This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/DEtrf8DnDvuzKfrrUo7nyTMJQZY.roa File: DEtrf8DnDvuzKfrrUo7nyTMJQZY.roa (raw, json) Hash identifier: MIbxcgDVh37d8jCKphqH6GC0fLWYYb1ZT8Y0ieKO3pc= Subject key identifier: 0C:4B:6B:7F:C0:E7:0E:FB:B3:29:FA:EB:52:8E:E7:C9:33:09:41:96 Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba Certificate serial: 019B7C7EFFD2D5C8145025C6208A927211B4 Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/DEtrf8DnDvuzKfrrUo7nyTMJQZY.roa Signing time: Fri 02 Jan 2026 02:17:36 +0000 ROA not before: Fri 02 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47612 IP address blocks: 195.190.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:ff:d2:d5:c8:14:50:25:c6:20:8a:92:72:11:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba Validity Not Before: Jan 2 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c4b6b7fc0e70efbb329faeb528ee7c933094196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:09:1b:07:30:1f:88:3a:d0:2c:92:37:fa: 26:6f:fe:3e:5d:3b:e2:96:ca:c1:0a:cf:5a:4c:a7: f5:24:5b:7c:7a:8e:da:f6:2c:28:61:9d:d5:92:84: be:d6:f4:9a:de:26:25:32:02:02:15:74:0f:11:fc: ff:b3:b7:a9:c9:b8:17:60:3b:94:57:c7:06:9f:49: 14:05:29:c0:2e:62:2d:ac:13:c6:10:e7:47:d4:6d: 78:41:f1:1b:b7:33:ea:bd:39:b8:04:23:b2:bf:0f: 61:af:e8:50:21:ac:db:81:d4:c3:8a:51:c8:8b:fe: 59:0b:3a:37:7e:0d:b5:71:30:35:62:e4:44:73:ea: ef:3a:75:c3:7b:3f:f9:94:ad:8e:50:43:a3:46:73: 29:fe:1c:e4:5e:e8:ae:7d:ca:1b:9d:c8:51:2d:12: 1d:5c:ee:d0:4e:7b:ac:02:7a:ef:cb:d5:b1:83:ea: b7:2b:56:5a:6d:27:b9:1e:ff:7e:83:9b:54:4a:a4: 5c:22:d6:a0:5b:9f:62:4b:cc:3b:07:67:bd:14:4f: c4:e4:43:cd:a1:b7:40:6d:91:8d:c2:2a:76:a3:1d: 96:73:37:41:bb:5f:0b:dc:09:e1:a9:00:69:97:12: 55:cb:2d:74:13:a9:2c:01:99:e2:2a:2b:eb:7a:b2: 62:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4B:6B:7F:C0:E7:0E:FB:B3:29:FA:EB:52:8E:E7:C9:33:09:41:96 X509v3 Authority Key Identifier: keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/DEtrf8DnDvuzKfrrUo7nyTMJQZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.3.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ef:f3:11:a5:fc:5b:7a:ce:2a:8a:6c:6d:ad:5a:f0:ac:c2: 27:73:c3:15:c2:57:ee:26:14:4d:46:11:e7:ef:75:93:8b:b2: c9:76:63:a9:46:36:96:09:8a:bf:33:b4:0d:b0:60:27:84:f2: 06:28:cf:55:60:f3:06:f3:11:3a:7b:50:7c:e5:b6:17:c0:9e: 65:71:bb:1e:d9:d3:49:45:65:c1:b9:96:53:4e:91:ca:1c:51: fc:f1:2b:3b:4c:2d:4c:86:29:8e:f5:b1:2b:95:19:ad:75:a0: ca:91:26:8c:82:17:15:c0:33:4d:84:b0:4b:f6:de:8f:a7:81: f3:46:38:82:02:16:49:b9:64:17:76:2d:2c:98:13:0c:91:b3: a5:81:97:4e:75:e9:a6:65:cf:39:84:61:ab:f5:14:6f:a4:10: 24:1e:61:6f:99:3b:6d:d4:65:2e:dc:25:9b:c1:d0:db:5f:26: a8:03:aa:51:ad:f0:27:a7:c2:2f:37:e3:da:18:d1:31:f4:cd: 65:4b:41:0d:69:e7:93:e4:90:0b:41:cc:7c:4c:20:45:6b:06: e1:7f:0b:ad:81:36:5d:79:2d:e8:fe:70:77:65:cc:47:7e:b3: 6f:80:f9:05:b1:0a:a1:7b:59:4d:de:65:36:04:09:9d:b5:e8: 1b:b5:29:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fv/S1cgUUCXGIIqSchG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzczZTVmMWQ2OWRlYTBjMDFmMzEzOTc5NjJlN2Q3NGI0 M2Q3YmEwHhcNMjYwMTAyMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzRiNmI3ZmMwZTcwZWZiYjMyOWZhZWI1MjhlZTdjOTMzMDk0MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvusJGwcwH4g60CySN/omb/4+XTvi lsrBCs9aTKf1JFt8eo7a9iwoYZ3VkoS+1vSa3iYlMgICFXQPEfz/s7epybgXYDuU V8cGn0kUBSnALmItrBPGEOdH1G14QfEbtzPqvTm4BCOyvw9hr+hQIazbgdTDilHI i/5ZCzo3fg21cTA1YuREc+rvOnXDez/5lK2OUEOjRnMp/hzkXuiufcobnchRLRId XO7QTnusAnrvy9Wxg+q3K1ZabSe5Hv9+g5tUSqRcItagW59iS8w7B2e9FE/E5EPN obdAbZGNwip2ox2WczdBu18L3AnhqQBplxJVyy10E6ksAZniKivrerJimwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAxLa3/A5w77syn661KO58kzCUGWMB8GA1UdIwQY MBaAFEF3Pl8dad6gwB8xOXli59dLQ9e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjIt MWJmNmM1MDlkMGM1LzEvREV0cmY4RG5EdnV6S2ZyclVvN255VE1KUVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjItMWJmNmM1MDlkMGM1 LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw74DMA0G CSqGSIb3DQEBCwUAA4IBAQAf7/MRpfxbes4qimxtrVrwrMInc8MVwlfuJhRNRhHn 73WTi7LJdmOpRjaWCYq/M7QNsGAnhPIGKM9VYPMG8xE6e1B85bYXwJ5lcbse2dNJ RWXBuZZTTpHKHFH88Ss7TC1MhimO9bErlRmtdaDKkSaMghcVwDNNhLBL9t6Pp4Hz RjiCAhZJuWQXdi0smBMMkbOlgZdOdemmZc85hGGr9RRvpBAkHmFvmTtt1GUu3CWb wdDbXyaoA6pRrfAnp8IvN+PaGNEx9M1lS0ENaeeT5JALQcx8TCBFawbhfwutgTZd eS3o/nB3ZcxHfrNvgPkFsQqhe1lN3mU2BAmdtegbtSmv -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:09 2026 by rpki-client