This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/1jUxjKBP0ewbKykrBmXN2Uv7y2U.roa File: 1jUxjKBP0ewbKykrBmXN2Uv7y2U.roa (raw, json) Hash identifier: xE6sRa3DTTD5nNX1zDSktxn7FqcwqAPXm9HRxByDF/c= Subject key identifier: D6:35:31:8C:A0:4F:D1:EC:1B:2B:29:2B:06:65:CD:D9:4B:FB:CB:65 Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e Certificate serial: 019B7C124FAE5598A0EDBB0307DDAD1C7B80 Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/1jUxjKBP0ewbKykrBmXN2Uv7y2U.roa Signing time: Fri 02 Jan 2026 00:18:53 +0000 ROA not before: Fri 02 Jan 2026 00:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59572 IP address blocks: 193.35.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4f:ae:55:98:a0:ed:bb:03:07:dd:ad:1c:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e Validity Not Before: Jan 2 00:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d635318ca04fd1ec1b2b292b0665cdd94bfbcb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:fa:3f:94:3d:2b:f0:72:23:ae:a9:d4:35: a3:e8:d5:70:f0:a6:aa:64:9b:b9:10:40:45:52:0a: a2:21:e0:9e:d4:66:da:8e:41:c0:20:5e:6e:24:76: e1:5b:95:d8:8c:07:06:52:b2:94:70:84:ba:d0:36: 34:ee:5e:6f:f8:05:6d:47:b6:35:e2:64:88:51:24: 27:7e:2b:48:c0:f2:4a:24:67:cf:4f:bf:d7:65:99: 93:50:77:57:6a:eb:b9:c2:a3:54:57:11:a6:f6:46: 44:54:56:74:0c:2d:22:2d:c0:15:e2:4c:29:e6:21: 57:bf:7a:a1:95:5c:d2:49:db:c2:0f:7a:3e:4a:bf: 95:44:9d:08:1a:e4:14:33:15:0f:09:b6:07:53:54: 52:6a:9d:ae:8b:da:b0:0c:6c:f1:63:2f:d3:44:a0: 1a:8e:a4:84:51:e8:7f:6d:22:08:ad:fc:0b:63:5e: 37:de:5e:6b:54:49:d3:7a:7c:82:fd:07:eb:59:7b: 84:00:c5:a6:3f:07:fe:0c:32:92:d1:00:06:78:a8: 7f:0b:ab:f4:19:57:8e:b4:a0:92:a9:bb:b6:29:d4: b8:3a:39:f6:e8:9b:6d:fc:37:f1:ab:69:e5:1e:77: 74:a4:31:a2:b4:f1:97:7d:b4:1a:0a:67:ab:d2:2b: 1e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:35:31:8C:A0:4F:D1:EC:1B:2B:29:2B:06:65:CD:D9:4B:FB:CB:65 X509v3 Authority Key Identifier: keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/1jUxjKBP0ewbKykrBmXN2Uv7y2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.1.0/24 Signature Algorithm: sha256WithRSAEncryption 53:1e:70:af:a3:62:7f:c0:b8:d6:2d:28:32:db:ba:b9:7f:a0: 7f:c7:eb:8c:fb:61:01:af:51:90:4f:c6:0e:95:6d:7b:5a:3c: a7:a4:17:57:89:3c:34:14:eb:b5:19:c1:10:00:af:2c:fb:47: 42:91:36:a4:c8:c4:bf:24:ff:7f:2f:78:3b:30:02:fa:d4:f6: 64:aa:ba:d4:5a:79:51:3a:4b:b1:b1:d7:56:e5:03:0e:9c:20: ea:fa:82:49:ca:4c:8c:3e:a0:a2:f8:5b:bf:a5:61:2a:cf:a2: 4f:63:6b:a3:ff:17:7d:d0:c8:5b:a5:0b:52:8f:f8:03:63:16: 2f:de:d6:91:22:38:6f:71:d6:55:93:f7:d7:58:0a:3b:d2:89: e9:7a:c2:53:2d:f2:05:22:ca:00:87:4e:99:c0:7e:2b:20:aa: ec:f7:8f:44:72:c0:38:11:13:4f:f7:61:f6:47:36:14:a8:cd: bb:db:f4:bb:4b:4c:48:b1:13:c3:17:cc:54:90:f4:71:3b:5a: 71:fc:11:a2:97:88:57:21:e4:21:42:0b:a6:10:ee:b0:ab:05: 2a:6b:a7:04:5e:24:76:4a:05:26:80:e9:41:1e:63:33:fc:8a: e2:e2:e1:f4:ac:e3:d8:69:e6:d0:86:1d:69:57:b9:c7:12:6f: a5:03:ae:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ek+uVZig7bsDB92tHHuAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMmM4NTQwMTExNDBhMTA5NDdkYTdiNTNiYmIzNTBmM2M1 NGIzM2UwHhcNMjYwMTAyMDAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjM1MzE4Y2EwNGZkMWVjMWIyYjI5MmIwNjY1Y2RkOTRiZmJjYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEL6P5Q9K/ByI66p1DWj6NVw8Kaq ZJu5EEBFUgqiIeCe1GbajkHAIF5uJHbhW5XYjAcGUrKUcIS60DY07l5v+AVtR7Y1 4mSIUSQnfitIwPJKJGfPT7/XZZmTUHdXauu5wqNUVxGm9kZEVFZ0DC0iLcAV4kwp 5iFXv3qhlVzSSdvCD3o+Sr+VRJ0IGuQUMxUPCbYHU1RSap2ui9qwDGzxYy/TRKAa jqSEUeh/bSIIrfwLY1433l5rVEnTenyC/QfrWXuEAMWmPwf+DDKS0QAGeKh/C6v0 GVeOtKCSqbu2KdS4Ojn26Jtt/Dfxq2nlHnd0pDGitPGXfbQaCmer0isevQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNY1MYygT9HsGyspKwZlzdlL+8tlMB8GA1UdIwQY MBaAFDwshUARFAoQlH2ntTu7NQ88VLM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYt YjViYmQwYjVlMGFhLzEvMWpVeGpLQlAwZXdiS3lrckJtWE4yVXY3eTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lMDU4MGQtMDQ4YS00ZTZkLWJlYzYtYjViYmQwYjVlMGFh LzEvUEN5RlFCRVVDaENVZmFlMU83czFEenhVc3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSMBMA0G CSqGSIb3DQEBCwUAA4IBAQBTHnCvo2J/wLjWLSgy27q5f6B/x+uM+2EBr1GQT8YO lW17WjynpBdXiTw0FOu1GcEQAK8s+0dCkTakyMS/JP9/L3g7MAL61PZkqrrUWnlR OkuxsddW5QMOnCDq+oJJykyMPqCi+Fu/pWEqz6JPY2uj/xd90MhbpQtSj/gDYxYv 3taRIjhvcdZVk/fXWAo70onpesJTLfIFIsoAh06ZwH4rIKrs949EcsA4ERNP92H2 RzYUqM272/S7S0xIsRPDF8xUkPRxO1px/BGil4hXIeQhQgumEO6wqwUqa6cEXiR2 SgUmgOlBHmMz/Iri4uH0rOPYaebQhh1pV7nHEm+lA67R -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:45 2026 by rpki-client