This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/S3-C960eDjtkhmLESJEggehwHME.roa File: S3-C960eDjtkhmLESJEggehwHME.roa (raw, json) Hash identifier: eXKQYhtmCASg+7u8rDqDnt6Fk8AoSBqR8NO1VXIyQ3c= Subject key identifier: 4B:7F:82:F7:AD:1E:0E:3B:64:86:62:C4:48:91:20:81:E8:70:1C:C1 Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06 Certificate serial: 019B7834F059041C5B864220E6A9C409B1C3 Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/S3-C960eDjtkhmLESJEggehwHME.roa Signing time: Thu 01 Jan 2026 06:18:13 +0000 ROA not before: Thu 01 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 176.28.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f0:59:04:1c:5b:86:42:20:e6:a9:c4:09:b1:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06 Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b7f82f7ad1e0e3b648662c448912081e8701cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:78:1f:8b:36:30:cb:e5:0c:98:8c:d5:bd: 7a:51:2b:46:7e:47:b8:91:c0:2a:63:c0:44:3c:f2: d9:60:9e:d0:1e:9c:1f:df:ff:4f:f9:ea:cf:da:2c: c1:3d:65:7b:01:25:88:73:bd:a3:ba:2b:d3:bc:5d: da:16:eb:95:79:dc:d7:d3:48:8e:b7:54:93:a4:25: 08:6d:ab:bc:65:bf:72:29:80:28:fe:66:29:6f:14: 55:0f:47:7b:c3:df:24:53:82:39:7d:78:67:c8:73: ca:34:35:0f:ab:84:60:27:05:1d:5d:e2:6e:40:c9: 5d:dd:cd:d0:79:b9:08:13:8f:91:9e:89:3b:21:79: 10:f3:62:b0:66:f9:58:69:aa:6e:ab:be:cd:c9:c8: da:37:3a:e7:1a:eb:c7:c3:9b:31:96:28:be:e0:61: f6:ae:7a:49:3a:57:3c:8b:12:a5:98:eb:5a:bc:26: 7f:3a:0d:87:18:e4:cd:4f:0e:e4:90:36:3a:02:5e: 96:b8:5d:22:e7:c2:f1:74:37:d7:8e:07:ae:1a:f5: a3:a7:66:1e:8c:39:21:74:74:6b:d3:0f:9e:a6:96: 8a:8f:ec:ec:1e:eb:1b:1b:4a:54:1b:5f:df:d6:6f: da:4a:a1:fe:c0:ea:b0:33:9f:f0:37:04:af:25:8a: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7F:82:F7:AD:1E:0E:3B:64:86:62:C4:48:91:20:81:E8:70:1C:C1 X509v3 Authority Key Identifier: keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/S3-C960eDjtkhmLESJEggehwHME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.28.76.0/24 Signature Algorithm: sha256WithRSAEncryption d6:97:b4:02:61:1d:72:f9:d2:d9:69:b9:74:d0:04:50:83:5e: 5d:36:79:a5:c8:97:a6:9f:2e:7a:cf:d6:5b:1e:88:e1:6e:24: 31:24:58:36:ae:aa:56:c1:75:4e:83:40:04:d0:d1:6c:f2:6a: cb:78:75:7a:9c:ce:f8:da:d5:db:30:11:40:26:ac:4e:5e:3d: 53:80:fb:c3:52:81:e6:93:dd:f6:1b:a6:9b:19:9f:4a:77:21: 02:30:a8:16:bd:02:97:a8:c6:d9:9c:df:41:95:3f:c0:4a:a9: 77:1d:9d:2c:aa:09:f4:59:0d:89:bc:98:bc:fc:9b:cd:cf:43: 6b:c3:de:22:5a:dd:f4:7f:0c:f4:71:0c:82:c3:6a:b1:4f:de: 98:10:94:e3:09:61:73:0a:fa:92:57:ee:6b:21:7b:d8:c3:a4: 0a:82:84:b4:9b:60:ff:5b:5a:c6:6c:bb:ac:4f:4d:93:60:0e: b8:94:b0:94:ec:60:f1:6b:ad:da:0d:16:b0:a6:6a:44:38:f0: 98:8f:fb:78:a4:95:86:de:0f:e8:73:aa:8d:0b:3f:06:3f:3b: bf:c8:2d:10:88:9a:62:2e:07:8d:2f:01:9b:50:b0:62:73:5a: e6:6f:44:56:6e:18:2f:43:7f:23:6e:07:04:4b:bd:68:c3:d9: b8:8c:85:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPBZBBxbhkIg5qnECbHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODMyMzE3ZDI1NDQ0MzRiNjU5ZTU2OTIwNzFkOGU0YzQ5 MzhiMDYwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjdmODJmN2FkMWUwZTNiNjQ4NjYyYzQ0ODkxMjA4MWU4NzAxY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVJ4H4s2MMvlDJiM1b16UStGfke4 kcAqY8BEPPLZYJ7QHpwf3/9P+erP2izBPWV7ASWIc72juivTvF3aFuuVedzX00iO t1STpCUIbau8Zb9yKYAo/mYpbxRVD0d7w98kU4I5fXhnyHPKNDUPq4RgJwUdXeJu QMld3c3QebkIE4+Rnok7IXkQ82KwZvlYaapuq77NycjaNzrnGuvHw5sxlii+4GH2 rnpJOlc8ixKlmOtavCZ/Og2HGOTNTw7kkDY6Al6WuF0i58LxdDfXjgeuGvWjp2Ye jDkhdHRr0w+eppaKj+zsHusbG0pUG1/f1m/aSqH+wOqwM5/wNwSvJYoUmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEt/gvetHg47ZIZixEiRIIHocBzBMB8GA1UdIwQY MBaAFDSDIxfSVEQ0tlnlaSBx2OTEk4sGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMt MzBjNjVhZDgzMjkxLzEvUzMtQzk2MGVEanRraG1MRVNKRWdnZWh3SE1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMtMzBjNjVhZDgzMjkx LzEvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsBxMMA0G CSqGSIb3DQEBCwUAA4IBAQDWl7QCYR1y+dLZabl00ARQg15dNnmlyJemny56z9Zb HojhbiQxJFg2rqpWwXVOg0AE0NFs8mrLeHV6nM742tXbMBFAJqxOXj1TgPvDUoHm k932G6abGZ9KdyECMKgWvQKXqMbZnN9BlT/ASql3HZ0sqgn0WQ2JvJi8/JvNz0Nr w94iWt30fwz0cQyCw2qxT96YEJTjCWFzCvqSV+5rIXvYw6QKgoS0m2D/W1rGbLus T02TYA64lLCU7GDxa63aDRawpmpEOPCYj/t4pJWG3g/oc6qNCz8GPzu/yC0QiJpi LgeNLwGbULBic1rmb0RWbhgvQ38jbgcES71ow9m4jIXn -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:18 2026 by rpki-client