This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/3lauIf0YpbUjYSTnhhTVxklgLKk.roa File: 3lauIf0YpbUjYSTnhhTVxklgLKk.roa (raw, json) Hash identifier: yggx4J03w1luy3uhGhFmtwjE58TFme6YVBEKV6qwxTo= Subject key identifier: DE:56:AE:21:FD:18:A5:B5:23:61:24:E7:86:14:D5:C6:49:60:2C:A9 Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b Certificate serial: 019B7CEE0183AB2922E4DB2BCAE9F26D429E Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/3lauIf0YpbUjYSTnhhTVxklgLKk.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 193.161.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:01:83:ab:29:22:e4:db:2b:ca:e9:f2:6d:42:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de56ae21fd18a5b5236124e78614d5c649602ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:d5:fa:1f:71:93:15:5b:79:58:75:af:7e: 45:19:ee:e9:82:4e:bb:87:88:08:33:5f:42:01:60: 8e:57:9f:db:18:53:86:ed:b8:64:04:02:01:c1:26: c1:c9:71:fd:82:f9:93:1e:ec:55:51:a0:34:f4:31: 22:69:11:77:50:5e:0b:66:60:4d:de:5a:f9:6d:ac: fb:f6:35:ac:dc:18:fa:b0:fb:72:f9:0b:0f:aa:00: ff:d2:8d:05:2a:0c:41:ff:7f:d3:d3:f3:45:0f:19: 3f:ec:4f:b1:95:f3:7b:7d:3e:a6:be:d9:77:a7:d0: 95:4f:36:d1:75:9d:07:d2:14:93:d8:a0:75:d0:b9: c0:f7:76:48:8a:f9:30:c7:2f:01:32:72:55:0f:c5: 09:c7:f1:f9:51:91:67:41:3e:17:d1:26:97:4c:cc: b3:87:4d:bf:31:fd:4f:b9:8a:82:42:00:7f:ff:f1: 06:f3:0a:33:b2:b2:75:41:d5:58:8f:c5:9b:82:dd: de:ab:02:62:b2:04:5f:03:5d:ad:db:b8:8e:f2:e7: ac:ce:35:85:7d:9f:fa:7b:47:ea:ef:ed:79:9c:ce: 39:55:89:73:01:63:9e:79:b4:4a:fe:5b:83:4d:dd: fd:6f:ac:e1:39:5d:f6:9a:84:95:3c:e6:bb:27:57: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:56:AE:21:FD:18:A5:B5:23:61:24:E7:86:14:D5:C6:49:60:2C:A9 X509v3 Authority Key Identifier: keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/3lauIf0YpbUjYSTnhhTVxklgLKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.145.0/24 Signature Algorithm: sha256WithRSAEncryption 42:c9:ad:6b:51:44:e0:45:c8:5f:cd:b8:82:7a:96:cf:49:dc: 6b:34:95:24:10:67:75:d1:5c:9c:a6:6f:76:cb:a8:fd:ce:5a: f5:80:94:a1:a8:d2:42:9a:cd:f9:e5:51:e5:49:be:8a:dc:bf: ac:d4:30:84:52:27:7e:ad:c5:8b:99:5c:a1:a3:4f:6a:1c:5d: a0:99:c7:e0:fe:0b:fa:f2:a3:6a:fd:81:1c:a1:1a:47:78:10: eb:63:f0:b1:5b:9a:6f:8e:7f:6b:aa:27:3f:56:7e:b9:7e:0a: 79:2a:4d:e0:bf:9f:6b:8e:8d:e4:2e:b5:95:53:ac:e1:15:34: f2:2c:30:63:ca:46:90:7e:3b:37:d6:70:b5:63:87:0a:44:05: 0e:fc:a2:8f:1f:45:8c:ef:28:4a:0a:97:5d:9e:03:3c:a6:f0: 96:d8:80:b9:38:9b:5e:e7:a0:8c:c0:95:74:81:bf:d5:bc:b4: 5b:25:22:86:f3:2b:6c:9a:fe:39:7e:a6:a0:42:1d:f0:95:6a: 56:f4:da:e8:24:68:ce:30:c8:0c:4d:5b:c4:50:3b:a7:30:67: e0:b8:e6:aa:17:9f:40:e0:67:c1:dd:40:84:6c:0a:9b:4d:69: 0d:f6:20:3d:f0:b7:d0:b1:26:da:fb:ca:97:22:69:e7:f1:5e: 80:ff:54:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gGDqyki5NsryunybUKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OWQ1YzUyYzMxNTdlNTk0NWU2NjNiOTJlZDQ0MDJjNjA2 MTZlM2IwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTU2YWUyMWZkMThhNWI1MjM2MTI0ZTc4NjE0ZDVjNjQ5NjAyY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl/V+h9xkxVbeVh1r35FGe7pgk67 h4gIM19CAWCOV5/bGFOG7bhkBAIBwSbByXH9gvmTHuxVUaA09DEiaRF3UF4LZmBN 3lr5baz79jWs3Bj6sPty+QsPqgD/0o0FKgxB/3/T0/NFDxk/7E+xlfN7fT6mvtl3 p9CVTzbRdZ0H0hST2KB10LnA93ZIivkwxy8BMnJVD8UJx/H5UZFnQT4X0SaXTMyz h02/Mf1PuYqCQgB///EG8wozsrJ1QdVYj8Wbgt3eqwJisgRfA12t27iO8ueszjWF fZ/6e0fq7+15nM45VYlzAWOeebRK/luDTd39b6zhOV32moSVPOa7J1egQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5WriH9GKW1I2Ek54YU1cZJYCypMB8GA1UdIwQY MBaAFHadXFLDFX5ZReZjuS7UQCxgYW47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYt Mzc2YjQ5ZDUyZDdlLzEvM2xhdUlmMFlwYlVqWVNUbmhoVFZ4a2xnTEtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYtMzc2YjQ5ZDUyZDdl LzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaGRMA0G CSqGSIb3DQEBCwUAA4IBAQBCya1rUUTgRchfzbiCepbPSdxrNJUkEGd10Vycpm92 y6j9zlr1gJShqNJCms355VHlSb6K3L+s1DCEUid+rcWLmVyho09qHF2gmcfg/gv6 8qNq/YEcoRpHeBDrY/CxW5pvjn9rqic/Vn65fgp5Kk3gv59rjo3kLrWVU6zhFTTy LDBjykaQfjs31nC1Y4cKRAUO/KKPH0WM7yhKCpddngM8pvCW2IC5OJte56CMwJV0 gb/VvLRbJSKG8ytsmv45fqagQh3wlWpW9NroJGjOMMgMTVvEUDunMGfguOaqF59A 4GfB3UCEbAqbTWkN9iA98LfQsSba+8qXImnn8V6A/1SG -----END CERTIFICATE-----Generated at Mon Jan 26 17:00:04 2026 by rpki-client