This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa File: s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa (raw, json) Hash identifier: ALHEFczsxrK3P9zm6czuHQOWsz9Vxib3j6fIwRLXdsA= Subject key identifier: B3:D1:34:9A:BB:3A:44:4E:46:DD:D8:88:EA:A2:76:74:D6:90:94:26 Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35C92F0CA52A77464D577FE29E1B20 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 194.38.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c9:2f:0c:a5:2a:77:46:4d:57:7f:e2:9e:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3d1349abb3a444e46ddd888eaa27674d6909426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:50:e0:7c:7b:c9:c4:e4:0a:0b:a1:84:43:e9: d9:17:d2:c3:5e:f9:68:ae:38:40:09:58:07:d9:25: ca:69:61:78:7f:b6:8f:c7:88:c9:b3:8a:85:c2:04: 98:27:82:d0:c1:e1:08:e6:d5:c0:58:e4:2e:b4:26: c3:e9:7f:15:ad:c1:7d:bb:f7:b4:5c:49:16:c6:c2: c8:53:c9:15:c5:c3:c8:c3:6c:4a:e1:7f:c0:1a:5f: 6d:8e:20:2d:cc:84:84:5a:75:a7:3e:72:89:23:ab: 81:04:89:9f:bb:87:f2:5b:2d:78:4a:2d:5c:83:d6: d6:37:16:73:1f:71:05:07:c3:95:19:92:1f:d5:e3: d3:25:37:77:2a:b0:99:c9:d4:84:44:77:65:cc:2e: 69:52:d2:94:8e:35:58:15:91:9b:eb:2e:75:3d:b5: ae:f1:98:7a:a8:69:3a:89:bf:25:14:40:37:3b:d7: fa:28:66:7d:ed:19:d1:cd:eb:98:f8:2d:3c:82:2a: 7b:d7:b6:ce:6a:a0:9c:ef:3f:ea:e3:0d:21:21:6b: 45:91:d7:aa:1c:4e:63:4b:40:93:3c:cc:c4:dd:78: af:e6:e3:95:4e:c6:80:8f:f6:ee:4d:10:22:ea:8c: 7a:68:ef:86:4b:bd:1b:5e:87:45:41:9e:3a:33:15: 68:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D1:34:9A:BB:3A:44:4E:46:DD:D8:88:EA:A2:76:74:D6:90:94:26 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.16.0/22 Signature Algorithm: sha256WithRSAEncryption 14:d3:dd:67:2b:74:db:63:77:88:5e:a9:f4:a8:e8:51:7f:80: aa:c5:d6:e3:65:06:33:4e:6f:cc:27:18:24:9f:9c:c2:92:00: 96:33:8b:fc:ee:f8:ad:fc:a1:c1:fa:63:91:c7:97:79:6c:65: 49:50:f9:f3:f2:80:23:17:6d:c9:21:2a:35:19:fc:06:f3:e1: 13:9e:f8:6d:34:4c:9e:a3:2e:93:a8:68:4c:98:dc:88:b7:a4: af:8c:ae:39:c6:56:d1:68:7d:67:2a:6d:83:45:60:44:00:55: e7:eb:4d:f8:d8:d5:e5:9b:b4:fc:de:70:80:08:f4:c5:c3:d7: c2:92:e4:a9:7e:f0:f5:0f:8f:a8:d2:28:74:31:0d:98:45:77: ff:4f:3d:f3:64:8d:f1:79:12:5e:5a:5a:2c:1a:1b:34:7f:7e: 0c:c6:a7:7d:c7:e1:27:a1:9c:0a:5b:16:1d:a1:87:d7:44:20: da:cd:27:f8:66:8c:11:5d:05:ec:a9:71:fb:7d:47:65:88:9b: fe:64:1e:09:3b:95:6e:06:8c:b0:c1:4a:b3:27:f0:c2:dc:30: 8d:5a:e9:be:e8:cd:5a:b3:af:1f:b5:06:d9:33:44:4c:38:41: f4:a2:7f:98:13:3f:47:70:57:b2:13:0d:d0:b7:58:5b:90:e8: c7:63:cf:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NckvDKUqd0ZNV3/inhsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2QxMzQ5YWJiM2E0NDRlNDZkZGQ4ODhlYWEyNzY3NGQ2OTA5NDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FDgfHvJxOQKC6GEQ+nZF9LDXvlo rjhACVgH2SXKaWF4f7aPx4jJs4qFwgSYJ4LQweEI5tXAWOQutCbD6X8VrcF9u/e0 XEkWxsLIU8kVxcPIw2xK4X/AGl9tjiAtzISEWnWnPnKJI6uBBImfu4fyWy14Si1c g9bWNxZzH3EFB8OVGZIf1ePTJTd3KrCZydSERHdlzC5pUtKUjjVYFZGb6y51PbWu 8Zh6qGk6ib8lFEA3O9f6KGZ97RnRzeuY+C08gip717bOaqCc7z/q4w0hIWtFkdeq HE5jS0CTPMzE3Xiv5uOVTsaAj/buTRAi6ox6aO+GS70bXodFQZ46MxVocwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLPRNJq7OkRORt3YiOqidnTWkJQmMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvczlFMG1yczZSRTVHM2RpSTZxSjJkTmFRbENZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiYQMA0G CSqGSIb3DQEBCwUAA4IBAQAU091nK3TbY3eIXqn0qOhRf4CqxdbjZQYzTm/MJxgk n5zCkgCWM4v87vit/KHB+mORx5d5bGVJUPnz8oAjF23JISo1GfwG8+ETnvhtNEye oy6TqGhMmNyIt6SvjK45xlbRaH1nKm2DRWBEAFXn60342NXlm7T83nCACPTFw9fC kuSpfvD1D4+o0ih0MQ2YRXf/Tz3zZI3xeRJeWlosGhs0f34Mxqd9x+EnoZwKWxYd oYfXRCDazSf4ZowRXQXsqXH7fUdliJv+ZB4JO5VuBoywwUqzJ/DC3DCNWum+6M1a s68ftQbZM0RMOEH0on+YEz9HcFeyEw3Qt1hbkOjHY89M -----END CERTIFICATE-----Generated at Wed Jan 21 04:11:53 2026 by rpki-client