This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/C3q1PlgupTSu7535g3AwDEhvM-k.roa File: C3q1PlgupTSu7535g3AwDEhvM-k.roa (raw, json) Hash identifier: +Xqznz7Io+t3ty/aPZH16Tk1gYdzK6FYiAZVSE2/wc8= Subject key identifier: 0B:7A:B5:3E:58:2E:A5:34:AE:EF:9D:F9:83:70:30:0C:48:6F:33:E9 Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45 Certificate serial: 019B7EA4CA381A37D171B4C52E332DB21457 Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/C3q1PlgupTSu7535g3AwDEhvM-k.roa Signing time: Fri 02 Jan 2026 12:18:07 +0000 ROA not before: Fri 02 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213536 IP address blocks: 93.187.109.0/24 maxlen: 24 2a02:4b60::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ca:38:1a:37:d1:71:b4:c5:2e:33:2d:b2:14:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45 Validity Not Before: Jan 2 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b7ab53e582ea534aeef9df98370300c486f33e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:33:b8:25:e1:2f:b6:d5:17:78:75:7b:a1: 81:6a:66:31:b2:bf:7d:45:bb:78:79:9b:15:10:6a: 73:07:2b:ec:c4:ec:28:bb:37:44:bb:e5:5b:c2:2f: fc:3f:be:21:5a:02:5a:c6:93:1d:c1:3e:b6:9c:8a: 50:f5:d2:cb:52:1d:22:f2:40:d8:b8:ba:32:b1:1e: 03:02:77:b9:a9:19:41:fd:be:a4:df:36:36:a0:8f: 73:90:a9:97:8e:87:dc:27:87:01:6d:71:4e:07:0e: db:6b:0f:1d:ee:fe:1c:ab:5e:82:b0:1f:39:28:1d: 11:83:0e:34:fe:cf:2c:1f:09:6d:22:f1:a0:ed:2e: cb:60:b8:e3:c7:f4:cd:4a:5a:58:11:c7:d9:45:3c: 51:a7:87:00:2e:06:af:e6:a7:66:ec:d4:4b:72:6a: ce:7f:c9:96:69:23:3e:c7:64:2f:18:cb:14:bb:17: 5c:b6:63:bb:9d:86:e7:7e:48:ad:25:50:12:cb:8f: 28:5f:27:09:2c:aa:bc:a5:83:1b:18:18:85:e9:d1: 50:f1:38:1d:df:d9:6b:cd:60:d6:7e:cc:7c:67:32: d6:13:81:48:cc:27:ee:2f:e1:c8:f6:12:23:d5:46: 96:ec:94:64:9d:89:4e:b0:5a:da:d4:b3:17:f7:cd: e4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7A:B5:3E:58:2E:A5:34:AE:EF:9D:F9:83:70:30:0C:48:6F:33:E9 X509v3 Authority Key Identifier: keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/C3q1PlgupTSu7535g3AwDEhvM-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.109.0/24 IPv6: 2a02:4b60::/64 Signature Algorithm: sha256WithRSAEncryption 34:1b:14:97:b9:3d:fe:04:b5:cc:34:09:5f:c2:d3:f9:13:2d: 15:46:74:c5:ca:94:16:86:28:53:7d:ee:e7:d9:32:77:4a:a2: 43:8c:92:c1:39:bc:62:f4:20:32:38:18:5f:d0:fb:45:7a:f7: af:a8:eb:7f:e4:a6:e3:4d:d9:c6:a6:59:59:c3:81:b4:76:d2: 25:30:b7:52:f0:6c:34:02:b0:43:ff:5f:b4:c2:7d:0a:48:dc: b2:f1:7f:63:c9:0c:4a:58:42:b2:0a:49:32:c7:73:61:d0:d1: 89:7d:fb:1e:6e:e3:a9:2a:78:e2:1a:f8:4b:26:a6:1f:02:1c: 26:8c:7a:87:51:2f:9e:9a:f9:bd:d7:bf:99:17:b2:de:1a:f5: 0e:3a:65:b1:6d:fb:a5:b1:00:96:19:9e:03:e1:49:a7:2d:84: ea:ae:c3:bd:fe:fd:0f:52:d3:33:21:2d:e0:9a:7b:7e:2b:bb: 6f:76:99:c8:94:59:89:02:25:55:09:d1:59:f9:48:d4:8a:93: 55:71:bb:e2:48:c4:96:cb:de:b1:9d:36:1a:45:04:0e:f0:6a: 0b:74:ad:a5:bb:4c:c8:dc:e2:fb:68:0f:6d:c7:2d:06:b7:22: b9:ab:34:ba:ab:ec:14:5d:8f:a4:d6:36:25:8d:80:47:0e:32: 75:6a:99:75 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt+pMo4GjfRcbTFLjMtshRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj MzBlNDUwHhcNMjYwMTAyMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjdhYjUzZTU4MmVhNTM0YWVlZjlkZjk4MzcwMzAwYzQ4NmYzM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSUzuCXhL7bVF3h1e6GBamYxsr99 Rbt4eZsVEGpzByvsxOwouzdEu+Vbwi/8P74hWgJaxpMdwT62nIpQ9dLLUh0i8kDY uLoysR4DAne5qRlB/b6k3zY2oI9zkKmXjofcJ4cBbXFOBw7baw8d7v4cq16CsB85 KB0Rgw40/s8sHwltIvGg7S7LYLjjx/TNSlpYEcfZRTxRp4cALgav5qdm7NRLcmrO f8mWaSM+x2QvGMsUuxdctmO7nYbnfkitJVASy48oXycJLKq8pYMbGBiF6dFQ8Tgd 39lrzWDWfsx8ZzLWE4FIzCfuL+HI9hIj1UaW7JRknYlOsFra1LMX983kBQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFAt6tT5YLqU0ru+d+YNwMAxIbzPpMB8GA1UdIwQY MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt NzM1NGE3M2JkYTdlLzEvQzNxMVBsZ3VwVFN1NzUzNWczQXdERWh2TS1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQAXbttMBEE AgACMAsDCQAqAktgAAAAADANBgkqhkiG9w0BAQsFAAOCAQEANBsUl7k9/gS1zDQJ X8LT+RMtFUZ0xcqUFoYoU33u59kyd0qiQ4ySwTm8YvQgMjgYX9D7RXr3r6jrf+Sm 403ZxqZZWcOBtHbSJTC3UvBsNAKwQ/9ftMJ9CkjcsvF/Y8kMSlhCsgpJMsdzYdDR iX37Hm7jqSp44hr4SyamHwIcJox6h1Evnpr5vde/mRey3hr1DjplsW37pbEAlhme A+FJpy2E6q7Dvf79D1LTMyEt4Jp7fiu7b3aZyJRZiQIlVQnRWflI1IqTVXG74kjE lsvesZ02GkUEDvBqC3StpbtMyNzi+2gPbcctBrciuas0uqvsFF2PpNY2JY2ARw4y dWqZdQ== -----END CERTIFICATE-----Generated at Fri Jan 9 18:02:33 2026 by rpki-client