This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Eg3JUkfxbztir9HN_o8vgleBp-M.roa File: Eg3JUkfxbztir9HN_o8vgleBp-M.roa (raw, json) Hash identifier: pziFeAYgAzuvFTx3EV487ib8sndyzSAJwFaa2yEgsxI= Subject key identifier: 12:0D:C9:52:47:F1:6F:3B:62:AF:D1:CD:FE:8F:2F:82:57:81:A7:E3 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C80165E0E5B2413354EF596B798313C Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Eg3JUkfxbztir9HN_o8vgleBp-M.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34936 IP address blocks: 204.11.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:16:5e:0e:5b:24:13:35:4e:f5:96:b7:98:31:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=120dc95247f16f3b62afd1cdfe8f2f825781a7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:99:32:0d:7b:2f:f4:fa:40:17:95:b3:34:b6: 2c:54:10:5c:9a:a7:aa:87:82:9e:09:09:8e:8a:46: de:cc:ea:a5:07:28:d0:d2:70:22:aa:98:30:c5:56: be:b0:fa:2a:ed:28:01:96:92:99:77:57:f1:fb:10: 8b:ad:b6:bc:3d:bd:60:98:cb:02:87:44:64:5a:fc: 61:67:5e:96:ac:86:f0:aa:9b:89:0b:f1:43:3a:02: d0:89:b3:59:61:79:3e:f2:f3:05:a8:d0:c4:97:18: 60:2a:47:ff:24:a4:b9:5f:a1:2b:75:1b:c6:3b:94: 78:bb:e6:0e:89:a0:ed:5e:cf:9a:22:e6:7d:a5:25: b1:8e:5f:e7:4f:d7:93:47:19:12:47:9d:c3:5b:49: 06:c6:9d:d0:26:8d:ef:06:00:cb:8f:1a:61:cc:ec: 90:a9:4b:17:a4:56:f9:b8:c0:fc:34:25:40:e6:4e: 0e:96:ba:79:28:da:be:c1:4a:23:c4:05:8e:21:3b: 06:4b:67:77:62:a5:fc:4a:ff:21:8b:81:7f:23:a7: 7c:c6:03:c9:3c:cf:bc:db:29:35:70:b6:4f:8d:a3: 73:a5:f8:57:3c:48:6e:3f:4d:b1:53:8e:f7:34:a8: d9:d3:47:85:43:b4:c5:f9:64:b1:0f:d2:44:b8:a5: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0D:C9:52:47:F1:6F:3B:62:AF:D1:CD:FE:8F:2F:82:57:81:A7:E3 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Eg3JUkfxbztir9HN_o8vgleBp-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.11.3.0/24 Signature Algorithm: sha256WithRSAEncryption 74:6c:a4:7d:35:49:54:bf:45:a3:8b:a2:90:32:c0:53:82:2e: b4:63:11:59:44:1d:bd:c0:bf:e2:8a:43:01:20:a6:28:d5:be: c8:c9:61:fa:4b:c6:f9:f1:1b:f0:8c:9f:f6:dd:be:d3:a4:3a: 35:d3:3d:ad:a5:be:06:a3:b9:87:64:09:f8:2a:90:fd:29:d2: 1b:80:c1:40:7c:4e:20:e6:9f:36:6d:37:8c:99:3b:c9:56:99: 3b:66:0e:6c:2e:86:29:85:75:8f:47:64:e1:32:5e:37:54:88: 24:9c:0d:6e:fe:2a:59:1c:8d:31:f1:c5:6a:bb:8d:ed:56:85: 5f:a9:88:4d:1a:a7:2c:3d:72:b8:69:d6:54:2f:7b:73:c9:c8: 3d:37:f4:eb:fa:68:8e:c3:63:e6:81:b7:a3:a8:4b:c2:db:51: 18:9c:28:72:53:4b:e8:c6:f2:1d:ed:03:bd:df:15:68:79:be: 65:c7:06:ae:84:88:f4:b5:ab:62:3a:74:17:62:e8:ce:4d:b7: 65:77:f5:a7:f3:65:4c:73:b7:ab:c0:92:fe:ca:1f:a0:76:30: ca:3e:92:20:ff:53:36:c9:b8:32:60:4e:fa:72:95:66:c6:81: 20:af:2d:fb:50:be:b3:d1:a4:e2:48:0d:d4:be:61:81:07:a9: 1f:7a:43:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBZeDlskEzVO9Za3mDE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjBkYzk1MjQ3ZjE2ZjNiNjJhZmQxY2RmZThmMmY4MjU3ODFhN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZkyDXsv9PpAF5WzNLYsVBBcmqeq h4KeCQmOikbezOqlByjQ0nAiqpgwxVa+sPoq7SgBlpKZd1fx+xCLrba8Pb1gmMsC h0RkWvxhZ16WrIbwqpuJC/FDOgLQibNZYXk+8vMFqNDElxhgKkf/JKS5X6ErdRvG O5R4u+YOiaDtXs+aIuZ9pSWxjl/nT9eTRxkSR53DW0kGxp3QJo3vBgDLjxphzOyQ qUsXpFb5uMD8NCVA5k4Olrp5KNq+wUojxAWOITsGS2d3YqX8Sv8hi4F/I6d8xgPJ PM+82yk1cLZPjaNzpfhXPEhuP02xU473NKjZ00eFQ7TF+WSxD9JEuKUV0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBINyVJH8W87Yq/Rzf6PL4JXgafjMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvRWczSlVrZnhienRpcjlITl9vOHZnbGVCcC1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAsDMA0G CSqGSIb3DQEBCwUAA4IBAQB0bKR9NUlUv0Wji6KQMsBTgi60YxFZRB29wL/iikMB IKYo1b7IyWH6S8b58RvwjJ/23b7TpDo10z2tpb4Go7mHZAn4KpD9KdIbgMFAfE4g 5p82bTeMmTvJVpk7Zg5sLoYphXWPR2ThMl43VIgknA1u/ipZHI0x8cVqu43tVoVf qYhNGqcsPXK4adZUL3tzycg9N/Tr+miOw2PmgbejqEvC21EYnChyU0voxvId7QO9 3xVoeb5lxwauhIj0tatiOnQXYujOTbdld/Wn82VMc7erwJL+yh+gdjDKPpIg/1M2 ybgyYE76cpVmxoEgry37UL6z0aTiSA3UvmGBB6kfekO8 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:55 2026 by rpki-client