This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/SDu33Jeh8c7arCHbWi8vSsrtoRg.roa File: SDu33Jeh8c7arCHbWi8vSsrtoRg.roa (raw, json) Hash identifier: mOOpOXQQCP8piIIEBcEgAzeCzN5EN9HiWhAzdTUbVms= Subject key identifier: 48:3B:B7:DC:97:A1:F1:CE:DA:AC:21:DB:5A:2F:2F:4A:CA:ED:A1:18 Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd Certificate serial: 019B7758C26E6ECF2F5BB76CF0D3988606B5 Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/SDu33Jeh8c7arCHbWi8vSsrtoRg.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50084 IP address blocks: 185.96.176.0/22 maxlen: 22 185.96.176.0/24 maxlen: 24 185.96.177.0/24 maxlen: 24 185.96.178.0/24 maxlen: 24 185.96.179.0/24 maxlen: 24 194.247.164.0/23 maxlen: 23 194.247.164.0/24 maxlen: 24 194.247.165.0/24 maxlen: 24 2a07:4140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c2:6e:6e:cf:2f:5b:b7:6c:f0:d3:98:86:06:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=483bb7dc97a1f1cedaac21db5a2f2f4acaeda118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:41:88:5b:86:f8:07:fc:cb:05:d1:50:5f: c5:44:42:8f:6b:bb:c7:89:59:3a:86:ff:a6:2f:4f: c0:27:7c:9e:cb:d9:35:87:cb:11:71:13:a7:bf:2f: 9d:e7:86:19:a2:80:6c:c6:d0:8f:63:7c:ba:10:75: 99:2e:a0:d7:ef:b8:6c:49:23:ce:29:c7:78:83:09: bf:b3:2c:98:a0:9b:8a:8b:c9:ab:37:50:03:02:35: 5e:b1:a2:f7:26:52:dc:df:3b:ef:90:6d:5d:21:3a: 6a:ff:10:ac:4e:e0:9d:76:a7:6c:66:69:29:ce:02: b8:47:03:ad:67:ec:bf:d8:90:4c:99:c4:4e:8b:be: 7e:52:fb:13:4e:40:22:8b:17:28:d0:5f:8f:4f:13: 12:f8:73:47:fe:1d:d6:e6:e4:8c:f4:11:e8:74:fe: 31:24:fc:1e:b1:f4:e0:23:a4:6b:34:8b:bd:9d:f9: 4a:df:76:7e:4e:07:44:d0:be:c1:9a:5c:48:5a:0a: 1c:7c:82:d8:62:dd:5d:c1:5b:fb:29:fd:b1:ba:37: 39:cd:18:5f:58:88:e8:56:e5:13:bc:15:18:c4:30: 37:ea:e2:bb:34:53:27:04:48:cd:e4:9d:b0:1f:fb: a3:bf:79:2f:a6:65:5c:67:bb:84:e2:14:c9:12:6e: 27:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3B:B7:DC:97:A1:F1:CE:DA:AC:21:DB:5A:2F:2F:4A:CA:ED:A1:18 X509v3 Authority Key Identifier: keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/SDu33Jeh8c7arCHbWi8vSsrtoRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.176.0/22 194.247.164.0/23 IPv6: 2a07:4140::/29 Signature Algorithm: sha256WithRSAEncryption 24:50:ea:d4:1f:ef:57:52:80:bb:6c:0d:87:7f:df:0d:b4:2d: b3:b8:23:5f:8b:dd:3e:39:3c:4a:c8:61:68:c5:d8:24:04:c4: 95:32:42:1f:82:c3:39:66:17:79:7b:fb:cd:4f:ff:58:64:91: 9b:77:45:0a:2c:49:c7:6b:3d:ea:98:02:8c:92:0c:0c:ff:90: 65:4b:fa:2a:30:12:d6:b7:bf:43:a7:8b:39:0c:9c:a2:6e:51: dc:a2:52:6a:df:0d:ab:1b:d8:53:15:9d:c8:13:ce:25:65:5e: 3f:3f:ee:fe:4e:92:7f:bb:f0:14:89:4d:8a:e5:26:94:f9:db: 83:3e:1e:6c:77:a5:a8:19:f2:34:28:e8:35:94:6c:09:41:70: 4d:a7:4e:3a:cf:2f:ce:77:8a:2d:8e:46:7c:4f:85:e6:7b:c7: 0f:9e:36:3d:26:b8:08:28:9b:c7:2c:20:cb:2e:4d:e6:0f:2e: bb:fb:c7:0c:8d:c1:99:d3:34:35:81:33:9a:cf:f8:07:45:d6: 69:46:2b:66:11:b4:15:e9:78:85:2f:a4:06:cc:fc:8b:29:c4: fc:e2:aa:39:7c:10:59:e8:52:83:3f:bc:4f:0d:66:3c:1f:e2: fb:9c:4f:77:18:a2:bf:13:89:fa:1d:d7:e5:f4:23:d7:de:03: ca:f1:18:2d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WMJubs8vW7ds8NOYhga1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDk0M2Y1MjAzZDQzNDYwYTEzYWQ0ZWE5ZDdkNWI5NTBj NjEzY2QwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODNiYjdkYzk3YTFmMWNlZGFhYzIxZGI1YTJmMmY0YWNhZWRhMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/VBiFuG+Af8ywXRUF/FREKPa7vH iVk6hv+mL0/AJ3yey9k1h8sRcROnvy+d54YZooBsxtCPY3y6EHWZLqDX77hsSSPO Kcd4gwm/syyYoJuKi8mrN1ADAjVesaL3JlLc3zvvkG1dITpq/xCsTuCddqdsZmkp zgK4RwOtZ+y/2JBMmcROi75+UvsTTkAiixco0F+PTxMS+HNH/h3W5uSM9BHodP4x JPwesfTgI6RrNIu9nflK33Z+TgdE0L7BmlxIWgocfILYYt1dwVv7Kf2xujc5zRhf WIjoVuUTvBUYxDA36uK7NFMnBEjN5J2wH/ujv3kvpmVcZ7uE4hTJEm4nWQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEg7t9yXofHO2qwh21ovL0rK7aEYMB8GA1UdIwQY MBaAFL5JQ/UgPUNGChOtTqnX1blQxhPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtsRDlTQTlRMFlLRTYxT3FkZlZ1VkRHRTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMzE0ZWMtOGZmMC00OTUwLTg1OGYt YTA1MWFlNjNkYmExLzEvU0R1MzNKZWg4YzdhckNIYldpOHZTc3J0b1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zMzE0ZWMtOGZmMC00OTUwLTg1OGYtYTA1MWFlNjNkYmEx LzEvdmtsRDlTQTlRMFlLRTYxT3FkZlZ1VkRHRTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWCwAwQB wvekMA0EAgACMAcDBQMqB0FAMA0GCSqGSIb3DQEBCwUAA4IBAQAkUOrUH+9XUoC7 bA2Hf98NtC2zuCNfi90+OTxKyGFoxdgkBMSVMkIfgsM5Zhd5e/vNT/9YZJGbd0UK LEnHaz3qmAKMkgwM/5BlS/oqMBLWt79Dp4s5DJyiblHcolJq3w2rG9hTFZ3IE84l ZV4/P+7+TpJ/u/AUiU2K5SaU+duDPh5sd6WoGfI0KOg1lGwJQXBNp046zy/Od4ot jkZ8T4Xme8cPnjY9JrgIKJvHLCDLLk3mDy67+8cMjcGZ0zQ1gTOaz/gHRdZpRitm EbQV6XiFL6QGzPyLKcT84qo5fBBZ6FKDP7xPDWY8H+L7nE93GKK/E4n6Hdfl9CPX 3gPK8Rgt -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:53 2026 by rpki-client