This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/1FnTssY12YHbRtY_nsWuk0wHwHY.roa File: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (raw, json) Hash identifier: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c= Subject key identifier: D4:59:D3:B2:C6:35:D9:81:DB:46:D6:3F:9E:C5:AE:93:4C:07:C0:76 Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf Certificate serial: 019B7CED456F71AB03CCC4E2D1421213DD8A Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/1FnTssY12YHbRtY_nsWuk0wHwHY.roa Signing time: Fri 02 Jan 2026 04:18:03 +0000 ROA not before: Fri 02 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34927 IP address blocks: 91.240.248.0/22 maxlen: 22 193.150.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:45:6f:71:ab:03:cc:c4:e2:d1:42:12:13:dd:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d459d3b2c635d981db46d63f9ec5ae934c07c076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:e1:09:cf:01:e9:ff:83:f3:64:d3:6d:27: 46:91:a9:dc:ca:83:e8:9a:0b:34:b6:e8:bc:34:af: 03:c4:84:fd:95:af:71:c7:ec:f6:80:0d:97:33:b4: c5:34:6f:f1:31:26:8d:cb:24:81:1d:ef:13:73:62: 0f:f1:4c:41:e8:58:c2:8a:43:39:ba:c1:08:9a:f0: ca:8f:74:7a:a6:0f:ce:26:50:19:ea:e1:eb:a7:87: 26:0f:9b:8e:fe:30:d8:69:f7:0d:be:25:ed:31:43: 5e:e3:a3:62:0f:85:8a:1e:46:a0:14:35:da:64:c0: e9:92:be:57:71:48:6b:05:59:2c:90:22:f4:2a:ad: 58:95:6a:c2:90:fd:1f:a1:6b:1c:57:bd:64:48:93: d0:5b:2e:ed:3d:65:87:53:61:09:4f:b3:c6:e9:3f: 36:c1:04:30:37:c0:df:b7:39:e8:34:db:fb:e3:d8: cc:30:14:9b:7a:df:6c:6f:0d:c3:ef:92:6c:a1:e3: 75:2f:19:04:0f:45:60:6c:92:5c:86:62:07:ca:38: 38:2a:aa:dd:91:54:cb:05:b8:cf:95:18:2d:b5:c6: bc:75:23:4f:22:bc:98:3d:c2:f6:01:eb:33:57:e5: aa:b8:55:c4:3c:17:ee:49:e6:02:ed:6e:ae:f4:a6: 4d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:59:D3:B2:C6:35:D9:81:DB:46:D6:3F:9E:C5:AE:93:4C:07:C0:76 X509v3 Authority Key Identifier: keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/1FnTssY12YHbRtY_nsWuk0wHwHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.248.0/22 193.150.21.0/24 Signature Algorithm: sha256WithRSAEncryption 81:08:93:da:e0:62:76:b7:07:36:44:50:b3:7f:25:40:0e:4f: a4:e8:e3:7a:93:b8:9a:c1:63:7a:ed:2e:a8:b8:c8:a9:3c:59: 97:35:3e:eb:06:db:a6:ec:93:0f:a6:e2:7c:d6:cb:d2:74:12: 1a:31:d4:74:79:0f:62:7c:d0:2f:dd:39:43:c8:3d:88:72:60: 85:78:2f:a5:0b:e7:b0:eb:48:5a:ad:b0:bf:c4:0e:ab:9e:c3: c7:02:7c:1f:94:4b:ec:97:31:d6:03:16:fc:38:9e:dd:3a:7d: 78:5b:c8:ab:97:c4:a3:2f:0c:e5:a5:05:2f:9a:54:87:41:88: 4c:7e:27:3d:a5:43:d1:19:67:39:21:99:3a:53:60:55:be:63: 51:86:67:69:c3:d9:04:bd:37:94:33:34:8c:c5:0e:85:b9:73: 60:7a:97:93:6f:77:a9:e1:c4:98:fe:82:4b:0f:1c:9b:88:ea: 7d:64:d7:3a:00:c0:be:9d:b7:f0:cb:f9:93:ed:73:f3:36:14: b9:1d:1c:04:1e:03:e0:78:61:88:c3:a7:ec:be:bd:09:b1:54: ae:9d:55:5a:48:32:38:c0:15:a5:df:99:63:25:7c:01:1f:db: c8:4d:81:f3:47:21:73:90:fc:e7:40:b4:0e:a7:75:82:f8:7f: fc:3a:f1:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87UVvcasDzMTi0UISE92KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNzI0ZTYxZTNiYTJmOTQ2NjU5MTczMzllNmRhYzJiNjgw YTE4Y2YwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDU5ZDNiMmM2MzVkOTgxZGI0NmQ2M2Y5ZWM1YWU5MzRjMDdjMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1HhCc8B6f+D82TTbSdGkancyoPo mgs0tui8NK8DxIT9la9xx+z2gA2XM7TFNG/xMSaNyySBHe8Tc2IP8UxB6FjCikM5 usEImvDKj3R6pg/OJlAZ6uHrp4cmD5uO/jDYafcNviXtMUNe46NiD4WKHkagFDXa ZMDpkr5XcUhrBVkskCL0Kq1YlWrCkP0foWscV71kSJPQWy7tPWWHU2EJT7PG6T82 wQQwN8DftznoNNv749jMMBSbet9sbw3D75JsoeN1LxkED0VgbJJchmIHyjg4Kqrd kVTLBbjPlRgttca8dSNPIryYPcL2AeszV+WquFXEPBfuSeYC7W6u9KZNyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNRZ07LGNdmB20bWP57FrpNMB8B2MB8GA1UdIwQY MBaAFENyTmHjui+UZlkXM55trCtoChjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUt NmI4NzcwMzZhYTFhLzEvMUZuVHNzWTEyWUhiUnRZX25zV3VrMHdId0hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUtNmI4NzcwMzZhYTFh LzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW/D4AwQA wZYVMA0GCSqGSIb3DQEBCwUAA4IBAQCBCJPa4GJ2twc2RFCzfyVADk+k6ON6k7ia wWN67S6ouMipPFmXNT7rBtum7JMPpuJ81svSdBIaMdR0eQ9ifNAv3TlDyD2IcmCF eC+lC+ew60harbC/xA6rnsPHAnwflEvslzHWAxb8OJ7dOn14W8irl8SjLwzlpQUv mlSHQYhMfic9pUPRGWc5IZk6U2BVvmNRhmdpw9kEvTeUMzSMxQ6FuXNgepeTb3ep 4cSY/oJLDxybiOp9ZNc6AMC+nbfwy/mT7XPzNhS5HRwEHgPgeGGIw6fsvr0JsVSu nVVaSDI4wBWl35ljJXwBH9vITYHzRyFzkPznQLQOp3WC+H/8OvEM -----END CERTIFICATE-----Generated at Tue Jan 20 12:11:15 2026 by rpki-client