This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/3YsQgb27UWqMlN954jmMKOEu_SM.roa File: 3YsQgb27UWqMlN954jmMKOEu_SM.roa (raw, json) Hash identifier: MOWqK6cBdBGpbj92O0t42kX8k4E9W9yvyK9I1uW+++c= Subject key identifier: DD:8B:10:81:BD:BB:51:6A:8C:94:DF:79:E2:39:8C:28:E1:2E:FD:23 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A32B87D1A4B716F0C96E83B4FD53C6 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/3YsQgb27UWqMlN954jmMKOEu_SM.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18779 IP address blocks: 147.189.130.0/24 maxlen: 24 176.111.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2b:87:d1:a4:b7:16:f0:c9:6e:83:b4:fd:53:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd8b1081bdbb516a8c94df79e2398c28e12efd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d2:9b:60:59:49:56:ab:54:40:e4:26:b7:50: a1:99:8b:7a:14:42:88:37:6a:00:db:fe:42:71:7c: 23:63:e1:50:2c:95:5a:94:e8:2d:70:9b:4d:7a:a5: 7a:43:41:d8:ad:52:68:6f:97:52:c3:aa:f2:f4:6b: 4e:3d:eb:c8:5b:a5:3b:57:97:b0:7c:d2:e9:26:ae: a8:e0:15:ab:69:d8:f6:27:fe:24:8e:89:57:03:81: 65:c3:4c:98:7d:b0:3a:98:8b:b7:a7:ea:98:c8:26: ec:03:94:e8:6c:1b:33:70:07:06:d1:f0:e4:df:ec: f5:b6:bb:7c:03:ed:be:ca:c2:1f:e2:1a:ba:8a:43: 00:ef:8b:f8:9f:95:b7:9f:f1:af:89:5a:09:4c:0c: ea:60:3f:61:c0:65:af:68:07:f1:33:91:bc:67:3b: 26:e6:4c:bf:be:e6:3b:f8:ae:81:79:ab:97:2b:02: e0:af:22:a6:8e:e7:d9:4c:4b:50:f5:32:b5:49:31: 2c:f2:2c:86:eb:6f:96:1c:f2:df:66:be:14:aa:63: cd:9d:cd:d9:b4:34:07:89:b5:84:de:b6:20:09:3c: 9f:f7:f6:02:9e:79:66:15:2c:ca:51:13:fd:ed:45: ca:5d:73:70:ff:53:c7:33:d2:52:8b:6f:50:c4:c4: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8B:10:81:BD:BB:51:6A:8C:94:DF:79:E2:39:8C:28:E1:2E:FD:23 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/3YsQgb27UWqMlN954jmMKOEu_SM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.130.0/24 176.111.223.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:ed:77:48:4f:9d:ec:e5:da:0b:58:0d:ff:3e:2c:9a:25:14: 9f:e6:69:70:c3:75:e2:cb:93:40:94:ed:ca:cf:51:bb:01:cf: 3e:3b:82:99:48:75:46:a2:3d:be:e6:9f:b6:5b:ae:af:6f:49: cc:09:9c:eb:33:c5:b7:3a:d7:46:de:c0:e5:4d:6a:c9:7e:62: 0a:a2:7b:25:73:fc:46:f0:1a:5e:80:96:28:47:ff:32:73:5a: 98:64:42:b8:ad:2e:2f:02:39:ec:08:cc:1f:db:26:89:39:07: 8c:17:ca:fb:f3:36:8f:fa:58:e4:34:74:27:89:ba:0e:13:43: c4:09:e4:f8:e5:21:b4:a5:15:60:fb:9c:81:c6:d1:a0:c4:e2: 33:8a:6e:af:ca:6e:b5:7d:a8:5b:db:25:da:9e:65:b4:50:a4: 66:f5:11:15:b2:49:65:7b:13:7b:72:6c:3e:25:04:c2:5f:be: 7b:ec:a0:3c:fe:f5:73:c5:7b:54:d0:fb:04:1d:11:e9:8a:e2: 8f:6c:aa:e4:9a:c1:06:cd:9d:84:62:95:50:d4:a6:c0:76:94: c8:f1:9a:fe:95:62:ed:fc:9a:3c:ba:e4:c8:25:f4:d1:dd:71: ed:ad:e7:af:d2:a1:c2:9a:9e:8e:99:4a:0f:51:3e:27:a1:e8: 52:53:b6:80 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4oyuH0aS3FvDJboO0/VPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDhiMTA4MWJkYmI1MTZhOGM5NGRmNzllMjM5OGMyOGUxMmVmZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59KbYFlJVqtUQOQmt1ChmYt6FEKI N2oA2/5CcXwjY+FQLJValOgtcJtNeqV6Q0HYrVJob5dSw6ry9GtOPevIW6U7V5ew fNLpJq6o4BWradj2J/4kjolXA4Flw0yYfbA6mIu3p+qYyCbsA5TobBszcAcG0fDk 3+z1trt8A+2+ysIf4hq6ikMA74v4n5W3n/GviVoJTAzqYD9hwGWvaAfxM5G8Zzsm 5ky/vuY7+K6BeauXKwLgryKmjufZTEtQ9TK1STEs8iyG62+WHPLfZr4UqmPNnc3Z tDQHibWE3rYgCTyf9/YCnnlmFSzKURP97UXKXXNw/1PHM9JSi29QxMQjnwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFN2LEIG9u1FqjJTfeeI5jCjhLv0jMB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xLzNZc1FnYjI3VVdxTWxOOTU0am1NS09FdV9TTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACTvYID BACwb98wDQYJKoZIhvcNAQELBQADggEBAGztd0hPnezl2gtYDf8+LJolFJ/maXDD deLLk0CU7crPUbsBzz47gplIdUaiPb7mn7Zbrq9vScwJnOszxbc610bewOVNasl+ YgqieyVz/EbwGl6AlihH/zJzWphkQritLi8COewIzB/bJok5B4wXyvvzNo/6WOQ0 dCeJug4TQ8QJ5PjlIbSlFWD7nIHG0aDE4jOKbq/KbrV9qFvbJdqeZbRQpGb1ERWy SWV7E3tybD4lBMJfvnvsoDz+9XPFe1TQ+wQdEemK4o9squSawQbNnYRilVDUpsB2 lMjxmv6VYu38mjy65Mgl9NHdce2t56/SocKano6ZSg9RPieh6FJTtoA= -----END CERTIFICATE-----Generated at Sun Jan 25 08:55:52 2026 by rpki-client