This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa File: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (raw, json) Hash identifier: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w= Subject key identifier: 0A:21:5E:13:EA:0B:49:03:B7:3C:48:D9:3A:B3:11:5F:77:6D:59:BC Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E389098891BA02B73CD868C585F6260 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15596 IP address blocks: 62.3.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:90:98:89:1b:a0:2b:73:cd:86:8c:58:5f:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a215e13ea0b4903b73c48d93ab3115f776d59bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:b9:bc:c2:ea:58:61:77:da:15:85:31:35: 3d:41:d4:57:56:9e:5b:52:22:4f:52:c4:df:1c:d3: c2:ca:40:d1:bc:71:0e:04:be:5e:6d:2d:dd:60:f9: 1c:df:03:15:01:a4:ed:2c:08:fb:f2:28:9e:1f:e5: 91:da:96:c2:36:f1:c6:cc:b7:5b:1f:9b:f2:e3:dc: 8c:75:7a:79:ac:9e:c2:5f:89:3a:e0:fa:80:01:84: 2a:fc:6c:a9:bc:31:9d:c8:50:67:0a:6c:5b:61:4b: ff:2c:5f:98:ea:22:99:ef:39:1a:f0:c5:49:66:dd: 56:df:9c:1f:bb:af:04:55:e9:9d:43:25:48:fc:1c: f1:f0:43:95:77:74:22:b2:7b:75:cf:1c:58:a7:ce: 11:c5:92:67:77:e9:37:00:30:71:a7:78:dd:3f:17: c8:52:63:42:e1:0b:c5:25:67:69:ce:fa:22:8d:b5: 54:2e:fe:5e:a2:46:f4:ce:6c:cc:30:8b:2d:d4:ed: 3f:12:52:6b:2d:dd:64:0a:8c:86:94:a0:81:20:6d: 5c:7c:c8:0e:33:98:fa:4d:54:38:7a:67:e0:d0:bd: 41:1c:a5:0c:7d:29:0f:26:f6:62:ee:67:3c:45:9e: 47:fb:19:15:13:ca:f6:ed:52:af:78:68:e0:e5:67: e3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:21:5E:13:EA:0B:49:03:B7:3C:48:D9:3A:B3:11:5F:77:6D:59:BC X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.26.0/24 Signature Algorithm: sha256WithRSAEncryption 36:94:36:60:98:a8:04:4d:0b:88:f7:92:f3:61:55:01:02:3d: 8e:55:ef:c1:2f:ac:7f:26:a6:b0:8d:5f:88:13:a3:c4:25:d9: 0f:8c:7c:dc:e6:55:cc:0a:a5:4a:84:c4:49:5d:d2:1e:79:2f: a0:8d:a4:79:4c:52:ca:af:bc:27:d1:9f:e5:e4:07:c2:74:22: 3c:81:00:2d:fa:e1:53:38:fe:35:c2:9c:b9:1e:9d:47:3d:5e: 3e:83:2f:ea:55:e7:f4:23:0d:32:38:b9:9b:d4:0c:60:6c:5f: 00:fa:1f:3d:ea:78:38:3d:61:5c:c7:8b:5d:c0:86:a9:4e:95: db:62:91:21:bd:0c:42:40:0f:98:3b:e9:58:ba:4f:b7:37:a6: 31:14:6c:c7:4e:f3:f2:ec:3c:df:cd:d7:cc:4c:dd:dc:65:f7: d4:7e:42:26:76:93:3b:2f:68:db:1a:10:0b:36:d9:1a:0d:ea: 2c:70:d9:0d:7c:01:9b:ed:9b:e1:3f:01:df:47:a1:ac:d8:8c: e5:ee:71:31:1a:66:cb:74:26:5e:d0:d9:50:15:24:a9:89:36: 72:fb:09:49:c4:5b:6d:6d:46:84:c8:a5:ec:db:db:ff:95:4e: 18:22:d2:83:c2:53:1f:bb:75:24:f3:76:b1:71:b6:b5:14:70: 16:0d:c6:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJCYiRugK3PNhoxYX2JgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTIxNWUxM2VhMGI0OTAzYjczYzQ4ZDkzYWIzMTE1Zjc3NmQ1OWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto25vMLqWGF32hWFMTU9QdRXVp5b UiJPUsTfHNPCykDRvHEOBL5ebS3dYPkc3wMVAaTtLAj78iieH+WR2pbCNvHGzLdb H5vy49yMdXp5rJ7CX4k64PqAAYQq/GypvDGdyFBnCmxbYUv/LF+Y6iKZ7zka8MVJ Zt1W35wfu68EVemdQyVI/Bzx8EOVd3Qisnt1zxxYp84RxZJnd+k3ADBxp3jdPxfI UmNC4QvFJWdpzvoijbVULv5eokb0zmzMMIst1O0/ElJrLd1kCoyGlKCBIG1cfMgO M5j6TVQ4emfg0L1BHKUMfSkPJvZi7mc8RZ5H+xkVE8r27VKveGjg5Wfj/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAohXhPqC0kDtzxI2TqzEV93bVm8MB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ2lGZUUtb0xTUU8zUEVqWk9yTVJYM2R0V2J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMaMA0G CSqGSIb3DQEBCwUAA4IBAQA2lDZgmKgETQuI95LzYVUBAj2OVe/BL6x/JqawjV+I E6PEJdkPjHzc5lXMCqVKhMRJXdIeeS+gjaR5TFLKr7wn0Z/l5AfCdCI8gQAt+uFT OP41wpy5Hp1HPV4+gy/qVef0Iw0yOLmb1AxgbF8A+h896ng4PWFcx4tdwIapTpXb YpEhvQxCQA+YO+lYuk+3N6YxFGzHTvPy7DzfzdfMTN3cZffUfkImdpM7L2jbGhAL NtkaDeoscNkNfAGb7ZvhPwHfR6Gs2Izl7nExGmbLdCZe0NlQFSSpiTZy+wlJxFtt bUaEyKXs29v/lU4YItKDwlMfu3Uk83axcba1FHAWDcbu -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:14 2026 by rpki-client