This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/3quKn702Vi5YqrEVXzFPYc93s0o.roa File: 3quKn702Vi5YqrEVXzFPYc93s0o.roa (raw, json) Hash identifier: Ux1SJ1+gpjARAxZ3o2ImnrNmQoc+jmNEaDOBhy8YXGc= Subject key identifier: DE:AB:8A:9F:BD:36:56:2E:58:AA:B1:15:5F:31:4F:61:CF:77:B3:4A Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d Certificate serial: 019B7834D9FD565DF8D406089F8D49407EFE Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/3quKn702Vi5YqrEVXzFPYc93s0o.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.147.229.0/24 maxlen: 24 2001:67c:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d9:fd:56:5d:f8:d4:06:08:9f:8d:49:40:7e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deab8a9fbd36562e58aab1155f314f61cf77b34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:c9:b2:b6:6d:c9:62:3e:d5:be:4b:14:27: 3c:91:3f:ee:b8:31:4a:82:42:a0:bb:af:c1:d9:78: 18:67:df:db:51:c2:ee:f3:01:dd:d7:94:72:8a:19: 1c:07:9f:20:f4:c0:de:91:9f:5b:e7:7a:51:e0:28: d8:bd:73:ac:9b:79:08:0e:17:67:3f:22:a3:4a:88: 59:bf:0a:72:cd:c5:d2:c3:46:65:44:48:22:49:59: e0:89:94:a3:e2:17:7d:2a:b1:49:c4:fc:f0:60:b9: 8f:89:fd:cd:68:5b:7a:85:97:96:bb:b1:89:65:68: e0:e3:a7:c7:f8:46:93:bc:55:96:13:66:14:ae:54: 76:28:ca:54:63:ef:5e:33:8b:7e:89:ee:c0:c8:85: e5:12:8d:b3:d3:28:97:23:25:de:c9:d5:e1:e7:ad: 92:9a:82:d6:de:99:d0:51:b5:3f:2c:3c:7f:cb:b5: 3e:ab:cc:c9:94:5f:04:73:d6:16:7a:95:0a:11:4b: ef:42:4b:74:3d:97:11:b7:7e:3e:35:8b:fc:dd:a7: 5a:ef:12:ef:2f:28:7b:2d:8c:a1:7d:81:60:1c:f6: 29:2f:95:78:b8:fe:89:f3:ae:ef:3e:5e:34:9e:48: 99:5c:24:9c:c5:a1:6f:1c:fc:9a:a2:8e:6f:e2:c4: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AB:8A:9F:BD:36:56:2E:58:AA:B1:15:5F:31:4F:61:CF:77:B3:4A X509v3 Authority Key Identifier: keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/3quKn702Vi5YqrEVXzFPYc93s0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.229.0/24 IPv6: 2001:67c:c0::/48 Signature Algorithm: sha256WithRSAEncryption 1c:70:ea:69:de:8f:a0:56:b0:dd:cd:ae:d6:b8:40:4e:ce:4b: 01:a1:6a:a7:6a:86:a9:9e:02:e8:6b:ab:cb:40:96:4a:19:8b: c1:42:cc:ae:a1:25:55:be:76:dc:5a:b8:c1:71:12:9d:b4:74: 88:64:c0:58:70:e2:77:5a:aa:7b:97:c2:9e:ec:81:ac:4f:5e: 5b:4f:2f:e0:66:97:ab:ed:e5:3e:1e:e6:6b:2f:f2:a8:7c:a3: 2b:97:a7:ff:59:d2:a7:2f:c0:73:7f:77:b0:77:3f:73:03:b1: 18:9c:55:0a:c5:dc:93:b7:12:a4:03:8e:8b:eb:6c:40:19:a1: 4c:37:f1:30:b5:f5:41:23:c8:e5:fc:2a:60:09:f2:1c:f5:ec: e9:c2:44:87:7b:26:74:a3:66:9c:d8:c6:41:95:0d:12:39:63: aa:97:19:4b:7e:74:4e:c2:20:11:2b:0f:ce:7e:ad:26:79:20: 3b:05:78:9c:a7:2a:24:a7:a5:f8:74:6e:06:fb:0d:c5:ce:95: 94:24:8e:1a:26:8c:65:a5:5c:a2:02:0a:d9:5e:0b:56:58:54: ea:28:b6:99:da:57:5e:d5:2f:f8:6a:12:de:96:e6:a6:14:41: 04:37:e6:f0:68:f5:d9:46:ef:ed:8f:87:81:84:a2:70:b4:cc: e8:2c:63:41 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NNn9Vl341AYIn41JQH7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzY4MGVlMWIyN2MzYTZmMDcwMTNjOGZjMjVlYmZmMGM2 N2ZiOWQwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWFiOGE5ZmJkMzY1NjJlNThhYWIxMTU1ZjMxNGY2MWNmNzdiMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCTJsrZtyWI+1b5LFCc8kT/uuDFK gkKgu6/B2XgYZ9/bUcLu8wHd15RyihkcB58g9MDekZ9b53pR4CjYvXOsm3kIDhdn PyKjSohZvwpyzcXSw0ZlREgiSVngiZSj4hd9KrFJxPzwYLmPif3NaFt6hZeWu7GJ ZWjg46fH+EaTvFWWE2YUrlR2KMpUY+9eM4t+ie7AyIXlEo2z0yiXIyXeydXh562S moLW3pnQUbU/LDx/y7U+q8zJlF8Ec9YWepUKEUvvQkt0PZcRt34+NYv83ada7xLv Lyh7LYyhfYFgHPYpL5V4uP6J867vPl40nkiZXCScxaFvHPyaoo5v4sRCYwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFN6rip+9NlYuWKqxFV8xT2HPd7NKMB8GA1UdIwQY MBaAFP3GgO4bJ8Om8HATyPwl6/8MZ/udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMt N2JlZDI2NzQzYmNjLzEvM3F1S243MDJWaTVZcXJFVlh6RlBZYzkzczBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMtN2JlZDI2NzQzYmNj LzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwpPlMA8E AgACMAkDBwAgAQZ8AMAwDQYJKoZIhvcNAQELBQADggEBABxw6mnej6BWsN3Nrta4 QE7OSwGhaqdqhqmeAuhrq8tAlkoZi8FCzK6hJVW+dtxauMFxEp20dIhkwFhw4nda qnuXwp7sgaxPXltPL+Bml6vt5T4e5msv8qh8oyuXp/9Z0qcvwHN/d7B3P3MDsRic VQrF3JO3EqQDjovrbEAZoUw38TC19UEjyOX8KmAJ8hz17OnCRId7JnSjZpzYxkGV DRI5Y6qXGUt+dE7CIBErD85+rSZ5IDsFeJynKiSnpfh0bgb7DcXOlZQkjhomjGWl XKICCtleC1ZYVOootpnaV17VL/hqEt6W5qYUQQQ35vBo9dlG7+2Ph4GEonC0zOgs Y0E= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:15 2026 by rpki-client