This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/1-34j9k633Gx9SzvPPBY8kC374IU.roa File: 1-34j9k633Gx9SzvPPBY8kC374IU.roa (raw, json) Hash identifier: Yn6e/ALR/C8qvvY/9cz2xAH7HV4xY8HGXMfLXVpY9yI= Subject key identifier: FB:7E:23:F6:4E:B7:DC:6C:7D:4B:3B:CF:3C:16:3C:90:2D:FB:E0:85 Certificate issuer: /CN=e6596e1552fc0a5884a881b352817d0b73009083 Certificate serial: 019BB7241791B178F29BBEC3132D68832956 Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/1-34j9k633Gx9SzvPPBY8kC374IU.roa Signing time: Tue 13 Jan 2026 11:35:54 +0000 ROA not before: Tue 13 Jan 2026 11:35:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20849 IP address blocks: 80.72.128.0/20 maxlen: 24 147.78.92.0/22 maxlen: 24 217.22.192.0/20 maxlen: 24 2a02:2958::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:24:17:91:b1:78:f2:9b:be:c3:13:2d:68:83:29:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083 Validity Not Before: Jan 13 11:35:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb7e23f64eb7dc6c7d4b3bcf3c163c902dfbe085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:82:3c:b9:b0:ed:7d:3b:f1:14:8a:48:06: 37:55:3b:63:77:8c:96:11:5c:27:bd:74:14:f5:78: d9:1d:41:bc:ff:34:d3:76:33:2b:45:ed:38:5e:61: a9:bb:75:76:ac:b0:28:3d:4a:cc:64:c6:23:69:97: f0:6a:89:10:dd:ff:47:fa:b3:d1:a9:28:ae:a5:31: 40:0d:de:2c:82:86:3a:f2:58:6c:14:d3:a4:f4:6a: ef:43:73:92:6b:25:94:cd:c4:df:be:e9:7a:b2:63: e2:4f:a8:79:82:68:d7:d7:23:27:b9:cd:ba:54:5f: 41:87:b5:47:c6:79:ed:de:b5:50:05:6b:ca:2a:9b: e7:b1:e9:6d:ba:8f:f6:26:8b:65:c6:62:49:50:83: 0c:58:bf:86:de:6f:13:3a:29:7d:1a:a2:d4:21:96: af:5b:70:2d:80:f6:dd:76:f7:dd:30:37:ea:d4:fb: cd:6f:25:2b:58:cd:1f:25:c1:54:a1:67:0d:97:fc: 82:a9:22:27:2b:ed:35:f0:35:38:00:9f:e5:54:c6: 2e:ee:94:0a:5a:87:37:01:26:d2:a0:b3:47:18:17: d8:b6:f6:2d:ee:b3:03:47:14:64:82:a3:81:e7:77: 1a:22:83:74:51:95:d2:18:8d:5b:0f:20:07:9f:2e: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7E:23:F6:4E:B7:DC:6C:7D:4B:3B:CF:3C:16:3C:90:2D:FB:E0:85 X509v3 Authority Key Identifier: keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/1-34j9k633Gx9SzvPPBY8kC374IU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.72.128.0/20 147.78.92.0/22 217.22.192.0/20 IPv6: 2a02:2958::/32 Signature Algorithm: sha256WithRSAEncryption 60:f1:a7:68:ca:37:2e:d6:23:5d:58:4c:53:29:73:60:d8:20: 4b:5b:dd:55:9d:cb:d9:eb:11:13:d6:0b:81:29:50:0b:79:87: 5f:36:d2:74:8f:02:db:da:cf:92:da:0d:51:31:6f:d8:00:c4: d9:f2:ca:eb:6d:64:6c:06:83:1b:2b:ed:c7:40:b3:30:6e:24: 18:99:a4:d9:c3:b8:45:f4:2e:02:6d:08:eb:d9:65:5f:20:35: bb:56:5f:df:d5:1e:0c:ac:6a:d7:6a:cf:f5:f6:35:65:11:af: e4:58:9b:ee:6f:8e:d9:23:f0:4f:47:21:74:73:4f:c8:fc:13: f7:15:f3:d7:f2:0c:57:63:9d:31:8a:ab:d3:b4:11:f9:15:7a: 62:2d:be:72:dd:1a:56:11:3d:b4:db:60:da:59:53:60:58:3c: fb:25:f0:52:8f:60:ac:8e:06:58:ea:7f:75:6e:78:2d:78:b7: c4:3a:f4:28:50:04:e5:39:79:0c:d1:ae:c0:22:39:29:db:ed: 50:94:a9:22:44:35:dc:0e:76:c3:5e:3c:07:e9:6c:bf:6e:e6: 1a:27:38:28:50:a5:45:f8:44:d5:34:69:7e:ca:76:99:77:71: ad:e8:a4:4c:f8:c9:75:8e:2b:a1:21:69:0e:1c:11:6a:05:db: b7:8f:74:9d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZu3JBeRsXjym77DEy1ogylWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZTE1NTJmYzBhNTg4NGE4ODFiMzUyODE3ZDBiNzMw MDkwODMwHhcNMjYwMTEzMTEzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjdlMjNmNjRlYjdkYzZjN2Q0YjNiY2YzYzE2M2M5MDJkZmJlMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkqCPLmw7X078RSKSAY3VTtjd4yW EVwnvXQU9XjZHUG8/zTTdjMrRe04XmGpu3V2rLAoPUrMZMYjaZfwaokQ3f9H+rPR qSiupTFADd4sgoY68lhsFNOk9GrvQ3OSayWUzcTfvul6smPiT6h5gmjX1yMnuc26 VF9Bh7VHxnnt3rVQBWvKKpvnseltuo/2JotlxmJJUIMMWL+G3m8TOil9GqLUIZav W3AtgPbddvfdMDfq1PvNbyUrWM0fJcFUoWcNl/yCqSInK+018DU4AJ/lVMYu7pQK Woc3ASbSoLNHGBfYtvYt7rMDRxRkgqOB53caIoN0UZXSGI1bDyAHny6IuQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPt+I/ZOt9xsfUs7zzwWPJAt++CFMB8GA1UdIwQY MBaAFOZZbhVS/ApYhKiBs1KBfQtzAJCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wY2EyODctM2VlZi00MTRjLTg4M2Et MDgxNjkxMjU3YTI2LzEvMS0zNGo5azYzM0d4OVN6dlBQQlk4a0MzNzRJVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTcvMGNhMjg3LTNlZWYtNDE0Yy04ODNhLTA4MTY5MTI1N2Ey Ni8xLzVsbHVGVkw4Q2xpRXFJR3pVb0Y5QzNNQWtJTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBFBIgAME ApNOXAMEBNkWwDANBAIAAjAHAwUAKgIpWDANBgkqhkiG9w0BAQsFAAOCAQEAYPGn aMo3LtYjXVhMUylzYNggS1vdVZ3L2esRE9YLgSlQC3mHXzbSdI8C29rPktoNUTFv 2ADE2fLK621kbAaDGyvtx0CzMG4kGJmk2cO4RfQuAm0I69llXyA1u1Zf39UeDKxq 12rP9fY1ZRGv5Fib7m+O2SPwT0chdHNPyPwT9xXz1/IMV2OdMYqr07QR+RV6Yi2+ ct0aVhE9tNtg2llTYFg8+yXwUo9grI4GWOp/dW54LXi3xDr0KFAE5Tl5DNGuwCI5 KdvtUJSpIkQ13A52w148B+lsv27mGic4KFClRfhE1TRpfsp2mXdxreikTPjJdY4r oSFpDhwRagXbt490nQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:29 2026 by rpki-client