This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/N3EXayc-3o5FUNZyM0wptzdcK9o.roa File: N3EXayc-3o5FUNZyM0wptzdcK9o.roa (raw, json) Hash identifier: 54xklyduj+4FndB5iy5VSOkzcc7nc+vpbvnlB27yVx4= Subject key identifier: 37:71:17:6B:27:3E:DE:8E:45:50:D6:72:33:4C:29:B7:37:5C:2B:DA Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B7EA65BA0BA1EF90B1762B526BBD54A1F Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/N3EXayc-3o5FUNZyM0wptzdcK9o.roa Signing time: Fri 02 Jan 2026 12:19:50 +0000 ROA not before: Fri 02 Jan 2026 12:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25227 IP address blocks: 195.151.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5b:a0:ba:1e:f9:0b:17:62:b5:26:bb:d5:4a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Jan 2 12:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3771176b273ede8e4550d672334c29b7375c2bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c9:d8:03:56:76:2e:f3:bd:fd:81:84:5d:88: c0:53:51:e9:2c:40:4b:61:ff:56:c5:05:c2:5b:42: d9:94:43:65:b1:ac:5a:89:c7:13:b4:d5:4c:a6:8e: 0d:5d:e4:25:fc:2c:55:8c:dc:fc:71:17:ab:dd:6c: 87:28:69:2f:41:27:05:7a:a8:12:91:c5:bd:dd:9f: f6:77:56:71:a8:3a:be:15:9c:38:63:cd:51:7a:a7: 59:bc:02:13:c5:8a:b6:71:6e:17:db:25:31:0d:ef: 82:51:bd:87:92:91:47:54:01:bf:7b:b0:42:ff:1a: 38:26:cf:8d:99:14:5e:85:52:a0:99:55:69:f4:37: 2d:d8:c0:7b:15:2b:c5:01:8f:d9:6b:fd:0a:62:f2: 1f:b1:9c:ac:e5:d4:26:b1:30:33:ee:58:4a:66:6d: 14:ea:32:74:5c:63:9f:f9:d4:a0:19:99:8c:cc:bf: cc:c8:c2:2f:17:dd:2b:0d:8d:b8:d4:be:6c:b3:31: 15:c5:1b:fa:e1:b1:a2:dc:1d:c8:90:66:3f:de:ab: d1:dd:dd:5d:d5:03:3f:de:85:8f:0a:63:c6:63:4e: 17:90:be:2b:c0:29:d8:84:d7:f5:06:94:1b:f8:a1: 8d:86:7b:57:a2:3c:5a:b7:0e:53:2d:94:5b:96:a3: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:71:17:6B:27:3E:DE:8E:45:50:D6:72:33:4C:29:B7:37:5C:2B:DA X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/N3EXayc-3o5FUNZyM0wptzdcK9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.151.41.0/24 Signature Algorithm: sha256WithRSAEncryption 39:83:d2:42:13:d2:cb:ad:03:47:6b:76:8f:8d:e7:ec:90:42: f7:2c:4d:25:df:e1:a8:dc:3f:2e:fe:d4:ef:88:14:72:d4:ed: 3d:48:7f:2a:da:34:f3:5d:92:71:ea:1f:3d:ab:da:4f:14:85: 57:91:ca:6e:82:fe:44:14:b5:85:5a:f8:39:d5:a5:18:97:5d: 16:f9:89:a8:dd:02:5c:06:c5:55:66:82:11:8b:86:ea:03:bf: bc:1e:47:7f:35:fe:42:c7:92:07:77:61:5f:42:61:b7:b4:1d: 4f:ff:a7:cf:a2:a6:4e:5d:d2:f4:77:43:5c:72:60:0b:6e:6e: b8:e3:b5:c2:62:f0:81:a9:80:1c:ce:fa:29:43:58:86:f1:00: f6:3e:21:18:bb:4c:e1:1f:89:e0:88:a9:23:29:d5:f3:4a:83: 7a:f2:5a:ab:34:d8:00:61:da:95:2c:0e:38:3c:3f:a2:83:5a: 45:e3:6f:a3:40:a2:a0:1b:87:ae:de:f7:46:62:fb:78:c5:2a: ef:f5:d7:63:1f:47:fb:3c:cb:d8:4c:e9:c5:bf:da:20:8d:5e: 0b:78:f9:de:69:ed:45:66:35:e8:1d:ab:86:ac:81:0f:a8:a4: c4:6c:37:30:44:2b:f5:ae:ec:88:39:37:79:3d:bf:42:37:50: 73:0a:c6:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pluguh75CxditSa71UofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjYwMTAyMTIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzcxMTc2YjI3M2VkZThlNDU1MGQ2NzIzMzRjMjliNzM3NWMyYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2snYA1Z2LvO9/YGEXYjAU1HpLEBL Yf9WxQXCW0LZlENlsaxaiccTtNVMpo4NXeQl/CxVjNz8cRer3WyHKGkvQScFeqgS kcW93Z/2d1ZxqDq+FZw4Y81ReqdZvAITxYq2cW4X2yUxDe+CUb2HkpFHVAG/e7BC /xo4Js+NmRRehVKgmVVp9Dct2MB7FSvFAY/Za/0KYvIfsZys5dQmsTAz7lhKZm0U 6jJ0XGOf+dSgGZmMzL/MyMIvF90rDY241L5sszEVxRv64bGi3B3IkGY/3qvR3d1d 1QM/3oWPCmPGY04XkL4rwCnYhNf1BpQb+KGNhntXojxatw5TLZRblqPZ0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdxF2snPt6ORVDWcjNMKbc3XCvaMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvTjNFWGF5Yy0zbzVGVU5aeU0wd3B0emRjSzlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5cpMA0G CSqGSIb3DQEBCwUAA4IBAQA5g9JCE9LLrQNHa3aPjefskEL3LE0l3+Go3D8u/tTv iBRy1O09SH8q2jTzXZJx6h89q9pPFIVXkcpugv5EFLWFWvg51aUYl10W+Ymo3QJc BsVVZoIRi4bqA7+8Hkd/Nf5Cx5IHd2FfQmG3tB1P/6fPoqZOXdL0d0NccmALbm64 47XCYvCBqYAczvopQ1iG8QD2PiEYu0zhH4ngiKkjKdXzSoN68lqrNNgAYdqVLA44 PD+ig1pF42+jQKKgG4eu3vdGYvt4xSrv9ddjH0f7PMvYTOnFv9ogjV4LePneae1F ZjXoHauGrIEPqKTEbDcwRCv1ruyIOTd5Pb9CN1BzCsbz -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:31 2026 by rpki-client