This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/3ExD7nKcCYNGR68ATw2vAixFfPw.roa File: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (raw, json) Hash identifier: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY= Subject key identifier: DC:4C:43:EE:72:9C:09:83:46:47:AF:00:4F:0D:AF:02:2C:45:7C:FC Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053 Certificate serial: 019B79112F9EF20E183888EBF0F3138C7565 Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/3ExD7nKcCYNGR68ATw2vAixFfPw.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8245 IP address blocks: 195.242.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2f:9e:f2:0e:18:38:88:eb:f0:f3:13:8c:75:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc4c43ee729c09834647af004f0daf022c457cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:3d:bb:a0:4f:cd:06:80:80:b0:22:cb:10: 1d:ab:65:c8:eb:59:18:b0:4c:d8:12:17:63:d5:d3: ee:5e:b1:eb:79:0f:27:0f:18:c7:5f:12:63:5d:8f: e3:57:bb:19:9a:be:45:75:07:84:26:18:7f:11:f6: f5:e2:37:73:fc:6d:db:8a:66:75:bc:b3:83:07:2e: 3f:50:6f:88:c8:1c:a1:8d:d2:38:24:ff:f2:9c:8d: 4d:57:84:9c:2a:eb:02:d9:3b:58:ee:03:6d:ed:b1: 8d:14:e2:94:46:6d:5f:f6:27:47:f3:b5:b8:d7:c3: 20:a3:3a:53:6b:39:a9:e3:98:63:26:72:9b:32:81: 16:b0:24:62:0f:6e:ab:c0:dd:94:78:08:5d:e8:bb: 79:56:e4:3c:f3:d3:00:89:16:2e:7c:d7:df:ff:01: d9:69:f8:fd:fc:c6:6f:c4:3c:32:c5:c4:5f:82:af: 8b:ac:e1:19:4b:31:7c:6a:b8:64:1d:86:7d:ac:50: 0b:b5:ff:21:a6:c4:42:54:db:67:f2:e8:33:b6:18: e3:5a:91:3e:2d:a8:db:27:cd:f8:4a:3b:77:9a:e8: 42:c9:68:ce:c3:70:02:eb:42:25:66:ac:14:f5:da: 10:88:5b:e6:1a:d4:b8:af:0c:d9:a7:30:5c:27:ed: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4C:43:EE:72:9C:09:83:46:47:AF:00:4F:0D:AF:02:2C:45:7C:FC X509v3 Authority Key Identifier: keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/3ExD7nKcCYNGR68ATw2vAixFfPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.184.0/24 Signature Algorithm: sha256WithRSAEncryption a0:ac:ff:b7:7e:a3:17:8b:a8:ee:95:af:7c:6c:78:78:e2:9b: e9:8f:f6:16:ac:8f:a3:e2:f6:bb:8d:26:e3:6f:b0:84:33:58: cf:4b:dd:da:21:6e:de:4b:a7:db:fd:8a:37:b9:1c:4a:01:46: df:10:65:38:09:7b:e2:a8:f9:f0:e4:7e:6a:cc:4f:e4:57:42: 39:10:c1:fe:d1:ba:2b:ab:eb:9c:2f:f5:ba:fb:4c:49:c7:af: 90:5f:05:cc:6e:76:b2:86:0a:dc:11:0c:c0:85:af:8f:7a:3c: 4c:b6:50:4f:ab:cc:56:9e:97:bc:14:2b:c0:bb:24:d2:f9:4d: bc:5f:28:13:dd:0d:de:52:6f:bb:22:eb:36:5e:7c:ca:6f:ab: a4:af:51:c3:4e:80:a9:e4:87:9e:da:68:f1:eb:3e:af:fa:1b: 3b:09:4f:6c:4c:05:f9:a7:65:e5:e5:76:9e:f4:c3:3d:aa:9e: 17:08:83:23:9b:71:f7:3c:94:8c:ac:03:53:9b:67:82:89:44: 47:4e:64:35:12:4d:2f:f3:3a:90:a8:0d:5c:e5:01:e8:aa:21: 9e:02:50:4a:e6:0c:44:07:05:4e:b0:ad:d5:e1:cf:d9:53:9b: 98:b8:34:df:d6:7f:d9:f0:85:c3:68:64:b9:84:2d:e6:36:2e: cd:4f:dc:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ES+e8g4YOIjr8PMTjHVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwODAxMWVhNTFhOWZiY2Y4YmFlMGRmMWVkNDk5YTM0MDdk NjMwNTMwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzRjNDNlZTcyOWMwOTgzNDY0N2FmMDA0ZjBkYWYwMjJjNDU3Y2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Q9u6BPzQaAgLAiyxAdq2XI61kY sEzYEhdj1dPuXrHreQ8nDxjHXxJjXY/jV7sZmr5FdQeEJhh/Efb14jdz/G3bimZ1 vLODBy4/UG+IyByhjdI4JP/ynI1NV4ScKusC2TtY7gNt7bGNFOKURm1f9idH87W4 18MgozpTazmp45hjJnKbMoEWsCRiD26rwN2UeAhd6Lt5VuQ889MAiRYufNff/wHZ afj9/MZvxDwyxcRfgq+LrOEZSzF8arhkHYZ9rFALtf8hpsRCVNtn8ugzthjjWpE+ LajbJ834Sjt3muhCyWjOw3AC60IlZqwU9doQiFvmGtS4rwzZpzBcJ+31KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxMQ+5ynAmDRkevAE8NrwIsRXz8MB8GA1UdIwQY MBaAFGCAEepRqfvPi64N8e1JmjQH1jBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgt NzQyZjg2OTFiZWFhLzEvM0V4RDduS2NDWU5HUjY4QVR3MnZBaXhGZlB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgtNzQyZjg2OTFiZWFh LzEvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/K4MA0G CSqGSIb3DQEBCwUAA4IBAQCgrP+3fqMXi6jula98bHh44pvpj/YWrI+j4va7jSbj b7CEM1jPS93aIW7eS6fb/Yo3uRxKAUbfEGU4CXviqPnw5H5qzE/kV0I5EMH+0bor q+ucL/W6+0xJx6+QXwXMbnayhgrcEQzAha+PejxMtlBPq8xWnpe8FCvAuyTS+U28 XygT3Q3eUm+7Ius2XnzKb6ukr1HDToCp5Iee2mjx6z6v+hs7CU9sTAX5p2Xl5Xae 9MM9qp4XCIMjm3H3PJSMrANTm2eCiURHTmQ1Ek0v8zqQqA1c5QHoqiGeAlBK5gxE BwVOsK3V4c/ZU5uYuDTf1n/Z8IXDaGS5hC3mNi7NT9wU -----END CERTIFICATE-----Generated at Mon Jan 26 21:47:50 2026 by rpki-client