This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/3obUxdR4hrJKmGvxcazg2TrTmM4.roa File: 3obUxdR4hrJKmGvxcazg2TrTmM4.roa (raw, json) Hash identifier: SRXmxjXwF+0bLTeiplzSrUr/TTiThOCZsD7uMfUOAQ4= Subject key identifier: DE:86:D4:C5:D4:78:86:B2:4A:98:6B:F1:71:AC:E0:D9:3A:D3:98:CE Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062 Certificate serial: 019B7BA517E8CB7FD98BED696F563255420E Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/3obUxdR4hrJKmGvxcazg2TrTmM4.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42914 IP address blocks: 91.193.208.0/22 maxlen: 22 178.16.96.0/20 maxlen: 20 194.61.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:17:e8:cb:7f:d9:8b:ed:69:6f:56:32:55:42:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062 Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de86d4c5d47886b24a986bf171ace0d93ad398ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:8b:41:04:d8:20:6e:99:1f:fe:93:4c:6c: d1:d9:e6:ec:5b:a0:35:77:a9:c0:d6:b9:81:e8:c9: 9a:e5:d5:14:fe:d1:eb:e4:56:c2:f1:2c:bd:e9:0a: 89:e9:87:6c:cd:43:3e:e2:ed:18:91:fd:3e:92:cd: f2:18:c9:f0:a4:21:48:51:3b:ed:28:31:a4:84:5b: a9:cc:5e:d8:bc:43:62:1a:2d:32:d2:61:e4:5a:6e: 4d:20:59:d4:d5:e7:a5:a2:cb:3b:30:ea:d2:85:23: 3e:99:99:57:a5:6e:f6:c1:f2:97:c4:2d:b3:07:0c: 60:6d:4a:fd:6f:99:cd:7c:0d:27:c9:92:ce:17:ba: e7:ce:cd:03:53:ab:40:8e:7f:ed:9f:08:7c:4f:3b: 5b:f7:22:50:89:17:f4:f5:63:b1:af:64:46:3c:12: cb:30:90:c7:4f:86:da:21:30:44:82:b1:cd:53:59: af:0b:eb:0b:58:43:6d:78:3a:70:40:c3:d2:9c:f5: ac:6e:66:99:84:97:0b:0c:63:bd:cd:0e:6f:7d:50: 69:2c:9d:d6:96:f4:dc:66:14:32:3e:9c:13:55:12: 3c:e2:a0:df:d8:d4:1e:c7:3a:41:fb:60:d1:58:15: a5:b3:8b:bb:ee:df:8e:f8:4b:c6:ee:ec:4b:d0:f6: 61:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:86:D4:C5:D4:78:86:B2:4A:98:6B:F1:71:AC:E0:D9:3A:D3:98:CE X509v3 Authority Key Identifier: keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/3obUxdR4hrJKmGvxcazg2TrTmM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.208.0/22 178.16.96.0/20 194.61.228.0/22 Signature Algorithm: sha256WithRSAEncryption 77:43:83:fb:16:ac:29:bd:71:f4:1e:9a:30:6c:e6:47:59:4e: 16:ea:49:75:28:69:5e:64:09:c1:0c:0d:4c:cd:fb:a8:ef:81: af:74:fb:ae:a9:0a:74:99:6b:6f:bf:8a:a4:a5:12:32:0f:a2: bf:74:f8:f5:0a:03:38:a5:6e:9c:8b:f6:28:5d:41:f7:4a:fc: ba:dd:2b:fa:ba:7f:a8:a5:b2:05:67:bb:94:9b:be:bd:19:f3: 6b:ca:14:df:54:ec:8d:c4:a8:2e:11:c3:8f:0b:6a:70:e3:2b: 68:91:98:a4:1a:92:dc:33:97:12:54:e5:7b:e7:35:5b:ae:9d: 9f:96:ac:c9:2a:5f:ae:5c:be:1c:fd:59:a9:fa:20:02:c0:65: 49:08:f5:a4:db:57:a9:4f:cf:bc:d2:52:cc:10:2f:cc:84:3f: 1e:85:4a:ad:4b:be:0d:18:09:ab:35:8a:e6:8d:a8:d0:56:de: 25:21:22:a5:36:63:d7:c6:87:39:98:d0:73:9f:8b:66:c7:88: 14:68:59:b0:da:bb:49:40:b6:eb:2a:e0:2d:41:ff:a8:2b:5a: cf:9e:c2:e8:12:35:96:9c:f8:fb:14:e8:43:be:5c:9c:8a:86: ac:d6:0e:4d:51:a8:10:d5:46:a4:6b:6a:08:ba:76:ab:50:9b: df:1b:f9:2e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pRfoy3/Zi+1pb1YyVUIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2ZlMzM1MWE1ZTYyNjRhMWY4MTI5YzEwMjUxZDllODk2 ZTgwNjIwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTg2ZDRjNWQ0Nzg4NmIyNGE5ODZiZjE3MWFjZTBkOTNhZDM5OGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxGLQQTYIG6ZH/6TTGzR2ebsW6A1 d6nA1rmB6Mma5dUU/tHr5FbC8Sy96QqJ6YdszUM+4u0Ykf0+ks3yGMnwpCFIUTvt KDGkhFupzF7YvENiGi0y0mHkWm5NIFnU1eeloss7MOrShSM+mZlXpW72wfKXxC2z BwxgbUr9b5nNfA0nyZLOF7rnzs0DU6tAjn/tnwh8Tztb9yJQiRf09WOxr2RGPBLL MJDHT4baITBEgrHNU1mvC+sLWENteDpwQMPSnPWsbmaZhJcLDGO9zQ5vfVBpLJ3W lvTcZhQyPpwTVRI84qDf2NQexzpB+2DRWBWls4u77t+O+EvG7uxL0PZhnQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN6G1MXUeIaySphr8XGs4Nk605jOMB8GA1UdIwQY MBaAFOc/4zUaXmJkofgSnBAlHZ6JboBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgt MDI0YzFlZGQ2MmVjLzEvM29iVXhkUjRockpLbUd2eGNhemcyVHJUbU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgtMDI0YzFlZGQ2MmVj LzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW8HQAwQE shBgAwQCwj3kMA0GCSqGSIb3DQEBCwUAA4IBAQB3Q4P7FqwpvXH0HpowbOZHWU4W 6kl1KGleZAnBDA1Mzfuo74GvdPuuqQp0mWtvv4qkpRIyD6K/dPj1CgM4pW6ci/Yo XUH3Svy63Sv6un+opbIFZ7uUm769GfNryhTfVOyNxKguEcOPC2pw4ytokZikGpLc M5cSVOV75zVbrp2flqzJKl+uXL4c/Vmp+iACwGVJCPWk21epT8+80lLMEC/MhD8e hUqtS74NGAmrNYrmjajQVt4lISKlNmPXxoc5mNBzn4tmx4gUaFmw2rtJQLbrKuAt Qf+oK1rPnsLoEjWWnPj7FOhDvlycioas1g5NUagQ1Uaka2oIunarUJvfG/ku -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:03 2026 by rpki-client