This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/3OuolTqmnVs6LtXiOd0QS9vfCo8.roa File: 3OuolTqmnVs6LtXiOd0QS9vfCo8.roa (raw, json) Hash identifier: GAosGByG2yWB3lnHWPHloQDBkOxUHG7WW4iZIv6/8iA= Subject key identifier: DC:EB:A8:95:3A:A6:9D:5B:3A:2E:D5:E2:39:DD:10:4B:DB:DF:0A:8F Certificate issuer: /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14 Certificate serial: 019B7FF29B506FC8A98E0975FD94376024C9 Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/3OuolTqmnVs6LtXiOd0QS9vfCo8.roa Signing time: Fri 02 Jan 2026 18:22:44 +0000 ROA not before: Fri 02 Jan 2026 18:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209836 IP address blocks: 77.237.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:9b:50:6f:c8:a9:8e:09:75:fd:94:37:60:24:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14 Validity Not Before: Jan 2 18:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dceba8953aa69d5b3a2ed5e239dd104bdbdf0a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:68:2a:a0:26:91:a8:9f:2e:80:fd:a0:bc:4b: 3e:d4:75:a8:45:c3:73:13:0e:40:a3:18:c0:80:96: 24:03:48:df:83:8c:1b:51:54:03:83:c5:42:ed:a7: 66:f7:d4:49:0e:ac:ba:b3:2e:c0:c3:61:9e:36:ce: fa:15:d7:6d:fa:e3:1d:3a:11:44:8e:11:9e:80:8d: bb:75:d4:37:23:44:7a:26:a4:13:3c:74:4f:b9:5c: 4e:e1:a6:24:1a:a2:51:5a:5c:2d:1b:62:fb:3a:bc: 4e:d3:9b:a8:6c:17:bc:d9:06:b5:92:50:f9:14:67: 2a:3e:13:c1:0a:e8:49:22:20:de:f1:16:ad:53:e2: 66:8a:61:b5:80:eb:d5:db:59:fe:c7:a8:c5:c8:84: 92:59:51:65:c3:41:e9:55:bf:b4:a1:ef:f6:55:c7: bb:7a:73:62:ee:4b:f0:f4:81:7b:16:f8:b9:8c:7a: 53:61:06:0e:c5:d7:4a:fd:db:35:1d:56:2d:84:c1: fe:52:bb:b3:b6:e7:bc:3e:76:bc:58:4b:98:9e:f1: 19:cc:20:2b:4b:59:2c:1f:f6:6c:3c:59:3a:f8:df: b9:d4:27:68:35:f0:a1:b8:39:73:df:bc:33:ac:fa: 92:2a:3b:b3:cc:b4:d0:d8:29:25:db:8a:2c:fb:f3: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EB:A8:95:3A:A6:9D:5B:3A:2E:D5:E2:39:DD:10:4B:DB:DF:0A:8F X509v3 Authority Key Identifier: keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/3OuolTqmnVs6LtXiOd0QS9vfCo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.237.73.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:0f:33:0f:ed:a9:10:ea:9a:3b:3c:3d:d7:d0:64:7a:75:b4: 9b:90:1e:f9:37:03:e4:36:8e:31:a6:ad:82:3a:fa:01:98:1e: 53:40:41:6f:2d:15:26:9a:a4:5f:34:b0:b8:40:f3:12:2f:f8: 8d:0d:7d:03:4e:50:1e:26:60:d1:0c:fd:40:a4:03:64:a6:2e: 74:19:b0:8f:12:a9:f7:ac:96:c1:a2:1d:4e:ea:e0:4f:23:31: 16:ea:87:d1:aa:86:1d:61:d3:87:27:61:f2:a1:d1:1e:59:97: 17:c3:50:b6:ff:5e:17:15:e8:69:02:93:9c:28:09:f6:87:e4: ed:a0:2b:77:9b:fd:95:dc:53:e6:0c:1a:55:e9:96:dc:13:39: 8d:00:28:fa:0b:eb:ee:f9:46:38:97:2f:f4:d2:9f:71:3d:44: a7:08:d1:8a:e1:69:b4:77:b6:c4:44:f8:ab:03:85:08:56:f8: 79:66:d3:7b:7c:b7:0c:5c:55:09:7e:e3:14:99:d6:a1:b9:e6: d3:9b:0c:08:11:80:19:22:52:98:99:d8:7a:ed:56:76:e5:65: f9:5c:e5:1d:d1:54:2c:76:7f:63:63:92:84:d8:f5:3e:e7:3f: 2f:18:0d:b5:cd:4e:d9:6b:29:a5:cf:eb:83:39:8b:eb:c6:b4: 01:9e:43:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8ptQb8ipjgl1/ZQ3YCTJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWZkY2Q1ZTk3YWMxYzEwMjQ3OWM5NTRkNWY5MjJiMTI2 Y2JjMTQwHhcNMjYwMTAyMTgyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2ViYTg5NTNhYTY5ZDViM2EyZWQ1ZTIzOWRkMTA0YmRiZGYwYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGgqoCaRqJ8ugP2gvEs+1HWoRcNz Ew5AoxjAgJYkA0jfg4wbUVQDg8VC7adm99RJDqy6sy7Aw2GeNs76Fddt+uMdOhFE jhGegI27ddQ3I0R6JqQTPHRPuVxO4aYkGqJRWlwtG2L7OrxO05uobBe82Qa1klD5 FGcqPhPBCuhJIiDe8RatU+JmimG1gOvV21n+x6jFyISSWVFlw0HpVb+0oe/2Vce7 enNi7kvw9IF7Fvi5jHpTYQYOxddK/ds1HVYthMH+Uruztue8Pna8WEuYnvEZzCAr S1ksH/ZsPFk6+N+51CdoNfChuDlz37wzrPqSKjuzzLTQ2Ckl24os+/OGDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNzrqJU6pp1bOi7V4jndEEvb3wqPMB8GA1UdIwQY MBaAFAev3NXpesHBAkeclU1fkisSbLwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEt ZmY2ODUxNzc3MGU0LzEvM091b2xUcW1uVnM2THRYaU9kMFFTOXZmQ284LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEtZmY2ODUxNzc3MGU0 LzEvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATe1JMA0G CSqGSIb3DQEBCwUAA4IBAQAODzMP7akQ6po7PD3X0GR6dbSbkB75NwPkNo4xpq2C OvoBmB5TQEFvLRUmmqRfNLC4QPMSL/iNDX0DTlAeJmDRDP1ApANkpi50GbCPEqn3 rJbBoh1O6uBPIzEW6ofRqoYdYdOHJ2HyodEeWZcXw1C2/14XFehpApOcKAn2h+Tt oCt3m/2V3FPmDBpV6ZbcEzmNACj6C+vu+UY4ly/00p9xPUSnCNGK4Wm0d7bERPir A4UIVvh5ZtN7fLcMXFUJfuMUmdahuebTmwwIEYAZIlKYmdh67VZ25WX5XOUd0VQs dn9jY5KE2PU+5z8vGA21zU7Zaymlz+uDOYvrxrQBnkOe -----END CERTIFICATE-----Generated at Mon Jan 26 01:21:36 2026 by rpki-client