This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa File: 3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa (raw, json) Hash identifier: QlGcIApQxI3USCeOW3H47w4RX3p+KD+avqAifqggosI= Subject key identifier: DF:EC:FD:59:5B:AE:30:AD:0C:43:E3:BC:CA:D7:23:42:65:2E:96:64 Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Certificate serial: 019B7D5D30CD927566E3C179255AFF0CDAFA Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214202 IP address blocks: 193.227.126.0/24 maxlen: 24 2001:678:454::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:30:cd:92:75:66:e3:c1:79:25:5a:ff:0c:da:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfecfd595bae30ad0c43e3bccad72342652e9664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:76:1c:bb:ac:b0:ab:fb:14:f8:65:06:64:11: 79:56:e9:b1:f0:27:e0:6a:dc:f2:68:66:bf:e2:54: a3:e2:95:4c:4e:9a:f5:a1:1a:e9:6a:77:4d:40:44: 81:e9:c2:b1:52:9f:dd:a2:e9:42:f6:b5:68:11:c0: 24:1d:4e:17:d2:88:56:f9:88:e7:1f:00:1e:0f:95: d9:09:65:ac:8b:73:ba:67:96:21:d4:f3:5f:5e:de: 82:14:55:6c:fd:8d:f8:6a:40:3d:60:89:bb:5b:47: 24:ae:8d:b9:fb:3b:f4:f7:26:5a:85:6c:19:02:b1: 69:f7:f9:29:f6:72:bb:c3:11:cd:43:4c:86:40:10: e3:0a:71:ff:b8:37:9f:0e:43:c0:63:e8:27:3c:9f: 27:12:e1:aa:8d:22:69:2f:9a:de:09:7b:3f:2e:12: 68:9f:0b:27:4e:aa:8f:5f:c2:e1:76:91:35:af:54: a9:1a:92:05:16:90:88:f0:df:b3:f2:7a:1f:1b:76: 33:de:0d:bc:5f:e1:9b:4d:a7:7d:42:11:e5:25:1d: 09:19:61:87:66:3a:23:a1:08:2a:dc:bf:ad:46:ec: d8:00:b6:83:10:ff:a9:ab:ab:d0:29:0f:7f:52:25: 42:ba:71:0e:46:ba:a5:ab:74:af:74:09:e6:72:47: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EC:FD:59:5B:AE:30:AD:0C:43:E3:BC:CA:D7:23:42:65:2E:96:64 X509v3 Authority Key Identifier: keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.126.0/24 IPv6: 2001:678:454::/48 Signature Algorithm: sha256WithRSAEncryption a5:dc:44:e2:fa:7f:bb:82:21:ab:46:c5:15:79:46:34:34:26: 68:0f:6f:5f:d0:87:43:99:cc:17:76:10:b3:cf:59:7a:5a:3e: a6:2b:49:19:94:2d:29:64:e0:99:c5:27:9a:2a:6b:27:4f:6e: 9f:cf:86:71:8e:35:42:bc:bb:9b:aa:2a:e7:b8:10:e9:ce:ea: 6d:d5:ee:c7:c1:f0:bf:01:47:0a:16:3f:69:ac:06:13:7a:e4: 90:3f:bb:c4:46:3b:90:30:5e:71:62:cf:12:2a:ed:7b:20:f5: 18:28:34:16:a3:b0:4a:68:16:79:d0:ad:26:6d:19:38:69:2e: a7:1e:b7:7f:5c:86:08:f6:51:07:7b:4c:03:d4:49:c8:3c:3c: fa:c5:1c:49:d4:f0:eb:f4:11:78:88:2b:d6:b0:24:d9:4d:bc: 8a:58:36:f4:d0:6a:50:51:1b:0d:1b:bd:5e:8b:57:69:ca:63: 80:04:98:f2:ed:9a:9c:6b:48:e7:52:a2:8e:af:2a:42:32:86: 07:22:63:73:6d:87:71:e6:6a:28:0f:6f:66:cf:ab:23:9b:3d: 8b:0b:c9:ef:50:5f:01:4c:ae:66:4e:96:c2:b8:75:63:23:5a: c6:72:86:63:1c:fa:9f:9a:f6:80:45:f0:b5:59:12:4c:30:98: 3c:1e:51:29 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XTDNknVm48F5JVr/DNr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMWI5ZmI0NTYzOWU3NDkyZjJiMzYzMWY2NDBmNmFiOWFm YjYyOTAwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmVjZmQ1OTViYWUzMGFkMGM0M2UzYmNjYWQ3MjM0MjY1MmU5NjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnYcu6ywq/sU+GUGZBF5Vumx8Cfg atzyaGa/4lSj4pVMTpr1oRrpandNQESB6cKxUp/doulC9rVoEcAkHU4X0ohW+Yjn HwAeD5XZCWWsi3O6Z5Yh1PNfXt6CFFVs/Y34akA9YIm7W0ckro25+zv09yZahWwZ ArFp9/kp9nK7wxHNQ0yGQBDjCnH/uDefDkPAY+gnPJ8nEuGqjSJpL5reCXs/LhJo nwsnTqqPX8LhdpE1r1SpGpIFFpCI8N+z8nofG3Yz3g28X+GbTad9QhHlJR0JGWGH ZjojoQgq3L+tRuzYALaDEP+pq6vQKQ9/UiVCunEORrqlq3SvdAnmckd6xwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFN/s/VlbrjCtDEPjvMrXI0JlLpZkMB8GA1UdIwQY MBaAFGEbn7RWOedJLys2MfZA9qua+2KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYt N2Q3NWUyYjFhN2I5LzEvMy16OVdWdXVNSzBNUS1POHl0Y2pRbVV1bG1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi84NDgyZDItNzIzMy00MTc3LTk5MmYtN2Q3NWUyYjFhN2I5 LzEvWVJ1ZnRGWTU1MGt2S3pZeDlrRDJxNXI3WXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAweN+MA8E AgACMAkDBwAgAQZ4BFQwDQYJKoZIhvcNAQELBQADggEBAKXcROL6f7uCIatGxRV5 RjQ0JmgPb1/Qh0OZzBd2ELPPWXpaPqYrSRmULSlk4JnFJ5oqaydPbp/PhnGONUK8 u5uqKue4EOnO6m3V7sfB8L8BRwoWP2msBhN65JA/u8RGO5AwXnFizxIq7Xsg9Rgo NBajsEpoFnnQrSZtGThpLqcet39chgj2UQd7TAPUScg8PPrFHEnU8Ov0EXiIK9aw JNlNvIpYNvTQalBRGw0bvV6LV2nKY4AEmPLtmpxrSOdSoo6vKkIyhgciY3Nth3Hm aigPb2bPqyObPYsLye9QXwFMrmZOlsK4dWMjWsZyhmMc+p+a9oBF8LVZEkwwmDwe USk= -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:39 2026 by rpki-client