This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa File: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (raw, json) Hash identifier: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg= Subject key identifier: 4B:7C:63:4B:08:DA:C8:65:90:6E:B8:9F:82:C0:B9:1B:B4:A1:D1:78 Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Certificate serial: 019B7CEE220CA7387DEC6AEE70A5DBD7A3C3 Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.223.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:22:0c:a7:38:7d:ec:6a:ee:70:a5:db:d7:a3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b7c634b08dac865906eb89f82c0b91bb4a1d178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:ec:e4:2a:2e:94:d0:b5:f7:b9:c8:fd:d1: 9d:9a:5e:b8:30:3f:93:a9:18:b0:38:a1:da:04:04: 93:87:72:24:53:5e:f5:5b:8f:f1:79:b4:b6:9d:00: bd:94:38:f0:5e:a9:c6:f5:23:0c:81:eb:cb:cf:13: f9:de:5f:4f:f9:96:d2:d9:0c:20:0a:ff:f3:ff:e3: f0:8b:0f:4b:dd:93:64:61:e3:df:9e:b9:4c:83:8b: 07:9a:f3:05:25:ec:34:d7:4a:d3:0a:d4:b3:38:b1: dd:88:fb:1a:b1:61:cb:b3:50:77:87:1b:0f:dc:d0: c3:da:0e:32:68:e0:34:3c:c5:8e:f7:2d:23:f4:81: 78:80:c5:b2:51:d1:e0:f4:87:53:c3:7d:9d:29:2e: 5c:5d:f6:b5:b1:12:99:24:76:d8:9d:89:10:20:fb: 33:13:95:bd:bf:0d:6d:a6:41:ed:31:a0:b6:c6:2f: c6:41:43:6d:be:65:ea:94:65:8a:5d:19:ea:ba:6d: 10:b5:4b:21:37:b4:a8:25:ca:fc:b4:f5:89:1c:d9: c3:6f:6a:37:f3:28:39:fa:5c:68:81:74:e4:60:bb: 59:5f:ee:15:f1:ae:31:1f:3d:8c:51:b5:66:fb:84: d4:d5:51:7f:8a:b7:55:ca:54:30:ce:21:9a:70:ed: 2d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:63:4B:08:DA:C8:65:90:6E:B8:9F:82:C0:B9:1B:B4:A1:D1:78 X509v3 Authority Key Identifier: keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.102.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:0d:6d:71:5f:78:ef:9b:c5:45:42:89:bd:cf:c4:31:67:ad: f0:3c:2c:32:3c:4d:bc:d1:46:cb:c2:0f:f0:cf:92:ed:b6:91: 45:f1:44:a1:6e:5d:fe:92:10:97:e4:09:fe:2d:4c:e6:3e:e0: 2f:e7:a8:80:56:14:50:52:7f:62:db:ab:f7:c1:3b:65:7a:29: e7:66:52:66:5f:57:d2:13:a9:ac:8f:bc:b7:a3:0e:fb:c6:51: df:d3:6e:1f:94:69:c3:1d:1c:2a:5a:ef:f2:89:af:93:1c:ff: ca:98:35:8a:7a:63:95:0e:5a:fc:45:5f:d6:a0:b5:54:ab:0c: f2:16:22:b3:c4:f7:8e:70:d7:e7:84:9c:1f:14:49:f3:fd:ec: b3:bc:b2:e8:d5:62:e2:3d:b5:d7:3d:69:52:b0:ab:61:c7:b1: 68:f8:92:22:1e:da:8f:d4:47:33:5d:9d:5f:73:07:f8:be:66: c2:2e:32:da:6b:85:c9:75:02:12:2f:db:a4:d7:ca:f4:3b:aa: e6:31:df:92:91:82:c1:3a:95:e6:ee:be:22:d7:fe:d3:8f:b7: 64:cf:4f:ee:ce:a5:7d:94:de:96:f9:21:25:4b:1e:94:a0:9d: 32:d6:95:88:dd:77:08:48:89:ab:44:d0:29:ac:66:e3:22:83: d0:2b:f2:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iIMpzh97GrucKXb16PDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy Nzc5YTgwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjdjNjM0YjA4ZGFjODY1OTA2ZWI4OWY4MmMwYjkxYmI0YTFkMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Ps5CoulNC197nI/dGdml64MD+T qRiwOKHaBASTh3IkU171W4/xebS2nQC9lDjwXqnG9SMMgevLzxP53l9P+ZbS2Qwg Cv/z/+Pwiw9L3ZNkYePfnrlMg4sHmvMFJew010rTCtSzOLHdiPsasWHLs1B3hxsP 3NDD2g4yaOA0PMWO9y0j9IF4gMWyUdHg9IdTw32dKS5cXfa1sRKZJHbYnYkQIPsz E5W9vw1tpkHtMaC2xi/GQUNtvmXqlGWKXRnqum0QtUshN7SoJcr8tPWJHNnDb2o3 8yg5+lxogXTkYLtZX+4V8a4xHz2MUbVm+4TU1VF/irdVylQwziGacO0tqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEt8Y0sI2shlkG64n4LAuRu0odF4MB8GA1UdIwQY MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt NmY2YzZjODIxNzgxLzEvUzN4alN3amF5R1dRYnJpZmdzQzVHN1NoMFhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd9mMA0G CSqGSIb3DQEBCwUAA4IBAQAKDW1xX3jvm8VFQom9z8QxZ63wPCwyPE280UbLwg/w z5LttpFF8UShbl3+khCX5An+LUzmPuAv56iAVhRQUn9i26v3wTtleinnZlJmX1fS E6msj7y3ow77xlHf024flGnDHRwqWu/yia+THP/KmDWKemOVDlr8RV/WoLVUqwzy FiKzxPeOcNfnhJwfFEnz/eyzvLLo1WLiPbXXPWlSsKthx7Fo+JIiHtqP1EczXZ1f cwf4vmbCLjLaa4XJdQISL9uk18r0O6rmMd+SkYLBOpXm7r4i1/7Tj7dkz0/uzqV9 lN6W+SElSx6UoJ0y1pWI3XcISImrRNAprGbjIoPQK/IJ -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:23 2026 by rpki-client