This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/3PYp69Isl6VmDKrE8-_c0R_s0QY.roa File: 3PYp69Isl6VmDKrE8-_c0R_s0QY.roa (raw, json) Hash identifier: 4MhpSOARWnFvB3IeWDhAMEL60atNMrQJ9zm0TOa/gKo= Subject key identifier: DC:F6:29:EB:D2:2C:97:A5:66:0C:AA:C4:F3:EF:DC:D1:1F:EC:D1:06 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13FB28F4CD3E394018387676107305 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/3PYp69Isl6VmDKrE8-_c0R_s0QY.roa Signing time: Fri 02 Jan 2026 14:19:34 +0000 ROA not before: Fri 02 Jan 2026 14:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56862 IP address blocks: 195.91.140.0/23 maxlen: 23 195.91.144.0/23 maxlen: 23 195.91.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:fb:28:f4:cd:3e:39:40:18:38:76:76:10:73:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcf629ebd22c97a5660caac4f3efdcd11fecd106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:65:5d:0d:eb:f5:0f:50:ad:5a:3f:be:2b: f7:67:36:3f:13:64:06:44:52:cb:e6:89:e0:e0:b2: cd:62:43:de:c9:af:1c:8a:05:73:c9:ba:f1:73:f1: bb:e3:0c:67:1e:60:84:c8:b8:26:46:3a:60:d7:16: 19:c5:36:97:31:87:d0:8a:17:53:7b:eb:23:c7:6c: 64:1e:fb:bd:de:3c:1b:e8:05:f1:04:d8:64:ca:8d: 9a:ba:1e:42:2f:0c:71:66:1d:f4:4d:30:26:77:53: 01:f2:16:13:09:bb:f4:04:c5:80:bf:ff:51:24:f8: ec:84:9c:be:51:80:b1:d2:88:13:9e:f8:49:04:13: cd:45:63:88:ef:e5:ca:3a:48:40:f9:cd:7c:32:07: b9:22:53:07:aa:67:f9:e5:84:98:a2:28:d6:93:d3: b9:15:65:e9:19:cf:c4:d5:aa:82:50:85:48:01:75: a0:8d:b6:15:1f:95:20:47:a5:96:57:16:d1:0f:90: 55:24:42:c9:20:28:19:ba:39:d7:7d:d1:0a:6b:5c: 27:9f:4e:2a:31:35:34:f6:26:51:25:9b:f6:b6:b9: ed:7d:16:28:ec:69:32:5e:2f:bf:4b:c1:56:51:8e: 82:d2:07:12:a6:81:db:72:40:15:b6:f4:21:6c:c5: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F6:29:EB:D2:2C:97:A5:66:0C:AA:C4:F3:EF:DC:D1:1F:EC:D1:06 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/3PYp69Isl6VmDKrE8-_c0R_s0QY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.91.140.0/23 195.91.144.0/22 Signature Algorithm: sha256WithRSAEncryption d0:1d:3c:a3:8e:55:cb:57:31:c8:15:50:b0:0d:ca:7f:0f:99: c8:33:1d:29:9b:40:97:37:04:7d:20:4b:36:45:37:dd:89:e6: 7e:1c:c5:5c:76:b6:b7:2f:ba:ef:c9:e1:48:60:7c:9c:39:41: 48:c3:ec:c8:35:e1:ce:bb:16:8a:f2:cd:68:68:07:d6:0e:41: cf:75:1d:69:fd:60:1d:50:35:f6:2a:7e:c6:fa:6e:67:e3:40: 62:c1:62:97:43:24:65:f9:77:b0:7e:ad:bc:8b:c3:f5:0b:9a: 04:d7:ae:da:08:c5:73:43:66:f2:72:78:a0:63:c9:04:38:33: d4:c2:29:0f:43:31:ff:70:26:7b:99:97:6b:73:4c:d4:ab:4f: 1d:85:43:ae:64:74:97:a2:f5:e8:8c:53:99:e9:6b:11:98:62: b8:9e:17:9d:45:03:3b:6e:72:e7:d7:9f:22:98:4f:10:5d:2b: ee:2c:88:49:71:db:96:c6:9a:db:93:ee:8a:d1:a9:d9:90:6a: d0:4d:e5:43:1b:ef:22:ce:12:73:8a:c6:74:5f:0b:e5:e4:91: d1:4a:33:2e:ab:cd:a4:32:b3:34:d1:01:f3:58:f1:e3:cf:11: 93:b3:ee:22:42:a7:3f:09:c7:3d:f7:fc:66:60:9c:25:21:be: 70:7f:18:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E/so9M0+OUAYOHZ2EHMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2Y2MjllYmQyMmM5N2E1NjYwY2FhYzRmM2VmZGNkMTFmZWNkMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMhlXQ3r9Q9QrVo/viv3ZzY/E2QG RFLL5ong4LLNYkPeya8cigVzybrxc/G74wxnHmCEyLgmRjpg1xYZxTaXMYfQihdT e+sjx2xkHvu93jwb6AXxBNhkyo2auh5CLwxxZh30TTAmd1MB8hYTCbv0BMWAv/9R JPjshJy+UYCx0ogTnvhJBBPNRWOI7+XKOkhA+c18Mge5IlMHqmf55YSYoijWk9O5 FWXpGc/E1aqCUIVIAXWgjbYVH5UgR6WWVxbRD5BVJELJICgZujnXfdEKa1wnn04q MTU09iZRJZv2trntfRYo7GkyXi+/S8FWUY6C0gcSpoHbckAVtvQhbMWrrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNz2KevSLJelZgyqxPPv3NEf7NEGMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvM1BZcDY5SXNsNlZtREtyRTgtX2MwUl9zMFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw1uMAwQC w1uQMA0GCSqGSIb3DQEBCwUAA4IBAQDQHTyjjlXLVzHIFVCwDcp/D5nIMx0pm0CX NwR9IEs2RTfdieZ+HMVcdra3L7rvyeFIYHycOUFIw+zINeHOuxaK8s1oaAfWDkHP dR1p/WAdUDX2Kn7G+m5n40BiwWKXQyRl+Xewfq28i8P1C5oE167aCMVzQ2bycnig Y8kEODPUwikPQzH/cCZ7mZdrc0zUq08dhUOuZHSXovXojFOZ6WsRmGK4nhedRQM7 bnLn158imE8QXSvuLIhJcduWxprbk+6K0anZkGrQTeVDG+8izhJzisZ0Xwvl5JHR SjMuq82kMrM00QHzWPHjzxGTs+4iQqc/Ccc99/xmYJwlIb5wfxgu -----END CERTIFICATE-----Generated at Thu Feb 5 06:00:18 2026 by rpki-client