This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3hs4vG2yJG5n0bz_LMWU_BReNaA.roa File: 3hs4vG2yJG5n0bz_LMWU_BReNaA.roa (raw, json) Hash identifier: e3b7zrERJX6JixDGHz0WRA05UtozfSGS9/pavSXH5qk= Subject key identifier: DE:1B:38:BC:6D:B2:24:6E:67:D1:BC:FF:2C:C5:94:FC:14:5E:35:A0 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345520383F8E46509D0DCEA902E5DC Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3hs4vG2yJG5n0bz_LMWU_BReNaA.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34628 IP address blocks: 193.183.70.0/24 maxlen: 24 193.183.75.0/24 maxlen: 24 2a01:280:328::/48 maxlen: 48 2a01:280:329::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:55:20:38:3f:8e:46:50:9d:0d:ce:a9:02:e5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de1b38bc6db2246e67d1bcff2cc594fc145e35a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4c:db:2b:19:fc:5c:91:f9:b9:1d:f4:10:56: 21:32:d8:43:e6:44:24:28:e5:1b:40:1d:08:87:47: 51:a8:d5:41:fe:43:79:fc:43:06:3c:a2:e1:96:db: c9:2f:6e:f8:3d:1b:26:90:ac:45:e5:85:fa:de:6e: b3:90:d8:2a:01:97:0c:27:db:29:68:93:35:e4:ba: ed:8e:bd:5c:d4:50:4a:f5:06:69:b9:5e:0c:24:d5: 8d:30:70:fe:d4:f1:56:bc:c7:84:9b:46:32:1e:41: 99:a2:a2:ec:9a:c8:3e:0d:3e:54:4d:06:29:69:8b: 22:3f:48:df:bf:34:3e:f0:83:24:c1:07:f9:77:27: 77:4d:97:fb:e5:b6:86:b0:1f:d8:e5:0e:39:21:90: 3b:29:de:68:f6:e8:22:0b:b2:7f:31:15:7e:db:2b: f6:7c:cb:8e:06:70:9e:ba:1a:97:18:50:14:10:44: a8:ba:b7:fa:a1:eb:55:c3:5b:65:3f:96:87:a2:22: 25:32:a1:29:d8:bf:4a:ee:f2:17:83:a5:d1:72:4a: de:d7:43:6e:ee:dc:40:2c:de:ad:ef:65:01:cc:94: f0:21:7a:6e:70:ab:d3:11:5e:49:94:1e:84:9e:9c: 7b:fc:32:48:01:3b:cf:c5:c4:c2:6c:35:f7:6d:56: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1B:38:BC:6D:B2:24:6E:67:D1:BC:FF:2C:C5:94:FC:14:5E:35:A0 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3hs4vG2yJG5n0bz_LMWU_BReNaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.183.70.0/24 193.183.75.0/24 IPv6: 2a01:280:328::/47 Signature Algorithm: sha256WithRSAEncryption 59:75:4d:d5:13:a6:59:4d:61:e3:4b:89:25:ee:15:d2:e8:0b: 2d:f5:e4:1e:e0:62:fe:25:3c:e9:49:d1:00:da:8a:7f:8b:be: 4e:f0:a3:35:fa:c1:6f:86:1b:31:05:be:56:29:b0:50:70:10: 95:11:8d:15:7e:e8:37:9c:b0:4b:fc:58:13:d3:41:50:37:b5: 5d:15:a2:79:3f:e0:40:ef:d6:26:ce:c4:40:e6:09:09:2b:c0: e5:7d:99:f0:de:56:8b:55:65:ac:30:ca:bc:89:53:b6:29:2a: f6:09:0f:2b:96:6c:70:cc:ee:40:47:03:03:72:45:ef:14:65: c0:d5:d4:e6:9c:b5:4e:2d:bf:a1:c4:79:38:1e:33:4e:c8:22: b1:4c:87:37:e0:2f:9d:50:c3:86:bf:32:2b:a9:75:4a:a2:c1: 10:64:9b:db:a4:f2:6f:a4:f4:68:ba:63:8b:2f:73:8c:26:26: 23:98:2b:38:f2:e6:d7:e3:48:15:61:69:93:0d:69:5c:32:97: f5:1f:d1:58:35:dc:e4:61:82:7c:8c:ac:b9:52:37:fa:aa:9a: 50:21:39:ab:22:0e:68:ba:c9:42:7b:f9:df:6d:8a:33:b3:be: 58:ce:85:23:5e:53:b0:1b:45:d6:03:04:27:c0:20:c4:22:b1: 1e:9a:47:e5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4NFUgOD+ORlCdDc6pAuXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTFiMzhiYzZkYjIyNDZlNjdkMWJjZmYyY2M1OTRmYzE0NWUzNWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20zbKxn8XJH5uR30EFYhMthD5kQk KOUbQB0Ih0dRqNVB/kN5/EMGPKLhltvJL274PRsmkKxF5YX63m6zkNgqAZcMJ9sp aJM15Lrtjr1c1FBK9QZpuV4MJNWNMHD+1PFWvMeEm0YyHkGZoqLsmsg+DT5UTQYp aYsiP0jfvzQ+8IMkwQf5dyd3TZf75baGsB/Y5Q45IZA7Kd5o9ugiC7J/MRV+2yv2 fMuOBnCeuhqXGFAUEESourf6oetVw1tlP5aHoiIlMqEp2L9K7vIXg6XRckre10Nu 7txALN6t72UBzJTwIXpucKvTEV5JlB6Enpx7/DJIATvPxcTCbDX3bVYA/QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFN4bOLxtsiRuZ9G8/yzFlPwUXjWgMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvM2hzNHZHMnlKRzVuMGJ6X0xNV1VfQlJlTmFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwbdGAwQA wbdLMA8EAgACMAkDBwEqAQKAAygwDQYJKoZIhvcNAQELBQADggEBAFl1TdUTpllN YeNLiSXuFdLoCy315B7gYv4lPOlJ0QDain+Lvk7wozX6wW+GGzEFvlYpsFBwEJUR jRV+6DecsEv8WBPTQVA3tV0Vonk/4EDv1ibOxEDmCQkrwOV9mfDeVotVZawwyryJ U7YpKvYJDyuWbHDM7kBHAwNyRe8UZcDV1OactU4tv6HEeTgeM07IIrFMhzfgL51Q w4a/MiupdUqiwRBkm9uk8m+k9Gi6Y4svc4wmJiOYKzjy5tfjSBVhaZMNaVwyl/Uf 0Vg13ORhgnyMrLlSN/qqmlAhOasiDmi6yUJ7+d9tijOzvljOhSNeU7AbRdYDBCfA IMQisR6aR+U= -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:16 2026 by rpki-client