:C7:98:7F:E3:AE:7D X509v3 Authority Key Identifier: keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/1-Ty7nHprcve9vsYQ96HHmH_jrn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.39.32.0/24 212.39.34.0/24 Signature Algorithm: sha256WithRSAEncryption 04:30:ed:da:a2:e9:ec:7a:f5:17:81:b3:9f:e8:fe:65:40:7c: 82:d6:5a:64:ff:bd:b1:21:66:fe:26:83:e0:a5:e2:20:fd:4f: 38:9d:fd:5e:c4:90:04:c2:c9:e0:fb:57:aa:55:b5:80:9e:04: e2:50:fc:90:ad:73:cc:ee:ad:90:c6:c5:db:85:ef:3a:69:7a: a0:08:d3:38:51:9b:13:a8:e0:61:86:8e:b3:03:ac:1d:d8:17: bd:60:c4:8f:62:a8:14:af:4a:d7:95:a1:6f:0a:5c:20:ce:a6: 23:a7:42:c7:ff:e6:e3:b4:94:2c:7f:5c:c7:b1:90:85:18:d5: 5f:c7:9a:6c:32:87:13:89:be:58:f2:8e:87:99:03:15:5a:45: 59:7e:51:cc:b4:69:5d:fa:eb:12:ad:75:12:e2:d7:7c:7c:cd: 61:58:54:55:03:68:06:96:70:c8:7d:76:af:67:2c:05:cd:e0: 37:db:6c:fd:33:f3:4d:73:47:b4:ff:1d:ef:63:9e:71:27:46: 9a:23:70:b4:28:e4:07:82:6b:38:da:25:b1:fb:12:38:c6:a5: 2b:dc:5d:31:7e:b1:e0:3d:fe:6f:2c:3d:a2:5e:96:46:e8:b7: cf:8b:79:84:08:88:29:e4:c6:f2:a9:e5:96:3c:48:e7:57:d0: 93:92:19:45 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt+pYRaB5gvNzylr9S8VSKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmRjN2JkYmM5ZDA5NzMzNmRlNjI0M2I1NTBhYjE3MzM3 NWVhMzkwHhcNMjYwMTAyMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTNjYmI5YzdhNmI3MmY3YmRiZWM2MTBmN2ExYzc5ODdmZTNhZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pTDwVETkwXpFwyD5QeYlIqOYUsK X1MaBrXLEvn7gBwwzCpt7x4pbIyoOQ7v29eL4Fb8nJof8lG5e6ESdKzDPkMIal/h ETog/lG8y++0+sUiq014AlI5yhHeIIFifPmffSe13GP+M8TuvqxpkHr2P0t+gSNI VpjHwwWlvPbwctSaJ1SBViooOD5Ye1rX6ox422lU93DgtMVaBdpzhog6xGo7KH7b Z3otNABphgqmQ0Zpj503IjbBPOHdlZX+SOJKgU/UWW8LDffRDqfZ38bdrnKaeo/h azTXf0uID4Sv0F95p2pYaAzP66QSI2XnMVD+Yr5TQWvWlEkNDMRwjcnwNQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPk8u5x6a3L3vb7GEPehx5h/4659MB8GA1UdIwQY MBaAFKktx728nQlzNt5iQ7VQqxczdeo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYjQ2MjktMzljYy00ZTZjLTllMWMt OTkxYjdhZWU3NDZjLzEvMS1UeTduSHByY3ZlOXZzWVE5NkhIbUhfanJuMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzQvMGI0NjI5LTM5Y2MtNGU2Yy05ZTFjLTk5MWI3YWVlNzQ2 Yy8xL3FTM0h2YnlkQ1hNMjNtSkR0VkNyRnpOMTZqay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEANQnIAME ANQnIjANBgkqhkiG9w0BAQsFAAOCAQEABDDt2qLp7Hr1F4Gzn+j+ZUB8gtZaZP+9 sSFm/iaD4KXiIP1POJ39XsSQBMLJ4PtXqlW1gJ4E4lD8kK1zzO6tkMbF24XvOml6 oAjTOFGbE6jgYYaOswOsHdgXvWDEj2KoFK9K15WhbwpcIM6mI6dCx//m47SULH9c x7GQhRjVX8eabDKHE4m+WPKOh5kDFVpFWX5RzLRpXfrrEq11EuLXfHzNYVhUVQNo BpZwyH12r2csBc3gN9ts/TPzTXNHtP8d72OecSdGmiNwtCjkB4JrONolsfsSOMal K9xdMX6x4D3+byw9ol6WRui3z4t5hAiIKeTG8qnlljxI51fQk5IZRQ== -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:53 2026 by rpki-client