This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa File: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (raw, json) Hash identifier: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ= Subject key identifier: B3:75:CE:4B:74:00:FC:E2:C2:10:98:2A:29:0B:35:0C:64:99:3D:21 Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965 Certificate serial: 019B79102A17D0B9A88004D46B75397FB50D Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa Signing time: Thu 01 Jan 2026 10:17:41 +0000 ROA not before: Thu 01 Jan 2026 10:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15987 IP address blocks: 194.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2a:17:d0:b9:a8:80:04:d4:6b:75:39:7f:b5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965 Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b375ce4b7400fce2c210982a290b350c64993d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:84:09:a8:37:15:e2:12:23:00:19:f3:57: cb:cc:89:ac:67:3d:93:18:6d:ea:11:06:77:a9:d4: 0f:bd:a5:43:55:9f:f1:30:76:74:72:b0:9d:86:9c: 71:cb:a8:4b:f2:e7:6c:6d:7a:e7:b6:78:c0:c2:37: 83:41:e1:b6:22:b7:0a:6a:ed:4d:a5:5e:49:b2:99: 81:2b:fb:85:b8:99:8d:44:18:9b:37:77:66:d3:df: f8:00:1c:f8:8a:9c:e9:74:0a:10:4f:37:04:36:f1: 39:68:46:81:5c:52:a4:55:40:8c:28:fa:fd:66:e2: cb:72:66:fa:70:c6:fc:87:34:75:dd:bd:c2:aa:b8: 97:f7:da:3b:1e:f3:3c:ea:de:7e:fa:91:25:b1:d0: 83:0e:50:10:2d:33:85:7e:3e:c6:0a:02:ed:a9:6a: 43:05:8d:a2:df:76:e2:15:8c:2f:86:e6:08:3a:d8: 53:9f:43:94:df:75:12:73:c9:6a:47:99:a3:d7:d4: b7:a5:a8:c3:85:a3:d3:0c:9d:58:e1:fd:2f:e4:7f: b5:b1:5a:36:4b:b5:20:ac:40:1c:1c:f3:fc:cc:53: 5c:5b:1f:33:26:0e:93:cc:7f:83:2c:6e:ad:a7:f3: 91:21:53:8e:af:77:ea:f1:b3:67:d4:0d:a7:a2:86: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:75:CE:4B:74:00:FC:E2:C2:10:98:2A:29:0B:35:0C:64:99:3D:21 X509v3 Authority Key Identifier: keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.186.0/24 Signature Algorithm: sha256WithRSAEncryption 14:e1:39:e2:7c:5f:f0:36:61:97:a0:82:7f:36:f3:96:a6:7a: b9:0f:dc:92:82:c4:5a:49:61:8c:8f:b0:6f:2e:ab:dd:35:ee: 14:8c:d1:9c:f6:3b:dd:16:0d:67:ad:d0:fe:ba:63:ed:06:3a: aa:68:f7:be:43:75:03:9c:c4:4d:ac:c2:d3:41:f8:a2:ea:0a: 39:72:d2:e8:01:b9:ad:41:4f:d8:af:fb:5d:4e:90:b3:62:a3: b7:ab:96:e9:a2:73:46:66:62:d5:55:f3:93:e2:2b:0a:a6:7a: d2:84:95:de:e7:e0:c0:c0:bc:ae:0f:25:49:48:85:99:a9:cf: 7b:ea:3f:e5:53:4e:f9:cf:b5:b1:1a:a4:ff:d8:70:7a:83:f6: b0:da:0a:8e:ba:72:88:84:81:69:8d:37:7c:f2:3d:3b:06:1d: 68:66:6f:69:c4:69:54:21:95:47:68:81:e5:fd:92:c0:f0:06: bd:e9:0d:fc:c1:b5:8c:b6:50:1e:96:6d:01:b6:20:8d:7d:f3: 7c:99:06:f9:d9:cf:c1:0a:49:bc:57:69:58:15:67:76:16:3b: 23:67:ac:4c:e9:bd:5a:99:5a:0b:23:76:bc:4d:2d:17:f2:21: 02:ad:be:1e:96:68:7b:b8:06:96:7d:5a:54:22:88:ec:d9:d6: 9c:0f:07:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECoX0LmogATUa3U5f7UNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzhhNmJjYzg1ZWM4YWRlNmVjY2U4ODBlZTA3M2Q2Mzc3 MDc5NjUwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzc1Y2U0Yjc0MDBmY2UyYzIxMDk4MmEyOTBiMzUwYzY0OTkzZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdiECag3FeISIwAZ81fLzImsZz2T GG3qEQZ3qdQPvaVDVZ/xMHZ0crCdhpxxy6hL8udsbXrntnjAwjeDQeG2IrcKau1N pV5JspmBK/uFuJmNRBibN3dm09/4ABz4ipzpdAoQTzcENvE5aEaBXFKkVUCMKPr9 ZuLLcmb6cMb8hzR13b3CqriX99o7HvM86t5++pElsdCDDlAQLTOFfj7GCgLtqWpD BY2i33biFYwvhuYIOthTn0OU33USc8lqR5mj19S3pajDhaPTDJ1Y4f0v5H+1sVo2 S7UgrEAcHPP8zFNcWx8zJg6TzH+DLG6tp/ORIVOOr3fq8bNn1A2noobrlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLN1zkt0APziwhCYKikLNQxkmT0hMB8GA1UdIwQY MBaAFO94przIXsit5uzOiA7gc9Y3cHllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTIt OTZmMjE2ODkzZGVjLzEvczNYT1MzUUFfT0xDRUpncUtRczFER1NaUFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTItOTZmMjE2ODkzZGVj LzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwie6MA0G CSqGSIb3DQEBCwUAA4IBAQAU4TnifF/wNmGXoIJ/NvOWpnq5D9ySgsRaSWGMj7Bv LqvdNe4UjNGc9jvdFg1nrdD+umPtBjqqaPe+Q3UDnMRNrMLTQfii6go5ctLoAbmt QU/Yr/tdTpCzYqO3q5bponNGZmLVVfOT4isKpnrShJXe5+DAwLyuDyVJSIWZqc97 6j/lU075z7WxGqT/2HB6g/aw2gqOunKIhIFpjTd88j07Bh1oZm9pxGlUIZVHaIHl /ZLA8Aa96Q38wbWMtlAelm0BtiCNffN8mQb52c/BCkm8V2lYFWd2FjsjZ6xM6b1a mVoLI3a8TS0X8iECrb4elmh7uAaWfVpUIojs2dacDwcp -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:59 2026 by rpki-client