This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3Qvv0NooXRTBjhRDskadKWgHaZ0.roa File: 3Qvv0NooXRTBjhRDskadKWgHaZ0.roa (raw, json) Hash identifier: 19KGaGYDl1yJDjOiF+Wz2T1iz8WI6wGqPGuEeq+snOo= Subject key identifier: DD:0B:EF:D0:DA:28:5D:14:C1:8E:14:43:B2:46:9D:29:68:07:69:9D Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758FC986D54416D6C46E4D2B80BB63F Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3Qvv0NooXRTBjhRDskadKWgHaZ0.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198851 IP address blocks: 193.192.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fc:98:6d:54:41:6d:6c:46:e4:d2:b8:0b:b6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd0befd0da285d14c18e1443b2469d296807699d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:65:b1:16:30:ce:9f:28:c7:58:c5:b1:77: f7:c8:1e:85:e0:ee:19:af:71:37:1a:fc:2d:f0:89: ba:62:ff:c4:8a:bb:24:f4:63:f2:e0:e0:23:d2:40: 57:ed:fe:2a:92:f7:54:f1:65:db:76:fc:16:66:12: dd:80:9b:43:db:1e:2c:d1:04:75:2f:be:29:c8:7e: b7:84:9c:fd:39:41:8a:5c:45:5c:9e:a7:16:26:db: 8a:7d:75:fa:81:ab:7d:08:60:91:72:c5:c3:2a:92: b4:38:e4:9a:de:44:bd:10:d7:e6:9d:ab:97:7e:a6: b3:8f:cd:c5:1c:e5:57:a9:17:c4:92:91:da:53:45: d5:76:8c:5c:01:27:4e:01:64:dd:f0:32:24:06:bb: 3d:ae:eb:79:1f:75:36:51:d6:3c:1e:ad:f6:1b:5a: 81:fe:fe:00:ce:78:fb:64:76:cb:64:ff:f3:2f:92: 3e:f9:e4:35:7e:d3:ec:09:e0:e4:99:6f:79:e4:bd: e1:40:9b:65:ba:b3:65:19:07:a6:65:be:39:5b:76: 5e:2c:f5:eb:af:c8:4e:96:08:9e:80:b5:e7:dc:33: 15:a7:61:b0:7e:df:12:b8:76:d4:37:df:4c:3e:7d: 6f:df:e0:39:2d:8f:42:ba:eb:cd:1a:68:fa:f9:47: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0B:EF:D0:DA:28:5D:14:C1:8E:14:43:B2:46:9D:29:68:07:69:9D X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3Qvv0NooXRTBjhRDskadKWgHaZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.192.168.0/24 Signature Algorithm: sha256WithRSAEncryption 44:59:70:3b:91:e6:af:94:e0:b7:53:d0:c3:61:11:2f:3b:34: c5:b2:e9:98:a5:21:c9:04:bf:50:f3:af:fb:4e:80:9b:ec:cf: ed:4e:5e:42:65:47:dd:a0:bb:c3:13:d8:41:f3:d5:82:0f:10: 0f:f4:56:a0:65:4b:07:3f:10:e9:40:e0:de:c7:a5:ad:8d:d9: fa:e4:6b:c4:b9:aa:fb:5a:84:7d:08:c6:5c:4e:de:60:09:64: be:b2:df:f5:22:59:a3:92:92:c4:ae:fa:aa:0a:12:f4:85:1b: cf:df:3e:06:f3:df:a4:18:b2:aa:86:b1:c7:fb:9c:97:b4:e2: 32:5a:e0:f3:d9:91:3f:3c:03:c0:02:5a:9a:e5:cd:eb:8f:55: 84:c6:52:4b:52:91:64:af:c3:35:e7:c7:f3:f1:cb:ce:8a:69: ed:5a:a4:4e:e7:2b:6d:01:c4:a8:fd:45:19:60:5a:fd:45:ab: d0:05:d3:c5:16:f1:5a:96:3f:83:72:ed:a8:5f:0b:70:4d:c7: e8:8d:13:99:08:ab:46:a5:af:63:f3:c5:b2:dc:ba:6e:d3:3b: 8e:a3:b7:e7:4f:ab:fd:ad:ed:c4:b5:b8:1d:7b:fc:e1:48:3f: 0d:a2:1d:00:37:fd:2d:0f:8e:ce:bb:1b:b8:61:2d:9e:26:ae: b9:4d:a3:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPyYbVRBbWxG5NK4C7Y/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDBiZWZkMGRhMjg1ZDE0YzE4ZTE0NDNiMjQ2OWQyOTY4MDc2OTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwedlsRYwzp8ox1jFsXf3yB6F4O4Z r3E3Gvwt8Im6Yv/Eirsk9GPy4OAj0kBX7f4qkvdU8WXbdvwWZhLdgJtD2x4s0QR1 L74pyH63hJz9OUGKXEVcnqcWJtuKfXX6gat9CGCRcsXDKpK0OOSa3kS9ENfmnauX fqazj83FHOVXqRfEkpHaU0XVdoxcASdOAWTd8DIkBrs9rut5H3U2UdY8Hq32G1qB /v4Aznj7ZHbLZP/zL5I++eQ1ftPsCeDkmW955L3hQJtlurNlGQemZb45W3ZeLPXr r8hOlgiegLXn3DMVp2Gwft8SuHbUN99MPn1v3+A5LY9CuuvNGmj6+UcHaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN0L79DaKF0UwY4UQ7JGnSloB2mdMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvM1F2djBOb29YUlRCamhSRHNrYWRLV2dIYVowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcCoMA0G CSqGSIb3DQEBCwUAA4IBAQBEWXA7keavlOC3U9DDYREvOzTFsumYpSHJBL9Q86/7 ToCb7M/tTl5CZUfdoLvDE9hB89WCDxAP9FagZUsHPxDpQODex6Wtjdn65GvEuar7 WoR9CMZcTt5gCWS+st/1IlmjkpLErvqqChL0hRvP3z4G89+kGLKqhrHH+5yXtOIy WuDz2ZE/PAPAAlqa5c3rj1WExlJLUpFkr8M158fz8cvOimntWqRO5yttAcSo/UUZ YFr9RavQBdPFFvFalj+Dcu2oXwtwTcfojROZCKtGpa9j88Wy3Lpu0zuOo7fnT6v9 re3Etbgde/zhSD8Noh0AN/0tD47Ouxu4YS2eJq65TaOI -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:41 2026 by rpki-client