This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa File: E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa (raw, json) Hash identifier: xKw3RbXtT8VE14RlLt8v3dsDM7RBw/rthN/HKkMsh3k= Subject key identifier: 13:4D:37:AA:02:78:23:DA:AF:1A:56:3B:07:55:CF:A7:4B:B4:32:54 Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b Certificate serial: 019B7C801061ED6610BA46BEC8B15746AF8A Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13243 IP address blocks: 62.148.32.0/19 maxlen: 19 77.94.232.0/21 maxlen: 21 146.192.128.0/17 maxlen: 17 185.226.100.0/22 maxlen: 22 193.36.191.0/24 maxlen: 24 195.245.202.0/24 maxlen: 24 195.254.192.0/19 maxlen: 19 217.18.192.0/20 maxlen: 20 2a00:ef8::/32 maxlen: 32 2a00:97c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:10:61:ed:66:10:ba:46:be:c8:b1:57:46:af:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=134d37aa027823daaf1a563b0755cfa74bb43254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:aa:5b:c9:26:f4:94:91:cf:4f:cf:08:2c:4d: 90:84:ce:6c:bd:70:d1:b4:82:c2:8e:76:26:fb:b0: 8a:e6:d2:b7:f6:52:d8:31:73:42:06:07:fd:4b:28: 65:f7:fb:f9:83:f8:54:7e:32:e0:1d:ae:30:73:26: e7:09:97:c8:2a:66:9b:e8:2f:cd:91:b2:f6:c1:32: 00:c5:c6:6a:eb:c6:37:0d:b1:e3:4e:ba:96:33:ca: e2:78:21:d2:c2:b5:9a:55:5a:7d:46:a0:91:48:35: 93:4f:f3:de:c7:42:a2:85:db:9d:91:da:c7:60:a1: 79:ab:c2:b5:a1:bf:45:36:98:6a:40:a9:a7:51:e4: 3f:6c:fb:aa:b8:94:8a:20:28:c4:52:ae:ef:64:e0: 4c:2b:dc:6b:6a:4e:b7:56:ce:da:ab:43:5c:51:06: 30:50:a1:cc:1f:be:c6:52:c0:2a:73:5b:b2:ee:c8: fe:4a:c5:60:67:78:b6:2d:33:14:16:29:cc:26:39: 25:70:c1:42:0d:4e:6d:16:04:25:98:49:39:d2:cf: 2a:ff:a0:0e:c2:1f:23:7b:06:36:a7:1a:40:68:6c: e0:d5:62:d2:de:82:10:b4:f5:a1:3d:50:d7:7f:d6: ee:f4:6b:36:2e:63:6e:ec:32:37:3c:1e:43:55:ad: 23:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4D:37:AA:02:78:23:DA:AF:1A:56:3B:07:55:CF:A7:4B:B4:32:54 X509v3 Authority Key Identifier: keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.148.32.0/19 77.94.232.0/21 146.192.128.0/17 185.226.100.0/22 193.36.191.0/24 195.245.202.0/24 195.254.192.0/19 217.18.192.0/20 IPv6: 2a00:ef8::/32 2a00:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:67:26:60:fa:31:53:1d:39:4b:d3:15:04:61:b8:8f:db:13: 45:8d:6c:04:b5:42:56:da:35:14:ee:8e:bc:fb:f2:4d:52:55: bb:eb:19:93:97:c3:e3:b1:ae:35:9d:6a:51:f4:c4:69:00:35: ec:bd:43:cf:e3:a9:e3:c4:78:99:22:f7:12:92:99:59:25:5e: 08:ed:e7:d5:43:d2:2f:e4:65:8a:c1:1f:b4:90:40:a9:7f:38: 1b:cb:94:d2:14:17:89:8f:13:62:35:2f:88:93:00:0a:bd:3b: 44:92:c3:67:3b:de:1b:f1:f9:c9:bf:47:ba:1e:36:72:16:f6: 69:ce:65:91:9e:d2:e9:fe:17:32:64:89:7c:81:5e:9c:6c:9f: 98:ba:31:65:e7:90:03:26:3f:5b:f1:7e:6e:b0:0b:9a:76:87: 02:e4:e9:4d:d3:55:a2:a4:62:33:dd:63:47:7f:4a:bf:f6:b6: 13:a9:a9:09:eb:45:b0:df:97:2b:bb:09:99:d1:31:e8:d4:b6: b5:7c:50:a6:6e:88:1e:42:31:ad:27:91:ab:16:4a:d5:3c:14: 9a:66:2c:ca:c6:b7:23:ed:d3:4f:bd:98:26:01:fc:4f:6a:f4: 22:58:ed:91:26:6f:96:f7:1f:ad:ee:57:98:8c:1d:34:42:b0: 35:7d:f6:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt8gBBh7WYQuka+yLFXRq+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MjFiYTRiNTM5MTYyZDdlZjE5MWE1NjYyMDQ5ZTUxZmRj MzYyMmIwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzRkMzdhYTAyNzgyM2RhYWYxYTU2M2IwNzU1Y2ZhNzRiYjQzMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36pbySb0lJHPT88ILE2QhM5svXDR tILCjnYm+7CK5tK39lLYMXNCBgf9Syhl9/v5g/hUfjLgHa4wcybnCZfIKmab6C/N kbL2wTIAxcZq68Y3DbHjTrqWM8rieCHSwrWaVVp9RqCRSDWTT/Pex0KihdudkdrH YKF5q8K1ob9FNphqQKmnUeQ/bPuquJSKICjEUq7vZOBMK9xrak63Vs7aq0NcUQYw UKHMH77GUsAqc1uy7sj+SsVgZ3i2LTMUFinMJjklcMFCDU5tFgQlmEk50s8q/6AO wh8jewY2pxpAaGzg1WLS3oIQtPWhPVDXf9bu9Gs2LmNu7DI3PB5DVa0jrQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFBNNN6oCeCParxpWOwdVz6dLtDJUMB8GA1UdIwQY MBaAFFQhuktTkWLX7xkaVmIEnlH9w2IrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUt ZWYwNjNlNzg2ZTU0LzEvRTAwM3FnSjRJOXF2R2xZN0IxWFBwMHUwTWxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUtZWYwNjNlNzg2ZTU0 LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQFPpQgAwQD TV7oAwQHksCAAwQCueJkAwQAwSS/AwQAw/XKAwQFw/7AAwQE2RLAMBQEAgACMA4D BQAqAA74AwUAKgCXwDANBgkqhkiG9w0BAQsFAAOCAQEAm2cmYPoxUx05S9MVBGG4 j9sTRY1sBLVCVto1FO6OvPvyTVJVu+sZk5fD47GuNZ1qUfTEaQA17L1Dz+Op48R4 mSL3EpKZWSVeCO3n1UPSL+RlisEftJBAqX84G8uU0hQXiY8TYjUviJMACr07RJLD ZzveG/H5yb9Huh42chb2ac5lkZ7S6f4XMmSJfIFenGyfmLoxZeeQAyY/W/F+brAL mnaHAuTpTdNVoqRiM91jR39Kv/a2E6mpCetFsN+XK7sJmdEx6NS2tXxQpm6IHkIx rSeRqxZK1TwUmmYsysa3I+3TT72YJgH8T2r0IljtkSZvlvcfre5XmIwdNEKwNX32 PQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:20:32 2026 by rpki-client