This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/3kSbU0e5h99O_Tm79lGnT_Tp5Hc.roa File: 3kSbU0e5h99O_Tm79lGnT_Tp5Hc.roa (raw, json) Hash identifier: RwQ/Qy1kKylc45gWPZOazTOGnIJ82QduJgu3sQQqwXY= Subject key identifier: DE:44:9B:53:47:B9:87:DF:4E:FD:39:BB:F6:51:A7:4F:F4:E9:E4:77 Certificate issuer: /CN=9d31c233cbd266db02620b9deb90d08e41692e67 Certificate serial: 019B7BA396FDC7E2C21416DBF5DED304743A Authority key identifier: 9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/3kSbU0e5h99O_Tm79lGnT_Tp5Hc.roa Signing time: Thu 01 Jan 2026 22:17:57 +0000 ROA not before: Thu 01 Jan 2026 22:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.124.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:96:fd:c7:e2:c2:14:16:db:f5:de:d3:04:74:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d31c233cbd266db02620b9deb90d08e41692e67 Validity Not Before: Jan 1 22:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de449b5347b987df4efd39bbf651a74ff4e9e477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:d6:ca:20:32:69:c7:41:be:84:b2:26:25: cc:37:98:46:b8:5e:ea:85:7c:e3:44:f4:e3:f8:fc: f2:c6:6e:b5:60:78:de:76:76:d8:fa:a3:70:f9:91: 9c:f8:54:ec:c4:32:6d:63:ca:6e:a4:86:ae:b5:f0: 0d:23:d0:cb:f9:dc:98:aa:10:5b:e1:24:f7:8e:58: 24:40:c9:71:00:3f:2d:85:09:8e:24:1e:73:c7:5a: ff:e1:76:7f:da:a9:c7:59:f5:8b:eb:fe:dd:f0:a7: 78:47:59:95:09:70:57:d0:b0:67:77:67:40:16:01: 3f:8d:04:42:04:f9:60:e9:35:c5:52:3d:d2:a5:2c: ea:32:c3:64:7b:bd:8c:6e:c1:7b:df:76:8e:93:20: 51:e8:72:0e:e1:3c:86:35:83:96:50:98:a0:4c:ff: 9e:ee:1f:88:fb:b1:82:bb:d7:89:93:57:eb:51:3b: bd:6c:38:f7:e4:78:3c:25:79:a9:1b:77:c2:2a:b3: 87:d0:64:cc:23:f8:17:66:79:fb:2c:22:c7:2c:13: 96:67:60:05:2c:54:d7:c3:69:f4:b6:a2:0e:ef:35: da:55:82:fa:22:32:e9:91:e2:c6:1f:60:e5:6e:be: 13:6d:e3:e3:1c:49:e8:3e:a0:b0:8b:f7:0b:e0:18: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:44:9B:53:47:B9:87:DF:4E:FD:39:BB:F6:51:A7:4F:F4:E9:E4:77 X509v3 Authority Key Identifier: keyid:9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/3kSbU0e5h99O_Tm79lGnT_Tp5Hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.243.0/24 Signature Algorithm: sha256WithRSAEncryption 57:29:b2:a8:17:fa:2d:05:fd:2c:12:df:02:a7:0e:c5:a7:de: 46:41:3a:8d:e2:90:d5:55:b1:ac:d6:ee:13:c5:09:b8:33:9c: f8:00:3c:49:1d:c1:ad:6b:a5:89:d0:3b:55:da:5b:76:6b:58: e7:bf:20:72:fd:0e:00:e3:b7:7c:93:5b:af:e9:c2:93:af:2b: 5c:1f:35:2f:63:ed:61:a8:35:d1:99:99:ba:a9:e0:bb:1c:43: 0d:b8:17:8d:d3:25:03:93:89:0c:3b:f4:36:f2:d5:8c:d8:5a: 94:b5:fa:8b:ad:6d:d2:e3:44:4b:3e:e4:15:97:db:90:dd:3d: ab:f0:7a:e7:e0:f6:f9:5c:93:3b:85:76:08:2c:03:f6:b9:7f: 52:09:a9:cf:d6:86:51:ac:db:1a:d5:9d:b8:7c:d4:3a:3a:fe: f9:cd:c6:ab:07:9a:4b:72:a5:b5:8b:66:05:b6:c4:66:f1:1f: 5a:55:f4:00:1e:8d:e5:aa:15:0a:4d:f1:f0:07:b6:cf:de:cd: b9:3b:26:d6:30:71:cb:14:5a:cd:94:ae:10:7d:60:2b:67:49: b0:3f:e0:ea:c2:7c:4f:a1:02:42:10:fd:be:a1:85:a2:8f:36: 18:72:ec:03:a6:d6:f6:79:44:26:28:fc:ec:5d:03:d8:f2:4f: f4:cf:7e:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o5b9x+LCFBbb9d7TBHQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMzFjMjMzY2JkMjY2ZGIwMjYyMGI5ZGViOTBkMDhlNDE2 OTJlNjcwHhcNMjYwMTAxMjIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTQ0OWI1MzQ3Yjk4N2RmNGVmZDM5YmJmNjUxYTc0ZmY0ZTllNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBfWyiAyacdBvoSyJiXMN5hGuF7q hXzjRPTj+Pzyxm61YHjednbY+qNw+ZGc+FTsxDJtY8pupIautfANI9DL+dyYqhBb 4ST3jlgkQMlxAD8thQmOJB5zx1r/4XZ/2qnHWfWL6/7d8Kd4R1mVCXBX0LBnd2dA FgE/jQRCBPlg6TXFUj3SpSzqMsNke72MbsF733aOkyBR6HIO4TyGNYOWUJigTP+e 7h+I+7GCu9eJk1frUTu9bDj35Hg8JXmpG3fCKrOH0GTMI/gXZnn7LCLHLBOWZ2AF LFTXw2n0tqIO7zXaVYL6IjLpkeLGH2Dlbr4TbePjHEnoPqCwi/cL4Bg3vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5Em1NHuYffTv05u/ZRp0/06eR3MB8GA1UdIwQY MBaAFJ0xwjPL0mbbAmILneuQ0I5BaS5nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRIQ004dlNadHNDWWd1ZDY1RFFqa0ZwTG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zNDIyM2EtZTc3ZS00NTQ0LWEyMDct ZmExNzI1MDM0NDkxLzEvM2tTYlUwZTVoOTlPX1RtNzlsR25UX1RwNUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zNDIyM2EtZTc3ZS00NTQ0LWEyMDctZmExNzI1MDM0NDkx LzEvblRIQ004dlNadHNDWWd1ZDY1RFFqa0ZwTG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnzzMA0G CSqGSIb3DQEBCwUAA4IBAQBXKbKoF/otBf0sEt8Cpw7Fp95GQTqN4pDVVbGs1u4T xQm4M5z4ADxJHcGta6WJ0DtV2lt2a1jnvyBy/Q4A47d8k1uv6cKTrytcHzUvY+1h qDXRmZm6qeC7HEMNuBeN0yUDk4kMO/Q28tWM2FqUtfqLrW3S40RLPuQVl9uQ3T2r 8Hrn4Pb5XJM7hXYILAP2uX9SCanP1oZRrNsa1Z24fNQ6Ov75zcarB5pLcqW1i2YF tsRm8R9aVfQAHo3lqhUKTfHwB7bP3s25OybWMHHLFFrNlK4QfWArZ0mwP+DqwnxP oQJCEP2+oYWijzYYcuwDptb2eUQmKPzsXQPY8k/0z35H -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:28 2026 by rpki-client