This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/03e_nKrMH4A4-r2jcWSKOro4hEs.roa File: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (raw, json) Hash identifier: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ= Subject key identifier: D3:77:BF:9C:AA:CC:1F:80:38:FA:BD:A3:71:64:8A:3A:BA:38:84:4B Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Certificate serial: 019B79ED1D2AA6AE0692BAF2BD8A3EFF5C29 Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/03e_nKrMH4A4-r2jcWSKOro4hEs.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57000 IP address blocks: 194.39.228.0/24 maxlen: 24 194.39.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1d:2a:a6:ae:06:92:ba:f2:bd:8a:3e:ff:5c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d377bf9caacc1f8038fabda371648a3aba38844b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:1c:3b:c8:3f:4c:8f:28:98:c9:af:aa:2f: 04:7d:f9:c4:54:9b:65:b5:c7:f5:fc:91:20:93:63: 00:e4:7d:e1:b5:49:1d:f7:65:0e:74:29:e5:cf:a8: 6d:ae:66:33:cc:20:ea:f5:41:05:b5:1a:06:3a:1b: b2:82:ae:ac:93:98:f7:5f:e5:2a:81:c0:ef:88:7f: 94:72:1f:f3:07:d1:b5:47:a3:44:3d:2a:2c:ec:a1: bc:5e:46:aa:6f:07:c3:27:89:e6:3b:7d:0c:b4:eb: a3:0d:5a:13:0b:36:4b:37:61:10:0e:38:4a:9c:ce: 91:97:27:76:8a:6f:a4:09:06:eb:8c:9b:a2:05:a3: 08:7e:4e:d2:f0:30:35:17:98:62:32:fc:8d:99:4e: a8:07:42:91:d0:78:9b:37:dd:23:b0:78:13:39:e7: 2e:7f:3d:98:cc:45:73:f1:48:7c:a0:a4:f9:67:99: 44:f5:e4:a6:45:ad:c7:01:c5:7e:29:9a:ef:bb:10: ef:9e:6b:ff:41:c1:1e:fd:c8:86:81:2c:64:75:92: e0:d6:88:10:3a:2b:fc:5f:44:c3:c8:ed:9c:1f:4e: c7:94:43:7a:dd:40:3e:2f:68:79:16:34:58:a1:8b: 80:e4:37:ac:d7:e0:27:a7:d1:75:10:87:22:5d:a6: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:77:BF:9C:AA:CC:1F:80:38:FA:BD:A3:71:64:8A:3A:BA:38:84:4B X509v3 Authority Key Identifier: keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/03e_nKrMH4A4-r2jcWSKOro4hEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.228.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:ba:f0:28:f0:19:92:b1:4c:4a:76:85:fe:04:8e:e1:31:79: ad:b7:17:b1:f0:fd:e1:d3:7a:fe:5d:47:e7:90:c4:18:8b:dc: 72:3b:fb:21:fa:88:78:b4:ac:50:db:4e:f2:a0:75:38:b9:0a: c4:7d:ba:8e:0a:ab:cc:28:88:54:d0:d5:83:78:8f:79:fd:cb: d8:c5:5e:35:5e:00:7b:07:c8:47:fd:2a:49:0a:87:26:c6:1a: 1d:ea:b8:7f:98:52:fe:a1:46:11:21:e1:9e:83:e6:49:b3:17: 5b:ba:e0:c7:d2:ce:bf:d3:c7:31:01:0c:d4:c6:b6:76:5e:06: ff:f6:97:bd:7e:60:d5:0a:3e:f4:a7:c4:31:6f:fb:00:7d:86: 99:92:da:6e:e0:08:12:4c:9d:22:bb:0c:a4:86:d2:14:f2:b8: c9:1b:b0:b2:60:70:f9:81:b1:20:30:f0:29:b5:f9:07:c4:2b: b7:61:27:c6:5c:53:d9:80:05:89:a7:38:07:ba:96:5b:d1:a8: a3:e0:66:bc:bd:b8:bb:d7:e1:0a:fa:c1:d7:2e:a8:96:a3:77: 3e:aa:3c:20:95:24:10:ca:d4:c7:aa:3e:23:f3:cc:6c:79:05: 2b:0e:cb:b2:fb:be:cc:6c:88:9c:e0:1c:3f:28:6e:c3:7f:79: 25:72:0f:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57R0qpq4GkrryvYo+/1wpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5 Y2UzM2EwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzc3YmY5Y2FhY2MxZjgwMzhmYWJkYTM3MTY0OGEzYWJhMzg4NDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugocO8g/TI8omMmvqi8EffnEVJtl tcf1/JEgk2MA5H3htUkd92UOdCnlz6htrmYzzCDq9UEFtRoGOhuygq6sk5j3X+Uq gcDviH+Uch/zB9G1R6NEPSos7KG8XkaqbwfDJ4nmO30MtOujDVoTCzZLN2EQDjhK nM6Rlyd2im+kCQbrjJuiBaMIfk7S8DA1F5hiMvyNmU6oB0KR0HibN90jsHgTOecu fz2YzEVz8Uh8oKT5Z5lE9eSmRa3HAcV+KZrvuxDvnmv/QcEe/ciGgSxkdZLg1ogQ Oiv8X0TDyO2cH07HlEN63UA+L2h5FjRYoYuA5Des1+Anp9F1EIciXaZFJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNN3v5yqzB+AOPq9o3Fkijq6OIRLMB8GA1UdIwQY MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt NjJiZTUzNDI1Njc2LzEvMDNlX25Lck1INEE0LXIyamNXU0tPcm80aEVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2 LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwifkMA0G CSqGSIb3DQEBCwUAA4IBAQA7uvAo8BmSsUxKdoX+BI7hMXmttxex8P3h03r+XUfn kMQYi9xyO/sh+oh4tKxQ207yoHU4uQrEfbqOCqvMKIhU0NWDeI95/cvYxV41XgB7 B8hH/SpJCocmxhod6rh/mFL+oUYRIeGeg+ZJsxdbuuDH0s6/08cxAQzUxrZ2Xgb/ 9pe9fmDVCj70p8Qxb/sAfYaZktpu4AgSTJ0iuwykhtIU8rjJG7CyYHD5gbEgMPAp tfkHxCu3YSfGXFPZgAWJpzgHupZb0aij4Ga8vbi71+EK+sHXLqiWo3c+qjwglSQQ ytTHqj4j88xseQUrDsuy+77MbIic4Bw/KG7Df3klcg/X -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:58 2026 by rpki-client