This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/1Pn7XD-9HZImU-J6Q1IGY1xRKYQ.roa File: 1Pn7XD-9HZImU-J6Q1IGY1xRKYQ.roa (raw, json) Hash identifier: CGENQXcjM+y9uAdpqQaU4OjFkM8xEPGnXTz4n/PpaZQ= Subject key identifier: D4:F9:FB:5C:3F:BD:1D:92:26:53:E2:7A:43:52:06:63:5C:51:29:84 Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91 Certificate serial: 019B79ED62E1F4E4E0FD19844FC61C15FE8C Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/1Pn7XD-9HZImU-J6Q1IGY1xRKYQ.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209605 IP address blocks: 193.31.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:62:e1:f4:e4:e0:fd:19:84:4f:c6:1c:15:fe:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4f9fb5c3fbd1d922653e27a435206635c512984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:8d:8c:a5:93:03:47:1e:83:e4:17:2b:ce: 0d:57:6b:56:01:07:65:ec:06:d6:3b:43:e5:f0:e2: 13:68:c1:02:61:81:f4:e1:a5:40:96:c1:5b:96:9b: eb:72:a5:6f:df:bd:80:d6:7a:7e:59:be:e2:9a:42: 0f:a8:6c:d1:00:86:5a:d6:fe:be:31:c3:6a:de:c0: 98:d2:64:8d:c9:34:38:49:af:16:d7:f0:31:3c:5c: 27:63:3a:9f:dd:83:20:d7:7e:67:4a:03:64:6a:d9: 77:d1:ab:85:e5:b6:ab:43:e9:52:d2:14:5c:66:f2: 32:3f:ab:fe:9c:59:a7:c9:40:1f:f0:0e:ad:81:29: 97:9d:14:d0:a0:0b:2c:0d:c9:41:13:08:92:22:02: 45:f9:aa:3d:e7:52:47:6e:da:82:90:5b:b4:91:3b: a5:6d:c5:ec:85:b8:97:45:51:fd:fb:76:db:6f:79: 87:cf:5f:55:d1:7f:9b:a7:eb:4f:af:b6:d7:bf:70: b2:45:7e:0e:5e:1f:cf:31:72:d8:84:cc:3c:b4:af: 26:c0:53:4c:a0:e8:05:81:46:0a:df:46:4f:54:ee: ce:8f:2e:bb:63:c4:f0:9d:50:3b:4f:a6:85:60:ed: 9a:64:a2:36:91:12:ba:c9:63:60:94:4b:26:4b:b8: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F9:FB:5C:3F:BD:1D:92:26:53:E2:7A:43:52:06:63:5C:51:29:84 X509v3 Authority Key Identifier: keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/1Pn7XD-9HZImU-J6Q1IGY1xRKYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.31.6.0/24 Signature Algorithm: sha256WithRSAEncryption 60:15:b9:02:93:e4:d5:7f:2e:9a:4c:58:eb:31:fe:ec:db:d4: fd:64:bd:d1:8b:ce:e3:e1:2e:19:2c:61:63:0e:c9:5d:d6:86: 4f:f6:71:7d:53:f9:21:80:35:2c:5d:3c:b4:b6:2c:ef:b9:de: 3b:56:46:7e:52:dc:88:7e:1f:f8:2f:1a:b9:99:29:8a:53:e9: 1b:cd:a9:b1:8d:c7:9c:45:32:1f:04:90:83:53:25:90:5c:79: 0b:92:78:7f:92:03:73:8f:c6:5b:2e:1e:f3:73:3e:0e:81:b0: 1b:12:64:7c:aa:5d:cd:62:ca:7e:0d:e6:51:18:c3:1f:85:69: 5d:af:55:12:cd:5e:6e:45:a4:59:26:be:d4:ad:30:b2:34:7e: dd:8a:b0:b9:e8:8f:ae:de:b6:4b:51:b0:af:5a:2c:c2:bc:0b: ea:d5:cc:59:5a:f2:b2:58:0e:55:28:cd:d3:61:70:fe:62:a4: b9:81:a8:ca:5a:ff:df:d1:e7:c2:23:26:61:49:da:d3:8d:5d: 4f:94:b7:f2:35:d0:20:1f:9d:68:e1:62:62:87:19:3c:33:5e: dc:b3:7e:75:ab:c6:c8:17:91:7d:6c:54:84:40:b3:83:30:a1: 9a:4c:c7:34:f3:2a:b9:bf:1e:47:6e:aa:82:5f:a2:d6:80:b3: f3:09:f8:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WLh9OTg/RmET8YcFf6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy ZjZmOTEwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGY5ZmI1YzNmYmQxZDkyMjY1M2UyN2E0MzUyMDY2MzVjNTEyOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWGNjKWTA0ceg+QXK84NV2tWAQdl 7AbWO0Pl8OITaMECYYH04aVAlsFblpvrcqVv372A1np+Wb7imkIPqGzRAIZa1v6+ McNq3sCY0mSNyTQ4Sa8W1/AxPFwnYzqf3YMg135nSgNkatl30auF5barQ+lS0hRc ZvIyP6v+nFmnyUAf8A6tgSmXnRTQoAssDclBEwiSIgJF+ao951JHbtqCkFu0kTul bcXshbiXRVH9+3bbb3mHz19V0X+bp+tPr7bXv3CyRX4OXh/PMXLYhMw8tK8mwFNM oOgFgUYK30ZPVO7Ojy67Y8TwnVA7T6aFYO2aZKI2kRK6yWNglEsmS7gK5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNT5+1w/vR2SJlPiekNSBmNcUSmEMB8GA1UdIwQY MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt MWE4Yzg0MmFmZTJhLzEvMVBuN1hELTlIWkltVS1KNlExSUdZMXhSS1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR8GMA0G CSqGSIb3DQEBCwUAA4IBAQBgFbkCk+TVfy6aTFjrMf7s29T9ZL3Ri87j4S4ZLGFj Dsld1oZP9nF9U/khgDUsXTy0tizvud47VkZ+UtyIfh/4Lxq5mSmKU+kbzamxjcec RTIfBJCDUyWQXHkLknh/kgNzj8ZbLh7zcz4OgbAbEmR8ql3NYsp+DeZRGMMfhWld r1USzV5uRaRZJr7UrTCyNH7dirC56I+u3rZLUbCvWizCvAvq1cxZWvKyWA5VKM3T YXD+YqS5gajKWv/f0efCIyZhSdrTjV1PlLfyNdAgH51o4WJihxk8M17cs351q8bI F5F9bFSEQLODMKGaTMc08yq5vx5HbqqCX6LWgLPzCfiK -----END CERTIFICATE-----Generated at Wed Jan 21 07:34:23 2026 by rpki-client