This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/3U5i5lLwqD2TvdeVIAyAIFPdim4.roa File: 3U5i5lLwqD2TvdeVIAyAIFPdim4.roa (raw, json) Hash identifier: HhuAdfKxJdiqCANeowtxwSFVVhy23SFm3a3Q9J4Wgbw= Subject key identifier: DD:4E:62:E6:52:F0:A8:3D:93:BD:D7:95:20:0C:80:20:53:DD:8A:6E Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e Certificate serial: 019B7C80C4B81E668D872451230A90ED6DC6 Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/3U5i5lLwqD2TvdeVIAyAIFPdim4.roa Signing time: Fri 02 Jan 2026 02:19:32 +0000 ROA not before: Fri 02 Jan 2026 02:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49558 IP address blocks: 93.183.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c4:b8:1e:66:8d:87:24:51:23:0a:90:ed:6d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd4e62e652f0a83d93bdd795200c802053dd8a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:ec:41:5b:61:c6:40:5d:eb:86:8b:7b:ae: 40:e2:59:7c:ec:4d:0c:4c:39:91:17:f3:c3:77:4f: 89:c2:40:05:b8:9f:c8:00:08:73:4a:9a:01:31:77: 78:b0:3b:2a:f3:14:05:02:e4:1d:a0:f9:57:bd:ca: d0:4d:5e:24:9c:96:a3:01:e3:a0:5d:7f:23:fe:67: 85:4a:0d:c3:13:48:fa:82:3f:b9:1b:a4:08:6a:2e: 1d:9d:db:5a:67:78:60:21:70:bf:c9:53:1b:87:ce: 0d:89:2d:f0:e2:bc:0c:3a:90:33:a3:41:b7:5a:a5: 71:1c:20:99:a7:f6:7e:44:e8:37:85:5d:65:e1:5a: 84:56:8e:84:0f:c2:19:f1:41:2f:00:9b:d0:a0:e7: 01:45:52:fa:f8:7c:0a:a9:64:63:8f:ca:fb:4a:dc: d0:9d:e0:83:fb:a4:d6:0b:45:b6:65:6f:9c:49:69: 5c:e3:9b:82:49:08:2a:fb:14:dd:9b:eb:34:f1:41: 96:82:7d:a9:05:54:6f:2c:84:0b:a5:da:a2:b0:ee: eb:2e:09:33:c4:6a:bb:bb:6d:2c:a6:4b:2a:6e:76: 65:93:91:16:96:ec:32:cd:e3:f7:a5:93:88:e2:e9: 3f:94:93:ff:4e:5e:1c:e8:65:40:c9:d7:e7:c1:96: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4E:62:E6:52:F0:A8:3D:93:BD:D7:95:20:0C:80:20:53:DD:8A:6E X509v3 Authority Key Identifier: keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/3U5i5lLwqD2TvdeVIAyAIFPdim4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.183.120.0/22 Signature Algorithm: sha256WithRSAEncryption 09:61:a2:e3:2e:63:81:c1:61:80:b2:6c:3d:44:f6:99:3b:ee: 78:4a:d5:7d:cf:e1:a0:2b:b5:d4:5b:00:e5:0f:6d:fe:fc:6b: c4:3c:ca:7d:1a:de:41:b0:bd:2b:20:9f:de:fb:ee:97:d9:ea: e2:22:7e:ce:52:08:16:c1:60:95:e3:72:f0:fc:c4:aa:ad:b3: a5:14:7f:4a:ea:68:a9:ed:9b:15:ca:6a:1d:c5:86:07:ce:06: a1:0c:35:1e:cb:a3:09:d2:3b:03:31:55:91:2d:6c:87:2e:aa: 37:b4:23:91:c2:9c:2e:94:33:f7:27:75:11:16:b7:cc:c5:04: e8:e8:e7:41:4d:36:0a:cf:2a:ac:3f:76:10:26:3b:72:a1:c3: f2:73:ed:1d:07:91:a0:ae:15:85:68:f9:b6:c5:c1:0e:d5:63: 1b:cd:b8:78:55:d0:5d:48:ea:2a:b6:d8:fb:09:e7:df:57:8b: 37:12:48:df:aa:84:0a:60:2b:48:af:30:4c:51:95:32:0c:ff: 2d:04:6a:72:33:9c:46:66:e8:67:6d:97:3a:93:3d:fa:90:22: 49:78:2a:6c:55:d3:9d:59:89:91:1f:a0:4c:0c:1f:eb:e9:d8: 60:bb:f6:22:aa:ad:33:bc:98:f5:d5:30:d4:00:c8:d9:28:69: 2f:db:cc:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMS4HmaNhyRRIwqQ7W3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZTRkYzk2OGVkNTI5MzVhMDRkZWUzYjIyOWMyMWNhOWJm ZGJkN2UwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDRlNjJlNjUyZjBhODNkOTNiZGQ3OTUyMDBjODAyMDUzZGQ4YTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4DsQVthxkBd64aLe65A4ll87E0M TDmRF/PDd0+JwkAFuJ/IAAhzSpoBMXd4sDsq8xQFAuQdoPlXvcrQTV4knJajAeOg XX8j/meFSg3DE0j6gj+5G6QIai4dndtaZ3hgIXC/yVMbh84NiS3w4rwMOpAzo0G3 WqVxHCCZp/Z+ROg3hV1l4VqEVo6ED8IZ8UEvAJvQoOcBRVL6+HwKqWRjj8r7StzQ neCD+6TWC0W2ZW+cSWlc45uCSQgq+xTdm+s08UGWgn2pBVRvLIQLpdqisO7rLgkz xGq7u20spksqbnZlk5EWluwyzeP3pZOI4uk/lJP/Tl4c6GVAydfnwZa/NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN1OYuZS8Kg9k73XlSAMgCBT3YpuMB8GA1UdIwQY MBaAFOnk3JaO1Sk1oE3uOyKcIcqb/b1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEt NmM3ODU2ZWY3YjMxLzEvM1U1aTVsTHdxRDJUdmRlVklBeUFJRlBkaW00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEtNmM3ODU2ZWY3YjMx LzEvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXbd4MA0G CSqGSIb3DQEBCwUAA4IBAQAJYaLjLmOBwWGAsmw9RPaZO+54StV9z+GgK7XUWwDl D23+/GvEPMp9Gt5BsL0rIJ/e++6X2eriIn7OUggWwWCV43Lw/MSqrbOlFH9K6mip 7ZsVymodxYYHzgahDDUey6MJ0jsDMVWRLWyHLqo3tCORwpwulDP3J3URFrfMxQTo 6OdBTTYKzyqsP3YQJjtyocPyc+0dB5GgrhWFaPm2xcEO1WMbzbh4VdBdSOoqttj7 CeffV4s3EkjfqoQKYCtIrzBMUZUyDP8tBGpyM5xGZuhnbZc6kz36kCJJeCpsVdOd WYmRH6BMDB/r6dhgu/Yiqq0zvJj11TDUAMjZKGkv28wc -----END CERTIFICATE-----Generated at Sun Jan 25 21:02:59 2026 by rpki-client