This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3rsNiSm4h6h63qh7B8ED48uaQlc.roa File: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (raw, json) Hash identifier: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ= Subject key identifier: DE:BB:0D:89:29:B8:87:A8:7A:DE:A8:7B:07:C1:03:E3:CB:9A:42:57 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019B78A2DF731562696CD81E4C028E55E2B5 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3rsNiSm4h6h63qh7B8ED48uaQlc.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215607 IP address blocks: 94.26.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:df:73:15:62:69:6c:d8:1e:4c:02:8e:55:e2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=debb0d8929b887a87adea87b07c103e3cb9a4257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:36:81:3a:e1:17:e7:53:3c:b9:18:1f:a5: fe:e2:11:8c:8e:1e:e6:9f:1c:60:4b:51:ea:ab:a7: bd:07:49:56:db:74:53:e2:da:93:6b:46:80:ff:cd: f0:92:d7:a6:1d:95:05:18:9f:22:ba:6e:58:b7:bd: 43:99:7d:24:3a:2f:9a:28:e9:a6:5f:56:1c:67:56: de:ff:4f:62:bc:94:50:8a:2d:4f:44:9b:f3:12:3d: 82:74:aa:78:59:65:cc:a1:ef:f8:3e:5c:eb:c7:a6: d0:01:6a:2f:1e:bc:2c:19:c9:ab:40:18:07:a3:b1: 7b:1a:0e:e7:be:c5:99:de:cf:24:34:59:42:2d:4d: b2:5e:5e:ea:ac:f9:38:e0:55:7d:f0:34:06:52:51: ff:4f:d5:ba:d2:32:01:16:71:14:08:53:c7:cd:a2: e8:a1:94:65:cb:de:5f:80:41:fe:42:3f:87:c2:bb: dc:a8:b1:2d:6f:81:a2:6f:17:23:2c:99:af:f0:d5: 1a:21:10:38:85:0d:eb:bc:ef:7c:a0:1f:5a:b6:8a: 60:b3:59:db:2b:29:b9:c5:e8:77:b4:88:88:46:c7: db:47:52:bb:9b:54:13:49:d5:71:dc:8f:b6:27:34: e7:97:42:2e:5a:b7:e8:07:48:87:e3:d8:5c:0f:06: 97:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BB:0D:89:29:B8:87:A8:7A:DE:A8:7B:07:C1:03:E3:CB:9A:42:57 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3rsNiSm4h6h63qh7B8ED48uaQlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.106.0/24 Signature Algorithm: sha256WithRSAEncryption ce:ce:13:67:e2:4c:8a:44:a3:4f:a2:7f:64:e2:4f:79:81:80: 31:5d:c5:8b:2e:f8:1b:11:26:10:1f:1d:99:2e:64:d3:dc:39: 1d:94:d9:54:36:53:8d:e1:95:69:67:05:4d:d4:b1:f0:cd:ab: 23:e5:0e:4a:ea:6e:9d:66:e4:f2:5c:ad:4b:30:57:5a:ca:e9: 9d:4c:32:93:e4:a8:e0:41:93:6b:4e:d2:34:1f:14:2c:fa:35: 0d:77:0a:23:5a:6d:d4:4e:0e:43:27:63:8d:90:1e:3c:57:06: 95:2e:af:12:70:a9:40:80:6e:92:92:cc:77:7d:03:51:61:50: 01:21:38:2d:71:06:3c:33:66:f2:f6:e7:f8:b4:8f:75:f8:43: 76:ec:e1:4d:90:66:78:02:60:bc:08:5b:59:52:1e:70:fd:99: cd:ba:b2:7c:2d:06:f9:94:c2:83:3a:f7:5d:29:31:7a:0e:24: e1:9a:82:a4:38:d8:78:31:c5:a0:50:f9:02:94:7b:8a:00:22: 80:ce:60:55:ab:03:8e:30:a8:29:57:e5:c9:cb:af:00:73:f1: 38:99:48:9d:8e:7c:20:b7:7d:6f:ec:1a:86:f2:61:06:99:c8: b7:eb:c0:9a:8d:dc:ac:6f:0d:f8:bf:91:54:f2:58:82:63:08: 8c:69:1b:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ot9zFWJpbNgeTAKOVeK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWJiMGQ4OTI5Yjg4N2E4N2FkZWE4N2IwN2MxMDNlM2NiOWE0MjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IE2gTrhF+dTPLkYH6X+4hGMjh7m nxxgS1Hqq6e9B0lW23RT4tqTa0aA/83wktemHZUFGJ8ium5Yt71DmX0kOi+aKOmm X1YcZ1be/09ivJRQii1PRJvzEj2CdKp4WWXMoe/4Plzrx6bQAWovHrwsGcmrQBgH o7F7Gg7nvsWZ3s8kNFlCLU2yXl7qrPk44FV98DQGUlH/T9W60jIBFnEUCFPHzaLo oZRly95fgEH+Qj+HwrvcqLEtb4GibxcjLJmv8NUaIRA4hQ3rvO98oB9atopgs1nb Kym5xeh3tIiIRsfbR1K7m1QTSdVx3I+2JzTnl0IuWrfoB0iH49hcDwaXYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN67DYkpuIeoet6oewfBA+PLmkJXMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM3JzTmlTbTRoNmg2M3FoN0I4RUQ0OHVhUWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXhpqMA0G CSqGSIb3DQEBCwUAA4IBAQDOzhNn4kyKRKNPon9k4k95gYAxXcWLLvgbESYQHx2Z LmTT3DkdlNlUNlON4ZVpZwVN1LHwzasj5Q5K6m6dZuTyXK1LMFdayumdTDKT5Kjg QZNrTtI0HxQs+jUNdwojWm3UTg5DJ2ONkB48VwaVLq8ScKlAgG6Sksx3fQNRYVAB ITgtcQY8M2by9uf4tI91+EN27OFNkGZ4AmC8CFtZUh5w/ZnNurJ8LQb5lMKDOvdd KTF6DiThmoKkONh4McWgUPkClHuKACKAzmBVqwOOMKgpV+XJy68Ac/E4mUidjnwg t31v7BqG8mEGmci368Cajdysbw34v5FU8liCYwiMaRtf -----END CERTIFICATE-----Generated at Fri Jan 23 15:14:02 2026 by rpki-client