This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3EtmEIyauufdDDuPoRt1ddc6ENE.roa File: 3EtmEIyauufdDDuPoRt1ddc6ENE.roa (raw, json) Hash identifier: 807mJiNmmzciCkyxx7E2oXq4XTUe5y/0dP8ewcIBWyc= Subject key identifier: DC:4B:66:10:8C:9A:BA:E7:DD:0C:3B:8F:A1:1B:75:75:D7:3A:10:D1 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A9732C773DF97FD04C01DDF56038 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3EtmEIyauufdDDuPoRt1ddc6ENE.roa Signing time: Fri 02 Jan 2026 14:20:19 +0000 ROA not before: Fri 02 Jan 2026 14:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20326 IP address blocks: 194.231.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a9:73:2c:77:3d:f9:7f:d0:4c:01:dd:f5:60:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc4b66108c9abae7dd0c3b8fa11b7575d73a10d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:c3:7c:ea:80:a6:18:48:ab:8b:5a:7c:d4: d2:a4:46:7c:ec:1d:aa:7d:83:0b:33:ed:bc:47:ce: 93:5f:5c:9c:e1:44:6b:2f:c0:7b:24:eb:fa:25:bc: d7:88:16:1a:a0:07:ad:c2:6d:f5:26:3b:0e:c8:63: 79:b1:1f:cd:fe:ed:b0:44:d8:5f:e3:38:6b:73:bf: ed:22:d8:1b:e7:35:ed:56:ea:3b:f5:45:1e:b6:91: 2c:98:58:a6:b8:62:99:19:e0:05:80:75:e5:53:a2: a0:71:fa:28:7e:6a:16:5e:83:04:3f:af:46:5b:6c: 8f:63:5d:6d:63:23:64:f2:be:20:08:dc:a1:24:ad: 03:e6:1b:82:2f:27:8f:06:75:29:59:d8:35:fa:94: 4b:e0:5a:cd:05:a3:45:20:86:c8:1e:64:80:b7:bb: 83:89:12:ef:a0:6b:ce:c2:56:ec:84:32:6b:7d:3c: 89:1b:e8:37:a0:c3:e5:6a:15:e3:b4:f0:ff:de:6f: 64:e7:1b:8b:de:14:db:27:bc:35:3d:6a:27:09:e7: 8e:d5:68:13:c9:40:b3:d5:6e:d3:ee:ab:09:af:a3: 3b:a3:d8:6c:76:82:10:29:39:80:49:53:31:35:fa: 94:7f:ae:69:c5:75:fe:fc:fc:c6:17:22:ac:d4:8f: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4B:66:10:8C:9A:BA:E7:DD:0C:3B:8F:A1:1B:75:75:D7:3A:10:D1 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3EtmEIyauufdDDuPoRt1ddc6ENE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.128.0/22 Signature Algorithm: sha256WithRSAEncryption 38:7c:15:9f:df:2a:13:cc:a9:bf:44:aa:05:89:aa:33:f6:cb: 7f:79:96:01:4c:7e:e3:b9:ac:45:35:37:de:70:28:79:94:54: 34:72:fc:66:84:8d:6c:87:eb:b5:c7:d9:94:cf:84:b3:04:d2: 59:46:11:d2:3b:b7:46:d6:1e:e0:09:e6:a5:c4:ff:6a:8a:51: b2:bf:07:65:9b:a4:4c:9a:51:56:41:8b:8d:f4:6c:4f:7a:fd: c2:ba:ff:9f:cf:6d:00:ee:69:99:38:10:71:a5:43:7d:cf:8d: 94:bc:08:8c:cb:17:a7:b0:0f:75:3b:53:fc:31:17:c9:b4:7f: 1c:d6:d5:da:f9:f4:bc:62:33:90:e1:cd:1c:91:76:fa:89:53: d1:44:92:97:27:73:2e:d4:e1:03:02:0d:14:a5:d1:6c:1d:f5: 0b:50:2a:3b:54:b2:94:1f:6b:4d:ec:fd:66:50:80:b1:e1:18: 01:8b:95:4a:7c:4d:30:56:32:da:cb:9a:78:94:d9:20:b8:d3: c1:f2:f2:27:1b:1e:f8:3b:de:ed:af:49:77:d4:05:12:4a:39: 54:aa:9a:31:d2:f6:f8:2e:89:fe:bd:8e:98:b7:fc:63:fb:ec: 77:a2:8e:74:1b:9a:55:9a:d0:ff:5d:2a:3e:51:90:12:60:7a: 2f:4a:c0:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FKlzLHc9+X/QTAHd9WA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzRiNjYxMDhjOWFiYWU3ZGQwYzNiOGZhMTFiNzU3NWQ3M2ExMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0nDfOqAphhIq4tafNTSpEZ87B2q fYMLM+28R86TX1yc4URrL8B7JOv6JbzXiBYaoAetwm31JjsOyGN5sR/N/u2wRNhf 4zhrc7/tItgb5zXtVuo79UUetpEsmFimuGKZGeAFgHXlU6KgcfoofmoWXoMEP69G W2yPY11tYyNk8r4gCNyhJK0D5huCLyePBnUpWdg1+pRL4FrNBaNFIIbIHmSAt7uD iRLvoGvOwlbshDJrfTyJG+g3oMPlahXjtPD/3m9k5xuL3hTbJ7w1PWonCeeO1WgT yUCz1W7T7qsJr6M7o9hsdoIQKTmASVMxNfqUf65pxXX+/PzGFyKs1I/5uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxLZhCMmrrn3Qw7j6EbdXXXOhDRMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvM0V0bUVJeWF1dWZkRER1UG9SdDFkZGM2RU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwueAMA0G CSqGSIb3DQEBCwUAA4IBAQA4fBWf3yoTzKm/RKoFiaoz9st/eZYBTH7juaxFNTfe cCh5lFQ0cvxmhI1sh+u1x9mUz4SzBNJZRhHSO7dG1h7gCealxP9qilGyvwdlm6RM mlFWQYuN9GxPev3Cuv+fz20A7mmZOBBxpUN9z42UvAiMyxensA91O1P8MRfJtH8c 1tXa+fS8YjOQ4c0ckXb6iVPRRJKXJ3Mu1OEDAg0UpdFsHfULUCo7VLKUH2tN7P1m UICx4RgBi5VKfE0wVjLay5p4lNkguNPB8vInGx74O97tr0l31AUSSjlUqpox0vb4 Lon+vY6Yt/xj++x3oo50G5pVmtD/XSo+UZASYHovSsBX -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:27 2026 by rpki-client