This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa File: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (raw, json) Hash identifier: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk= Subject key identifier: BE:8D:C6:BD:33:7F:70:F7:74:F8:F8:29:4A:98:13:55:63:AE:42:B9 Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019B7C127FF91A0C274006233405098601E5 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa Signing time: Fri 02 Jan 2026 00:19:05 +0000 ROA not before: Fri 02 Jan 2026 00:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204428 IP address blocks: 80.94.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7f:f9:1a:0c:27:40:06:23:34:05:09:86:01:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be8dc6bd337f70f774f8f8294a98135563ae42b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:3a:06:c8:a1:97:6a:ca:f0:58:23:1f:1c: 9e:59:95:cb:3e:d2:11:36:46:81:30:79:fc:fa:2a: d1:9e:6b:67:46:96:5f:5e:7e:36:96:4c:ff:b3:13: b8:54:a8:2e:01:b5:0b:9f:73:c1:27:59:fe:3c:68: e6:e1:56:cc:2b:c9:13:9f:97:3b:46:24:dd:4c:e7: 3c:35:95:fc:cd:b0:09:97:f4:ee:4a:5f:d1:ec:c4: fb:89:f6:75:9b:11:54:01:59:29:39:14:24:ba:1c: b6:74:20:38:5c:31:bc:c6:b5:a3:bb:f1:e9:a3:ca: ae:7f:d2:53:b3:0b:28:79:ea:8a:26:cb:6a:d5:ff: 85:45:15:8c:f0:5c:54:9a:c4:80:c5:b2:f6:b5:a3: e7:bf:48:10:9e:e9:a3:77:54:b3:ab:9b:6a:1f:f4: b9:9c:d8:fb:d2:3f:cc:44:a9:a0:67:eb:c0:81:2a: 00:79:e5:a1:6b:a0:e6:0b:d4:b2:5b:50:a8:b7:1b: 26:63:d3:95:4d:ee:80:5c:2d:c8:d4:25:86:29:e9: d2:c9:1d:4a:8a:0f:30:d4:2a:97:f4:94:a7:ed:77: 3f:5a:56:52:f1:4d:1c:b0:1b:20:f4:83:d8:7e:a4: 7f:4b:0d:e0:99:9e:e4:0a:ff:f6:69:70:2e:1a:7a: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8D:C6:BD:33:7F:70:F7:74:F8:F8:29:4A:98:13:55:63:AE:42:B9 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.94.95.0/24 Signature Algorithm: sha256WithRSAEncryption 14:84:14:b5:05:9c:a5:2d:93:94:06:a1:77:49:3f:6e:7c:e8: 66:1e:d4:c6:68:ee:e6:d5:17:fa:44:85:c0:17:85:ed:ce:a5: 5c:93:ff:bc:eb:03:fa:4c:07:ca:1e:2d:b9:8d:1f:bf:01:4b: cd:29:76:7b:8a:35:c6:b0:64:2b:96:8a:ab:7a:5b:bd:bb:14: 39:fc:60:21:e2:25:6e:b7:0b:12:d0:a3:6d:a8:4c:57:3a:20: d0:f5:f3:d9:2b:b7:46:6e:bc:64:17:e9:55:2c:d2:98:0c:dc: 7e:20:ae:ba:6f:1d:d3:49:04:02:7b:ea:22:92:a8:a8:45:e7: 1a:e1:ac:6f:a5:cc:84:bc:98:b8:3f:b9:41:bc:29:99:4b:e6: d4:77:d3:bb:fe:a3:a6:4c:d1:e6:5c:10:c8:8f:d3:09:25:36: 6f:36:35:3e:43:29:ad:63:89:13:7f:d8:e9:e5:ea:9c:54:fa: 5d:45:37:bf:ed:74:6e:d5:6d:ac:ba:ae:99:e0:1d:51:f4:a3: 88:b2:cd:ca:86:64:0a:9d:17:62:ef:90:58:2b:bb:85:4f:2b: 32:2f:8b:d7:26:eb:69:5a:5f:9f:fe:06:c6:bd:c3:48:66:29: 69:f5:bc:c0:fb:cb:56:52:e0:e1:92:7f:da:ba:8c:3f:fe:57: e3:50:3b:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8En/5GgwnQAYjNAUJhgHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZThkYzZiZDMzN2Y3MGY3NzRmOGY4Mjk0YTk4MTM1NTYzYWU0MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZU6Bsihl2rK8FgjHxyeWZXLPtIR NkaBMHn8+irRnmtnRpZfXn42lkz/sxO4VKguAbULn3PBJ1n+PGjm4VbMK8kTn5c7 RiTdTOc8NZX8zbAJl/TuSl/R7MT7ifZ1mxFUAVkpORQkuhy2dCA4XDG8xrWju/Hp o8quf9JTswsoeeqKJstq1f+FRRWM8FxUmsSAxbL2taPnv0gQnumjd1Szq5tqH/S5 nNj70j/MRKmgZ+vAgSoAeeWha6DmC9SyW1CotxsmY9OVTe6AXC3I1CWGKenSyR1K ig8w1CqX9JSn7Xc/WlZS8U0csBsg9IPYfqR/Sw3gmZ7kCv/2aXAuGnpRYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL6Nxr0zf3D3dPj4KUqYE1VjrkK5MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvdm8zR3ZUTl9jUGQwLVBncFNwZ1RWV091UXJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF5fMA0G CSqGSIb3DQEBCwUAA4IBAQAUhBS1BZylLZOUBqF3ST9ufOhmHtTGaO7m1Rf6RIXA F4XtzqVck/+86wP6TAfKHi25jR+/AUvNKXZ7ijXGsGQrloqrelu9uxQ5/GAh4iVu twsS0KNtqExXOiDQ9fPZK7dGbrxkF+lVLNKYDNx+IK66bx3TSQQCe+oikqioReca 4axvpcyEvJi4P7lBvCmZS+bUd9O7/qOmTNHmXBDIj9MJJTZvNjU+QymtY4kTf9jp 5eqcVPpdRTe/7XRu1W2suq6Z4B1R9KOIss3KhmQKnRdi75BYK7uFTysyL4vXJutp Wl+f/gbGvcNIZilp9bzA+8tWUuDhkn/auow//lfjUDsm -----END CERTIFICATE-----Generated at Wed Jan 21 16:13:56 2026 by rpki-client