This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa File: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (raw, json) Hash identifier: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ= Subject key identifier: 49:A1:3A:A3:25:B2:F6:64:7B:47:2A:8A:42:A7:83:FB:71:5F:C2:3B Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E389825A79BED68EC0462FC47AA8497 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 193.108.102.0/24 maxlen: 24 193.242.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:98:25:a7:9b:ed:68:ec:04:62:fc:47:aa:84:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49a13aa325b2f6647b472a8a42a783fb715fc23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:bc:7a:da:fe:c2:cf:7c:b5:ab:6a:9f:b4: b3:73:d1:17:d8:53:c8:eb:97:b1:c0:a3:57:12:3b: 69:5a:22:6d:e5:e7:73:da:39:d9:07:f4:cb:cb:03: f4:81:f4:8f:db:3f:b7:d2:82:40:76:4a:72:82:09: 6d:0f:52:10:ba:79:72:e4:f9:b9:99:be:a9:ee:c1: 8c:f2:7c:86:46:e6:31:8d:29:8e:fa:18:63:9f:da: 9d:e6:6a:7e:f5:c4:c3:bc:6f:ce:26:b0:10:e8:b8: 86:36:43:57:10:8d:62:2d:20:c1:c3:27:d8:c5:2e: f1:41:10:89:58:b6:c2:c3:b2:c7:7f:18:a0:70:e9: 43:fa:1a:60:8c:b3:cd:a6:d4:e0:28:b4:09:e0:02: 92:07:c7:dc:80:26:71:0a:f2:a8:08:87:df:d8:b2: 32:4b:07:e6:8e:42:06:0b:93:2c:2d:11:80:d8:2a: d9:2c:f5:74:0c:c7:6f:53:6e:c7:fe:80:6c:3d:ea: a4:15:bd:a0:b0:1d:a9:3b:52:c5:9b:30:aa:33:73: 4b:3d:21:81:29:16:ec:00:fa:ef:d2:77:00:69:83: b7:06:4d:79:63:86:eb:88:a6:67:6b:25:3c:12:82: 50:40:96:dc:7a:23:39:e5:68:c1:8b:cd:3c:3d:ed: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A1:3A:A3:25:B2:F6:64:7B:47:2A:8A:42:A7:83:FB:71:5F:C2:3B X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.102.0/24 193.242.117.0/24 Signature Algorithm: sha256WithRSAEncryption 01:a8:cc:82:40:b6:a5:d1:02:c4:b0:77:4d:3b:ec:a9:f8:7a: bc:1f:3c:cd:16:f3:a9:34:39:f3:fb:7a:6a:29:99:0e:93:2d: 54:9c:73:aa:83:cd:df:f3:ce:e6:ed:7e:1f:0a:cb:92:18:8a: 73:65:ea:52:c2:8b:b9:ee:71:d0:a1:63:d0:7e:06:5b:f9:b5: 99:be:9a:20:4b:04:a4:2e:bf:fd:f1:ca:28:b2:ed:c2:1c:7e: 58:56:0e:fb:3a:af:50:1c:fb:6d:e3:09:6b:f3:8e:fe:03:b1: af:64:c2:cf:b2:f1:2e:c6:e9:33:a8:35:16:c4:ec:31:23:96: 1d:3b:43:77:b1:5e:7a:03:c8:0f:ec:20:26:df:4d:e5:7d:ee: 43:01:c0:8f:2d:13:72:27:36:75:10:02:6f:53:89:d4:c6:ff: 24:d8:aa:1c:d0:f8:3c:62:4c:43:44:0a:5a:71:20:14:9b:60: bc:f5:14:c0:59:01:2f:e1:1b:cd:4e:24:68:b1:72:2c:be:3e: f5:98:c8:9b:a3:79:02:68:8c:03:4c:70:51:96:76:52:92:70: be:a4:34:bb:ad:1a:f7:4f:fb:ef:3b:72:e9:f4:00:7d:18:1c: cb:5f:45:6a:e3:5c:ff:f1:68:e9:13:76:e4:40:a4:83:70:5d: ea:4d:02:02 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OJglp5vtaOwEYvxHqoSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWExM2FhMzI1YjJmNjY0N2I0NzJhOGE0MmE3ODNmYjcxNWZjMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm68etr+ws98tatqn7Szc9EX2FPI 65exwKNXEjtpWiJt5edz2jnZB/TLywP0gfSP2z+30oJAdkpyggltD1IQunly5Pm5 mb6p7sGM8nyGRuYxjSmO+hhjn9qd5mp+9cTDvG/OJrAQ6LiGNkNXEI1iLSDBwyfY xS7xQRCJWLbCw7LHfxigcOlD+hpgjLPNptTgKLQJ4AKSB8fcgCZxCvKoCIff2LIy SwfmjkIGC5MsLRGA2CrZLPV0DMdvU27H/oBsPeqkFb2gsB2pO1LFmzCqM3NLPSGB KRbsAPrv0ncAaYO3Bk15Y4briKZnayU8EoJQQJbceiM55WjBi808Pe0yTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEmhOqMlsvZke0cqikKng/txX8I7MB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvU2FFNm95V3k5bVI3UnlxS1FxZUQtM0Zmd2pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWxmAwQA wfJ1MA0GCSqGSIb3DQEBCwUAA4IBAQABqMyCQLal0QLEsHdNO+yp+Hq8HzzNFvOp NDnz+3pqKZkOky1UnHOqg83f887m7X4fCsuSGIpzZepSwou57nHQoWPQfgZb+bWZ vpogSwSkLr/98coosu3CHH5YVg77Oq9QHPtt4wlr847+A7GvZMLPsvEuxukzqDUW xOwxI5YdO0N3sV56A8gP7CAm303lfe5DAcCPLRNyJzZ1EAJvU4nUxv8k2Koc0Pg8 YkxDRApacSAUm2C89RTAWQEv4RvNTiRosXIsvj71mMibo3kCaIwDTHBRlnZSknC+ pDS7rRr3T/vvO3Lp9AB9GBzLX0Vq41z/8WjpE3bkQKSDcF3qTQIC -----END CERTIFICATE-----Generated at Mon Jan 19 17:09:57 2026 by rpki-client