This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/3CKrmM_5W9qGNwDPT707OalHLD8.roa File: 3CKrmM_5W9qGNwDPT707OalHLD8.roa (raw, json) Hash identifier: 2NaLVNwjCsDKmG9seV4wmBk1JF4GhywwWN0SoFKjTJk= Subject key identifier: DC:22:AB:98:CF:F9:5B:DA:86:37:00:CF:4F:BD:3B:39:A9:47:2C:3F Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Certificate serial: 019B7CED470214989CFE720A6E1B85685ABD Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/3CKrmM_5W9qGNwDPT707OalHLD8.roa Signing time: Fri 02 Jan 2026 04:18:03 +0000 ROA not before: Fri 02 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9044 IP address blocks: 193.135.57.0/24 maxlen: 24 2001:678:e48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:47:02:14:98:9c:fe:72:0a:6e:1b:85:68:5a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc22ab98cff95bda863700cf4fbd3b39a9472c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:cb:cb:62:23:41:8a:70:ed:3f:37:72:85: 86:aa:33:b5:80:4b:1d:70:58:bf:a5:ec:38:c7:89: 12:74:86:02:45:46:94:8e:af:5f:10:2b:dd:bb:1c: a9:e1:22:c4:49:d6:9e:88:32:72:e7:3c:d1:e2:38: 5d:cb:31:e4:40:51:ab:eb:92:11:73:63:0c:e7:9b: 65:88:31:af:ce:c0:95:57:b1:40:6b:95:ff:ba:b7: 2f:8c:8f:44:d9:a9:87:f9:f9:39:6c:16:62:2b:b6: ce:a7:85:49:09:8b:75:e8:b5:a9:07:cf:10:fe:93: d9:c3:bd:5e:1a:2e:0b:3a:b1:de:6e:38:41:0e:a3: 1e:ff:ac:53:7c:6f:39:ea:8f:3c:a9:c5:74:60:51: 62:c0:b1:4e:17:32:89:f4:77:0d:6b:62:68:e2:d7: 0d:85:c1:a3:69:ee:f7:da:db:74:ce:82:d0:62:4c: 01:90:d4:65:75:44:4f:0f:3e:f8:17:64:76:d1:1e: a3:52:e5:3b:8a:6b:c7:48:6d:e0:ed:e6:fe:3c:98: d3:c2:2c:a3:21:04:e9:68:fe:d7:a9:8c:ed:d4:ed: 04:77:f2:48:4a:96:f2:71:e5:93:69:29:e7:db:8e: 26:37:95:38:d9:52:63:e2:4f:c7:39:7b:02:10:d3: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:22:AB:98:CF:F9:5B:DA:86:37:00:CF:4F:BD:3B:39:A9:47:2C:3F X509v3 Authority Key Identifier: keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/3CKrmM_5W9qGNwDPT707OalHLD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.57.0/24 IPv6: 2001:678:e48::/48 Signature Algorithm: sha256WithRSAEncryption 81:4d:cf:10:c7:39:64:f6:3a:f5:0c:61:30:58:34:83:59:e8: 53:8c:a8:61:54:1f:75:78:22:07:82:d4:88:00:3e:34:7a:89: f3:57:20:6a:be:c0:35:90:a9:97:3b:73:51:36:bd:66:de:83: 7a:b7:1f:63:b7:a1:26:e2:54:fa:21:f9:7d:6d:9d:01:4f:13: fa:50:a8:3b:e0:f0:60:0c:6c:e4:90:32:82:ea:06:79:b2:0a: c6:4e:a8:33:c7:d8:ec:06:f4:60:43:fc:42:b5:85:00:72:61: b5:67:49:a0:d2:45:c7:f9:bd:4b:39:29:21:79:0a:7c:1f:3d: 89:8f:7c:70:4e:02:01:50:62:35:7a:24:60:50:12:c6:0f:5b: fc:08:58:c9:26:79:2c:18:95:0b:76:b2:f5:12:81:a4:52:57: 67:00:d0:8b:ab:20:3a:d1:9f:13:61:9e:cb:57:ac:0c:70:c9: 69:13:a7:59:b5:81:b3:71:b3:9b:2c:cd:a5:84:15:b5:1d:73: 0c:36:b5:17:ed:9f:b4:c8:2b:fa:e7:8b:48:81:6b:dd:a1:2e: b9:bc:b1:5f:84:1e:a8:8f:ff:d4:3e:b2:73:74:5f:14:e9:28: 47:be:b4:41:5d:66:67:d2:b9:d3:a1:c9:eb:f5:a0:cd:9d:d2: b7:88:20:19 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87UcCFJic/nIKbhuFaFq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTA1MDRmNGIxNzc2ZTgwYjhhZDlmOGIzNTZlNjEzYjU4 NWIzNWEwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzIyYWI5OGNmZjk1YmRhODYzNzAwY2Y0ZmJkM2IzOWE5NDcyYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+nLy2IjQYpw7T83coWGqjO1gEsd cFi/pew4x4kSdIYCRUaUjq9fECvduxyp4SLESdaeiDJy5zzR4jhdyzHkQFGr65IR c2MM55tliDGvzsCVV7FAa5X/urcvjI9E2amH+fk5bBZiK7bOp4VJCYt16LWpB88Q /pPZw71eGi4LOrHebjhBDqMe/6xTfG856o88qcV0YFFiwLFOFzKJ9HcNa2Jo4tcN hcGjae732tt0zoLQYkwBkNRldURPDz74F2R20R6jUuU7imvHSG3g7eb+PJjTwiyj IQTpaP7XqYzt1O0Ed/JISpbyceWTaSnn244mN5U42VJj4k/HOXsCENOGcQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNwiq5jP+VvahjcAz0+9OzmpRyw/MB8GA1UdIwQY MBaAFIBQUE9LF3boC4rZ+LNW5hO1hbNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjIt MDE0NGEzMjgyYTJlLzEvM0NLcm1NXzVXOXFHTndEUFQ3MDdPYWxITEQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjItMDE0NGEzMjgyYTJl LzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwYc5MA8E AgACMAkDBwAgAQZ4DkgwDQYJKoZIhvcNAQELBQADggEBAIFNzxDHOWT2OvUMYTBY NINZ6FOMqGFUH3V4IgeC1IgAPjR6ifNXIGq+wDWQqZc7c1E2vWbeg3q3H2O3oSbi VPoh+X1tnQFPE/pQqDvg8GAMbOSQMoLqBnmyCsZOqDPH2OwG9GBD/EK1hQByYbVn SaDSRcf5vUs5KSF5CnwfPYmPfHBOAgFQYjV6JGBQEsYPW/wIWMkmeSwYlQt2svUS gaRSV2cA0IurIDrRnxNhnstXrAxwyWkTp1m1gbNxs5sszaWEFbUdcww2tRftn7TI K/rni0iBa92hLrm8sV+EHqiP/9Q+snN0XxTpKEe+tEFdZmfSudOhyev1oM2d0reI IBk= -----END CERTIFICATE-----Generated at Mon Jan 26 09:54:15 2026 by rpki-client