This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1-3JEPXwfmyFKJThvRDfv6DUEnEs.roa File: 1-3JEPXwfmyFKJThvRDfv6DUEnEs.roa (raw, json) Hash identifier: v9mubJ4GtIpoNfKJSzPA126WJqID27aRB07phRN/6t0= Subject key identifier: FB:72:44:3D:7C:1F:9B:21:4A:25:38:6F:44:37:EF:E8:35:04:9C:4B Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B7834A4F93AD56823A567ED638F7AD530 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1-3JEPXwfmyFKJThvRDfv6DUEnEs.roa Signing time: Thu 01 Jan 2026 06:17:54 +0000 ROA not before: Thu 01 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401479 IP address blocks: 93.127.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a4:f9:3a:d5:68:23:a5:67:ed:63:8f:7a:d5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb72443d7c1f9b214a25386f4437efe835049c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bb:0b:42:41:d6:fc:57:c0:b0:c2:dc:5d:14: 15:bf:a7:b2:4e:4a:bc:3a:c5:c7:8e:ef:de:70:5e: 1b:3a:f6:ba:0f:d0:7b:08:bd:a4:8f:13:53:77:a5: ee:ee:66:b0:0a:69:44:19:bd:cb:d8:15:2c:ae:cb: 86:6a:06:38:60:e2:00:58:e8:bf:69:b0:2d:77:55: c3:9f:65:03:90:0e:01:79:56:da:6e:49:74:88:87: af:9d:24:a8:56:28:96:19:c1:51:ff:8d:29:fd:40: 88:30:cc:0d:07:57:b5:d6:fe:a4:66:0a:0c:43:49: eb:83:b6:1d:71:7a:be:b5:d4:b6:0d:d2:82:1a:b8: d4:42:76:48:65:a4:73:24:04:c3:ff:3b:4a:9b:41: b9:47:91:2f:0b:3b:ff:70:ff:7e:af:24:5c:dc:f6: 39:ba:d5:44:af:98:6a:3c:a6:7e:cb:65:67:a9:e0: 40:fd:71:53:8c:1b:ad:cb:ec:21:94:27:2b:1c:40: a7:43:3e:b0:8f:7a:27:2e:38:71:fb:e1:39:d0:83: 32:86:70:b6:b9:48:fd:11:4d:b8:bc:3d:13:44:d5: f0:34:fc:e9:c0:4f:07:81:7f:c9:d0:df:0a:04:9d: c6:10:d9:e6:fd:8e:f1:76:0e:09:67:3a:85:82:90: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:72:44:3D:7C:1F:9B:21:4A:25:38:6F:44:37:EF:E8:35:04:9C:4B X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1-3JEPXwfmyFKJThvRDfv6DUEnEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.127.128.0/20 Signature Algorithm: sha256WithRSAEncryption a1:9b:36:bd:18:f7:e6:33:5d:8e:d3:2d:83:63:92:70:8a:ac: 25:f4:3b:2e:9d:6a:04:12:d7:d2:73:0e:80:fb:1b:b7:83:8e: dd:f3:9e:21:fa:6c:2e:85:6f:35:be:ac:85:fd:f4:e5:88:6b: fc:a4:f1:c7:64:1d:a0:78:7c:d1:a6:d1:44:e2:af:98:af:7d: 51:b4:8b:8c:d9:e0:ce:4f:98:5c:40:3a:86:28:cc:71:7d:60: ea:df:d5:37:9e:c9:f1:65:90:fa:4d:69:1d:f0:93:14:7b:71: 64:ec:3c:c3:b6:2f:9d:10:3c:4a:23:99:1d:f0:de:3a:1b:60: 07:f9:9b:75:6e:ff:c7:32:5c:af:09:6e:53:3b:15:90:f2:4e: 38:7f:8e:af:5e:ee:b7:c1:82:ba:05:a4:25:2d:4f:7d:de:1f: 9e:eb:81:d9:8a:99:e6:51:cf:17:73:12:3f:43:0d:ea:a8:7d: bc:ce:13:4e:c6:e2:cc:d4:32:1a:40:1c:b8:0d:10:2e:55:32: 88:e1:53:43:77:76:0d:5a:ac:bd:e8:ab:1f:9c:04:75:6e:0d: 7e:0d:1c:0d:f2:ed:3b:e8:15:b0:e2:95:08:6f:28:c8:d2:e2: 03:7c:18:1d:bd:d0:21:24:53:0b:a9:22:a8:c6:3c:5c:2b:30: 8e:19:5b:5c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NKT5OtVoI6Vn7WOPetUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjcyNDQzZDdjMWY5YjIxNGEyNTM4NmY0NDM3ZWZlODM1MDQ5YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LsLQkHW/FfAsMLcXRQVv6eyTkq8 OsXHju/ecF4bOva6D9B7CL2kjxNTd6Xu7mawCmlEGb3L2BUsrsuGagY4YOIAWOi/ abAtd1XDn2UDkA4BeVbabkl0iIevnSSoViiWGcFR/40p/UCIMMwNB1e11v6kZgoM Q0nrg7YdcXq+tdS2DdKCGrjUQnZIZaRzJATD/ztKm0G5R5EvCzv/cP9+ryRc3PY5 utVEr5hqPKZ+y2VnqeBA/XFTjButy+whlCcrHECnQz6wj3onLjhx++E50IMyhnC2 uUj9EU24vD0TRNXwNPzpwE8HgX/J0N8KBJ3GENnm/Y7xdg4JZzqFgpCMDQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPtyRD18H5shSiU4b0Q37+g1BJxLMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvMS0zSkVQWHdmbXlGS0pUaHZSRGZ2NkRVRW5Fcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjYvYmU2NmU0LWYxNGItNGIzMS1iZGFmLTQ0MTQ1NThmZGNi Yi8xL3czaThPOU5RN3R4UE4zd2lSVmF5VU5wdDNtOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBF1/gDAN BgkqhkiG9w0BAQsFAAOCAQEAoZs2vRj35jNdjtMtg2OScIqsJfQ7Lp1qBBLX0nMO gPsbt4OO3fOeIfpsLoVvNb6shf305Yhr/KTxx2QdoHh80abRROKvmK99UbSLjNng zk+YXEA6hijMcX1g6t/VN57J8WWQ+k1pHfCTFHtxZOw8w7YvnRA8SiOZHfDeOhtg B/mbdW7/xzJcrwluUzsVkPJOOH+Or17ut8GCugWkJS1Pfd4fnuuB2YqZ5lHPF3MS P0MN6qh9vM4TTsbizNQyGkAcuA0QLlUyiOFTQ3d2DVqsveirH5wEdW4Nfg0cDfLt O+gVsOKVCG8oyNLiA3wYHb3QISRTC6kiqMY8XCswjhlbXA== -----END CERTIFICATE-----Generated at Sun Jan 11 12:01:23 2026 by rpki-client