This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/R3vUElIMqfT3vzJXMUzIubVzmLQ.roa File: R3vUElIMqfT3vzJXMUzIubVzmLQ.roa (raw, json) Hash identifier: 44Gpc3/VsnWSrTFrLhn2IhmQD8M15ksHH0oPjm/pzxE= Subject key identifier: 47:7B:D4:12:52:0C:A9:F4:F7:BF:32:57:31:4C:C8:B9:B5:73:98:B4 Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090 Certificate serial: 019B7DC9BF86E7B457254AC5B5F3EBCEEF0F Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/R3vUElIMqfT3vzJXMUzIubVzmLQ.roa Signing time: Fri 02 Jan 2026 08:18:52 +0000 ROA not before: Fri 02 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17497 IP address blocks: 193.203.214.0/23 maxlen: 23 193.203.214.0/24 maxlen: 24 193.203.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:bf:86:e7:b4:57:25:4a:c5:b5:f3:eb:ce:ef:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090 Validity Not Before: Jan 2 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=477bd412520ca9f4f7bf3257314cc8b9b57398b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:41:07:06:0b:66:70:ee:31:d5:0e:79:94: 41:5f:d7:82:39:1a:81:db:69:62:4a:b7:97:8a:ae: 07:2e:0b:56:54:87:70:e5:85:1b:af:8a:31:40:9b: f1:e1:64:58:2d:fb:57:aa:7f:e3:29:5f:f4:65:39: e1:61:6d:0a:14:6a:00:b5:fe:40:0c:b7:4b:c1:52: 8c:47:de:d3:1b:f8:8b:05:5a:57:c4:11:ea:15:13: 89:fc:1e:b7:a3:ad:46:c7:99:00:20:ca:9d:81:67: 78:0c:83:54:90:80:0f:de:99:bd:b0:08:bb:48:6b: 27:8a:cb:2b:6e:a0:f1:3e:dd:6b:aa:fa:33:a4:6c: 74:76:db:67:df:96:2b:bf:e8:b9:75:ac:8f:52:3c: 6d:8f:bb:67:b0:de:b0:40:d4:b5:46:5f:2c:9d:3c: 30:a1:34:f3:0d:c3:22:00:05:f7:e9:de:0d:ae:9c: ac:df:57:cf:2f:05:1e:01:a4:3e:94:f9:0c:9d:86: aa:f3:d0:85:82:c2:aa:9b:ae:c6:84:55:32:46:62: 2d:68:aa:b3:43:62:34:1f:e8:ac:1b:e9:d5:5e:35: 41:4a:54:a5:8b:44:de:14:73:02:76:48:4d:e1:65: ed:e1:71:2b:58:28:69:7e:1c:a5:56:99:80:03:00: 39:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7B:D4:12:52:0C:A9:F4:F7:BF:32:57:31:4C:C8:B9:B5:73:98:B4 X509v3 Authority Key Identifier: keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/R3vUElIMqfT3vzJXMUzIubVzmLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.214.0/23 Signature Algorithm: sha256WithRSAEncryption 24:a4:75:0f:10:96:a2:d2:b1:5f:25:3f:26:0e:4d:db:e0:5b: ef:f7:72:4e:28:84:dc:8e:83:13:e6:be:38:dd:b7:14:39:77: 0e:5d:9f:ac:10:d7:69:1c:89:de:24:33:7a:19:a8:59:3d:fe: e9:8b:98:f0:8e:f0:65:22:cd:df:cd:eb:6f:93:5b:fd:52:58: 65:29:de:36:aa:87:88:b2:eb:9c:6f:fd:35:c5:5a:fd:76:95: 00:f4:a0:9b:85:76:27:01:6f:ca:5d:aa:0b:7e:3a:2e:13:a6: f2:81:af:e2:9d:4c:91:43:6e:64:5a:c2:ee:78:4b:66:88:4e: ee:ec:8b:63:14:5d:8b:ab:89:f7:cc:52:4f:cc:83:e0:e7:a8: b6:3a:3c:4c:b7:b3:10:86:bd:4a:bc:1c:fd:8c:09:8f:e1:3e: 24:87:0f:1d:0b:5a:f4:bf:49:b7:a3:64:13:25:8a:52:67:f3: 3b:3a:27:9e:23:48:35:28:ee:9c:f2:d1:58:fd:61:f8:1c:64: f3:f1:17:66:cc:d0:aa:26:1b:85:5a:8c:f7:4a:cd:7d:2d:73: 52:f4:ca:f9:55:da:3d:7b:fb:e5:19:59:ee:d8:d4:23:7b:84: 47:26:7a:e7:13:60:fd:35:4b:36:8e:c2:5b:51:36:d6:f8:7d: d1:57:82:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yb+G57RXJUrFtfPrzu8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzODJjYjEzZGRlMTI2NThjZGFjMThjYWNhZTkxZmJiZjVj NTgwOTAwHhcNMjYwMTAyMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzdiZDQxMjUyMGNhOWY0ZjdiZjMyNTczMTRjYzhiOWI1NzM5OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSxBBwYLZnDuMdUOeZRBX9eCORqB 22liSreXiq4HLgtWVIdw5YUbr4oxQJvx4WRYLftXqn/jKV/0ZTnhYW0KFGoAtf5A DLdLwVKMR97TG/iLBVpXxBHqFROJ/B63o61Gx5kAIMqdgWd4DINUkIAP3pm9sAi7 SGsnissrbqDxPt1rqvozpGx0dttn35Yrv+i5dayPUjxtj7tnsN6wQNS1Rl8snTww oTTzDcMiAAX36d4Nrpys31fPLwUeAaQ+lPkMnYaq89CFgsKqm67GhFUyRmItaKqz Q2I0H+isG+nVXjVBSlSli0TeFHMCdkhN4WXt4XErWChpfhylVpmAAwA57wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEd71BJSDKn0978yVzFMyLm1c5i0MB8GA1UdIwQY MBaAFPOCyxPd4SZYzawYysrpH7v1xYCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDIt OTcwNDI4OTFlYjk5LzEvUjN2VUVsSU1xZlQzdnpKWE1Vekl1YlZ6bUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDItOTcwNDI4OTFlYjk5 LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcvWMA0G CSqGSIb3DQEBCwUAA4IBAQAkpHUPEJai0rFfJT8mDk3b4Fvv93JOKITcjoMT5r44 3bcUOXcOXZ+sENdpHIneJDN6GahZPf7pi5jwjvBlIs3fzetvk1v9UlhlKd42qoeI suucb/01xVr9dpUA9KCbhXYnAW/KXaoLfjouE6byga/inUyRQ25kWsLueEtmiE7u 7ItjFF2Lq4n3zFJPzIPg56i2OjxMt7MQhr1KvBz9jAmP4T4khw8dC1r0v0m3o2QT JYpSZ/M7OieeI0g1KO6c8tFY/WH4HGTz8RdmzNCqJhuFWoz3Ss19LXNS9Mr5Vdo9 e/vlGVnu2NQje4RHJnrnE2D9NUs2jsJbUTbW+H3RV4KU -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:39 2026 by rpki-client