This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/C3xZ11UfhI0GeWTbExlimKS-cZs.roa File: C3xZ11UfhI0GeWTbExlimKS-cZs.roa (raw, json) Hash identifier: xhykIG9PAX9cR5qhXwtefG/7lrssloObCNE0+5PnTIg= Subject key identifier: 0B:7C:59:D7:55:1F:84:8D:06:79:64:DB:13:19:62:98:A4:BE:71:9B Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Certificate serial: 019B7F8528823C066F259CFBF36778BA5B2E Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/C3xZ11UfhI0GeWTbExlimKS-cZs.roa Signing time: Fri 02 Jan 2026 16:23:11 +0000 ROA not before: Fri 02 Jan 2026 16:23:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 143.196.64.0/19 maxlen: 19 143.196.96.0/20 maxlen: 20 143.196.112.0/21 maxlen: 21 143.196.120.0/22 maxlen: 22 143.196.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:28:82:3c:06:6f:25:9c:fb:f3:67:78:ba:5b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6 Validity Not Before: Jan 2 16:23:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b7c59d7551f848d067964db13196298a4be719b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:e2:d2:10:28:e7:ac:40:61:4a:b2:f6:1d: d2:cb:80:73:38:9f:c2:5c:f1:61:43:3c:db:b0:15: 0e:ec:23:52:00:4d:c1:ec:b2:8a:13:85:14:5a:5d: ca:db:9a:9e:37:87:73:9c:86:67:73:72:bc:01:6a: 2d:3f:62:26:06:b4:85:cf:46:fd:3b:32:78:91:77: 6f:8e:7a:ec:6d:e3:48:b5:12:25:c9:b7:b1:c1:f3: af:24:01:66:a9:99:53:e0:4b:f6:8c:4e:03:11:ad: f5:73:24:62:a3:92:ec:c8:51:eb:5a:51:38:f1:98: 92:69:97:ec:f8:f3:b0:eb:ea:52:70:d9:8e:6d:58: 84:03:f6:c4:84:ea:6d:70:eb:ad:e6:01:36:b7:84: 27:81:f5:19:f0:8d:3f:64:d1:9f:0f:67:3a:91:9c: f3:f0:a4:46:6c:a4:93:ba:91:07:6b:55:80:16:fa: b1:61:b1:b1:da:05:a3:c6:78:3d:a4:22:b8:80:96: 18:59:e7:a4:93:89:7a:82:40:d6:be:d7:92:1b:5b: 73:fc:6a:5c:6f:d8:63:4c:d0:52:f9:6c:ac:6a:26: 57:7c:13:70:a0:87:c5:2a:1e:ae:cf:f2:6a:46:77: 47:28:15:a8:cf:df:6b:b5:e7:b4:40:08:ad:01:0a: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7C:59:D7:55:1F:84:8D:06:79:64:DB:13:19:62:98:A4:BE:71:9B X509v3 Authority Key Identifier: keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/C3xZ11UfhI0GeWTbExlimKS-cZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.196.64.0-143.196.123.255 143.196.191.0/24 Signature Algorithm: sha256WithRSAEncryption 05:b2:ec:39:8f:83:bf:3c:b3:17:a8:c7:78:31:59:36:55:0c: ff:84:70:11:e5:23:82:a2:eb:77:c6:0b:c0:e4:51:02:dc:c0: 8f:f9:96:55:01:36:3f:da:4c:ec:c3:6e:76:b4:b6:9e:f6:07: e0:0b:7a:2c:0e:bf:ef:36:79:00:7b:93:55:c1:5d:10:99:fa: a8:e9:43:74:35:3e:44:3f:c1:64:93:55:76:83:df:82:07:f7: f6:d3:bb:19:33:70:94:60:85:b4:d3:46:0b:01:f2:50:7d:a5: 53:89:80:f4:05:4e:88:ed:28:45:bf:e5:16:9f:4b:21:e7:62: 97:da:5c:86:9d:68:b5:bf:9c:b5:f4:1b:b4:b2:f6:39:40:42: f2:57:72:fd:ad:8b:2e:dc:f6:e8:b8:92:df:5a:b8:c9:0d:64: 81:a3:8c:12:f3:5c:d5:fb:11:47:3c:59:7a:78:fa:f3:7d:9e: 4d:bd:e9:17:f9:a2:98:25:5f:49:6d:2d:c6:e6:d5:66:a2:00: f0:fb:ff:db:9c:1a:d1:cc:d6:15:14:84:2b:b6:cb:6b:07:8a: a4:6e:c6:86:52:24:31:ed:85:2f:20:08:03:d0:5a:37:bd:03: 89:bd:7e:d7:6a:38:9f:7e:e5:01:bd:e2:87:32:4b:db:7c:f9: c4:b7:6b:a9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/hSiCPAZvJZz782d4ulsuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWJkMTQwMjkyNGVjMmE2NDRlOGY1NGU2OTk0Y2I0YWM4 ZTI0YTYwHhcNMjYwMTAyMTYyMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjdjNTlkNzU1MWY4NDhkMDY3OTY0ZGIxMzE5NjI5OGE0YmU3MTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ3i0hAo56xAYUqy9h3Sy4BzOJ/C XPFhQzzbsBUO7CNSAE3B7LKKE4UUWl3K25qeN4dznIZnc3K8AWotP2ImBrSFz0b9 OzJ4kXdvjnrsbeNItRIlybexwfOvJAFmqZlT4Ev2jE4DEa31cyRio5LsyFHrWlE4 8ZiSaZfs+POw6+pScNmObViEA/bEhOptcOut5gE2t4QngfUZ8I0/ZNGfD2c6kZzz 8KRGbKSTupEHa1WAFvqxYbGx2gWjxng9pCK4gJYYWeekk4l6gkDWvteSG1tz/Gpc b9hjTNBS+WysaiZXfBNwoIfFKh6uz/JqRndHKBWoz99rtee0QAitAQpPaQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAt8WddVH4SNBnlk2xMZYpikvnGbMB8GA1UdIwQY MBaAFIgb0UApJOwqZE6PVOaZTLSsjiSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMt N2EwYjE0NWNmNjJiLzEvQzN4WjExVWZoSTBHZVdUYkV4bGltS1MtY1pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMtN2EwYjE0NWNmNjJi LzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAaPxEAD BAKPxHgDBACPxL8wDQYJKoZIhvcNAQELBQADggEBAAWy7DmPg788sxeox3gxWTZV DP+EcBHlI4Ki63fGC8DkUQLcwI/5llUBNj/aTOzDbna0tp72B+ALeiwOv+82eQB7 k1XBXRCZ+qjpQ3Q1PkQ/wWSTVXaD34IH9/bTuxkzcJRghbTTRgsB8lB9pVOJgPQF TojtKEW/5RafSyHnYpfaXIadaLW/nLX0G7Sy9jlAQvJXcv2tiy7c9ui4kt9auMkN ZIGjjBLzXNX7EUc8WXp4+vN9nk296Rf5opglX0ltLcbm1WaiAPD7/9ucGtHM1hUU hCu2y2sHiqRuxoZSJDHthS8gCAPQWje9A4m9ftdqOJ9+5QG94ocyS9t8+cS3a6k= -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:54 2026 by rpki-client