This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa File: x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa (raw, json) Hash identifier: 93sj77pr5rKe1tU77xXMj7hopzpAX8jIqepZA0pnhsE= Subject key identifier: C7:73:5B:5A:24:16:09:95:F2:73:6B:8C:9D:9E:40:6F:A1:61:BB:F2 Certificate issuer: /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5 Certificate serial: 019B7B359E4D71CD3A046C6FAA536183F4AC Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 129.70.0.0/16 maxlen: 16 192.109.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9e:4d:71:cd:3a:04:6c:6f:aa:53:61:83:f4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7735b5a24160995f2736b8c9d9e406fa161bbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:58:ba:f2:b5:12:11:3a:f7:24:45:e6:20: 37:1c:10:2c:75:26:ea:9f:1a:2e:71:a3:43:6a:a3: 20:17:f8:cc:6c:d7:fb:16:42:38:c9:a0:df:b4:aa: 60:41:47:0e:e3:17:6a:de:eb:a6:a8:ab:22:6d:e2: c7:30:f3:49:e1:9c:20:00:94:d4:0f:e6:9b:ed:7e: 48:10:f7:f7:3c:8a:eb:04:00:a1:d0:57:ad:5d:95: 8f:8c:8a:41:b4:fd:ae:a1:39:95:db:69:f9:34:8f: 8b:a1:92:8f:d8:57:4d:98:6c:a9:04:e0:0f:ff:3c: 02:48:29:72:fa:09:72:7b:f9:20:ab:35:63:2a:ce: 0b:38:f7:46:d9:9d:34:ac:08:3c:88:6a:fc:b2:f5: e3:c8:78:6c:80:28:7b:52:94:07:18:c2:68:58:23: 7e:82:11:39:66:8d:b7:5d:22:7e:12:ae:94:2c:7d: f4:27:58:ad:22:a5:b7:a3:20:d7:32:b3:0d:6c:c9: ad:22:a8:06:08:27:20:89:3e:f0:e4:46:5d:55:ff: 24:46:e5:2e:de:eb:69:d6:c0:50:cf:fd:0c:4a:3b: a9:73:0c:c2:0d:72:02:5e:1b:b8:ae:81:b7:a0:1b: 1c:46:7a:06:1d:b4:a5:24:67:f0:98:df:89:79:97: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:73:5B:5A:24:16:09:95:F2:73:6B:8C:9D:9E:40:6F:A1:61:BB:F2 X509v3 Authority Key Identifier: keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.70.0.0/16 192.109.134.0/24 Signature Algorithm: sha256WithRSAEncryption b0:90:6e:44:f6:bd:d9:2b:6a:34:89:0c:59:6a:ef:c1:c5:92: 69:50:c2:8b:5b:49:e2:35:30:4c:97:4f:be:25:d4:77:93:97: 35:f1:f6:62:0a:5d:26:ee:f5:36:9e:ed:91:4b:42:8f:49:16: 10:1c:36:78:cf:0f:c8:3d:f2:6b:71:ad:58:f3:ef:23:6d:ab: 9f:56:fc:97:3c:cc:5d:9d:45:85:47:dd:f9:7d:b5:04:f3:aa: b3:83:b7:8d:fc:a6:ef:d9:da:86:9a:bc:df:7c:a5:6c:59:f3: 31:b6:14:70:e0:af:88:43:4f:7f:d9:93:b1:79:d4:0f:a7:c4: 1e:03:bd:0e:0d:66:b1:b5:33:f4:0a:f5:a8:6b:d6:73:2e:fa: 61:92:f3:7a:45:78:47:79:28:5f:83:54:c6:2b:b0:48:79:95: 1a:f6:6e:22:6b:a7:6d:ab:89:e9:12:c1:20:3b:59:76:c2:85: bf:9f:01:dd:d9:e9:ec:9f:12:0d:93:2b:c8:de:97:35:85:c7: 59:5a:db:5a:9d:2d:5e:c7:dc:62:02:0e:2f:10:b7:c1:2c:67: e9:fd:e5:5c:68:18:22:67:4f:41:d9:a7:9e:20:39:e1:82:4a: 05:12:09:b3:5c:ce:4e:f1:93:86:9b:d5:90:db:fb:f9:90:b0: ab:fe:46:66 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt7NZ5Ncc06BGxvqlNhg/SsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDQ3OTEyZWZkNDA5YTQ2ZjdjZDQyNzQxODA0YzdkNGY1 ZTFhZDUwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzczNWI1YTI0MTYwOTk1ZjI3MzZiOGM5ZDllNDA2ZmExNjFiYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+pYuvK1EhE69yRF5iA3HBAsdSbq nxoucaNDaqMgF/jMbNf7FkI4yaDftKpgQUcO4xdq3uumqKsibeLHMPNJ4ZwgAJTU D+ab7X5IEPf3PIrrBACh0FetXZWPjIpBtP2uoTmV22n5NI+LoZKP2FdNmGypBOAP /zwCSCly+glye/kgqzVjKs4LOPdG2Z00rAg8iGr8svXjyHhsgCh7UpQHGMJoWCN+ ghE5Zo23XSJ+Eq6ULH30J1itIqW3oyDXMrMNbMmtIqgGCCcgiT7w5EZdVf8kRuUu 3utp1sBQz/0MSjupcwzCDXICXhu4roG3oBscRnoGHbSlJGfwmN+JeZeGSwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFMdzW1okFgmV8nNrjJ2eQG+hYbvyMB8GA1UdIwQY MBaAFBHUeRLv1Amkb3zUJ0GATH1PXhrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MDI1ZjYtNWYzOC00ZGRmLTkxN2Qt MTE0YzI0MDBjM2UzLzEveDNOYldpUVdDWlh5YzJ1TW5aNUFiNkZodV9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84MDI1ZjYtNWYzOC00ZGRmLTkxN2QtMTE0YzI0MDBjM2Uz LzEvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAgUYDBADA bYYwDQYJKoZIhvcNAQELBQADggEBALCQbkT2vdkrajSJDFlq78HFkmlQwotbSeI1 MEyXT74l1HeTlzXx9mIKXSbu9Tae7ZFLQo9JFhAcNnjPD8g98mtxrVjz7yNtq59W /Jc8zF2dRYVH3fl9tQTzqrODt438pu/Z2oaavN98pWxZ8zG2FHDgr4hDT3/Zk7F5 1A+nxB4DvQ4NZrG1M/QK9ahr1nMu+mGS83pFeEd5KF+DVMYrsEh5lRr2biJrp22r iekSwSA7WXbChb+fAd3Z6eyfEg2TK8jelzWFx1la21qdLV7H3GICDi8Qt8EsZ+n9 5VxoGCJnT0HZp54gOeGCSgUSCbNczk7xk4ab1ZDb+/mQsKv+RmY= -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:45 2026 by rpki-client