This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/l3v9mZTPVTxPe5Kh1-GOSK6w8Zw.roa File: l3v9mZTPVTxPe5Kh1-GOSK6w8Zw.roa (raw, json) Hash identifier: 51EMra3zFohpnXCIeOY4jhtjtvE+0ZKY/ys2ekben48= Subject key identifier: 97:7B:FD:99:94:CF:55:3C:4F:7B:92:A1:D7:E1:8E:48:AE:B0:F1:9C Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e Certificate serial: 019B7C7EDE961660A0B843164351ED8EA460 Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/l3v9mZTPVTxPe5Kh1-GOSK6w8Zw.roa Signing time: Fri 02 Jan 2026 02:17:27 +0000 ROA not before: Fri 02 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213842 IP address blocks: 193.101.12.0/24 maxlen: 24 2a01:e540::/40 maxlen: 40 2a01:e541::/36 maxlen: 36 2a01:e542::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:de:96:16:60:a0:b8:43:16:43:51:ed:8e:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e Validity Not Before: Jan 2 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=977bfd9994cf553c4f7b92a1d7e18e48aeb0f19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:fa:e5:72:bd:14:ea:a1:fc:4d:4a:4a:e8: 86:85:32:31:1a:19:74:78:43:00:47:39:cc:84:d6: 5d:b6:5b:69:71:02:4d:30:14:68:6a:f4:a0:e8:57: ee:07:60:02:b4:46:42:0b:99:bc:8b:c5:0f:3f:7d: ca:38:2e:88:4d:1c:b0:81:c4:1b:cc:b9:13:70:bb: 10:33:aa:33:5d:93:39:ed:67:2a:55:cd:21:e4:71: 8b:70:b7:bc:83:e1:42:64:c3:30:41:9d:22:02:ca: d0:6e:2d:17:95:35:08:8a:60:22:3a:4b:2d:39:3f: cf:a9:51:26:e5:ae:0b:22:e4:7d:ed:ce:a6:3b:ef: f1:22:f7:58:6a:1c:2b:be:b0:84:9c:f9:34:34:4d: fb:64:a6:b4:74:96:76:bd:e3:ad:c6:d5:77:72:af: 89:d2:91:6c:ff:28:01:fe:ee:8b:8f:a3:1e:47:51: db:6e:25:2d:60:a4:ed:6c:9b:b0:11:81:82:f1:c3: 63:94:8e:bb:0e:1a:19:9f:0f:2c:3d:f3:fb:a4:66: f9:f8:0b:af:40:ef:24:7d:19:ce:82:58:5b:63:55: 59:a7:e4:5e:d4:89:d3:17:13:47:cc:82:34:99:36: 9c:3f:58:ea:5a:68:b8:16:2d:47:c0:2d:05:12:79: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7B:FD:99:94:CF:55:3C:4F:7B:92:A1:D7:E1:8E:48:AE:B0:F1:9C X509v3 Authority Key Identifier: keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/l3v9mZTPVTxPe5Kh1-GOSK6w8Zw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.12.0/24 IPv6: 2a01:e540::/40 2a01:e541::/36 2a01:e542::/36 Signature Algorithm: sha256WithRSAEncryption cc:42:61:df:3c:56:f8:88:c5:8b:67:6f:7b:cd:de:de:f8:d5: 2b:9d:91:66:a5:50:02:7f:30:f5:e3:25:ae:36:cd:f2:5c:78: e3:44:c4:fd:06:a2:73:b7:ee:78:35:5d:b7:5b:fd:9a:45:21: 0c:82:7f:da:ba:ab:a5:71:43:96:5f:16:4e:f2:2f:7a:80:ab: 97:42:28:d3:04:0e:dc:3e:73:26:0c:f7:88:2b:8c:a6:f1:b7: c6:da:c3:ac:31:3e:64:67:d7:76:0a:39:e2:2b:4e:6d:fa:4b: 28:76:74:d9:ff:d7:d9:b3:a9:09:96:9e:b9:3e:2d:2e:7a:a5: 61:3d:9e:05:00:52:e7:5f:c1:c3:bc:a3:bd:04:2e:37:d8:06: 0e:7f:3a:57:a0:18:65:7b:95:a3:90:0b:e3:5f:27:b7:55:6f: 3b:8a:bc:52:dc:1b:fa:3a:be:9f:a9:08:2a:4b:b4:ac:10:8a: a2:3f:7f:68:5c:16:36:0e:dd:88:10:54:63:a0:ec:c2:be:b0: b8:da:da:da:fb:74:36:df:c7:41:0a:f6:a0:83:31:48:45:00: 9c:df:3d:27:09:fb:ed:e0:d8:68:cb:7d:6d:39:2d:ee:de:d3: 54:cd:a2:bf:ef:8f:aa:18:c0:7d:af:07:8a:40:f6:db:10:3c: f7:fd:8c:9c -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8ft6WFmCguEMWQ1HtjqRgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzU2ODY1N2U1MGU2ZjhlNWM2YmZlZmE4OWNlZjM1MGQ5 NGY4MmUwHhcNMjYwMTAyMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzdiZmQ5OTk0Y2Y1NTNjNGY3YjkyYTFkN2UxOGU0OGFlYjBmMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugb65XK9FOqh/E1KSuiGhTIxGhl0 eEMARznMhNZdtltpcQJNMBRoavSg6FfuB2ACtEZCC5m8i8UPP33KOC6ITRywgcQb zLkTcLsQM6ozXZM57WcqVc0h5HGLcLe8g+FCZMMwQZ0iAsrQbi0XlTUIimAiOkst OT/PqVEm5a4LIuR97c6mO+/xIvdYahwrvrCEnPk0NE37ZKa0dJZ2veOtxtV3cq+J 0pFs/ygB/u6Lj6MeR1HbbiUtYKTtbJuwEYGC8cNjlI67DhoZnw8sPfP7pGb5+Auv QO8kfRnOglhbY1VZp+Re1InTFxNHzII0mTacP1jqWmi4Fi1HwC0FEnl8DwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFJd7/ZmUz1U8T3uSodfhjkiusPGcMB8GA1UdIwQY MBaAFP3FaGV+UOb45ca/76ic7zUNlPguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUt NDM1YWYxNGFhMDdhLzEvbDN2OW1aVFBWVHhQZTVLaDEtR09TSzZ3OFp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUtNDM1YWYxNGFhMDdh LzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAMBAIAATAGAwQAwWUMMB4E AgACMBgDBgAqAeVAAAMGBCoB5UEAAwYEKgHlQgAwDQYJKoZIhvcNAQELBQADggEB AMxCYd88VviIxYtnb3vN3t741SudkWalUAJ/MPXjJa42zfJceONExP0GonO37ng1 Xbdb/ZpFIQyCf9q6q6VxQ5ZfFk7yL3qAq5dCKNMEDtw+cyYM94grjKbxt8baw6wx PmRn13YKOeIrTm36Syh2dNn/19mzqQmWnrk+LS56pWE9ngUAUudfwcO8o70ELjfY Bg5/OlegGGV7laOQC+NfJ7dVbzuKvFLcG/o6vp+pCCpLtKwQiqI/f2hcFjYO3YgQ VGOg7MK+sLja2tr7dDbfx0EK9qCDMUhFAJzfPScJ++3g2GjLfW05Le7e01TNor/v j6oYwH2vB4pA9tsQPPf9jJw= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:41 2026 by rpki-client