This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/ti3ObmEy21V2j-0W73NVwUe3ck8.roa File: ti3ObmEy21V2j-0W73NVwUe3ck8.roa (raw, json) Hash identifier: schWmTw6g7AB2bDtVv9F+0FZ5DtNcX/Fqd7C3rT46tM= Subject key identifier: B6:2D:CE:6E:61:32:DB:55:76:8F:ED:16:EF:73:55:C1:47:B7:72:4F Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b Certificate serial: 019B99D297F99109D7442E42C14DB6FB53FE Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/ti3ObmEy21V2j-0W73NVwUe3ck8.roa Signing time: Wed 07 Jan 2026 18:57:54 +0000 ROA not before: Wed 07 Jan 2026 18:57:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 194.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:d2:97:f9:91:09:d7:44:2e:42:c1:4d:b6:fb:53:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b Validity Not Before: Jan 7 18:57:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b62dce6e6132db55768fed16ef7355c147b7724f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:59:57:9d:6a:60:96:32:a5:73:aa:11:13: 58:72:f1:c3:b8:28:a9:3c:cd:af:63:f7:fb:3a:72: 8d:b4:d0:45:f9:8a:a7:f2:ca:f8:e3:f8:0b:81:39: f1:a7:86:55:1d:10:3a:94:41:0f:1d:51:b3:02:bf: 89:57:ca:99:fd:48:62:ef:12:f7:a6:36:65:68:b4: fc:c1:0c:58:71:93:6a:b6:d6:2a:42:64:f9:d8:84: 5b:53:ec:2d:57:91:b8:58:ab:9f:0d:79:09:ff:5d: 0f:0a:74:a7:45:d9:49:bf:03:b3:8f:1b:de:bc:1b: c0:fc:8f:79:fd:a5:3c:57:4d:7f:d5:dd:7c:46:c2: 0c:9b:c8:34:b3:98:ce:bc:a3:af:13:a8:e0:3c:85: 53:e6:36:26:88:96:65:23:35:b4:05:e9:6b:18:9a: 4f:c8:54:6b:77:63:f0:de:36:b0:ac:b5:2b:c0:32: 31:7c:12:d9:25:ea:20:16:df:7c:26:b9:85:f5:19: 52:af:bd:bc:ac:f4:98:73:6d:c3:5d:13:a6:40:33: 33:30:17:7e:57:32:15:bb:dd:c4:f9:b6:a4:f6:ed: 3b:b9:4f:ff:1a:48:c5:bf:a8:71:4d:05:de:28:e5: 54:ee:04:33:ef:eb:35:72:01:34:0f:1a:bb:df:f5: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2D:CE:6E:61:32:DB:55:76:8F:ED:16:EF:73:55:C1:47:B7:72:4F X509v3 Authority Key Identifier: keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/ti3ObmEy21V2j-0W73NVwUe3ck8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.124.0/24 Signature Algorithm: sha256WithRSAEncryption 94:1b:f4:80:6d:5b:14:bb:21:c3:69:b5:58:51:b9:53:17:0b: 9c:ce:ed:3c:ed:fc:a1:38:6c:55:80:5c:5a:df:ee:10:8d:ec: cc:0b:49:9e:9a:34:1f:f9:cc:f1:5e:d8:80:42:49:3e:82:80: 26:a6:58:ce:9e:90:e8:83:13:27:6c:65:28:d4:33:d8:f5:72: ca:93:22:cb:20:c0:04:90:71:2e:a8:a0:81:36:14:d0:24:8c: c3:d1:4d:33:57:f9:7f:b1:44:ec:c4:87:1c:54:81:27:56:a6: 3a:88:bf:3a:cd:7d:fd:46:d1:79:6a:3b:77:17:99:90:8b:1e: df:96:24:d9:92:30:9c:f0:02:61:18:d5:9d:fc:9b:1c:fa:1b: b7:f3:cf:15:ff:b1:21:34:e2:b1:8d:56:ef:b8:5e:e1:b6:9d: a1:ca:f8:17:94:39:09:df:f5:2e:e4:6a:e5:1c:32:2b:7d:f5: 84:11:ae:14:7d:8e:b2:b9:9d:63:dc:15:20:65:71:f3:4c:0c: 97:af:a8:38:3b:41:68:51:59:f8:c7:68:8b:40:45:4a:56:0d: b4:ef:45:3a:ca:88:89:42:6f:0a:11:09:3e:8e:14:a0:a1:15: 2e:86:1f:1c:32:25:8d:5a:cf:ce:f4:e1:b6:1e:4b:99:d0:83: c4:cf:dd:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuZ0pf5kQnXRC5CwU22+1P+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy NDZiNGIwHhcNMjYwMTA3MTg1NzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjJkY2U2ZTYxMzJkYjU1NzY4ZmVkMTZlZjczNTVjMTQ3Yjc3MjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpFZV51qYJYypXOqERNYcvHDuCip PM2vY/f7OnKNtNBF+Yqn8sr44/gLgTnxp4ZVHRA6lEEPHVGzAr+JV8qZ/Uhi7xL3 pjZlaLT8wQxYcZNqttYqQmT52IRbU+wtV5G4WKufDXkJ/10PCnSnRdlJvwOzjxve vBvA/I95/aU8V01/1d18RsIMm8g0s5jOvKOvE6jgPIVT5jYmiJZlIzW0BelrGJpP yFRrd2Pw3jawrLUrwDIxfBLZJeogFt98JrmF9RlSr728rPSYc23DXROmQDMzMBd+ VzIVu93E+bak9u07uU//GkjFv6hxTQXeKOVU7gQz7+s1cgE0Dxq73/WJlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYtzm5hMttVdo/tFu9zVcFHt3JPMB8GA1UdIwQY MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt MmE5MWMyY2QyMDc5LzEvdGkzT2JtRXkyMVYyai0wVzczTlZ3VWUzY2s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5 LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiF8MA0G CSqGSIb3DQEBCwUAA4IBAQCUG/SAbVsUuyHDabVYUblTFwuczu087fyhOGxVgFxa 3+4QjezMC0memjQf+czxXtiAQkk+goAmpljOnpDogxMnbGUo1DPY9XLKkyLLIMAE kHEuqKCBNhTQJIzD0U0zV/l/sUTsxIccVIEnVqY6iL86zX39RtF5ajt3F5mQix7f liTZkjCc8AJhGNWd/Jsc+hu3888V/7EhNOKxjVbvuF7htp2hyvgXlDkJ3/Uu5Grl HDIrffWEEa4UfY6yuZ1j3BUgZXHzTAyXr6g4O0FoUVn4x2iLQEVKVg2070U6yoiJ Qm8KEQk+jhSgoRUuhh8cMiWNWs/O9OG2HkuZ0IPEz91A -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:10 2026 by rpki-client