This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/a3_EOJMPNZFOCWBEs6y6sNyscZQ.roa File: a3_EOJMPNZFOCWBEs6y6sNyscZQ.roa (raw, json) Hash identifier: ToCWN1QeYW63JQoVANy2WXpAi8Y9kSXsrgbre5mQvao= Subject key identifier: 6B:7F:C4:38:93:0F:35:91:4E:09:60:44:B3:AC:BA:B0:DC:AC:71:94 Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c Certificate serial: 019B7A5B50D1D84A4FCB3E4739EC08B9F026 Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/a3_EOJMPNZFOCWBEs6y6sNyscZQ.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34636 IP address blocks: 194.31.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:50:d1:d8:4a:4f:cb:3e:47:39:ec:08:b9:f0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7fc438930f35914e096044b3acbab0dcac7194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:7c:2a:a5:dc:42:2d:da:7a:96:5d:06:96: 8e:15:fb:fd:b2:5f:e6:ae:df:0b:6a:9c:52:70:96: c7:c8:a7:18:1f:e0:24:23:a2:37:89:fb:35:2c:94: 6b:71:6d:2d:0d:e1:83:35:33:e7:fe:a0:79:d9:6d: 56:3c:4b:95:c8:9f:cc:55:59:fe:51:ae:bc:18:ed: 8b:9a:82:51:e1:0f:6d:36:20:2a:2c:28:45:e4:08: 70:ba:5b:18:51:db:54:51:46:89:63:b3:0a:3b:61: 2f:ee:14:f2:89:86:4f:d4:fe:e3:4c:92:ac:da:62: fe:4c:77:91:be:3c:da:df:b8:df:d4:11:f2:e9:ba: 96:4b:f3:a4:68:47:88:25:9f:07:03:21:6d:60:9d: 54:ec:6c:c6:87:31:92:67:84:c4:b3:0b:a1:6b:79: ab:03:0c:4a:c9:07:70:35:b0:8f:86:e6:ec:ba:8d: 13:90:2a:c6:d5:47:4b:99:c7:07:d6:00:f1:6a:95: f1:80:10:19:0c:f4:84:4e:bb:db:6f:7d:fe:1e:03: eb:70:b0:f1:3b:66:ff:41:8c:f9:13:90:21:99:e6: 3b:26:15:25:f4:a2:68:e1:31:c8:d5:fd:04:fc:6b: 24:40:f9:1b:d8:4b:b4:f0:88:5c:5f:f3:19:6a:ca: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7F:C4:38:93:0F:35:91:4E:09:60:44:B3:AC:BA:B0:DC:AC:71:94 X509v3 Authority Key Identifier: keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/a3_EOJMPNZFOCWBEs6y6sNyscZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.108.0/24 Signature Algorithm: sha256WithRSAEncryption 94:16:8f:b8:47:6f:b2:8f:de:ee:46:71:b8:b0:9f:22:9b:d1: 3f:7b:a4:6c:47:53:04:a3:76:1a:59:d7:eb:aa:12:a1:55:86: 2c:f1:fc:6e:13:85:da:42:74:f8:e3:e4:61:14:a9:4e:3a:d2: 6c:50:53:e9:d6:bc:0c:9b:63:34:e9:70:fa:b3:a6:59:f8:37: 40:4d:e7:89:56:fb:2b:68:ce:47:59:1d:ad:15:49:c6:bd:0a: 29:65:95:61:4f:fa:c9:a6:a9:52:46:e3:8a:22:f4:77:18:7a: e1:ca:5d:01:87:b7:f9:59:7d:fc:7b:71:3a:8b:40:ef:af:e0: ba:2c:fd:84:30:d1:05:4c:a9:70:40:24:53:69:bf:fb:32:92: ce:18:1e:a4:42:15:1b:de:c3:1e:26:be:2c:be:1f:a5:70:88: 80:3d:f7:40:67:8c:60:73:ff:b4:3e:c8:05:b1:3f:8a:4d:84: ca:b0:13:27:8e:ee:37:9f:83:f5:d4:91:52:66:44:23:4c:65: 62:e5:bf:9c:ec:23:d1:50:c1:b1:3c:ce:1a:5a:18:a2:41:c8: e9:0e:39:82:10:b3:6c:7a:53:51:59:b7:d1:95:70:f2:35:12: 95:9c:3d:d8:f0:a0:a6:2b:7b:1a:83:f5:30:5b:1e:2f:94:e7: d4:de:fd:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1DR2EpPyz5HOewIufAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzQ3NDk0ZmY0ZTI2NTc4ZDlkZWFiZTJlZTZkMDA0YjNm ZTJkOGMwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdmYzQzODkzMGYzNTkxNGUwOTYwNDRiM2FjYmFiMGRjYWM3MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlZ8KqXcQi3aepZdBpaOFfv9sl/m rt8LapxScJbHyKcYH+AkI6I3ifs1LJRrcW0tDeGDNTPn/qB52W1WPEuVyJ/MVVn+ Ua68GO2LmoJR4Q9tNiAqLChF5AhwulsYUdtUUUaJY7MKO2Ev7hTyiYZP1P7jTJKs 2mL+THeRvjza37jf1BHy6bqWS/OkaEeIJZ8HAyFtYJ1U7GzGhzGSZ4TEswuha3mr AwxKyQdwNbCPhubsuo0TkCrG1UdLmccH1gDxapXxgBAZDPSETrvbb33+HgPrcLDx O2b/QYz5E5AhmeY7JhUl9KJo4THI1f0E/GskQPkb2Eu08IhcX/MZaspgNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGt/xDiTDzWRTglgRLOsurDcrHGUMB8GA1UdIwQY MBaAFDB0dJT/TiZXjZ3qvi7m0ASz/i2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQt Mzg5YTMwOThlYzJhLzEvYTNfRU9KTVBOWkZPQ1dCRXM2eTZzTnlzY1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQtMzg5YTMwOThlYzJh LzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh9sMA0G CSqGSIb3DQEBCwUAA4IBAQCUFo+4R2+yj97uRnG4sJ8im9E/e6RsR1MEo3YaWdfr qhKhVYYs8fxuE4XaQnT44+RhFKlOOtJsUFPp1rwMm2M06XD6s6ZZ+DdATeeJVvsr aM5HWR2tFUnGvQopZZVhT/rJpqlSRuOKIvR3GHrhyl0Bh7f5WX38e3E6i0Dvr+C6 LP2EMNEFTKlwQCRTab/7MpLOGB6kQhUb3sMeJr4svh+lcIiAPfdAZ4xgc/+0PsgF sT+KTYTKsBMnju43n4P11JFSZkQjTGVi5b+c7CPRUMGxPM4aWhiiQcjpDjmCELNs elNRWbfRlXDyNRKVnD3Y8KCmK3sag/UwWx4vlOfU3v1m -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:50 2026 by rpki-client