This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/k3CHmqm8bf5CFWrmI8gISAff4Ls.roa File: k3CHmqm8bf5CFWrmI8gISAff4Ls.roa (raw, json) Hash identifier: 0TtRSWp3DHVRAcU5oUWrjNT0y48VCPBzWE6NO1CodU4= Subject key identifier: 93:70:87:9A:A9:BC:6D:FE:42:15:6A:E6:23:C8:08:48:07:DF:E0:BB Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019B7F1373FF97BF20A7BA6D02AA873D6CDC Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/k3CHmqm8bf5CFWrmI8gISAff4Ls.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55154 IP address blocks: 213.209.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:73:ff:97:bf:20:a7:ba:6d:02:aa:87:3d:6c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9370879aa9bc6dfe42156ae623c8084807dfe0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d8:c8:71:09:13:da:8a:a8:40:7b:da:13:8b: 6e:c3:55:0e:98:c8:7d:b4:12:2e:0b:71:8f:db:eb: 70:9a:69:e7:ab:d5:ad:dd:11:9e:90:a7:f0:30:96: 14:dd:d9:44:12:f1:95:d0:2d:15:86:83:49:8b:f2: 40:5d:8a:15:d1:e3:e0:9f:cc:ce:87:b6:c3:99:47: db:c2:0b:31:2a:ab:a3:47:73:9f:58:00:b6:5a:2d: e7:b4:87:f7:79:c1:0b:c2:26:4b:b5:a8:86:43:78: 4f:c7:78:e5:d8:25:9a:05:1a:b1:a3:22:fa:19:21: 43:5a:d4:5f:27:48:5f:9c:94:3f:52:fd:8c:08:f8: ee:89:6d:19:35:0c:16:fc:ac:68:75:f5:b4:cf:87: 19:8b:2d:4e:be:0a:72:cd:2d:38:20:8b:eb:db:49: 0a:98:cf:3f:21:68:45:ab:c9:f7:ec:79:1b:51:07: 71:a6:03:3a:ff:79:77:3d:ff:bd:0e:42:d5:09:18: ef:78:a2:35:4a:63:2f:59:54:1d:f2:67:79:70:f1: 11:f5:19:31:e4:62:97:8f:cf:c4:9b:c2:b5:77:c7: 4c:c1:0e:4b:e4:89:3b:c7:e7:d2:84:6a:38:d7:72: 61:1e:35:54:f2:c5:5a:b7:5b:b1:13:72:bf:17:41: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:70:87:9A:A9:BC:6D:FE:42:15:6A:E6:23:C8:08:48:07:DF:E0:BB X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/k3CHmqm8bf5CFWrmI8gISAff4Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.209.129.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:09:a5:a2:f7:79:0b:37:6b:f7:ad:c4:4b:f4:34:e3:f2:20: 79:bc:a8:b0:27:ad:05:56:da:65:66:8c:11:70:25:6c:1e:b1: cc:30:c9:92:45:e6:df:3b:12:f9:82:73:50:a6:ce:a9:d8:bb: 51:b2:89:33:ab:65:63:8a:13:5f:68:02:65:cb:de:f1:cd:65: 33:2b:a4:bf:54:7b:17:8e:fb:3c:fc:17:c6:51:3a:b9:33:5c: 70:30:5a:b4:f9:dc:80:de:af:39:e3:9c:30:e9:c9:4d:42:52: d0:2d:27:bc:93:25:d3:b3:1d:10:a6:f5:93:2e:e1:26:ab:37: b7:b4:56:b5:8d:34:7b:07:ca:82:ee:16:38:b7:30:8d:a5:2c: 4c:f4:f0:60:18:be:62:65:5e:22:7a:eb:ef:e3:ac:d4:4a:72: 02:2c:1a:c0:8b:33:f8:89:22:e0:2e:b7:eb:f1:5f:aa:0f:8b: bf:19:58:a6:8b:58:a2:6b:4c:b3:67:08:79:26:1a:f2:3a:5c: 4a:55:41:98:d2:f9:8f:1a:46:8b:2f:d6:74:70:04:ae:f6:26: dd:71:cf:1b:cb:7d:2c:48:a0:b4:d9:2e:0b:dc:d2:7c:b5:c4: 75:a9:74:a6:3b:c3:9e:93:94:90:fc:c5:6d:a5:3a:58:c1:0b: 40:ff:87:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3P/l78gp7ptAqqHPWzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzcwODc5YWE5YmM2ZGZlNDIxNTZhZTYyM2M4MDg0ODA3ZGZlMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29jIcQkT2oqoQHvaE4tuw1UOmMh9 tBIuC3GP2+twmmnnq9Wt3RGekKfwMJYU3dlEEvGV0C0VhoNJi/JAXYoV0ePgn8zO h7bDmUfbwgsxKqujR3OfWAC2Wi3ntIf3ecELwiZLtaiGQ3hPx3jl2CWaBRqxoyL6 GSFDWtRfJ0hfnJQ/Uv2MCPjuiW0ZNQwW/KxodfW0z4cZiy1OvgpyzS04IIvr20kK mM8/IWhFq8n37HkbUQdxpgM6/3l3Pf+9DkLVCRjveKI1SmMvWVQd8md5cPER9Rkx 5GKXj8/Em8K1d8dMwQ5L5Ik7x+fShGo413JhHjVU8sVat1uxE3K/F0FfNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJNwh5qpvG3+QhVq5iPICEgH3+C7MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvazNDSG1xbThiZjVDRldybUk4Z0lTQWZmNExzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dGBMA0G CSqGSIb3DQEBCwUAA4IBAQBsCaWi93kLN2v3rcRL9DTj8iB5vKiwJ60FVtplZowR cCVsHrHMMMmSRebfOxL5gnNQps6p2LtRsokzq2VjihNfaAJly97xzWUzK6S/VHsX jvs8/BfGUTq5M1xwMFq0+dyA3q8545ww6clNQlLQLSe8kyXTsx0QpvWTLuEmqze3 tFa1jTR7B8qC7hY4tzCNpSxM9PBgGL5iZV4ieuvv46zUSnICLBrAizP4iSLgLrfr 8V+qD4u/GVimi1iia0yzZwh5JhryOlxKVUGY0vmPGkaLL9Z0cASu9ibdcc8by30s SKC02S4L3NJ8tcR1qXSmO8Oek5SQ/MVtpTpYwQtA/4fq -----END CERTIFICATE-----Generated at Wed Jan 21 07:46:32 2026 by rpki-client