This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/3KARvcQJLBK_AN72q-v-VXBedTc.roa File: 3KARvcQJLBK_AN72q-v-VXBedTc.roa (raw, json) Hash identifier: QFK7Ue4or8LMr7VexDK6GWjCaMT28dD7LoXQN+qlc8A= Subject key identifier: DC:A0:11:BD:C4:09:2C:12:BF:00:DE:F6:AB:EB:FE:55:70:5E:75:37 Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556 Certificate serial: 019B77591C7E1F4BE6F7D414EE525F8F0645 Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/3KARvcQJLBK_AN72q-v-VXBedTc.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31017 IP address blocks: 194.102.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1c:7e:1f:4b:e6:f7:d4:14:ee:52:5f:8f:06:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dca011bdc4092c12bf00def6abebfe55705e7537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:67:7c:93:be:1b:98:27:32:e6:43:f6:22:a4: 13:ad:29:b7:68:75:2d:ef:05:bc:12:b7:fb:5f:9e: b0:00:df:49:f0:f8:e0:69:41:fe:60:b8:56:f2:81: 72:91:4d:50:fa:a2:4c:06:31:82:33:ca:8c:85:72: 94:db:f2:a2:5a:d0:de:bf:6c:29:eb:02:fd:01:e6: e4:e9:9e:0a:5e:d2:df:f0:f3:ac:76:02:fc:a3:3d: f4:c8:71:39:00:8d:b4:e7:48:ea:24:34:8d:c0:8b: 8c:64:a3:72:f3:de:33:20:9b:ae:d7:63:74:5d:77: 93:55:f0:60:a4:41:16:76:1f:f2:17:ad:8d:e3:aa: 20:d6:ca:6c:74:a8:6c:da:a4:72:83:a3:0f:cc:44: fe:9e:b9:c5:22:07:ed:80:2f:84:58:99:b4:bc:7d: 6f:28:31:ff:54:26:4f:7a:26:23:e9:eb:4b:33:69: 39:81:a7:45:fd:5d:c1:c3:93:e6:c5:10:af:38:18: 99:d2:96:90:cd:92:05:ac:85:95:01:2c:68:72:4f: 39:90:f0:66:66:11:91:a0:e5:95:3f:9f:25:1e:4a: 1a:71:67:74:f4:bb:11:61:3d:f5:b8:e8:89:69:1d: c6:07:44:31:59:e5:ef:e2:74:60:7e:d4:7b:54:9b: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A0:11:BD:C4:09:2C:12:BF:00:DE:F6:AB:EB:FE:55:70:5E:75:37 X509v3 Authority Key Identifier: keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/3KARvcQJLBK_AN72q-v-VXBedTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.194.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:bf:6e:b0:73:1d:8f:71:67:66:16:fd:6b:73:ac:00:b8:28: 8c:69:91:7a:91:67:53:88:65:6f:be:ec:3b:83:27:95:4c:22: 3e:6f:6b:53:a7:4f:57:93:4c:81:d4:66:99:eb:38:59:7b:20: de:62:a9:c9:e8:ac:bf:2d:64:53:0d:ef:d0:a1:76:d2:a2:6b: 1f:1d:a2:5d:85:72:d0:8f:6b:8b:cd:7b:3a:20:5a:ff:d4:a3: 47:7a:1e:ab:12:a7:05:30:52:04:06:0e:7c:87:3c:02:91:9a: 19:09:6a:87:7d:03:eb:d8:f8:3f:19:a9:83:cd:80:bf:33:79: 49:b1:e6:93:c0:c8:95:ed:92:3b:46:cc:ae:ce:c7:53:90:53: 60:ea:e2:bc:af:65:f1:16:98:0e:01:4c:14:60:b5:69:46:f5: 25:74:38:59:5b:d0:f5:d5:20:66:aa:fa:f8:55:fc:ae:0f:34: 80:f6:b0:c8:9a:e6:5c:14:df:5e:de:ed:e0:80:1f:21:51:00: 75:75:99:8a:5b:55:2b:52:99:6c:cb:2b:04:9f:56:5d:3a:41: 86:15:3e:18:df:ef:c8:87:7b:a0:88:75:3b:0e:b3:34:a2:7f: f2:1d:a2:06:1f:a8:a4:72:59:18:ab:96:89:a3:b3:86:31:9d: 9d:a6:a7:91 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WRx+H0vm99QU7lJfjwZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OTUxYmE1NjMyOTMyM2I0YzYwZjYyMGQ2YTczOTFlNzA3 YjU1NTYwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2EwMTFiZGM0MDkyYzEyYmYwMGRlZjZhYmViZmU1NTcwNWU3NTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9md8k74bmCcy5kP2IqQTrSm3aHUt 7wW8Erf7X56wAN9J8PjgaUH+YLhW8oFykU1Q+qJMBjGCM8qMhXKU2/KiWtDev2wp 6wL9Aebk6Z4KXtLf8POsdgL8oz30yHE5AI2050jqJDSNwIuMZKNy894zIJuu12N0 XXeTVfBgpEEWdh/yF62N46og1spsdKhs2qRyg6MPzET+nrnFIgftgC+EWJm0vH1v KDH/VCZPeiYj6etLM2k5gadF/V3Bw5PmxRCvOBiZ0paQzZIFrIWVASxock85kPBm ZhGRoOWVP58lHkoacWd09LsRYT31uOiJaR3GB0QxWeXv4nRgftR7VJty7QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNygEb3ECSwSvwDe9qvr/lVwXnU3MB8GA1UdIwQY MBaAFPmVG6VjKTI7TGD2INanOR5we1VWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1aVWJwV01wTWp0TVlQWWcxcWM1SG5CN1ZWWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvOGY1Y2JkLWY1MzktNGZmZi1iNDJm LTQ3NDVkN2NkOTNmMS8xLzNLQVJ2Y1FKTEJLX0FONzJxLXYtVlhCZWRUYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWQvOGY1Y2JkLWY1MzktNGZmZi1iNDJmLTQ3NDVkN2NkOTNm MS8xLzEtWlVicFdNcE1qdE1ZUFlnMXFjNUhuQjdWVlkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCZsIw DQYJKoZIhvcNAQELBQADggEBAHu/brBzHY9xZ2YW/WtzrAC4KIxpkXqRZ1OIZW++ 7DuDJ5VMIj5va1OnT1eTTIHUZpnrOFl7IN5iqcnorL8tZFMN79ChdtKiax8dol2F ctCPa4vNezogWv/Uo0d6HqsSpwUwUgQGDnyHPAKRmhkJaod9A+vY+D8ZqYPNgL8z eUmx5pPAyJXtkjtGzK7Ox1OQU2Dq4ryvZfEWmA4BTBRgtWlG9SV0OFlb0PXVIGaq +vhV/K4PNID2sMia5lwU317e7eCAHyFRAHV1mYpbVStSmWzLKwSfVl06QYYVPhjf 78iHe6CIdTsOszSif/IdogYfqKRyWRirlomjs4YxnZ2mp5E= -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:39 2026 by rpki-client