This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/3_ICGJ04_o-B78xtxe-BL1771oM.roa File: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (raw, json) Hash identifier: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY= Subject key identifier: DF:F2:02:18:9D:38:FE:8F:81:EF:CC:6D:C5:EF:81:2F:5E:FB:D6:83 Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Certificate serial: 019B76EB8CFB83BEF95C6E272BDAE45A9236 Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/3_ICGJ04_o-B78xtxe-BL1771oM.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 195.158.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:fb:83:be:f9:5c:6e:27:2b:da:e4:5a:92:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dff202189d38fe8f81efcc6dc5ef812f5efbd683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:a2:d2:7d:8f:69:ce:ac:8f:9c:23:bd:b2: 4f:11:2e:1a:c1:ae:56:09:c2:fd:b8:ed:c9:42:fc: 9f:d7:e1:52:09:0d:af:67:e1:f4:be:29:b9:92:af: 67:75:06:c4:5f:34:ff:43:3e:ee:4d:be:19:2b:0b: c9:e7:d7:34:ee:4d:c7:55:be:81:45:82:70:0a:81: 66:5e:7a:86:a9:77:3e:f7:a4:b4:31:94:b8:d7:3e: 83:57:30:cb:c9:82:94:2e:d3:89:08:bd:ba:e7:1e: cc:96:9f:84:da:40:cb:f9:ea:7a:76:55:f8:e3:54: 38:5c:8f:52:d1:eb:71:5d:6c:67:18:f9:98:aa:3a: 96:3a:24:0f:f3:4e:84:21:b2:ce:92:18:b0:a9:85: 4d:52:89:e0:27:d2:f6:03:9e:b1:ba:a1:07:4d:bf: 41:15:f9:6b:8c:4a:b4:ec:fd:4e:93:14:4c:e2:27: 98:3c:d2:35:93:76:05:98:a2:56:7f:99:33:31:0d: 98:3f:bb:93:41:1c:bd:6c:0e:59:e1:f9:e2:a6:b3: 67:72:c0:b9:17:42:f8:f5:0d:ef:f0:81:0c:5a:65: 2a:93:5b:26:76:dd:b7:86:f6:89:f7:1f:eb:d6:32: f7:66:2c:ea:ef:30:1f:fd:02:33:a9:ea:c3:39:89: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F2:02:18:9D:38:FE:8F:81:EF:CC:6D:C5:EF:81:2F:5E:FB:D6:83 X509v3 Authority Key Identifier: keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/3_ICGJ04_o-B78xtxe-BL1771oM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.158.230.0/24 Signature Algorithm: sha256WithRSAEncryption 34:89:f9:d7:88:6d:22:ad:09:31:40:6e:3e:9f:19:2b:d2:84: 19:9d:5d:4c:9b:97:45:08:ee:1a:5d:0d:ee:c5:01:b2:6b:42: 6f:a9:95:62:14:3e:28:d1:56:e1:45:3f:df:94:73:da:ac:df: c7:53:42:3b:45:f6:f6:56:d5:e2:ac:87:73:f3:5d:d9:0b:18: fa:85:91:50:76:c6:fe:82:2e:26:e1:0c:f5:57:39:29:ad:9a: dc:ab:c3:95:82:4a:a9:56:b0:46:88:c1:52:d0:6b:8b:98:8b: db:f0:1a:46:6f:c1:2c:a3:34:2c:7a:6e:59:2b:ea:b2:a9:2a: df:c2:17:8e:c0:45:ab:38:e4:f5:bf:6b:94:e1:62:77:f2:19: f7:34:1f:56:97:a1:57:c7:a8:f7:ba:51:35:46:bb:7b:fa:37: 12:2e:ac:ac:80:0e:16:28:ce:cb:15:7c:01:34:ff:91:0f:fa: 29:49:94:8a:82:0b:07:62:d2:75:3a:ac:22:16:75:67:c1:bb: 96:3d:e9:62:1c:64:6b:c8:b0:87:45:a2:91:8b:08:af:24:9f: f0:73:89:f4:3c:7c:35:98:b4:15:6c:a0:cc:ca:df:a5:23:81: 05:9b:a4:70:c3:71:b6:c7:35:0a:69:a9:46:f6:78:be:f0:8f: 12:62:9e:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264z7g775XG4nK9rkWpI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3 NDkxOWUwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmYyMDIxODlkMzhmZThmODFlZmNjNmRjNWVmODEyZjVlZmJkNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIei0n2Pac6sj5wjvbJPES4awa5W CcL9uO3JQvyf1+FSCQ2vZ+H0vim5kq9ndQbEXzT/Qz7uTb4ZKwvJ59c07k3HVb6B RYJwCoFmXnqGqXc+96S0MZS41z6DVzDLyYKULtOJCL265x7Mlp+E2kDL+ep6dlX4 41Q4XI9S0etxXWxnGPmYqjqWOiQP806EIbLOkhiwqYVNUongJ9L2A56xuqEHTb9B FflrjEq07P1OkxRM4ieYPNI1k3YFmKJWf5kzMQ2YP7uTQRy9bA5Z4fniprNncsC5 F0L49Q3v8IEMWmUqk1smdt23hvaJ9x/r1jL3Zizq7zAf/QIzqerDOYlEywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/yAhidOP6Pge/MbcXvgS9e+9aDMB8GA1UdIwQY MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt MTI1MTg0MjlmYTYzLzEvM19JQ0dKMDRfby1CNzh4dHhlLUJMMTc3MW9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw57mMA0G CSqGSIb3DQEBCwUAA4IBAQA0ifnXiG0irQkxQG4+nxkr0oQZnV1Mm5dFCO4aXQ3u xQGya0JvqZViFD4o0VbhRT/flHParN/HU0I7Rfb2VtXirIdz813ZCxj6hZFQdsb+ gi4m4Qz1VzkprZrcq8OVgkqpVrBGiMFS0GuLmIvb8BpGb8EsozQsem5ZK+qyqSrf wheOwEWrOOT1v2uU4WJ38hn3NB9Wl6FXx6j3ulE1Rrt7+jcSLqysgA4WKM7LFXwB NP+RD/opSZSKggsHYtJ1OqwiFnVnwbuWPeliHGRryLCHRaKRiwivJJ/wc4n0PHw1 mLQVbKDMyt+lI4EFm6Rww3G2xzUKaalG9ni+8I8SYp7u -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:12 2026 by rpki-client