This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/3eahbNs7sLSlMwMQAPIK4WlF5S0.roa File: 3eahbNs7sLSlMwMQAPIK4WlF5S0.roa (raw, json) Hash identifier: iShcDJZ7gmNtw4FSGePEabrCqu38c4kHe0CrQJ2Q7ow= Subject key identifier: DD:E6:A1:6C:DB:3B:B0:B4:A5:33:03:10:00:F2:0A:E1:69:45:E5:2D Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79 Certificate serial: 019B7BA34581E7AE8ADEDADC8420E74F0128 Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/3eahbNs7sLSlMwMQAPIK4WlF5S0.roa Signing time: Thu 01 Jan 2026 22:17:36 +0000 ROA not before: Thu 01 Jan 2026 22:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207629 IP address blocks: 193.111.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:45:81:e7:ae:8a:de:da:dc:84:20:e7:4f:01:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79 Validity Not Before: Jan 1 22:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dde6a16cdb3bb0b4a533031000f20ae16945e52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:9a:36:43:98:00:76:fc:40:47:ff:a0:3a: ce:be:cc:2b:60:7a:60:8c:c3:9b:cf:bf:14:64:5a: 01:0d:8e:c9:1a:14:3b:1c:af:dc:af:ef:2d:63:a5: df:98:69:a9:f7:0d:81:8d:1e:18:95:56:46:57:aa: 6f:6f:6f:8e:54:dc:b8:ac:9c:41:8d:1e:bc:18:c0: 07:02:52:7e:fa:c6:aa:09:84:49:dc:90:07:7f:31: 85:b3:15:09:27:89:94:1d:22:02:12:d0:53:4d:a1: 77:57:ec:46:94:8a:7a:15:a3:23:93:7b:c5:18:87: fc:81:9a:14:fb:d6:74:76:29:73:9b:64:37:da:ea: 0b:b7:d5:6a:97:d5:5f:57:bd:ad:dc:7f:8d:ec:52: c6:b6:05:7b:3e:c1:2a:8a:f7:83:9e:b9:3d:32:3b: cb:ed:f3:67:87:43:5f:a5:5f:9f:3f:cc:75:8f:d0: 7f:4a:35:61:b8:1c:d6:6b:eb:3d:8b:9c:0b:cd:8e: d1:91:c4:16:da:57:92:b7:1d:80:a8:40:be:9d:d6: 5b:d2:e4:12:bf:b3:ce:98:42:c6:41:e7:d0:2a:91: ae:24:bc:07:46:c8:60:61:d3:e6:96:b8:90:83:dd: d1:a9:31:4a:81:68:df:86:c7:b3:ed:0b:15:9f:f4: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E6:A1:6C:DB:3B:B0:B4:A5:33:03:10:00:F2:0A:E1:69:45:E5:2D X509v3 Authority Key Identifier: keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/3eahbNs7sLSlMwMQAPIK4WlF5S0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.73.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:af:a8:80:d6:c0:9d:dd:c8:32:a1:8a:29:65:0b:a4:fc:e0: ed:8b:52:8e:2c:1a:49:95:37:d4:b4:3c:49:f3:a3:7a:f3:71: db:c0:8d:4c:ec:37:b3:79:a5:d0:7b:2b:4c:b7:4b:bf:b0:56: f0:bc:1e:0a:0e:81:32:9b:33:8b:17:cb:ef:cd:80:ad:d3:69: e8:75:7d:18:b9:2f:00:5f:cf:3c:92:e2:d5:a4:9e:37:30:19: 8e:90:a0:51:ec:da:e1:12:5d:4a:96:fc:00:01:2b:79:6c:45: d0:51:6b:80:fe:49:1c:45:64:3c:93:6d:ec:7b:84:41:73:5b: bf:4f:48:6b:2d:fc:ad:7c:90:b4:20:78:30:97:96:f1:2f:0a: 7c:2e:de:7f:5e:7e:c0:13:00:b4:ff:58:f0:8a:e9:d5:a6:73: 68:bf:48:d5:d2:05:5f:96:e9:2d:c2:9d:93:66:6d:3b:0e:9c: fa:83:00:d4:fa:af:33:4b:7e:48:72:6f:61:07:b6:e5:e9:12: e5:11:c2:b4:50:08:74:03:f4:04:9e:fa:4c:b3:bc:c0:ae:f3: 04:79:56:bb:12:ef:08:44:a6:9a:73:4b:df:70:b6:4e:50:2a: 10:e5:49:d8:aa:f1:3f:4a:92:37:aa:1a:ab:33:d3:26:f7:39: 6a:82:11:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o0WB566K3trchCDnTwEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTk0ODRjYTcwOGFiNzcxZWIxZGI5MGJhZmM4YTExNGMy YzNkNzkwHhcNMjYwMTAxMjIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGU2YTE2Y2RiM2JiMGI0YTUzMzAzMTAwMGYyMGFlMTY5NDVlNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoGaNkOYAHb8QEf/oDrOvswrYHpg jMObz78UZFoBDY7JGhQ7HK/cr+8tY6XfmGmp9w2BjR4YlVZGV6pvb2+OVNy4rJxB jR68GMAHAlJ++saqCYRJ3JAHfzGFsxUJJ4mUHSICEtBTTaF3V+xGlIp6FaMjk3vF GIf8gZoU+9Z0dilzm2Q32uoLt9Vql9VfV72t3H+N7FLGtgV7PsEqiveDnrk9MjvL 7fNnh0NfpV+fP8x1j9B/SjVhuBzWa+s9i5wLzY7RkcQW2leStx2AqEC+ndZb0uQS v7POmELGQefQKpGuJLwHRshgYdPmlriQg93RqTFKgWjfhsez7QsVn/SXmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN3moWzbO7C0pTMDEADyCuFpReUtMB8GA1UdIwQY MBaAFMmpSEynCKt3HrHbkLr8ihFMLD15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yNWU2NjAtNDA1Ni00MmNjLWE4YjAt ZDA1MTdkYjI2ZGFkLzEvM2VhaGJOczdzTFNsTXdNUUFQSUs0V2xGNVMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yNWU2NjAtNDA1Ni00MmNjLWE4YjAtZDA1MTdkYjI2ZGFk LzEveWFsSVRLY0lxM2Nlc2R1UXV2eUtFVXdzUFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW9JMA0G CSqGSIb3DQEBCwUAA4IBAQA8r6iA1sCd3cgyoYopZQuk/ODti1KOLBpJlTfUtDxJ 86N683HbwI1M7DezeaXQeytMt0u/sFbwvB4KDoEymzOLF8vvzYCt02nodX0YuS8A X888kuLVpJ43MBmOkKBR7NrhEl1KlvwAASt5bEXQUWuA/kkcRWQ8k23se4RBc1u/ T0hrLfytfJC0IHgwl5bxLwp8Lt5/Xn7AEwC0/1jwiunVpnNov0jV0gVfluktwp2T Zm07Dpz6gwDU+q8zS35Icm9hB7bl6RLlEcK0UAh0A/QEnvpMs7zArvMEeVa7Eu8I RKaac0vfcLZOUCoQ5UnYqvE/SpI3qhqrM9Mm9zlqghEk -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:48 2026 by rpki-client