This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/3rngGDt_iwfhoOnfpD1kt_StBx0.roa File: 3rngGDt_iwfhoOnfpD1kt_StBx0.roa (raw, json) Hash identifier: KjcAZXNR5n6zPZTAkslgvia87YFrMCL2teXsMct736o= Subject key identifier: DE:B9:E0:18:3B:7F:8B:07:E1:A0:E9:DF:A4:3D:64:B7:F4:AD:07:1D Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B7910826837E464CED832128C5CA07625 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/3rngGDt_iwfhoOnfpD1kt_StBx0.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6659 IP address blocks: 194.64.31.0/24 maxlen: 24 195.180.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:82:68:37:e4:64:ce:d8:32:12:8c:5c:a0:76:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deb9e0183b7f8b07e1a0e9dfa43d64b7f4ad071d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:74:86:0d:25:6e:73:f0:73:3a:d0:a5:91: 1d:11:cc:20:91:87:43:76:43:9c:f1:04:a9:f1:41: 40:a1:91:cf:88:c7:df:15:26:53:18:16:24:3b:d8: 76:55:87:e2:e1:e5:05:58:ea:80:01:e0:99:a6:90: b0:47:11:8a:89:5e:b5:1e:7f:ca:c9:de:0d:96:0a: 24:c6:0d:a7:7a:07:f8:4e:7a:00:b2:03:5a:e5:50: dc:f3:e4:1e:4c:6e:28:d6:59:a4:cf:37:2c:f4:57: e3:96:f6:86:5a:d7:63:bb:66:88:f7:25:95:07:f0: 3e:cb:ee:52:bc:8d:5c:8f:0d:0f:b6:a3:cb:0f:32: 9c:9d:85:d6:6e:03:06:7d:0e:09:67:64:d8:5f:cd: 59:30:9c:d6:ba:2e:ef:78:56:2e:74:c4:c9:25:7d: 43:4d:9d:aa:ef:be:a2:4d:47:54:ce:c1:f3:a8:83: 28:5d:8d:d4:cf:31:13:7c:ca:31:ce:0b:2d:1a:c0: be:60:a4:f4:1f:60:d8:be:a8:2b:17:bc:ee:a5:9c: e3:1e:79:5c:51:42:d2:86:79:57:ad:5d:07:c0:06: c5:75:ed:33:08:3f:a0:33:62:d5:48:da:e7:a3:8b: f6:67:7e:c8:fc:32:8a:75:7f:5f:f9:3f:1b:21:5e: ae:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B9:E0:18:3B:7F:8B:07:E1:A0:E9:DF:A4:3D:64:B7:F4:AD:07:1D X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/3rngGDt_iwfhoOnfpD1kt_StBx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.64.31.0/24 195.180.249.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:8c:52:45:a1:c1:05:8b:b2:f5:10:0d:a2:df:ee:d7:7a:be: 05:d5:73:9a:67:19:87:a6:fc:a9:7c:b8:e3:75:4e:f1:ab:96: 87:b7:a3:2d:b9:60:7c:19:ad:b9:85:a3:c1:03:fe:bc:2b:c6: cd:75:53:c1:e1:ab:58:38:20:6f:6b:54:9b:c2:a1:3e:bb:f7: f7:79:01:6b:21:65:e8:f5:47:08:dd:ae:c3:39:c3:2f:d7:32: bd:1b:8a:74:9c:ee:5b:cc:43:6a:bf:3d:6b:d7:24:aa:88:28: 15:51:08:66:c7:1e:43:50:6a:ab:7b:b6:25:5d:a8:a0:e1:2a: 95:84:09:4b:a5:57:95:56:0a:28:d0:f1:b7:7f:dc:d2:f8:82: be:79:57:87:aa:af:7e:95:27:fb:60:70:49:a4:1c:89:cd:4f: 1e:50:87:a0:a3:91:12:70:a5:e6:35:4b:9e:47:cd:7c:9f:d1: 32:20:d8:c2:77:0b:e8:0d:ff:83:ef:bd:f5:da:c1:77:46:5d: 25:aa:ea:23:7c:22:ac:e9:0f:8e:40:fe:43:5b:85:96:7a:bb: 21:2b:17:8b:89:57:cd:e0:69:d0:95:f1:06:4b:d0:d7:26:09: c5:a1:23:59:d5:3a:92:51:ce:09:16:3d:cb:b2:b1:c4:7e:b3: 49:e5:34:13 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EIJoN+RkztgyEoxcoHYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWI5ZTAxODNiN2Y4YjA3ZTFhMGU5ZGZhNDNkNjRiN2Y0YWQwNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycl0hg0lbnPwczrQpZEdEcwgkYdD dkOc8QSp8UFAoZHPiMffFSZTGBYkO9h2VYfi4eUFWOqAAeCZppCwRxGKiV61Hn/K yd4Nlgokxg2negf4TnoAsgNa5VDc8+QeTG4o1lmkzzcs9FfjlvaGWtdju2aI9yWV B/A+y+5SvI1cjw0PtqPLDzKcnYXWbgMGfQ4JZ2TYX81ZMJzWui7veFYudMTJJX1D TZ2q776iTUdUzsHzqIMoXY3UzzETfMoxzgstGsC+YKT0H2DYvqgrF7zupZzjHnlc UULShnlXrV0HwAbFde0zCD+gM2LVSNrno4v2Z37I/DKKdX9f+T8bIV6u6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN654Bg7f4sH4aDp36Q9ZLf0rQcdMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvM3JuZ0dEdF9pd2Zob09uZnBEMWt0X1N0QngwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwkAfAwQA w7T5MA0GCSqGSIb3DQEBCwUAA4IBAQBOjFJFocEFi7L1EA2i3+7Xer4F1XOaZxmH pvypfLjjdU7xq5aHt6MtuWB8Ga25haPBA/68K8bNdVPB4atYOCBva1SbwqE+u/f3 eQFrIWXo9UcI3a7DOcMv1zK9G4p0nO5bzENqvz1r1ySqiCgVUQhmxx5DUGqre7Yl Xaig4SqVhAlLpVeVVgoo0PG3f9zS+IK+eVeHqq9+lSf7YHBJpByJzU8eUIego5ES cKXmNUueR818n9EyINjCdwvoDf+D77312sF3Rl0lquojfCKs6Q+OQP5DW4WWersh KxeLiVfN4GnQlfEGS9DXJgnFoSNZ1TqSUc4JFj3LsrHEfrNJ5TQT -----END CERTIFICATE-----Generated at Wed Jan 21 18:43:38 2026 by rpki-client