This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/t-3vmSerQAMGZI8a5lKfcJpj_3o.roa File: t-3vmSerQAMGZI8a5lKfcJpj_3o.roa (raw, json) Hash identifier: KjxJiMxYWPDCXfi167MgPCF6pLU7cT1iN1nDQklOGxE= Subject key identifier: B7:ED:EF:99:27:AB:40:03:06:64:8F:1A:E6:52:9F:70:9A:63:FF:7A Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F836C68DB0E69956656620FA0017 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/t-3vmSerQAMGZI8a5lKfcJpj_3o.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48590 IP address blocks: 194.209.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f8:36:c6:8d:b0:e6:99:56:65:66:20:fa:00:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7edef9927ab400306648f1ae6529f709a63ff7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:f3:d9:ad:2d:c1:23:72:66:72:7b:59:2c: ac:c9:53:39:86:7e:12:bb:d1:fd:96:37:7f:5e:8e: bb:93:64:e3:8d:e7:e4:26:a3:7b:78:71:98:99:0c: 56:56:68:1d:45:93:49:93:15:6e:3e:d1:3c:99:7b: f0:f9:14:a3:73:05:05:89:1a:2f:58:23:77:be:58: 6f:7a:e5:9f:bb:2c:47:ac:78:aa:52:16:01:10:63: f8:ef:ab:b2:38:c9:6e:ca:19:6c:26:bf:8d:46:8a: 8b:b3:51:b7:0c:cf:d0:c2:4e:60:05:37:a9:a9:cf: e4:1e:06:80:c3:2a:c7:07:58:bc:fa:72:8d:7d:47: 74:81:6b:9a:01:97:06:4b:9e:9c:15:7f:f5:32:1f: 74:e5:e8:75:c1:4f:25:37:b3:65:ca:2d:4b:0a:e7: eb:26:05:8e:45:58:c3:9e:c8:69:c7:06:96:67:de: 72:8d:66:e5:48:82:70:b3:8a:53:f5:4f:b4:a5:34: 14:93:f0:78:12:29:54:c5:df:ca:d7:ed:7d:62:f2: 79:cc:f7:1f:41:dc:b3:c1:88:80:e9:0e:17:6b:be: 21:4b:7b:15:38:b0:65:bb:45:7d:02:67:2f:cf:f4: 1a:10:a9:2a:ed:d8:fa:09:39:88:b4:c6:18:d3:0e: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:ED:EF:99:27:AB:40:03:06:64:8F:1A:E6:52:9F:70:9A:63:FF:7A X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/t-3vmSerQAMGZI8a5lKfcJpj_3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.12.0/24 Signature Algorithm: sha256WithRSAEncryption 84:3a:4b:83:9b:5b:b0:ba:18:07:92:00:81:19:15:56:68:d1: 72:ac:2d:e7:01:c6:ba:64:ea:02:ad:a0:74:b6:c8:d5:1a:c9: 03:e7:e0:fe:75:e9:64:b5:e5:dd:41:98:68:16:21:d9:94:ea: b5:99:44:f2:9b:37:24:95:5d:f9:e8:ee:e5:2c:79:5d:ea:da: 82:3a:18:80:d2:08:33:78:c7:49:31:4a:77:e8:76:59:cc:6f: d9:b1:e0:88:75:7f:36:82:3d:a2:af:0b:9e:89:bb:30:17:cc: d9:c2:ce:b0:67:18:ae:53:bb:42:25:ca:97:e6:2d:0b:84:64: 1e:17:db:2f:d8:29:1d:2f:5a:67:ab:f4:b7:a4:ba:61:e5:48: fe:52:86:92:fa:71:ba:b2:1b:9c:ff:8f:6b:16:2f:b2:cf:cc: a0:93:29:94:33:04:45:89:d6:e4:34:b0:e5:b1:ed:ac:3f:90: 36:54:84:29:74:f9:47:9b:0d:c9:ec:0f:3b:1c:4d:9b:57:a8: fc:f6:8f:8d:e9:b0:d8:d7:f4:9f:d4:de:8a:b8:c6:ce:1e:7f: d6:46:02:51:01:ab:4a:6f:cf:29:09:9a:36:ac:b7:45:c3:ba: 41:88:80:6c:77:1a:29:9d:07:b3:7d:c9:2d:b4:a4:52:92:b7: a3:e6:5b:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Evg2xo2w5plWZWYg+gAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2VkZWY5OTI3YWI0MDAzMDY2NDhmMWFlNjUyOWY3MDlhNjNmZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Pz2a0twSNyZnJ7WSysyVM5hn4S u9H9ljd/Xo67k2TjjefkJqN7eHGYmQxWVmgdRZNJkxVuPtE8mXvw+RSjcwUFiRov WCN3vlhveuWfuyxHrHiqUhYBEGP476uyOMluyhlsJr+NRoqLs1G3DM/Qwk5gBTep qc/kHgaAwyrHB1i8+nKNfUd0gWuaAZcGS56cFX/1Mh905eh1wU8lN7Nlyi1LCufr JgWORVjDnshpxwaWZ95yjWblSIJws4pT9U+0pTQUk/B4EilUxd/K1+19YvJ5zPcf QdyzwYiA6Q4Xa74hS3sVOLBlu0V9Amcvz/QaEKkq7dj6CTmItMYY0w4hhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLft75knq0ADBmSPGuZSn3CaY/96MB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvdC0zdm1TZXJRQU1HWkk4YTVsS2ZjSnBqXzNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtEMMA0G CSqGSIb3DQEBCwUAA4IBAQCEOkuDm1uwuhgHkgCBGRVWaNFyrC3nAca6ZOoCraB0 tsjVGskD5+D+delkteXdQZhoFiHZlOq1mUTymzcklV356O7lLHld6tqCOhiA0ggz eMdJMUp36HZZzG/ZseCIdX82gj2irwueibswF8zZws6wZxiuU7tCJcqX5i0LhGQe F9sv2CkdL1pnq/S3pLph5Uj+UoaS+nG6shuc/49rFi+yz8ygkymUMwRFidbkNLDl se2sP5A2VIQpdPlHmw3J7A87HE2bV6j89o+N6bDY1/Sf1N6KuMbOHn/WRgJRAatK b88pCZo2rLdFw7pBiIBsdxopnQezfckttKRSkrej5lvS -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:20 2026 by rpki-client