This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/03NeIplATFDJWFtEuuQG-JYnRlE.roa File: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (raw, json) Hash identifier: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M= Subject key identifier: D3:73:5E:22:99:40:4C:50:C9:58:5B:44:BA:E4:06:F8:96:27:46:51 Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb Certificate serial: 019B797F2DBE596B9C595482FAAACD717BDD Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/03NeIplATFDJWFtEuuQG-JYnRlE.roa Signing time: Thu 01 Jan 2026 12:18:56 +0000 ROA not before: Thu 01 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.147.234.0/24 maxlen: 24 194.147.235.0/24 maxlen: 24 194.147.236.0/24 maxlen: 24 194.147.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2d:be:59:6b:9c:59:54:82:fa:aa:cd:71:7b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3735e2299404c50c9585b44bae406f896274651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:01:bb:7b:dc:38:44:58:46:96:b4:e0:88: 21:ee:36:cb:ea:15:8a:01:d5:45:10:51:74:96:1a: d3:d4:b2:8e:e4:25:a4:72:59:b0:ae:eb:9d:29:f6: 96:67:aa:a1:cf:d1:a1:c1:d8:cd:21:5e:ca:de:e9: 39:9e:d7:2e:3c:55:70:99:09:d2:bb:e0:91:31:ea: 15:39:b8:a8:fe:6d:50:d3:f8:5c:e1:c7:16:cf:bb: 90:09:5b:73:8a:05:7f:ec:38:cf:0b:c8:c0:4e:3e: c0:06:96:f0:ea:0c:7f:3a:d9:b4:40:11:44:1d:2f: b6:a4:1c:51:c6:40:6d:83:f2:33:68:3a:20:dd:92: 91:8c:f1:e1:6d:80:33:eb:28:5b:0f:0b:3c:04:f2: 8f:14:bf:ca:5c:e0:99:3e:94:3d:bd:78:4e:8f:d8: 2b:4a:c4:38:72:9f:30:b7:92:7b:39:c2:4f:59:3e: 17:2b:ed:05:d5:b2:8e:28:47:a7:00:fe:11:a7:5f: d9:f2:a1:26:a5:bb:ad:65:54:cf:ba:aa:42:4a:ca: 3a:1c:83:c9:63:41:14:e4:0d:d3:7f:45:da:c8:25: 62:99:ef:11:ff:6a:a3:97:11:97:a5:a6:c2:2b:75: f5:d6:dc:01:20:7e:f4:15:00:46:d8:b1:eb:8a:75: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:73:5E:22:99:40:4C:50:C9:58:5B:44:BA:E4:06:F8:96:27:46:51 X509v3 Authority Key Identifier: keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/03NeIplATFDJWFtEuuQG-JYnRlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.234.0-194.147.237.255 Signature Algorithm: sha256WithRSAEncryption 36:00:74:79:af:5f:87:97:e5:a3:19:1a:f5:44:78:b9:ac:75: 8a:f4:3c:d2:97:6a:64:7a:a7:f8:94:b3:9e:d7:e9:3a:54:aa: 24:c1:d9:27:0b:b8:e6:74:82:ce:6c:6e:84:9f:a2:f1:d4:51: de:0a:96:b8:d0:1e:a9:c8:0a:04:dd:3c:cb:7a:f9:6e:b3:24: 29:b3:fd:46:3d:a1:4a:fd:7b:b7:43:30:12:a0:de:b4:ec:e2: 7f:e2:e0:be:87:a5:2c:2d:26:97:85:24:86:aa:00:a7:9d:b8: 5b:74:4c:ec:ad:ed:a2:09:19:c4:8e:f3:3a:41:79:58:83:62: ea:04:18:77:5f:b9:c9:36:ac:a0:81:74:69:23:72:12:38:4f: e5:3f:7f:da:59:f3:43:9f:51:47:ee:ec:c1:af:57:fd:e3:bd: 67:bd:2b:a5:35:01:83:06:34:4b:0f:08:7e:32:b7:57:09:8f: 09:89:ef:af:2f:16:2e:e2:22:e5:66:c1:80:7c:b5:a2:d7:4d: 06:3c:1f:b5:23:9b:a7:f7:66:bc:70:41:25:9a:bb:e7:ed:a7: d5:94:1a:68:73:0b:df:b3:f6:64:a1:06:89:28:34:7b:e9:a8: 0c:02:31:d5:70:41:46:e4:94:5a:33:0c:c9:68:b6:7e:6d:44: 8e:db:c6:04 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fy2+WWucWVSC+qrNcXvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGU2NGUwNzEwZDMyZjI2YTM2ZDY4Y2ZmN2IzZjg2YWM4 MjBjZWIwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzczNWUyMjk5NDA0YzUwYzk1ODViNDRiYWU0MDZmODk2Mjc0NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9QBu3vcOERYRpa04Igh7jbL6hWK AdVFEFF0lhrT1LKO5CWkclmwruudKfaWZ6qhz9GhwdjNIV7K3uk5ntcuPFVwmQnS u+CRMeoVObio/m1Q0/hc4ccWz7uQCVtzigV/7DjPC8jATj7ABpbw6gx/Otm0QBFE HS+2pBxRxkBtg/IzaDog3ZKRjPHhbYAz6yhbDws8BPKPFL/KXOCZPpQ9vXhOj9gr SsQ4cp8wt5J7OcJPWT4XK+0F1bKOKEenAP4Rp1/Z8qEmpbutZVTPuqpCSso6HIPJ Y0EU5A3Tf0XayCVime8R/2qjlxGXpabCK3X11twBIH70FQBG2LHrinXZ3QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNNzXiKZQExQyVhbRLrkBviWJ0ZRMB8GA1UdIwQY MBaAFGyOZOBxDTLyajbWjP97P4asggzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgt YjhiYjlkN2RhMmRiLzEvMDNOZUlwbEFURkRKV0Z0RXV1UUctSlluUmxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgtYjhiYjlkN2RhMmRi LzEvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHCk+oD BAHCk+wwDQYJKoZIhvcNAQELBQADggEBADYAdHmvX4eX5aMZGvVEeLmsdYr0PNKX amR6p/iUs57X6TpUqiTB2ScLuOZ0gs5sboSfovHUUd4KlrjQHqnICgTdPMt6+W6z JCmz/UY9oUr9e7dDMBKg3rTs4n/i4L6HpSwtJpeFJIaqAKeduFt0TOyt7aIJGcSO 8zpBeViDYuoEGHdfuck2rKCBdGkjchI4T+U/f9pZ80OfUUfu7MGvV/3jvWe9K6U1 AYMGNEsPCH4yt1cJjwmJ768vFi7iIuVmwYB8taLXTQY8H7Ujm6f3ZrxwQSWau+ft p9WUGmhzC9+z9mShBokoNHvpqAwCMdVwQUbklFozDMlotn5tRI7bxgQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:37 2026 by rpki-client