This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa File: c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa (raw, json) Hash identifier: Rr6OkRDr/ak6ymVFHMUijIRhq9Kp5PxtMbQP8vM+1GU= Subject key identifier: 73:76:92:BB:C8:BD:8D:D7:D3:DC:C6:73:C9:8E:4C:91:51:FC:E9:8B Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d Certificate serial: 019B79EC8BFC5384EDE135ECE8D377C282AB Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa Signing time: Thu 01 Jan 2026 14:18:24 +0000 ROA not before: Thu 01 Jan 2026 14:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211286 IP address blocks: 193.31.54.0/24 maxlen: 24 193.31.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8b:fc:53:84:ed:e1:35:ec:e8:d3:77:c2:82:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d Validity Not Before: Jan 1 14:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=737692bbc8bd8dd7d3dcc673c98e4c9151fce98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:f4:26:a1:72:18:00:13:3e:5a:21:b0:4f: b4:16:46:8a:22:4e:64:6e:27:8e:46:f0:9c:81:20: 5d:6a:dd:17:3c:c0:65:cb:c3:e4:ef:32:7a:7f:6e: 8a:16:c5:c7:f7:02:b8:a8:4e:62:61:ab:e2:09:a8: 82:1b:d1:2e:0d:1e:fc:cd:85:8d:23:e1:7f:57:16: ad:d0:a2:69:59:ae:6c:1a:0f:90:a0:d0:ba:7d:ca: 98:26:eb:56:0d:5b:b0:81:56:85:92:85:cb:f6:53: c3:70:07:ba:dd:ce:ba:4d:d1:18:00:4f:eb:3b:26: 87:83:69:50:7e:a3:6d:44:d6:83:73:41:71:23:6d: 03:b4:14:fc:b5:09:9c:f0:c6:d4:a5:d2:a0:7b:9d: 14:e7:11:97:d7:6b:91:db:e9:df:da:dd:e6:cc:25: e5:4a:64:9e:df:a0:0f:b7:2f:0c:44:a9:9c:be:8a: d8:f7:eb:ff:ee:45:66:66:98:85:6b:3a:10:d0:42: ff:57:9d:22:e0:49:b0:23:7e:37:ae:41:c2:d1:75: c1:e1:8d:e3:e0:ec:03:0b:d9:02:ae:da:4c:23:62: fc:ea:ec:72:f7:5a:40:06:be:f2:25:26:be:36:4d: 90:e1:98:d5:a6:fc:57:08:f1:1f:25:93:d1:23:67: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:76:92:BB:C8:BD:8D:D7:D3:DC:C6:73:C9:8E:4C:91:51:FC:E9:8B X509v3 Authority Key Identifier: keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.31.54.0/23 Signature Algorithm: sha256WithRSAEncryption 99:2e:6d:a9:c7:e1:b8:dc:6a:85:52:32:a0:63:5b:e8:f3:2f: 31:bf:dc:68:87:bb:6b:ae:aa:9b:a0:5d:a0:7e:70:5e:a5:62: d2:72:f1:b1:e3:c8:6b:01:0c:34:76:4d:6a:e3:6c:cf:b5:bd: bf:fc:a9:e7:82:73:af:2c:45:d8:af:9b:04:83:3f:5b:49:74: b8:0a:3d:04:29:8d:9c:3d:4c:a0:f7:d1:9e:3c:2b:b6:bf:0f: 45:54:93:29:73:30:40:73:00:00:0a:6d:9a:fb:24:78:4b:41: 31:4d:21:61:bf:8a:45:57:2e:fc:9a:eb:32:f0:67:c3:ca:39: be:5b:bd:c9:42:0f:33:45:f7:ea:d6:da:86:29:2f:6f:0b:fd: 0b:b2:50:07:ab:02:c6:0b:16:89:8a:4f:68:9c:30:27:47:f1: f3:0c:c6:86:5a:10:20:33:06:7c:21:ac:d3:5e:ee:f0:a7:dd: 5c:19:4b:e4:23:17:30:3e:73:b0:02:e4:97:5b:f7:36:16:85: e5:a6:7f:e0:c8:5a:ec:83:4d:75:a4:c7:d8:75:2e:d5:f7:71: 3b:e8:fe:8b:d9:df:49:82:95:7d:48:4c:2d:73:1a:b8:96:af: 00:5f:69:11:d2:40:0a:3f:bb:98:11:3e:d5:da:23:4a:f6:9b: 6f:04:70:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Iv8U4Tt4TXs6NN3woKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDgwMWRlOWZlOGE2NjgwNzU4ODE3ODIzYWUzNmJhMDY1 YzYxMGQwHhcNMjYwMTAxMTQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mzc2OTJiYmM4YmQ4ZGQ3ZDNkY2M2NzNjOThlNGM5MTUxZmNlOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEb0JqFyGAATPlohsE+0FkaKIk5k bieORvCcgSBdat0XPMBly8Pk7zJ6f26KFsXH9wK4qE5iYaviCaiCG9EuDR78zYWN I+F/Vxat0KJpWa5sGg+QoNC6fcqYJutWDVuwgVaFkoXL9lPDcAe63c66TdEYAE/r OyaHg2lQfqNtRNaDc0FxI20DtBT8tQmc8MbUpdKge50U5xGX12uR2+nf2t3mzCXl SmSe36APty8MRKmcvorY9+v/7kVmZpiFazoQ0EL/V50i4EmwI343rkHC0XXB4Y3j 4OwDC9kCrtpMI2L86uxy91pABr7yJSa+Nk2Q4ZjVpvxXCPEfJZPRI2c7SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHN2krvIvY3X09zGc8mOTJFR/OmLMB8GA1UdIwQY MBaAFBjYAd6f6KZoB1iBeCOuNroGXGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTkt NjU1MDNhOTMwNmEwLzEvYzNhU3U4aTlqZGZUM01aenlZNU1rVkg4NllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTktNjU1MDNhOTMwNmEw LzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwR82MA0G CSqGSIb3DQEBCwUAA4IBAQCZLm2px+G43GqFUjKgY1vo8y8xv9xoh7trrqqboF2g fnBepWLScvGx48hrAQw0dk1q42zPtb2//KnngnOvLEXYr5sEgz9bSXS4Cj0EKY2c PUyg99GePCu2vw9FVJMpczBAcwAACm2a+yR4S0ExTSFhv4pFVy78musy8GfDyjm+ W73JQg8zRffq1tqGKS9vC/0LslAHqwLGCxaJik9onDAnR/HzDMaGWhAgMwZ8IazT Xu7wp91cGUvkIxcwPnOwAuSXW/c2FoXlpn/gyFrsg011pMfYdS7V93E76P6L2d9J gpV9SEwtcxq4lq8AX2kR0kAKP7uYET7V2iNK9ptvBHA9 -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:47 2026 by rpki-client