This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa File: FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa (raw, json) Hash identifier: 6pH0Xhz90BXtIh2RhS40jMejU5H68bceW0YDHg58IYE= Subject key identifier: 14:1D:D4:5B:A0:D5:65:78:F7:A3:B8:9C:82:45:53:13:3C:69:F4:08 Certificate issuer: /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08 Certificate serial: 019B7DCA540FC5A4D0FF0401D45D50C40B31 Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa Signing time: Fri 02 Jan 2026 08:19:30 +0000 ROA not before: Fri 02 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202440 IP address blocks: 194.11.84.0/22 maxlen: 22 194.11.84.0/23 maxlen: 23 194.11.84.0/24 maxlen: 24 194.11.85.0/24 maxlen: 24 194.11.86.0/23 maxlen: 23 194.11.86.0/24 maxlen: 24 194.11.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:54:0f:c5:a4:d0:ff:04:01:d4:5d:50:c4:0b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=141dd45ba0d56578f7a3b89c824553133c69f408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:42:b3:93:93:fc:50:6f:c6:2d:31:81:a4:8d: ca:0a:51:71:e5:5a:c5:1d:05:70:b5:f3:65:15:e3: 48:50:df:d3:85:7b:ed:c8:1e:32:9d:50:a6:10:c6: 1f:a2:59:44:6c:bd:6d:ce:0c:c9:54:c2:96:a6:d3: 71:47:80:73:a3:81:3b:23:a4:1d:f6:84:ef:f7:4c: 44:37:bc:16:e7:8d:1b:f7:0d:07:6c:68:c5:0e:48: 57:68:0e:e9:64:9c:16:7e:90:e0:d5:0b:4d:19:01: e1:88:c4:ac:d8:1f:5a:59:af:4b:59:d0:02:a9:0f: 47:6e:e4:6c:8f:2b:d7:f7:8c:63:85:c5:78:fb:f2: c7:77:4c:66:64:6b:2b:7c:c6:cd:e9:cf:7c:e1:a2: f6:05:8c:43:fb:f5:e7:12:fb:3b:d9:48:e2:ba:4a: 25:03:eb:3f:2e:51:44:0e:05:6e:d8:da:34:7c:28: 10:2f:10:47:91:d5:52:c7:96:01:db:9e:cf:5c:73: 1f:96:21:19:9c:f4:1d:6d:25:5e:45:62:73:f6:2b: 67:80:c7:33:c8:c3:33:f5:a0:1b:1f:8e:1b:ed:cb: 9e:14:f5:78:79:27:49:1f:d3:44:da:7e:2e:38:f2: 72:4f:bf:74:fd:c0:6d:01:67:ea:e1:1f:1d:ed:80: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1D:D4:5B:A0:D5:65:78:F7:A3:B8:9C:82:45:53:13:3C:69:F4:08 X509v3 Authority Key Identifier: keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.84.0/22 Signature Algorithm: sha256WithRSAEncryption b5:d8:c7:d4:61:b8:2c:94:a2:f4:d6:4c:8b:30:2f:1b:61:13: 00:cc:f4:f4:66:b8:1b:06:dd:a8:cc:89:5e:53:af:a3:8d:a8: c5:68:e8:c1:0c:b0:62:34:42:d2:52:ed:83:bd:7b:fb:12:f2: 7c:6a:dc:8b:df:5c:24:b4:3d:3e:11:5c:62:14:31:2e:7c:16: 68:b0:a1:27:ab:80:8b:e9:7b:f5:56:2e:b0:fd:96:21:99:12: 80:34:75:10:39:ee:9b:2d:6e:27:d7:13:7d:05:44:5b:3d:e3: e2:25:89:64:ae:84:d0:aa:33:eb:6f:a3:88:28:38:14:42:0a: 62:29:95:3a:6a:6c:58:36:ae:8b:82:cb:82:a1:ef:20:71:cd: f1:20:ea:df:57:00:c6:5a:cb:87:db:c6:7a:ff:97:86:29:8d: 73:08:b6:a1:4f:6f:03:44:4c:02:13:b7:ee:1d:ff:74:68:8a: a7:a3:29:2c:76:3a:d5:a6:b6:cc:71:f6:71:15:c8:13:54:22: 58:63:61:60:7b:ea:07:45:a3:dd:85:b7:f3:79:8d:9e:a9:e2: a5:07:1c:54:db:9a:5e:85:3b:c2:5a:a6:c3:b0:92:02:cb:c5: 5b:d3:66:14:52:2c:04:4a:64:58:7f:27:4e:9a:9b:86:1b:e6: 7a:50:7f:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ylQPxaTQ/wQB1F1QxAsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTJmZWU5NTQyZDYzYTY4ZTQ5YjJjOGVkNzgzOGY4YTAz NDZiMDgwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDFkZDQ1YmEwZDU2NTc4ZjdhM2I4OWM4MjQ1NTMxMzNjNjlmNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UKzk5P8UG/GLTGBpI3KClFx5VrF HQVwtfNlFeNIUN/ThXvtyB4ynVCmEMYfollEbL1tzgzJVMKWptNxR4Bzo4E7I6Qd 9oTv90xEN7wW540b9w0HbGjFDkhXaA7pZJwWfpDg1QtNGQHhiMSs2B9aWa9LWdAC qQ9HbuRsjyvX94xjhcV4+/LHd0xmZGsrfMbN6c984aL2BYxD+/XnEvs72Ujiukol A+s/LlFEDgVu2No0fCgQLxBHkdVSx5YB257PXHMfliEZnPQdbSVeRWJz9itngMcz yMMz9aAbH44b7cueFPV4eSdJH9NE2n4uOPJyT790/cBtAWfq4R8d7YD4NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQd1Fug1WV496O4nIJFUxM8afQIMB8GA1UdIwQY MBaAFN5S/ulULWOmjkmyyO14OPigNGsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgt YTRmMzMzNjU0Y2M5LzEvRkIzVVc2RFZaWGozbzdpY2drVlRFenhwOUFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgtYTRmMzMzNjU0Y2M5 LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwgtUMA0G CSqGSIb3DQEBCwUAA4IBAQC12MfUYbgslKL01kyLMC8bYRMAzPT0ZrgbBt2ozIle U6+jjajFaOjBDLBiNELSUu2DvXv7EvJ8atyL31wktD0+EVxiFDEufBZosKEnq4CL 6Xv1Vi6w/ZYhmRKANHUQOe6bLW4n1xN9BURbPePiJYlkroTQqjPrb6OIKDgUQgpi KZU6amxYNq6LgsuCoe8gcc3xIOrfVwDGWsuH28Z6/5eGKY1zCLahT28DREwCE7fu Hf90aIqnoyksdjrVprbMcfZxFcgTVCJYY2Fge+oHRaPdhbfzeY2eqeKlBxxU25pe hTvCWqbDsJICy8Vb02YUUiwESmRYfydOmpuGG+Z6UH8f -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:31 2026 by rpki-client