This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/e3o4IyIg-E3KtdnXrvKxXVHHGiM.roa File: e3o4IyIg-E3KtdnXrvKxXVHHGiM.roa (raw, json) Hash identifier: BFaJlzCa4y2iNt3wGIlwgK+qGDOfp9YwZTWRRnHj1Kc= Subject key identifier: 7B:7A:38:23:22:20:F8:4D:CA:B5:D9:D7:AE:F2:B1:5D:51:C7:1A:23 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783486B892A3531FF4DCCB385E2CA8A1 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/e3o4IyIg-E3KtdnXrvKxXVHHGiM.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206884 IP address blocks: 194.14.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:86:b8:92:a3:53:1f:f4:dc:cb:38:5e:2c:a8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b7a38232220f84dcab5d9d7aef2b15d51c71a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:74:a4:58:8a:f3:4c:a1:d8:c3:9f:da:c8:37: 23:a6:42:05:68:63:b1:b9:99:7b:5f:15:55:f7:00: cf:1b:4d:a3:86:be:aa:85:68:30:2a:1c:e3:59:46: 09:5d:26:60:e1:10:12:21:bd:f9:46:bf:b9:88:5b: 14:cb:cb:34:13:1e:dc:f1:e3:fc:b2:aa:01:d2:59: d8:ad:e9:05:21:b4:61:41:1f:9d:b9:4f:83:58:f3: f6:80:24:15:ff:a6:15:a3:23:10:2f:f8:04:25:86: 0f:d5:18:16:9d:a1:d6:9b:32:16:3c:4d:98:5d:d7: 7a:2c:f9:d7:e4:ed:60:7d:77:af:c8:5e:3b:f6:3a: 75:f5:ef:c3:b7:2c:23:c1:bc:62:56:7d:12:b5:b7: 53:dc:1a:e0:fa:1d:45:e3:65:41:94:bb:58:6b:f6: 7b:42:73:45:63:ed:27:b8:3c:4e:8e:e9:59:2a:a6: db:ea:00:1a:86:8d:ad:d1:06:5b:9d:58:e5:e5:bd: d7:c5:33:37:ff:07:c0:fb:8d:da:45:53:d1:46:fe: 82:09:f8:31:e4:f0:86:aa:85:8a:97:a0:54:24:2a: 4c:3e:65:6d:7b:17:7e:14:1a:cb:fc:2d:0c:f7:fa: d2:57:2c:5a:b9:fe:96:07:29:2a:d0:9e:09:ab:56: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7A:38:23:22:20:F8:4D:CA:B5:D9:D7:AE:F2:B1:5D:51:C7:1A:23 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/e3o4IyIg-E3KtdnXrvKxXVHHGiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.14.76.0/24 Signature Algorithm: sha256WithRSAEncryption 83:1c:44:57:fd:91:52:1e:b1:10:6f:c6:6c:09:8b:3d:e0:4f: 12:4b:6d:f8:13:7c:dd:9d:58:dd:15:ce:0a:dd:10:3b:7c:6f: 70:a7:6c:63:32:d1:2a:eb:40:46:3a:6b:7c:22:b1:d0:19:88: bf:b6:34:7b:95:e0:ba:65:37:8a:2a:3f:65:f0:ae:ee:2d:d0: f8:81:a7:33:45:c7:ff:1f:b3:82:8f:c6:05:9a:0a:9f:14:4c: 47:f7:dc:d2:0f:3f:ff:4b:d5:d2:23:23:68:fa:f8:4f:bb:b1: 04:11:a8:97:bd:eb:e4:85:b7:f8:6f:75:a9:93:a2:b2:10:fc: ca:0d:1a:a6:8b:eb:cc:38:1d:a8:a5:c2:1a:67:9a:8d:2d:e1: 48:c1:4d:f8:ad:ca:e6:ff:f6:0d:32:bd:ac:15:63:4d:38:2b: f8:1c:aa:ba:71:03:1a:90:1e:0a:5b:34:7a:5f:57:47:e5:cb: 73:eb:28:ec:1c:f6:f9:08:ab:7a:90:e8:87:25:96:2c:88:68: d0:ef:00:fd:8a:ea:d5:95:de:54:d5:7f:f6:65:1d:3a:92:08: bd:91:b4:16:02:ac:7f:ef:2f:6a:3b:c8:d1:13:95:2a:95:9f: 31:13:64:d3:13:3b:d9:bf:89:40:34:1c:68:01:d7:f9:74:3f: a5:89:78:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NIa4kqNTH/TcyzheLKihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjdhMzgyMzIyMjBmODRkY2FiNWQ5ZDdhZWYyYjE1ZDUxYzcxYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nSkWIrzTKHYw5/ayDcjpkIFaGOx uZl7XxVV9wDPG02jhr6qhWgwKhzjWUYJXSZg4RASIb35Rr+5iFsUy8s0Ex7c8eP8 sqoB0lnYrekFIbRhQR+duU+DWPP2gCQV/6YVoyMQL/gEJYYP1RgWnaHWmzIWPE2Y Xdd6LPnX5O1gfXevyF479jp19e/DtywjwbxiVn0StbdT3Brg+h1F42VBlLtYa/Z7 QnNFY+0nuDxOjulZKqbb6gAaho2t0QZbnVjl5b3XxTM3/wfA+43aRVPRRv6CCfgx 5PCGqoWKl6BUJCpMPmVtexd+FBrL/C0M9/rSVyxauf6WBykq0J4Jq1YG6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHt6OCMiIPhNyrXZ167ysV1RxxojMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZTNvNEl5SWctRTNLdGRuWHJ2S3hYVkhIR2lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg5MMA0G CSqGSIb3DQEBCwUAA4IBAQCDHERX/ZFSHrEQb8ZsCYs94E8SS234E3zdnVjdFc4K 3RA7fG9wp2xjMtEq60BGOmt8IrHQGYi/tjR7leC6ZTeKKj9l8K7uLdD4gaczRcf/ H7OCj8YFmgqfFExH99zSDz//S9XSIyNo+vhPu7EEEaiXvevkhbf4b3Wpk6KyEPzK DRqmi+vMOB2opcIaZ5qNLeFIwU34rcrm//YNMr2sFWNNOCv4HKq6cQMakB4KWzR6 X1dH5ctz6yjsHPb5CKt6kOiHJZYsiGjQ7wD9iurVld5U1X/2ZR06kgi9kbQWAqx/ 7y9qO8jRE5UqlZ8xE2TTEzvZv4lANBxoAdf5dD+liXjZ -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:43 2026 by rpki-client