This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa File: 3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa (raw, json) Hash identifier: WZFQnqkXEux4sp4zh5lYxRMnIwjwZyqwXE167+xU5HI= Subject key identifier: DC:26:B7:CC:91:EF:DF:90:8A:9C:8B:03:88:0D:53:25:A6:77:BD:C9 Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372 Certificate serial: 019B76EAB9A006C113BD573E077A1FF8C076 Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8698 IP address blocks: 155.131.55.0/24 maxlen: 24 155.192.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b9:a0:06:c1:13:bd:57:3e:07:7a:1f:f8:c0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc26b7cc91efdf908a9c8b03880d5325a677bdc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:82:43:e1:84:bc:5a:c3:56:87:fc:b5:4e: be:e3:2a:f7:73:dd:af:e8:ba:bd:a9:8c:7e:f6:83: 23:09:b6:ad:06:c1:1c:9f:fd:68:7e:a4:8a:1f:e7: 30:4b:fe:81:21:8a:a0:0c:1e:d4:8d:c1:53:98:e0: b2:f2:24:04:b2:e1:53:a5:06:ef:f1:a4:78:94:03: d6:a6:8c:b7:4e:8d:03:e9:ce:71:fd:0a:c4:76:5d: fb:b3:ee:ff:04:5d:86:ef:38:ee:40:bd:98:f1:07: 93:f8:68:38:09:1b:77:7a:2e:5c:f4:f9:06:0f:46: 6e:02:25:bc:2a:72:d9:71:54:2e:27:15:f2:c7:09: 2f:f2:f1:0b:5a:af:83:db:02:07:16:1f:1c:aa:46: 86:3f:1b:83:82:1e:52:85:4d:bf:16:61:ec:39:c9: 77:52:e9:26:cf:19:fa:05:3d:55:77:b3:be:21:fb: 98:15:ab:0d:1b:ca:e7:0d:99:9c:09:42:15:6e:36: 01:3d:d1:96:86:72:63:a9:6d:d3:b6:26:bb:fd:dd: 94:96:b6:ec:a1:68:d2:d6:d6:65:1d:ff:73:d5:20: b7:b7:f9:16:a3:94:7e:53:21:4f:9a:bd:15:a3:47: b5:00:b9:4a:03:16:89:3f:0c:54:b9:b0:f0:29:8c: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:26:B7:CC:91:EF:DF:90:8A:9C:8B:03:88:0D:53:25:A6:77:BD:C9 X509v3 Authority Key Identifier: keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/3Ca3zJHv35CKnIsDiA1TJaZ3vck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.131.55.0/24 155.192.55.0/24 Signature Algorithm: sha256WithRSAEncryption 81:9b:65:64:2b:3d:68:08:c1:46:7b:f0:eb:fa:18:97:88:7e: 3f:a4:7f:b0:4b:67:eb:19:e5:d8:d3:10:66:a2:da:e9:89:70: 7f:83:ea:2d:90:90:52:17:24:c1:c2:80:47:34:7d:80:b6:fe: 94:3f:c5:fe:98:87:b2:21:e2:45:28:03:a7:49:79:19:a4:55: 57:3c:e2:af:87:1a:71:25:b3:1b:07:54:d0:75:67:ae:89:00: 82:68:71:98:95:18:34:ed:41:9f:03:df:4f:51:c3:a4:d6:85: f0:32:36:2f:99:ff:7c:88:0b:de:fb:b5:7e:98:84:c0:fa:59: 42:cf:d7:77:26:d5:96:f7:c0:01:f6:13:1c:e1:bf:e9:4c:25: b6:64:c5:71:91:32:ea:d8:ea:e1:fd:e8:08:67:38:39:f6:ca: a1:43:d1:1c:75:61:ae:a3:41:60:43:db:41:1d:3f:7b:1a:09: cc:9e:f6:1a:ff:78:ef:e5:03:54:7f:15:e6:a5:07:2f:bf:12: d1:7f:69:b8:b3:5d:7c:fe:21:80:7e:68:14:88:12:49:36:f6: 87:6c:16:91:2c:cb:bf:2b:ce:3c:37:00:42:ac:21:d5:fa:1c: af:6c:52:63:b5:89:48:b9:9c:6f:58:9b:b3:e2:c0:c1:15:9a: ef:33:d7:e0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26rmgBsETvVc+B3of+MB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExM2Q1ZTgzMWMzMzBkM2NiNTFkNDc2ZTBjMTYzNTQwZjI1 ZTAzNzIwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzI2YjdjYzkxZWZkZjkwOGE5YzhiMDM4ODBkNTMyNWE2NzdiZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0qCQ+GEvFrDVof8tU6+4yr3c92v 6Lq9qYx+9oMjCbatBsEcn/1ofqSKH+cwS/6BIYqgDB7UjcFTmOCy8iQEsuFTpQbv 8aR4lAPWpoy3To0D6c5x/QrEdl37s+7/BF2G7zjuQL2Y8QeT+Gg4CRt3ei5c9PkG D0ZuAiW8KnLZcVQuJxXyxwkv8vELWq+D2wIHFh8cqkaGPxuDgh5ShU2/FmHsOcl3 Uukmzxn6BT1Vd7O+IfuYFasNG8rnDZmcCUIVbjYBPdGWhnJjqW3Ttia7/d2Ulrbs oWjS1tZlHf9z1SC3t/kWo5R+UyFPmr0Vo0e1ALlKAxaJPwxUubDwKYyqPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNwmt8yR79+QipyLA4gNUyWmd73JMB8GA1UdIwQY MBaAFBE9XoMcMw08tR1HbgwWNUDyXgNyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVQxZWd4d3pEVHkxSFVkdURCWTFRUEplQTNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTg5OTMtOTE3OC00NDI0LWExMDgt MzNmMzk2YWI1NmYyLzEvM0NhM3pKSHYzNUNLbklzRGlBMVRKYVozdmNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTg5OTMtOTE3OC00NDI0LWExMDgtMzNmMzk2YWI1NmYy LzEvRVQxZWd4d3pEVHkxSFVkdURCWTFRUEplQTNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAm4M3AwQA m8A3MA0GCSqGSIb3DQEBCwUAA4IBAQCBm2VkKz1oCMFGe/Dr+hiXiH4/pH+wS2fr GeXY0xBmotrpiXB/g+otkJBSFyTBwoBHNH2Atv6UP8X+mIeyIeJFKAOnSXkZpFVX POKvhxpxJbMbB1TQdWeuiQCCaHGYlRg07UGfA99PUcOk1oXwMjYvmf98iAve+7V+ mITA+llCz9d3JtWW98AB9hMc4b/pTCW2ZMVxkTLq2Orh/egIZzg59sqhQ9EcdWGu o0FgQ9tBHT97GgnMnvYa/3jv5QNUfxXmpQcvvxLRf2m4s118/iGAfmgUiBJJNvaH bBaRLMu/K848NwBCrCHV+hyvbFJjtYlIuZxvWJuz4sDBFZrvM9fg -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:51 2026 by rpki-client