This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/3Adh7KtHVqwqgZmtyDo8Ej6pQKM.roa File: 3Adh7KtHVqwqgZmtyDo8Ej6pQKM.roa (raw, json) Hash identifier: wUQuxvOgY7UYkYHJtGk8LL5BCyN5FZHPBwwIxJwHIq4= Subject key identifier: DC:07:61:EC:AB:47:56:AC:2A:81:99:AD:C8:3A:3C:12:3E:A9:40:A3 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019B7EA73EC784C84D83D880CE3BBE1509B6 Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/3Adh7KtHVqwqgZmtyDo8Ej6pQKM.roa Signing time: Fri 02 Jan 2026 12:20:48 +0000 ROA not before: Fri 02 Jan 2026 12:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213069 IP address blocks: 195.234.191.0/24 maxlen: 24 195.238.240.0/24 maxlen: 24 2a10:ef04:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3e:c7:84:c8:4d:83:d8:80:ce:3b:be:15:09:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc0761ecab4756ac2a8199adc83a3c123ea940a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:f0:96:ae:d3:8a:52:1b:02:f0:2e:da:24: 88:77:84:c0:af:f1:b7:7c:13:3a:6f:65:e9:72:1d: 0b:e1:02:54:23:1f:a3:a7:12:4f:08:5e:93:24:d0: 59:13:4b:02:95:a7:8b:09:a2:e8:bc:1e:bf:e4:7b: 99:4e:4a:ea:15:ca:d5:3d:e9:a0:63:41:2d:f6:90: 78:26:04:ce:0f:6c:4b:5d:00:70:4a:33:1e:cb:62: c6:3e:88:c9:27:9f:bd:b1:ed:27:c9:78:16:9f:3e: b2:37:76:a4:25:86:0a:11:4f:f9:c6:b7:1f:4c:a9: 58:3f:96:30:8f:d4:7b:4f:dd:fe:b9:14:17:24:2d: 4c:c1:cf:a4:a9:a1:53:e4:d0:a4:12:fd:72:b0:5a: 80:5f:0e:da:b0:aa:69:2b:75:19:62:2a:35:2f:7d: 21:ca:d5:d5:63:4f:fd:e5:22:1d:00:ab:7b:6b:d0: b4:69:65:2a:57:6c:d1:a0:c8:e9:76:dd:1c:c9:cb: df:db:5f:4a:04:b3:ac:22:cc:4e:5f:fc:d4:8d:62: 5e:27:a9:78:57:42:e7:c9:1f:0c:3a:2d:c8:48:6b: ba:10:de:a4:af:69:dc:fc:be:8b:f0:04:56:85:ed: 2f:53:26:08:f2:6c:25:b4:9c:bc:39:50:81:c2:5f: 69:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:07:61:EC:AB:47:56:AC:2A:81:99:AD:C8:3A:3C:12:3E:A9:40:A3 X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/3Adh7KtHVqwqgZmtyDo8Ej6pQKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.191.0/24 195.238.240.0/24 IPv6: 2a10:ef04:1002::/48 Signature Algorithm: sha256WithRSAEncryption a9:7e:bb:a5:57:1a:45:02:37:5f:3c:6b:04:1e:f9:8e:5a:54: 8b:51:31:20:de:a8:18:29:9b:16:d1:93:46:b9:e6:ec:a9:0b: 92:f8:eb:1a:42:30:7c:e4:55:75:ed:4a:2e:8a:fa:59:34:1d: 7e:81:6e:85:15:f0:81:67:a0:8f:19:7b:15:ac:de:26:82:bf: 88:85:d5:a4:d2:70:2c:9b:e0:bd:1e:aa:96:8a:14:c7:a6:1c: ef:46:42:97:0f:05:17:53:17:7b:40:3d:7c:41:f2:79:77:14: b1:13:db:2e:aa:04:f2:60:d1:b0:bc:74:18:8b:b3:fc:f2:b4: ca:e4:b7:ce:f7:9c:3d:e7:4c:43:90:b3:66:af:da:5e:e4:10: 3b:ce:b9:67:e1:6c:d7:7e:02:f1:c7:ee:14:91:dd:ee:7a:94: ec:67:a0:88:ff:a4:c4:f6:ac:a8:b1:25:4e:b7:9b:e7:b9:70: 0c:a8:cb:81:a2:25:9a:01:c7:10:11:c2:02:ec:90:08:5f:d3: 50:aa:57:6d:48:02:b3:4a:32:80:13:b6:79:f4:81:fd:fc:ea: a9:bd:60:25:fe:b4:9d:51:a9:9e:e6:30:0a:cc:ea:69:d2:59: f8:5c:e5:13:4e:5a:36:8b:60:d9:86:90:f3:d1:9c:60:23:87: fe:72:5c:27 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+pz7HhMhNg9iAzju+FQm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzA3NjFlY2FiNDc1NmFjMmE4MTk5YWRjODNhM2MxMjNlYTk0MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19/wlq7TilIbAvAu2iSId4TAr/G3 fBM6b2Xpch0L4QJUIx+jpxJPCF6TJNBZE0sClaeLCaLovB6/5HuZTkrqFcrVPemg Y0Et9pB4JgTOD2xLXQBwSjMey2LGPojJJ5+9se0nyXgWnz6yN3akJYYKEU/5xrcf TKlYP5Ywj9R7T93+uRQXJC1Mwc+kqaFT5NCkEv1ysFqAXw7asKppK3UZYio1L30h ytXVY0/95SIdAKt7a9C0aWUqV2zRoMjpdt0cycvf219KBLOsIsxOX/zUjWJeJ6l4 V0LnyR8MOi3ISGu6EN6kr2nc/L6L8ARWhe0vUyYI8mwltJy8OVCBwl9poQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNwHYeyrR1asKoGZrcg6PBI+qUCjMB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvM0FkaDdLdEhWcXdxZ1ptdHlEbzhFajZwUUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAw+q/AwQA w+7wMA8EAgACMAkDBwAqEO8EEAIwDQYJKoZIhvcNAQELBQADggEBAKl+u6VXGkUC N188awQe+Y5aVItRMSDeqBgpmxbRk0a55uypC5L46xpCMHzkVXXtSi6K+lk0HX6B boUV8IFnoI8ZexWs3iaCv4iF1aTScCyb4L0eqpaKFMemHO9GQpcPBRdTF3tAPXxB 8nl3FLET2y6qBPJg0bC8dBiLs/zytMrkt873nD3nTEOQs2av2l7kEDvOuWfhbNd+ AvHH7hSR3e56lOxnoIj/pMT2rKixJU63m+e5cAyoy4GiJZoBxxARwgLskAhf01Cq V21IArNKMoATtnn0gf386qm9YCX+tJ1RqZ7mMArM6mnSWfhc5RNOWjaLYNmGkPPR nGAjh/5yXCc= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:18 2026 by rpki-client