This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa File: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (raw, json) Hash identifier: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298= Subject key identifier: 1B:74:83:A1:2D:1E:D8:E5:39:A3:14:17:7A:ED:03:2F:2F:C4:64:B1 Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c Certificate serial: 019B7C8014DD3FA324930CE02BDFBA81FA35 Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209193 IP address blocks: 93.191.113.0/24 maxlen: 24 93.191.114.0/24 maxlen: 24 2a06:a544::/31 maxlen: 31 2a06:a546::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:14:dd:3f:a3:24:93:0c:e0:2b:df:ba:81:fa:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b7483a12d1ed8e539a314177aed032f2fc464b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:e2:bf:59:74:ff:2b:11:09:c2:75:46:99: 3c:a5:91:cd:03:85:ae:67:e1:66:6a:20:60:10:69: 4c:2d:4e:81:64:44:8b:ec:3e:0b:07:d3:a2:dd:20: a3:48:88:e5:a0:7b:ca:6c:58:31:35:f6:ac:f2:99: b6:57:f1:5a:7e:80:c1:de:93:87:49:23:da:7c:81: a7:bd:41:f5:3c:27:eb:44:6b:04:ec:90:e4:58:5e: 6e:45:66:1e:f9:00:b9:47:6a:2a:3d:cf:79:d4:91: 83:ec:85:2b:5b:06:ee:80:e2:cd:6e:26:ae:22:8f: 55:c3:f8:46:fc:1f:b6:30:16:eb:c7:04:e2:f4:70: 50:09:8f:7b:5f:7d:4d:28:34:f2:af:78:e4:78:27: 11:cb:09:58:a4:fd:33:46:8b:40:23:42:9f:3c:23: 82:d9:ca:49:7c:3e:7e:82:01:45:fb:8e:aa:77:34: 15:22:fb:6f:0d:47:9a:a5:4b:9f:4c:1c:3f:83:52: 8b:ed:ad:8d:99:e6:b3:b2:f0:94:fc:e8:ee:19:76: 9b:55:fc:bd:56:c4:1b:ac:15:e7:06:78:29:a9:a3: e2:49:d1:cd:e9:2d:d4:ef:85:39:16:f2:a0:63:55: 62:51:e6:26:83:c6:d8:8a:01:23:57:31:b0:e1:eb: 5f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:74:83:A1:2D:1E:D8:E5:39:A3:14:17:7A:ED:03:2F:2F:C4:64:B1 X509v3 Authority Key Identifier: keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.113.0-93.191.114.255 IPv6: 2a06:a544::/30 Signature Algorithm: sha256WithRSAEncryption 07:02:46:e9:a1:7b:60:92:e8:be:9b:c5:5d:45:77:7b:ec:15: af:ce:71:8b:a8:d0:f9:df:48:aa:4c:9c:23:11:17:67:4c:64: 0e:24:4c:28:2e:bb:ca:79:18:43:9d:57:78:46:30:94:ed:3e: 3e:a7:65:9d:d7:b1:f7:cf:85:08:b9:ef:d6:ff:62:f1:0e:9b: e4:a9:b7:cb:18:a0:b7:89:4e:b3:36:e4:9c:b8:b2:af:fe:b3: 0a:f5:0f:48:79:05:07:d0:b1:b7:91:5a:29:40:58:06:be:af: f0:ad:05:7f:6e:27:1e:f9:ae:b7:e6:59:c0:1e:91:1d:f1:59: 23:4c:22:5a:4b:16:b6:5c:4c:a9:34:f6:47:f5:c5:c7:7c:15: 30:f4:fb:65:7b:b4:14:bf:b2:7d:c5:83:8b:59:91:98:94:ee: 99:d6:ec:09:11:52:0a:bc:8a:72:9e:74:2a:f1:13:89:39:97: 86:85:2e:af:2a:6c:26:b2:b1:f8:a7:da:6b:be:1c:33:93:67: 14:4f:1e:3c:6b:96:ba:aa:79:8c:ff:42:5d:4f:c7:ae:dc:c8: aa:75:7f:cf:1e:3b:ad:65:34:a8:19:c7:ad:07:b6:81:fc:c2: 7b:ca:4e:01:c3:ee:b9:1a:32:9f:96:64:93:ca:d9:cb:7b:85: 45:be:c1:23 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8gBTdP6MkkwzgK9+6gfo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTdjNDZlYWZhMTBlYzVkOTA3YmIwNWUzNzEyM2I2OTJh YjQ5NGMwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjc0ODNhMTJkMWVkOGU1MzlhMzE0MTc3YWVkMDMyZjJmYzQ2NGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxjiv1l0/ysRCcJ1Rpk8pZHNA4Wu Z+FmaiBgEGlMLU6BZESL7D4LB9Oi3SCjSIjloHvKbFgxNfas8pm2V/FafoDB3pOH SSPafIGnvUH1PCfrRGsE7JDkWF5uRWYe+QC5R2oqPc951JGD7IUrWwbugOLNbiau Io9Vw/hG/B+2MBbrxwTi9HBQCY97X31NKDTyr3jkeCcRywlYpP0zRotAI0KfPCOC 2cpJfD5+ggFF+46qdzQVIvtvDUeapUufTBw/g1KL7a2NmeazsvCU/OjuGXabVfy9 VsQbrBXnBngpqaPiSdHN6S3U74U5FvKgY1ViUeYmg8bYigEjVzGw4etfcwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBt0g6EtHtjlOaMUF3rtAy8vxGSxMB8GA1UdIwQY MBaAFBaXxG6voQ7F2Qe7BeNxI7aSq0lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUt NzY1MjJjMjA3YzU1LzEvRzNTRG9TMGUyT1U1b3hRWGV1MERMeV9FWkxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUtNzY1MjJjMjA3YzU1 LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBABdv3ED BABdv3IwDQQCAAIwBwMFAioGpUQwDQYJKoZIhvcNAQELBQADggEBAAcCRumhe2CS 6L6bxV1Fd3vsFa/OcYuo0PnfSKpMnCMRF2dMZA4kTCguu8p5GEOdV3hGMJTtPj6n ZZ3XsffPhQi579b/YvEOm+Spt8sYoLeJTrM25Jy4sq/+swr1D0h5BQfQsbeRWilA WAa+r/CtBX9uJx75rrfmWcAekR3xWSNMIlpLFrZcTKk09kf1xcd8FTD0+2V7tBS/ sn3Fg4tZkZiU7pnW7AkRUgq8inKedCrxE4k5l4aFLq8qbCaysfin2mu+HDOTZxRP HjxrlrqqeYz/Ql1Px67cyKp1f88eO61lNKgZx60HtoH8wnvKTgHD7rkaMp+WZJPK 2ct7hUW+wSM= -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:37 2026 by rpki-client