This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/s3PhyUwOeXidBN-bO1cXle0zxkc.roa File: s3PhyUwOeXidBN-bO1cXle0zxkc.roa (raw, json) Hash identifier: m1yCoIslCCFawVsviGgtGHxVd9skui2ny3tBhKLzDTM= Subject key identifier: B3:73:E1:C9:4C:0E:79:78:9D:04:DF:9B:3B:57:17:95:ED:33:C6:47 Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081 Certificate serial: 019B76EAF89154DC8A5146A9BD8581FBC46D Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/s3PhyUwOeXidBN-bO1cXle0zxkc.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49142 IP address blocks: 185.139.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f8:91:54:dc:8a:51:46:a9:bd:85:81:fb:c4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b373e1c94c0e79789d04df9b3b571795ed33c647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:da:22:11:e3:91:e1:2f:69:9d:66:8f:f1: 08:bd:de:18:c5:b2:8b:d6:68:8c:3b:22:22:0c:16: 94:c7:77:b4:13:da:9f:3d:e2:2d:2b:07:fc:88:c4: 1f:ea:82:3d:c1:5f:19:08:24:7e:7a:92:72:5b:16: f8:a5:99:07:c0:08:e4:d4:d3:67:43:67:bc:d4:7b: 98:bb:54:da:da:14:30:5c:1e:20:91:9b:cb:32:0d: 01:b1:e8:66:e4:a1:ed:e0:ad:bb:74:22:87:bb:e2: 6f:8b:74:38:b4:e7:35:a8:c5:12:37:07:9a:8e:a0: ae:2f:d1:e5:45:44:b5:84:ba:b8:90:e0:80:58:c2: ea:c8:c2:05:15:67:65:3b:4c:df:cb:a1:5a:3e:45: 47:c9:5b:23:b4:34:06:a6:f5:ca:5c:44:10:81:26: be:c2:68:1c:9b:fd:c4:c3:bc:65:c0:52:48:98:bc: 7c:9f:3e:d6:ec:8d:4f:bf:a5:bc:64:9d:ec:5f:e2: 4f:28:7f:6e:97:f7:1a:b2:fa:e7:12:33:2e:05:bf: da:26:b2:70:a6:48:f8:73:b3:66:50:81:ae:fc:d9: 00:40:09:be:d4:39:e4:ed:21:7c:49:de:72:86:eb: fb:9a:fe:08:c0:06:7d:50:58:43:32:7e:ad:d7:14: 43:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:73:E1:C9:4C:0E:79:78:9D:04:DF:9B:3B:57:17:95:ED:33:C6:47 X509v3 Authority Key Identifier: keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/s3PhyUwOeXidBN-bO1cXle0zxkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.216.0/23 Signature Algorithm: sha256WithRSAEncryption df:98:e4:30:21:dd:85:32:a7:16:61:04:b4:4d:a5:4f:05:ca: 6a:a8:bd:6d:83:b6:68:b9:90:76:bd:83:77:f3:4d:94:68:51: a4:87:7a:0a:ba:73:90:1d:ac:be:c8:87:57:9c:e1:c9:57:52: ff:9a:1f:1c:7b:ec:8a:00:1b:c5:65:92:24:69:d3:b9:ab:15: d5:4e:2e:d2:24:21:9b:c2:92:0b:6b:f8:14:01:7b:cf:7a:92: 6a:e4:20:1e:44:21:e0:2d:76:79:75:71:4d:59:46:0f:e8:a4: bd:15:7e:67:f9:fa:df:e2:8d:cf:05:ad:c8:d9:f0:16:ab:9d: 06:72:87:93:26:2a:2f:5c:07:88:d2:4b:e5:b4:8b:dc:04:ca: 7e:f8:be:2e:e8:28:f7:ec:c9:0d:b6:93:ca:5e:27:67:fe:ac: de:78:47:c7:15:8a:ef:38:be:6e:7a:52:d9:69:25:61:5c:a3: 52:0c:c6:0d:24:f4:a0:8e:10:b6:34:e8:21:97:cb:3c:30:48: c6:e3:f2:71:57:8b:85:26:9e:5e:e3:db:37:8a:43:c5:da:ca: bf:5f:4d:63:83:62:df:fc:32:c5:71:fc:c8:b6:1b:1a:47:1d: 59:63:36:cb:54:1b:fc:4d:52:42:76:eb:e9:c2:ee:a7:22:76: 11:ac:ca:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26viRVNyKUUapvYWB+8RtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NGVmYzRjZTM2ZmM0NDNkYzU4MTYyNzRlYWMxZDc2OTMw MjkwODEwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzczZTFjOTRjMGU3OTc4OWQwNGRmOWIzYjU3MTc5NWVkMzNjNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiLaIhHjkeEvaZ1mj/EIvd4YxbKL 1miMOyIiDBaUx3e0E9qfPeItKwf8iMQf6oI9wV8ZCCR+epJyWxb4pZkHwAjk1NNn Q2e81HuYu1Ta2hQwXB4gkZvLMg0Bsehm5KHt4K27dCKHu+Jvi3Q4tOc1qMUSNwea jqCuL9HlRUS1hLq4kOCAWMLqyMIFFWdlO0zfy6FaPkVHyVsjtDQGpvXKXEQQgSa+ wmgcm/3Ew7xlwFJImLx8nz7W7I1Pv6W8ZJ3sX+JPKH9ul/casvrnEjMuBb/aJrJw pkj4c7NmUIGu/NkAQAm+1Dnk7SF8Sd5yhuv7mv4IwAZ9UFhDMn6t1xRDfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNz4clMDnl4nQTfmztXF5XtM8ZHMB8GA1UdIwQY MBaAFJlO/Ezjb8RD3FgWJ06sHXaTApCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEt M2QyZmI4MTBlMTkxLzEvczNQaHlVd09lWGlkQk4tYk8xY1hsZTB6eGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEtM2QyZmI4MTBlMTkx LzEvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYvYMA0G CSqGSIb3DQEBCwUAA4IBAQDfmOQwId2FMqcWYQS0TaVPBcpqqL1tg7ZouZB2vYN3 802UaFGkh3oKunOQHay+yIdXnOHJV1L/mh8ce+yKABvFZZIkadO5qxXVTi7SJCGb wpILa/gUAXvPepJq5CAeRCHgLXZ5dXFNWUYP6KS9FX5n+frf4o3PBa3I2fAWq50G coeTJiovXAeI0kvltIvcBMp++L4u6Cj37MkNtpPKXidn/qzeeEfHFYrvOL5uelLZ aSVhXKNSDMYNJPSgjhC2NOghl8s8MEjG4/JxV4uFJp5e49s3ikPF2sq/X01jg2Lf /DLFcfzIthsaRx1ZYzbLVBv8TVJCduvpwu6nInYRrMoe -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:50 2026 by rpki-client