This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-3WI2a_g0j8I8u6fn1mGAQemXmc.roa File: 1-3WI2a_g0j8I8u6fn1mGAQemXmc.roa (raw, json) Hash identifier: mtEO98uq1AkeZsi3e+2x15LWxvRNEkzjz39De29xm4Y= Subject key identifier: FB:75:88:D9:AF:E0:D2:3F:08:F2:EE:9F:9F:59:86:01:07:A6:5E:67 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA786116FA179194B7F0AA192185E17 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-3WI2a_g0j8I8u6fn1mGAQemXmc.roa Signing time: Fri 02 Jan 2026 12:21:06 +0000 ROA not before: Fri 02 Jan 2026 12:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204304 IP address blocks: 92.50.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:86:11:6f:a1:79:19:4b:7f:0a:a1:92:18:5e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb7588d9afe0d23f08f2ee9f9f59860107a65e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:65:a2:3c:d4:7b:e3:f5:87:b6:3b:cb:c1: 2c:99:fc:02:97:0f:b9:01:f2:f4:21:f7:c4:97:38: 29:14:f9:a7:62:cd:1b:52:d0:5a:30:86:eb:ab:5f: cf:04:8f:9c:51:d5:10:83:a1:91:73:a6:8f:a4:e0: 7e:55:44:a0:83:cb:bd:ca:f2:05:0f:24:a2:74:4d: 77:a9:e3:6b:e0:1a:d6:2b:cc:49:fb:cd:5e:23:6f: 0b:d4:70:4d:88:c8:6c:2a:0f:06:a0:a4:65:ab:47: 12:ed:7c:7f:73:f6:40:f4:8a:45:99:4b:39:f4:ae: b4:95:aa:05:cf:f3:bd:48:c5:24:91:80:76:f1:02: 07:14:c7:21:e1:e1:93:c4:ca:cb:d4:f0:34:72:2b: 7f:24:31:d9:80:a2:db:56:95:ff:de:b0:5b:d5:2a: 44:fc:46:34:25:e6:d7:d8:07:41:28:1f:75:c6:4a: a6:92:a3:c1:22:68:38:b5:33:03:4f:2a:32:31:04: 18:5b:da:d9:8a:20:23:db:7f:75:1f:d7:7f:be:a2: 81:6f:e3:b0:74:29:5f:b7:31:82:e3:63:bc:64:d1: 32:02:40:00:ab:52:96:7c:0a:e5:f7:57:2b:f8:e6: 21:5f:60:7f:8d:eb:44:89:ac:84:55:3e:85:54:c2: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:75:88:D9:AF:E0:D2:3F:08:F2:EE:9F:9F:59:86:01:07:A6:5E:67 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-3WI2a_g0j8I8u6fn1mGAQemXmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.50.246.0/24 Signature Algorithm: sha256WithRSAEncryption 63:79:9c:91:32:f1:40:0a:3c:11:a7:37:b3:f2:61:14:8a:cf: f6:7b:f6:b6:43:ad:16:15:1f:5a:f2:7c:be:bd:37:c5:6e:5f: d1:17:7f:9e:29:f6:44:fc:fd:10:e1:65:83:ed:f4:07:5e:ef: 3d:36:c1:9f:0a:10:d4:60:6f:cb:39:61:c8:ec:90:d7:a5:1d: 6f:8f:97:53:40:70:ca:95:38:3c:59:aa:f5:aa:45:bc:65:56: 44:ae:90:22:e0:fb:ad:a4:77:30:01:19:56:53:c3:97:e3:9b: ed:70:7c:c5:41:b7:0b:3f:f9:dd:0e:e2:e2:f2:31:d1:76:1d: 63:06:65:33:e6:2d:c6:62:cc:9f:ba:b2:20:26:72:44:91:5a: 78:33:31:c8:b1:d5:07:c1:fc:aa:15:04:60:16:c2:47:0e:d8: 23:f7:d6:dd:60:ac:4e:64:dc:2c:9c:8c:db:3e:0b:c2:fb:b5: 15:1b:99:88:22:88:db:dd:6d:4e:54:9e:a7:f2:8d:8f:d1:07: 50:e2:08:23:00:02:04:d2:31:77:07:ce:f3:87:49:7f:81:4e: 77:cb:6e:16:61:c0:1c:a9:b5:da:68:ae:1f:83:ae:fb:f4:fa: 9b:cb:c5:70:17:01:6e:97:91:04:54:71:a5:a3:15:21:d3:25: c9:9f:26:c4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+p4YRb6F5GUt/CqGSGF4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjc1ODhkOWFmZTBkMjNmMDhmMmVlOWY5ZjU5ODYwMTA3YTY1ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVhlojzUe+P1h7Y7y8EsmfwClw+5 AfL0IffElzgpFPmnYs0bUtBaMIbrq1/PBI+cUdUQg6GRc6aPpOB+VUSgg8u9yvIF DySidE13qeNr4BrWK8xJ+81eI28L1HBNiMhsKg8GoKRlq0cS7Xx/c/ZA9IpFmUs5 9K60laoFz/O9SMUkkYB28QIHFMch4eGTxMrL1PA0cit/JDHZgKLbVpX/3rBb1SpE /EY0JebX2AdBKB91xkqmkqPBImg4tTMDTyoyMQQYW9rZiiAj2391H9d/vqKBb+Ow dClftzGC42O8ZNEyAkAAq1KWfArl91cr+OYhX2B/jetEiayEVT6FVMLnWwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPt1iNmv4NI/CPLun59ZhgEHpl5nMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvMS0zV0kyYV9nMGo4STh1NmZuMW1HQVFlbVhtYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmQvOWExZDQ0LTg2MDktNGU1ZS1iYTk0LTVhODZjMjc1N2Mx ZS8xL1h1VXh1YXdwa05hYWlsd3dJLWN1YllRZWJBay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFwy9jAN BgkqhkiG9w0BAQsFAAOCAQEAY3mckTLxQAo8Eac3s/JhFIrP9nv2tkOtFhUfWvJ8 vr03xW5f0Rd/nin2RPz9EOFlg+30B17vPTbBnwoQ1GBvyzlhyOyQ16Udb4+XU0Bw ypU4PFmq9apFvGVWRK6QIuD7raR3MAEZVlPDl+Ob7XB8xUG3Cz/53Q7i4vIx0XYd YwZlM+YtxmLMn7qyICZyRJFaeDMxyLHVB8H8qhUEYBbCRw7YI/fW3WCsTmTcLJyM 2z4Lwvu1FRuZiCKI291tTlSep/KNj9EHUOIIIwACBNIxdwfO84dJf4FOd8tuFmHA HKm12miuH4Ou+/T6m8vFcBcBbpeRBFRxpaMVIdMlyZ8mxA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:37 2026 by rpki-client