This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa File: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (raw, json) Hash identifier: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U= Subject key identifier: 46:7D:FF:F6:F1:55:5D:4D:3A:08:DB:31:A0:91:75:32:63:A9:C3:B3 Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779 Certificate serial: 019B76EAF8B9DBFCEFA83DC076170C7C241E Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199034 IP address blocks: 91.202.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f8:b9:db:fc:ef:a8:3d:c0:76:17:0c:7c:24:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=467dfff6f1555d4d3a08db31a091753263a9c3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:59:0e:a8:5c:8d:17:f8:d0:22:fa:17:d6: 53:e0:b4:bd:4a:6c:6f:f2:93:9e:6f:cc:2f:6c:df: 18:19:10:1b:7a:7f:24:36:68:7d:56:85:c9:d1:0b: c9:28:35:ab:c6:9b:2f:d2:fd:b3:44:1c:eb:f3:79: f5:c1:8c:73:94:e2:48:a7:ea:55:09:17:6c:37:63: 4d:ed:52:15:57:60:b0:35:69:f1:5a:51:ca:b7:b2: a7:84:e9:d1:bb:8b:33:66:0b:22:a1:98:75:88:c7: d6:66:88:fb:d0:00:c0:53:47:bf:15:e6:ed:71:0c: c2:6b:73:2b:e7:f3:54:e5:59:70:af:8a:33:0a:b1: 1a:35:4d:eb:81:a4:a0:4d:a5:f1:58:42:de:37:64: 8b:85:59:45:0d:31:b7:cd:ef:95:28:94:7d:7e:1c: 42:e7:ed:cb:7d:00:04:56:3b:a4:ac:6d:7c:2b:f3: 8a:b6:82:3f:61:d8:8e:95:13:01:d6:47:58:7f:08: 3f:6d:f6:29:c8:d4:3f:05:c7:8f:fd:b2:5e:6c:62: 87:82:8d:a7:00:a4:2d:e3:6d:8e:d7:1f:c1:7e:2f: a1:f6:7f:9c:74:db:53:be:4f:41:9d:6f:bc:d9:88: fd:6c:78:63:cb:a6:73:74:70:b1:04:0b:7f:b0:db: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7D:FF:F6:F1:55:5D:4D:3A:08:DB:31:A0:91:75:32:63:A9:C3:B3 X509v3 Authority Key Identifier: keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.177.0/24 Signature Algorithm: sha256WithRSAEncryption 56:4d:63:b1:f9:bf:01:87:f4:a2:67:ad:b9:40:59:5a:24:18: f7:16:2d:8a:39:ba:de:79:27:bd:59:a6:30:00:e1:39:b4:85: d6:e6:7d:bf:14:72:6b:ea:34:5a:3c:65:9d:c5:41:fe:af:c8: 8e:a8:9e:69:43:fe:66:00:f8:e6:fd:9c:07:c1:19:7f:80:31: ad:a7:cd:b3:25:90:4d:3f:a3:ea:69:3f:2e:1d:3a:5d:36:43: 33:c5:49:11:6a:ff:a2:2e:0c:94:ef:05:98:fa:83:00:88:0a: 23:4b:b8:00:5b:0e:6c:ef:06:dc:b0:f6:53:8c:6b:f0:5f:84: e3:c2:37:e9:0b:8f:28:d4:f8:85:92:54:3d:7e:bf:c3:d7:42: 07:b2:fc:0f:a4:d5:76:95:f6:eb:e3:30:26:e8:5f:5d:7c:af: 53:e4:b2:71:d0:8c:c7:e0:4a:c4:9a:85:00:80:a2:f5:07:c2: 95:74:23:43:0b:e2:05:01:be:2a:91:5b:e8:61:49:26:b1:df: ca:5a:5b:26:0f:b6:cd:a3:3e:3a:fa:c3:2a:c6:9f:ca:f2:05: c4:8d:18:11:36:dd:80:e9:e8:b6:3a:cc:3f:5d:bf:87:8a:01: 9b:f6:26:5b:40:c5:3e:b5:09:9a:e7:4f:55:2f:d8:3f:81:a1: 44:ed:69:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vi52/zvqD3AdhcMfCQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2M5ZWUxYmUzMzA4ZmQ2YmQ0YTdjN2FjMmI5ZDkxMDA4 OWI3NzkwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjdkZmZmNmYxNTU1ZDRkM2EwOGRiMzFhMDkxNzUzMjYzYTljM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iNZDqhcjRf40CL6F9ZT4LS9Smxv 8pOeb8wvbN8YGRAben8kNmh9VoXJ0QvJKDWrxpsv0v2zRBzr83n1wYxzlOJIp+pV CRdsN2NN7VIVV2CwNWnxWlHKt7KnhOnRu4szZgsioZh1iMfWZoj70ADAU0e/Febt cQzCa3Mr5/NU5Vlwr4ozCrEaNU3rgaSgTaXxWELeN2SLhVlFDTG3ze+VKJR9fhxC 5+3LfQAEVjukrG18K/OKtoI/YdiOlRMB1kdYfwg/bfYpyNQ/BceP/bJebGKHgo2n AKQt422O1x/Bfi+h9n+cdNtTvk9BnW+82Yj9bHhjy6ZzdHCxBAt/sNuJpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZ9//bxVV1NOgjbMaCRdTJjqcOzMB8GA1UdIwQY MBaAFA48nuG+Mwj9a9Snx6wrnZEAibd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUt MDhmM2U4OTA3YzQyLzEvUm4zXzl2RlZYVTA2Q05zeG9KRjFNbU9wdzdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9jYWEyZGEtNWViYy00NWNiLWI4ZmUtMDhmM2U4OTA3YzQy LzEvRGp5ZTRiNHpDUDFyMUtmSHJDdWRrUUNKdDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8qxMA0G CSqGSIb3DQEBCwUAA4IBAQBWTWOx+b8Bh/SiZ625QFlaJBj3Fi2KObreeSe9WaYw AOE5tIXW5n2/FHJr6jRaPGWdxUH+r8iOqJ5pQ/5mAPjm/ZwHwRl/gDGtp82zJZBN P6PqaT8uHTpdNkMzxUkRav+iLgyU7wWY+oMAiAojS7gAWw5s7wbcsPZTjGvwX4Tj wjfpC48o1PiFklQ9fr/D10IHsvwPpNV2lfbr4zAm6F9dfK9T5LJx0IzH4ErEmoUA gKL1B8KVdCNDC+IFAb4qkVvoYUkmsd/KWlsmD7bNoz46+sMqxp/K8gXEjRgRNt2A 6ei2Osw/Xb+HigGb9iZbQMU+tQma509VL9g/gaFE7Wnk -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:46 2026 by rpki-client