This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/t_3KExq4t288IjtqVXAOQe_Eba8.roa File: t_3KExq4t288IjtqVXAOQe_Eba8.roa (raw, json) Hash identifier: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs= Subject key identifier: B7:FD:CA:13:1A:B8:B7:6F:3C:22:3B:6A:55:70:0E:41:EF:C4:6D:AF Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108 Certificate serial: 019B7834DB1E8B7B238FA091FBEDDD2750B0 Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/t_3KExq4t288IjtqVXAOQe_Eba8.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213274 IP address blocks: 193.162.43.0/24 maxlen: 24 2a0f:cb00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:db:1e:8b:7b:23:8f:a0:91:fb:ed:dd:27:50:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7fdca131ab8b76f3c223b6a55700e41efc46daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:43:a6:66:40:33:9b:4f:d2:04:f9:25:1a:bc: 24:7b:34:21:a8:de:50:78:d9:c0:07:af:52:3a:cf: ea:88:c1:54:35:9e:e3:21:f8:1a:95:b9:b1:f9:87: d5:5a:4c:93:91:67:0c:f7:f3:fa:82:c6:2d:54:70: b0:c4:26:4f:fb:3b:a7:57:3a:c6:60:6e:95:73:c1: 9d:6f:ad:56:14:21:07:d2:ea:83:69:1e:f3:eb:c9: 71:45:4f:13:ea:34:a9:29:73:ec:c2:fd:a5:32:f9: e2:1b:a8:18:ec:ca:3a:58:34:af:00:2a:41:ff:aa: cc:b3:8d:3e:ea:c7:cb:dc:04:38:90:0b:b2:77:15: 9e:08:c9:4d:be:74:a5:dd:28:7a:57:df:37:28:14: 67:54:55:46:95:d8:c7:f2:34:bb:cd:fd:4c:11:1b: 30:24:5b:95:01:67:06:78:c0:6a:5c:bf:88:b0:e6: 6f:45:cc:0c:df:f7:b5:6e:c2:0c:8e:f0:ac:cc:f3: 2b:a3:da:ae:a2:53:c5:0f:2d:6d:ba:66:67:82:1a: 6f:11:14:74:7b:4e:6d:54:45:36:59:3c:ed:ff:4c: 9f:0b:62:99:a6:39:8d:fe:9a:00:cb:2b:0c:51:5e: 30:6f:f7:0d:6a:6d:8c:e4:c7:4d:87:21:6c:d8:e4: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FD:CA:13:1A:B8:B7:6F:3C:22:3B:6A:55:70:0E:41:EF:C4:6D:AF X509v3 Authority Key Identifier: keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/t_3KExq4t288IjtqVXAOQe_Eba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.162.43.0/24 IPv6: 2a0f:cb00::/29 Signature Algorithm: sha256WithRSAEncryption 31:9e:e3:bc:7f:1c:43:d8:0b:40:e6:e2:e7:82:6b:0e:9c:b3: 99:62:57:f8:85:7c:e9:c9:6d:bf:11:32:ef:08:41:02:a4:78: 85:da:ce:ef:04:e2:6a:5a:da:b4:6b:39:af:6b:39:18:59:45: 00:19:c2:8b:a9:87:be:5b:49:9e:4d:be:a7:f5:db:07:45:2f: 5b:ba:1b:e6:cb:0a:9d:a9:a8:4a:e8:c0:8e:68:b3:cb:db:97: 9a:1d:5f:fd:68:38:7e:2a:49:ca:32:6f:ec:5c:77:a3:56:af: ac:e3:0e:c0:8e:3b:41:6b:87:4c:0d:37:9d:2b:78:3d:e1:b6: 76:cc:4a:09:b5:e5:55:ba:5a:5c:b8:18:5c:04:b9:00:24:9a: 64:c9:c3:3c:76:cd:c5:7f:d8:9a:e7:a7:ba:4d:18:68:ff:7f: 18:97:49:03:2b:b2:be:5e:2f:09:38:6d:1c:98:99:98:8a:ab: 1b:48:49:05:dc:e8:26:4c:3b:92:f1:9d:db:e2:e7:cc:a5:af: c5:d8:f5:9e:84:c6:6c:bb:8e:58:f2:03:a0:c0:d8:b7:a5:cc: a0:1e:92:32:fb:0c:2e:9f:e5:59:9b:27:42:1a:32:76:d7:1a: 56:8c:09:c2:3a:d9:fa:4f:1a:33:de:f9:a4:21:83:0a:0d:f6: d3:47:ee:97 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NNsei3sjj6CR++3dJ1CwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDFmMWY4YjQxZDc0ZjdkODY2YjFlNWFkZmQxOGFmZTIw MjcxMDgwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2ZkY2ExMzFhYjhiNzZmM2MyMjNiNmE1NTcwMGU0MWVmYzQ2ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50OmZkAzm0/SBPklGrwkezQhqN5Q eNnAB69SOs/qiMFUNZ7jIfgalbmx+YfVWkyTkWcM9/P6gsYtVHCwxCZP+zunVzrG YG6Vc8Gdb61WFCEH0uqDaR7z68lxRU8T6jSpKXPswv2lMvniG6gY7Mo6WDSvACpB /6rMs40+6sfL3AQ4kAuydxWeCMlNvnSl3Sh6V983KBRnVFVGldjH8jS7zf1MERsw JFuVAWcGeMBqXL+IsOZvRcwM3/e1bsIMjvCszPMro9quolPFDy1tumZnghpvERR0 e05tVEU2WTzt/0yfC2KZpjmN/poAyysMUV4wb/cNam2M5MdNhyFs2OQmnwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLf9yhMauLdvPCI7alVwDkHvxG2vMB8GA1UdIwQY MBaAFAjR8fi0HXT32Gax5a39GK/iAnEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmIt ZGY1Y2I5ZjBlM2E0LzEvdF8zS0V4cTR0Mjg4SWp0cVZYQU9RZV9FYmE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmItZGY1Y2I5ZjBlM2E0 LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaIrMA0E AgACMAcDBQMqD8sAMA0GCSqGSIb3DQEBCwUAA4IBAQAxnuO8fxxD2AtA5uLngmsO nLOZYlf4hXzpyW2/ETLvCEECpHiF2s7vBOJqWtq0azmvazkYWUUAGcKLqYe+W0me Tb6n9dsHRS9buhvmywqdqahK6MCOaLPL25eaHV/9aDh+KknKMm/sXHejVq+s4w7A jjtBa4dMDTedK3g94bZ2zEoJteVVulpcuBhcBLkAJJpkycM8ds3Ff9ia56e6TRho /38Yl0kDK7K+Xi8JOG0cmJmYiqsbSEkF3OgmTDuS8Z3b4ufMpa/F2PWehMZsu45Y 8gOgwNi3pcygHpIy+wwun+VZmydCGjJ21xpWjAnCOtn6Txoz3vmkIYMKDfbTR+6X -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:30 2026 by rpki-client