This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa File: 3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa (raw, json) Hash identifier: 7NA9a/ZKJFAsJurJjGE4qQlN7WKcef8AvmYKofmxtdA= Subject key identifier: DC:04:A3:03:5A:BC:01:12:15:D9:96:2F:DD:D3:0D:7E:2B:7A:BB:72 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6A8A23A1E3A961658C54E10783113 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa Signing time: Fri 02 Jan 2026 12:20:09 +0000 ROA not before: Fri 02 Jan 2026 12:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60981 IP address blocks: 213.146.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a8:a2:3a:1e:3a:96:16:58:c5:4e:10:78:31:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc04a3035abc011215d9962fddd30d7e2b7abb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:fd:0e:29:69:9a:cf:bf:fb:41:6c:96:27: 4e:fe:15:68:94:64:cc:87:99:e9:ef:7b:f6:14:c0: e7:46:d4:bc:cf:4f:61:5e:70:c0:c1:2a:84:d1:e5: b2:0a:45:a3:ff:6a:48:20:7c:bf:9e:93:87:a7:02: c7:73:d3:9d:28:fb:dc:d5:fa:68:e6:fb:63:5a:22: 4a:fd:52:31:10:13:a9:8b:a2:f8:b6:8f:69:06:f7: e5:9f:7a:f7:75:a2:92:91:6a:8a:a8:81:73:21:27: c7:dd:da:75:40:e2:62:55:36:38:bb:c9:c8:bb:78: 32:4a:39:e4:e3:44:a2:f6:28:13:0c:9e:85:88:f4: ec:7a:95:21:e3:7e:c6:b1:ea:bf:7b:bf:25:a6:57: 21:9d:79:c9:36:04:2d:02:1e:ee:a0:f3:a4:32:17: b7:83:1b:9a:de:d3:31:44:ac:67:a0:55:e9:56:40: 7a:3a:61:a3:91:d3:9f:de:cd:40:dc:d8:8d:d2:8b: 44:5f:ec:f7:3a:4c:fe:1f:89:41:bf:be:53:d7:43: 18:14:c0:90:09:5d:9b:2d:41:df:5f:f1:40:43:bb: 1d:c2:8f:86:f0:bc:10:3b:5f:31:86:ac:ac:aa:57: be:bc:33:9d:61:66:3e:2e:f3:d7:bf:00:08:cd:9f: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:04:A3:03:5A:BC:01:12:15:D9:96:2F:DD:D3:0D:7E:2B:7A:BB:72 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.146.186.0/23 Signature Algorithm: sha256WithRSAEncryption 26:ba:e5:b5:9a:45:5c:25:2b:79:aa:a4:1a:62:d9:9d:69:10: fd:ab:a5:c7:4d:cd:82:c9:94:fd:67:63:9c:cc:08:ac:82:59: 61:86:00:31:5f:ba:1f:50:77:47:f1:8a:ef:47:2b:0a:b6:d4: 68:a2:4d:e4:b0:bc:36:d6:7f:46:d2:f6:80:bf:47:09:f2:ae: 56:ae:fd:c2:38:8e:bf:0d:20:5d:a6:38:8a:f8:5f:16:b5:4b: 29:9c:be:f8:13:78:6b:28:29:06:97:42:ee:2c:31:9c:aa:73: ad:6f:e7:f9:d1:d0:cf:98:b5:90:b3:f9:05:63:1a:f0:ae:fb: c7:bd:d7:6d:95:52:82:b1:42:70:cc:23:7d:c6:21:b3:69:93: a1:55:55:b3:2c:5a:09:83:f1:ca:f6:e7:be:23:94:34:d6:a9: b2:4b:f0:33:ad:b6:f3:2b:03:c5:d4:b7:cb:de:fd:9d:c3:e8: 1c:d3:f8:d4:da:f7:eb:87:df:93:a8:8a:03:ff:71:88:69:b1: 8c:b7:0c:03:19:13:d0:c0:90:95:ab:3f:1d:3d:06:b2:85:ce: 47:6e:27:33:35:4f:e5:87:dd:44:53:e5:12:ff:0f:3c:ae:2a: c5:02:41:d6:4b:b0:9e:00:b1:73:44:c4:f2:54:e2:75:1d:8a: cf:1f:93:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqiiOh46lhZYxU4QeDETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzA0YTMwMzVhYmMwMTEyMTVkOTk2MmZkZGQzMGQ3ZTJiN2FiYjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv479Dilpms+/+0FslidO/hVolGTM h5np73v2FMDnRtS8z09hXnDAwSqE0eWyCkWj/2pIIHy/npOHpwLHc9OdKPvc1fpo 5vtjWiJK/VIxEBOpi6L4to9pBvfln3r3daKSkWqKqIFzISfH3dp1QOJiVTY4u8nI u3gySjnk40Si9igTDJ6FiPTsepUh437Gseq/e78lplchnXnJNgQtAh7uoPOkMhe3 gxua3tMxRKxnoFXpVkB6OmGjkdOf3s1A3NiN0otEX+z3Okz+H4lBv75T10MYFMCQ CV2bLUHfX/FAQ7sdwo+G8LwQO18xhqysqle+vDOdYWY+LvPXvwAIzZ9cnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwEowNavAESFdmWL93TDX4rertyMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvM0FTakExcThBUklWMlpZdjNkTU5maXQ2dTNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1ZK6MA0G CSqGSIb3DQEBCwUAA4IBAQAmuuW1mkVcJSt5qqQaYtmdaRD9q6XHTc2CyZT9Z2Oc zAisgllhhgAxX7ofUHdH8YrvRysKttRook3ksLw21n9G0vaAv0cJ8q5Wrv3COI6/ DSBdpjiK+F8WtUspnL74E3hrKCkGl0LuLDGcqnOtb+f50dDPmLWQs/kFYxrwrvvH vddtlVKCsUJwzCN9xiGzaZOhVVWzLFoJg/HK9ue+I5Q01qmyS/AzrbbzKwPF1LfL 3v2dw+gc0/jU2vfrh9+TqIoD/3GIabGMtwwDGRPQwJCVqz8dPQayhc5HbiczNU/l h91EU+US/w88rirFAkHWS7CeALFzRMTyVOJ1HYrPH5M/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:39 2026 by rpki-client