This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa File: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (raw, json) Hash identifier: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als= Subject key identifier: DE:57:35:22:EE:E1:0B:EC:C7:2C:C4:24:64:DB:62:8B:BA:2A:83:93 Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e Certificate serial: 019B78A3709E3192DC9E345662397DB22035 Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212368 IP address blocks: 193.134.253.0/24 maxlen: 24 193.135.101.0/24 maxlen: 24 2a14:8980::/48 maxlen: 48 2a14:8981::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:70:9e:31:92:dc:9e:34:56:62:39:7d:b2:20:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de573522eee10becc72cc42464db628bba2a8393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:bb:df:a9:fc:ac:ee:1b:aa:9e:b6:dd:08: 39:07:1a:06:b0:7e:a3:34:1e:f6:b7:7f:53:0e:02: 80:c5:b1:0a:ea:29:49:99:4d:1a:93:c0:b0:31:24: 53:b0:f0:64:1b:46:e1:6e:cc:b0:43:30:74:3b:84: f7:d3:f4:39:8c:67:d2:b2:a0:db:13:62:e4:2a:bc: 4a:38:54:e2:e5:bd:0c:f1:bf:67:4c:c9:2f:ba:57: ff:16:b7:20:7f:d5:9f:3e:0d:77:0b:06:fd:41:3f: 8d:5a:cb:5d:7c:73:73:bc:ba:6f:a2:6f:01:37:2c: 12:60:26:8d:de:8c:b0:e5:a4:9c:46:1a:70:e9:69: 15:32:d6:84:46:9b:e4:c6:9c:e3:b2:99:7e:41:49: 05:7c:f7:71:5f:a5:f2:ea:6c:1f:68:ee:83:26:bc: eb:f1:9c:1e:97:48:47:64:7c:41:b1:cd:b0:f6:8c: ea:24:e8:ed:09:52:af:41:4d:38:bf:b7:22:b7:f3: 61:c9:d1:62:51:d8:44:df:b2:f1:d7:cb:f3:36:aa: 49:5a:bc:7a:2d:1b:e9:63:dc:90:e4:5a:15:32:1f: 6f:ce:ab:70:f8:dc:b3:d3:bc:08:e8:8e:8c:7b:1a: 3c:bc:60:0b:35:7c:de:71:68:08:83:c6:64:50:5d: 9e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:57:35:22:EE:E1:0B:EC:C7:2C:C4:24:64:DB:62:8B:BA:2A:83:93 X509v3 Authority Key Identifier: keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.253.0/24 193.135.101.0/24 IPv6: 2a14:8980::/48 2a14:8981::/48 Signature Algorithm: sha256WithRSAEncryption 21:33:1c:a1:4c:de:34:4d:be:a2:e6:a5:53:bd:3c:dd:7c:19: 7d:c0:f3:09:c4:d3:81:32:c9:9c:44:3c:30:3b:ae:9c:04:08: 35:19:30:5e:02:a4:87:2e:0e:af:79:af:82:bf:03:69:9f:58: f8:a2:ef:29:d3:02:36:ce:61:09:51:12:15:11:99:83:b2:a1: 68:27:b3:3a:01:85:8e:1d:79:8c:82:3a:26:a0:3d:d2:cf:79: 5b:41:36:53:be:06:c6:d6:39:44:c7:c0:b4:71:e2:fd:ff:5d: 35:2f:69:6f:0b:3c:ab:e3:bc:b1:57:86:1e:9f:1d:e0:63:cd: 0e:16:64:e7:98:22:bf:17:c9:eb:ca:9f:ff:19:f6:e3:b1:06: c6:42:f5:44:5f:47:88:d0:b6:bf:1b:89:71:c6:c6:b4:3c:e3: 67:30:76:b4:2f:46:30:60:25:23:4d:06:d8:11:da:07:37:05: 8d:44:c2:d4:d5:6c:4a:a9:4a:96:67:cb:68:26:52:33:ec:71: e2:c4:05:b4:08:5c:bd:47:0a:6c:8d:4c:fc:be:e5:5e:5c:1b: 4a:fa:65:1c:67:fd:38:c5:8c:98:ec:ab:5a:96:25:7e:b8:16: 40:e1:f7:85:12:c2:e4:a9:b9:bb:81:42:2e:24:26:90:df:c5: 4e:a0:33:9d -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt4o3CeMZLcnjRWYjl9siA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi ZTg2OGUwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTU3MzUyMmVlZTEwYmVjYzcyY2M0MjQ2NGRiNjI4YmJhMmE4MzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHK736n8rO4bqp623Qg5BxoGsH6j NB72t39TDgKAxbEK6ilJmU0ak8CwMSRTsPBkG0bhbsywQzB0O4T30/Q5jGfSsqDb E2LkKrxKOFTi5b0M8b9nTMkvulf/Frcgf9WfPg13Cwb9QT+NWstdfHNzvLpvom8B NywSYCaN3oyw5aScRhpw6WkVMtaERpvkxpzjspl+QUkFfPdxX6Xy6mwfaO6DJrzr 8Zwel0hHZHxBsc2w9ozqJOjtCVKvQU04v7cit/NhydFiUdhE37Lx18vzNqpJWrx6 LRvpY9yQ5FoVMh9vzqtw+Nyz07wI6I6Mexo8vGALNXzecWgIg8ZkUF2enQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFN5XNSLu4QvsxyzEJGTbYou6KoOTMB8GA1UdIwQY MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt NTNmNTc1MDRlZjM1LzEvM2xjMUl1N2hDLXpITE1Ra1pOdGlpN29xZzVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1 LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAwYb9AwQA wYdlMBgEAgACMBIDBwAqFImAAAADBwAqFImBAAAwDQYJKoZIhvcNAQELBQADggEB ACEzHKFM3jRNvqLmpVO9PN18GX3A8wnE04EyyZxEPDA7rpwECDUZMF4CpIcuDq95 r4K/A2mfWPii7ynTAjbOYQlREhURmYOyoWgnszoBhY4deYyCOiagPdLPeVtBNlO+ BsbWOUTHwLRx4v3/XTUvaW8LPKvjvLFXhh6fHeBjzQ4WZOeYIr8XyevKn/8Z9uOx BsZC9URfR4jQtr8biXHGxrQ842cwdrQvRjBgJSNNBtgR2gc3BY1EwtTVbEqpSpZn y2gmUjPsceLEBbQIXL1HCmyNTPy+5V5cG0r6ZRxn/TjFjJjsq1qWJX64FkDh94US wuSpubuBQi4kJpDfxU6gM50= -----END CERTIFICATE-----Generated at Sun Jan 11 05:38:50 2026 by rpki-client