This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/R3QuFbFuIY2G_Rk6hjNebNBK1NA.roa File: R3QuFbFuIY2G_Rk6hjNebNBK1NA.roa (raw, json) Hash identifier: qXIlMUI0NKOznp0UhZTQw6xdmcLb4qzBBnSxa/ZQ26E= Subject key identifier: 47:74:2E:15:B1:6E:21:8D:86:FD:19:3A:86:33:5E:6C:D0:4A:D4:D0 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75905246A6625E9929DEF1CB0CCCB Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/R3QuFbFuIY2G_Rk6hjNebNBK1NA.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8848 IP address blocks: 176.211.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:59:05:24:6a:66:25:e9:92:9d:ef:1c:b0:cc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47742e15b16e218d86fd193a86335e6cd04ad4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:c1:14:7b:44:03:f8:7e:b3:ca:09:69:81: 7f:f4:df:7d:95:73:af:cd:e7:a8:0f:97:70:e8:60: 5e:19:4b:48:e5:d6:34:03:ca:a0:3b:12:97:64:64: c5:9d:c5:95:63:3a:ed:13:22:aa:4a:36:2e:4a:51: a4:13:3c:cf:b5:7c:f9:dd:cb:fc:97:69:db:11:75: ee:08:ac:91:0b:da:e7:d3:48:5c:91:13:1a:e1:98: 98:40:3a:1e:96:9a:d6:be:57:a5:81:d1:fc:80:fe: 36:d5:cf:25:a0:c0:be:a7:69:21:c9:5a:75:5b:d9: 06:8a:e5:1e:e8:cf:f5:63:a0:30:63:18:60:94:b1: ef:33:19:ec:4d:b1:e7:a7:73:95:78:b5:79:08:39: 0d:82:00:8c:f2:3c:4b:ff:c2:f6:fd:6c:ba:17:7f: fd:9c:45:77:3d:e5:a8:32:62:e1:55:a3:43:de:83: 13:32:f4:47:63:23:56:81:0e:0b:4c:ae:dd:2d:0a: cc:18:5b:40:66:8a:d0:40:97:ec:3d:33:99:55:a8: cf:e5:29:86:cd:ad:15:9e:36:f2:43:3b:ae:d7:53: 03:d0:07:d7:5e:5d:bc:77:8b:a3:b8:d5:df:d6:e8: f6:12:f9:bd:b7:64:97:df:e7:ec:0e:40:53:bc:4b: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:74:2E:15:B1:6E:21:8D:86:FD:19:3A:86:33:5E:6C:D0:4A:D4:D0 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/R3QuFbFuIY2G_Rk6hjNebNBK1NA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.211.127.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:3e:a2:96:b5:12:6b:62:b7:bd:34:d3:63:1b:b9:f4:86:c0: 90:80:f8:83:29:a0:58:3f:9a:bc:e2:d4:0d:07:0a:c4:85:68: 72:33:6b:60:bc:f0:ed:39:36:04:51:69:cb:f3:11:30:72:1f: e8:cb:2f:d9:4d:3d:d0:35:ab:c3:8a:3a:c5:5a:08:49:58:43: 7d:8e:50:7c:20:02:69:4a:f9:60:bd:45:7f:30:a6:1d:09:fe: 04:d5:d5:6e:dd:b1:c8:2a:85:a5:2e:03:60:70:7c:35:a9:11: cd:85:17:07:ed:9c:68:bb:39:e1:98:25:46:79:08:51:17:56: 50:71:cb:4e:a9:4c:14:f7:3d:06:0c:13:e2:93:98:73:1d:f1: cf:0c:1c:a1:92:16:ca:77:19:41:1f:a1:94:0c:fd:ea:c9:bd: 18:a1:59:07:a8:e3:70:f3:27:de:12:b5:f9:99:ff:80:7f:d7: a7:83:5e:2b:62:76:b4:62:40:ec:6e:47:95:bd:ea:70:69:ba: 2e:58:71:bf:57:2c:5c:b6:7f:53:cb:a1:72:05:b3:d9:03:d7: c7:2c:af:09:80:5c:c0:3f:42:70:d0:98:3f:35:eb:55:e9:90: 11:bf:51:ff:ef:5d:63:8a:bd:a8:1c:33:93:fc:d5:c5:0d:38: 45:cf:8a:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1kFJGpmJemSne8csMzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzc0MmUxNWIxNmUyMThkODZmZDE5M2E4NjMzNWU2Y2QwNGFkNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfvBFHtEA/h+s8oJaYF/9N99lXOv zeeoD5dw6GBeGUtI5dY0A8qgOxKXZGTFncWVYzrtEyKqSjYuSlGkEzzPtXz53cv8 l2nbEXXuCKyRC9rn00hckRMa4ZiYQDoelprWvlelgdH8gP421c8loMC+p2khyVp1 W9kGiuUe6M/1Y6AwYxhglLHvMxnsTbHnp3OVeLV5CDkNggCM8jxL/8L2/Wy6F3/9 nEV3PeWoMmLhVaND3oMTMvRHYyNWgQ4LTK7dLQrMGFtAZorQQJfsPTOZVajP5SmG za0VnjbyQzuu11MD0AfXXl28d4ujuNXf1uj2Evm9t2SX3+fsDkBTvEup0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEd0LhWxbiGNhv0ZOoYzXmzQStTQMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUjNRdUZiRnVJWTJHX1JrNmhqTmViTkJLMU5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsNN/MA0G CSqGSIb3DQEBCwUAA4IBAQBbPqKWtRJrYre9NNNjG7n0hsCQgPiDKaBYP5q84tQN BwrEhWhyM2tgvPDtOTYEUWnL8xEwch/oyy/ZTT3QNavDijrFWghJWEN9jlB8IAJp SvlgvUV/MKYdCf4E1dVu3bHIKoWlLgNgcHw1qRHNhRcH7ZxouznhmCVGeQhRF1ZQ cctOqUwU9z0GDBPik5hzHfHPDByhkhbKdxlBH6GUDP3qyb0YoVkHqONw8yfeErX5 mf+Af9eng14rYna0YkDsbkeVvepwabouWHG/Vyxctn9Ty6FyBbPZA9fHLK8JgFzA P0Jw0Jg/NetV6ZARv1H/711jir2oHDOT/NXFDThFz4pG -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:45 2026 by rpki-client