This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/3v8uxq2dDLoou0h6jnM1belnYnw.roa File: 3v8uxq2dDLoou0h6jnM1belnYnw.roa (raw, json) Hash identifier: 38ECnv2jC0KqnoPMxr80PYZzlX1OrWkaQN4cTlpMEJw= Subject key identifier: DE:FF:2E:C6:AD:9D:0C:BA:28:BB:48:7A:8E:73:35:6D:E9:67:62:7C Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1 Certificate serial: 019B79ECD3027664866EFBCE6CE3F9C58C1E Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/3v8uxq2dDLoou0h6jnM1belnYnw.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212665 IP address blocks: 130.193.28.0/24 maxlen: 24 193.200.217.0/24 maxlen: 24 2a14:9980::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d3:02:76:64:86:6e:fb:ce:6c:e3:f9:c5:8c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deff2ec6ad9d0cba28bb487a8e73356de967627c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:fa:e0:5b:d9:6c:22:57:64:aa:ba:9b:0f: aa:ea:97:3a:c4:9d:86:32:07:c6:e7:14:65:d5:a0: 61:54:6c:6e:0c:d6:d6:7d:69:d0:65:2f:aa:42:c1: 62:b0:1b:b8:ca:3d:71:cf:09:fd:db:a4:cb:06:90: 23:d8:b8:73:50:98:6c:93:71:f5:c7:64:4c:9c:48: b2:e9:86:33:37:cd:bb:a7:64:b7:d4:40:30:10:2c: 34:f5:49:4d:75:43:8a:33:9e:52:46:1f:95:c4:f5: 51:66:a8:7f:58:45:18:d8:e4:b4:95:7d:58:aa:36: be:eb:be:9e:38:8a:1c:18:93:42:04:c8:e7:38:93: 57:ab:25:ea:4a:57:b3:99:07:c1:c0:fa:15:36:aa: 65:55:37:f6:bb:b9:71:9b:10:b9:f5:a5:3d:b0:03: 74:3c:f8:fc:f1:f1:5d:1f:b7:5c:71:f7:d4:b9:28: 72:ff:a6:2b:64:48:ea:28:fa:09:19:0a:89:6b:86: 69:cb:88:24:1a:f3:97:8f:d2:40:34:67:6d:40:df: 81:b6:8c:5c:e8:19:6a:da:60:22:d1:87:83:ec:27: a4:94:9b:e6:f8:4e:1a:64:b5:12:07:39:ac:ba:df: cc:69:69:b6:2c:3c:d0:0c:67:e4:4b:5e:97:5e:c8: 32:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FF:2E:C6:AD:9D:0C:BA:28:BB:48:7A:8E:73:35:6D:E9:67:62:7C X509v3 Authority Key Identifier: keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/3v8uxq2dDLoou0h6jnM1belnYnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.28.0/24 193.200.217.0/24 IPv6: 2a14:9980::/29 Signature Algorithm: sha256WithRSAEncryption aa:76:08:ad:ca:f8:00:3e:63:ed:db:d2:e4:3e:71:31:32:73: d4:79:eb:fa:a8:4a:6f:b5:49:b8:3e:05:bf:9d:17:6f:7a:a8: 19:4a:e5:c4:d7:9d:f9:e5:96:90:c0:cf:37:a4:42:c2:c9:10: 09:97:3c:e2:bd:b3:a9:0b:2e:b3:70:29:fe:31:42:79:c7:af: 5f:f3:59:05:90:f4:88:9e:10:a7:00:58:02:4c:b9:e6:88:44: c1:41:64:39:cc:f3:6d:48:39:8e:32:3f:bf:11:84:84:05:38: b5:60:d9:10:64:4d:fa:b9:75:cc:ca:0d:b3:13:df:1e:26:86: 4c:8c:a8:20:51:9d:3e:fa:82:5d:ae:34:c8:c9:f2:d8:d2:fc: 85:5d:e7:2e:60:4c:00:e5:a9:2d:04:59:2a:d2:0f:85:16:48: 69:85:52:e2:68:f6:7d:fe:f2:15:34:2d:d1:69:57:6b:9b:d8: fc:61:0d:56:24:e4:88:78:e3:78:e8:e2:fd:cf:73:48:ae:7a: 65:46:b3:b2:e6:ce:74:91:6e:16:1d:4b:5a:16:75:fe:40:ff: 22:db:fc:7d:ea:f0:06:0a:37:52:45:cd:d5:f6:ae:d8:b1:8e: d7:80:b0:2b:ee:48:08:31:02:75:72:02:25:0a:62:ae:b4:82: 22:9f:5b:df -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57NMCdmSGbvvObOP5xYweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMjZiOWU4ZGY1ZGE1Njk4NTRjNjFhZjcxNGRiMzAzNDky YjYyZjEwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWZmMmVjNmFkOWQwY2JhMjhiYjQ4N2E4ZTczMzU2ZGU5Njc2MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5P64FvZbCJXZKq6mw+q6pc6xJ2G MgfG5xRl1aBhVGxuDNbWfWnQZS+qQsFisBu4yj1xzwn926TLBpAj2LhzUJhsk3H1 x2RMnEiy6YYzN827p2S31EAwECw09UlNdUOKM55SRh+VxPVRZqh/WEUY2OS0lX1Y qja+676eOIocGJNCBMjnOJNXqyXqSlezmQfBwPoVNqplVTf2u7lxmxC59aU9sAN0 PPj88fFdH7dccffUuShy/6YrZEjqKPoJGQqJa4Zpy4gkGvOXj9JANGdtQN+Btoxc 6Blq2mAi0YeD7CeklJvm+E4aZLUSBzmsut/MaWm2LDzQDGfkS16XXsgyFQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN7/LsatnQy6KLtIeo5zNW3pZ2J8MB8GA1UdIwQY MBaAFGomuejfXaVphUxhr3FNswNJK2LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzkt MDUxYjAwZjg1OGVkLzEvM3Y4dXhxMmRETG9vdTBoNmpuTTFiZWxuWW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kNGVlMzktODBiNC00MjM5LThjMzktMDUxYjAwZjg1OGVk LzEvYWlhNTZOOWRwV21GVEdHdmNVMnpBMGtyWXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAgsEcAwQA wcjZMA0EAgACMAcDBQMqFJmAMA0GCSqGSIb3DQEBCwUAA4IBAQCqdgityvgAPmPt 29LkPnExMnPUeev6qEpvtUm4PgW/nRdveqgZSuXE15355ZaQwM83pELCyRAJlzzi vbOpCy6zcCn+MUJ5x69f81kFkPSInhCnAFgCTLnmiETBQWQ5zPNtSDmOMj+/EYSE BTi1YNkQZE36uXXMyg2zE98eJoZMjKggUZ0++oJdrjTIyfLY0vyFXecuYEwA5akt BFkq0g+FFkhphVLiaPZ9/vIVNC3RaVdrm9j8YQ1WJOSIeON46OL9z3NIrnplRrOy 5s50kW4WHUtaFnX+QP8i2/x96vAGCjdSRc3V9q7YsY7XgLAr7kgIMQJ1cgIlCmKu tIIin1vf -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:04 2026 by rpki-client