This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/gD3TW1PF3JAEZdLvATbmgeJVunI.roa File: gD3TW1PF3JAEZdLvATbmgeJVunI.roa (raw, json) Hash identifier: t6EoCKHR2D/E7ctxbU4crKBTLrkD21MXceMX9ltMJKg= Subject key identifier: 80:3D:D3:5B:53:C5:DC:90:04:65:D2:EF:01:36:E6:81:E2:55:BA:72 Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e Certificate serial: 019B7F8582F7E888E2912A464441B2432BF7 Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/gD3TW1PF3JAEZdLvATbmgeJVunI.roa Signing time: Fri 02 Jan 2026 16:23:34 +0000 ROA not before: Fri 02 Jan 2026 16:23:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49865 IP address blocks: 194.24.0.0/21 maxlen: 21 194.24.1.0/24 maxlen: 24 194.24.4.0/22 maxlen: 22 2a0a:5080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:82:f7:e8:88:e2:91:2a:46:44:41:b2:43:2b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e Validity Not Before: Jan 2 16:23:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=803dd35b53c5dc900465d2ef0136e681e255ba72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:31:94:0c:1c:d5:eb:7a:fa:4d:d0:07:80: 86:f7:e7:f4:5e:39:c6:48:3c:9b:e7:2d:bd:6b:f3: 5a:00:4a:70:e0:60:1b:a3:6f:8c:94:4f:75:55:e6: bc:87:30:a6:46:62:91:4a:95:3b:bd:04:b7:93:26: 25:bf:46:82:b8:17:8d:40:b9:75:a2:b2:0d:58:cf: 1b:84:2a:64:29:94:04:0b:fe:47:8f:94:78:f4:80: 99:4c:b7:57:60:2b:39:b1:a0:1b:01:5d:f2:fa:6e: c5:59:79:c0:a6:95:9b:b4:8b:0f:d0:de:82:06:c4: f2:22:c3:d4:48:6f:e3:bf:c6:cb:89:c5:f2:7a:8c: 7d:f9:73:fe:12:ba:44:f9:bb:d2:9e:29:07:81:31: ab:e8:a7:42:97:46:3d:62:b4:e9:3d:9a:e0:5b:c0: 2f:ba:45:bd:f2:5c:af:ad:8d:04:73:7f:cb:9e:4a: 1a:35:eb:b9:46:16:a4:b4:85:e4:97:13:c2:ce:ac: 8b:4e:54:76:42:02:5d:06:b3:a5:09:d6:67:de:cd: c4:2e:33:8b:13:d6:c9:4d:2b:5d:fb:a5:08:0d:84: 75:41:84:a8:2d:74:9c:b3:97:4f:7d:40:27:64:35: 64:e7:23:69:d1:89:eb:f1:f6:1f:ee:a4:98:d2:91: e0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3D:D3:5B:53:C5:DC:90:04:65:D2:EF:01:36:E6:81:E2:55:BA:72 X509v3 Authority Key Identifier: keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/gD3TW1PF3JAEZdLvATbmgeJVunI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.0.0/21 IPv6: 2a0a:5080::/29 Signature Algorithm: sha256WithRSAEncryption 75:1a:57:27:ba:e0:4a:c1:82:3e:ec:32:1a:18:6d:12:48:e2: 84:d9:6c:e8:b0:b7:fc:a3:60:1a:b8:ef:5c:12:3b:56:c3:4c: 4c:11:e8:4b:35:8d:32:1a:be:d2:9c:16:44:4f:ea:0c:a8:84: e0:69:bc:27:9f:03:4f:36:a2:db:79:fa:b4:77:41:ca:fb:b5: db:98:2f:48:bd:c8:93:7b:72:e6:b9:3d:fb:db:6d:71:ea:e0: 02:f0:da:8e:c4:60:7f:4f:8a:ea:67:e5:4a:c8:bb:99:13:ac: 84:57:3d:44:fe:ed:d3:e0:67:94:03:cd:dd:18:f5:cb:53:c9: 4e:38:37:0e:c4:47:51:45:bd:49:c8:cf:37:d3:f4:99:fd:a6: 04:18:54:0e:1c:ee:72:72:f6:b6:39:17:ea:51:e7:9d:91:1c: 31:af:2f:42:6f:22:da:1f:c6:f0:d0:10:23:71:ba:3b:76:d7: 19:59:6f:a3:cf:84:e8:a8:9e:19:14:6f:9c:68:6d:ea:5f:58: e2:8e:04:31:61:d4:67:ff:d2:e3:14:ec:93:4f:a6:43:1d:62: 3a:9e:d1:0a:5e:82:da:61:bb:ea:6d:15:d0:38:6e:c0:d1:3a: 29:6e:bd:e5:a9:0b:b2:4d:f0:7f:73:67:d9:ba:50:d0:36:f7: be:8a:1c:24 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hYL36IjikSpGREGyQyv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzUwZWZlMTNhYWRmNTQyM2IwNGYwZGRjYThiMzI4ODM5 NTgyM2UwHhcNMjYwMTAyMTYyMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDNkZDM1YjUzYzVkYzkwMDQ2NWQyZWYwMTM2ZTY4MWUyNTViYTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj8xlAwc1et6+k3QB4CG9+f0XjnG SDyb5y29a/NaAEpw4GAbo2+MlE91Vea8hzCmRmKRSpU7vQS3kyYlv0aCuBeNQLl1 orINWM8bhCpkKZQEC/5Hj5R49ICZTLdXYCs5saAbAV3y+m7FWXnAppWbtIsP0N6C BsTyIsPUSG/jv8bLicXyeox9+XP+ErpE+bvSnikHgTGr6KdCl0Y9YrTpPZrgW8Av ukW98lyvrY0Ec3/LnkoaNeu5RhaktIXklxPCzqyLTlR2QgJdBrOlCdZn3s3ELjOL E9bJTStd+6UIDYR1QYSoLXScs5dPfUAnZDVk5yNp0Ynr8fYf7qSY0pHgkQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIA901tTxdyQBGXS7wE25oHiVbpyMB8GA1UdIwQY MBaAFAnFDv4Tqt9UI7BPDdyosyiDlYI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUt YTI2ZDI1YmM3NjU0LzEvZ0QzVFcxUEYzSkFFWmRMdkFUYm1nZUpWdW5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUtYTI2ZDI1YmM3NjU0 LzEvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDwhgAMA0E AgACMAcDBQMqClCAMA0GCSqGSIb3DQEBCwUAA4IBAQB1GlcnuuBKwYI+7DIaGG0S SOKE2WzosLf8o2AauO9cEjtWw0xMEehLNY0yGr7SnBZET+oMqITgabwnnwNPNqLb efq0d0HK+7XbmC9IvciTe3LmuT37221x6uAC8NqOxGB/T4rqZ+VKyLuZE6yEVz1E /u3T4GeUA83dGPXLU8lOODcOxEdRRb1JyM830/SZ/aYEGFQOHO5ycva2ORfqUeed kRwxry9CbyLaH8bw0BAjcbo7dtcZWW+jz4ToqJ4ZFG+caG3qX1jijgQxYdRn/9Lj FOyTT6ZDHWI6ntEKXoLaYbvqbRXQOG7A0Topbr3lqQuyTfB/c2fZulDQNve+ihwk -----END CERTIFICATE-----Generated at Tue Feb 3 03:48:40 2026 by rpki-client