This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3kSkXakAftyoWmV6hWNE18LDdkM.roa File: 3kSkXakAftyoWmV6hWNE18LDdkM.roa (raw, json) Hash identifier: yWONGtdU39QhRhOB2Vk9AJjT8yhoIhH/nQSXdJQgBFA= Subject key identifier: DE:44:A4:5D:A9:00:7E:DC:A8:5A:65:7A:85:63:44:D7:C2:C3:76:43 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79105323431B855F032A4EC34F3DA33C Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3kSkXakAftyoWmV6hWNE18LDdkM.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62077 IP address blocks: 188.132.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:53:23:43:1b:85:5f:03:2a:4e:c3:4f:3d:a3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de44a45da9007edca85a657a856344d7c2c37643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:0f:48:d1:c2:2f:c2:f6:49:27:5c:a8:ed: 91:15:9b:30:f7:24:06:e5:6c:9e:c7:31:53:b5:db: 71:fc:01:06:2a:43:8b:8f:de:19:97:e4:b4:ab:71: 19:ee:f1:63:32:35:27:a4:0e:73:9b:1a:64:18:18: dd:69:f1:cf:6f:d1:9a:13:9b:8c:7f:64:6d:f0:16: 4b:6c:1a:34:a6:4f:4b:f3:0b:91:5a:60:9d:62:cf: 1b:03:ed:35:a0:20:70:ac:f3:ec:62:ee:c1:87:62: 0b:41:ca:6c:09:89:3c:da:f0:16:46:a8:5e:33:c4: 30:97:ba:53:13:1d:a7:4e:da:15:dc:f4:6b:fe:6c: 26:ae:05:68:36:b4:06:1a:63:72:f4:44:29:ca:ce: 88:05:f2:66:36:21:00:97:a6:b4:2a:cc:39:d1:31: b5:98:cd:b9:1b:2a:ea:2f:91:a6:f4:0a:34:cd:0b: 8c:74:b8:6c:93:f3:25:74:ce:e1:e5:84:79:1c:36: 16:9a:ef:75:ad:80:64:70:e8:21:68:01:3a:b0:35: c4:28:85:bd:d3:38:ef:7f:ca:8c:97:e0:21:11:bf: 35:fe:a2:18:af:da:ea:a3:92:dc:0a:45:4b:9a:87: 31:be:e9:0c:41:6d:23:b4:64:49:0f:2c:58:da:a9: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:44:A4:5D:A9:00:7E:DC:A8:5A:65:7A:85:63:44:D7:C2:C3:76:43 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3kSkXakAftyoWmV6hWNE18LDdkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.178.0/24 Signature Algorithm: sha256WithRSAEncryption 62:56:e7:da:a1:3b:99:31:ed:d8:f8:40:5a:63:53:06:9d:4b: 6e:96:f6:03:5c:ea:16:9e:01:21:42:0d:4b:57:43:31:21:9c: 00:0b:92:75:73:64:f2:06:b8:d3:9f:9d:c2:59:92:cd:db:a3: 56:a9:29:af:28:c5:4d:22:c1:d6:45:e1:e4:07:a6:69:b4:9a: a8:68:12:36:8e:dc:35:b1:52:38:99:dd:ef:7d:d9:62:0e:9e: c1:66:70:d6:90:b1:89:1f:83:a7:5a:b5:be:0d:c0:71:4e:65: ef:4b:48:58:2f:1f:59:c0:3c:7f:2b:8d:0c:12:83:20:5c:b1: f7:3c:de:f7:e3:f6:4b:16:d0:3e:ff:2b:09:02:f1:66:37:7f: 87:69:a3:24:25:a6:69:c1:57:e9:c6:4b:84:57:5d:a4:2e:3c: a8:d4:78:ee:77:83:9b:16:8a:b4:aa:ab:db:b9:18:b2:fd:05: 68:46:5d:3f:1c:89:96:a7:08:fa:df:6d:c1:bc:b8:78:d1:8c: b3:32:05:ca:45:5e:cc:0f:dd:9c:f9:df:a2:b2:d4:30:04:49: e9:5c:c4:c9:5c:27:b9:23:2c:6e:a5:79:5b:bf:23:d4:54:4e: 84:4a:e6:aa:0f:46:91:b5:90:c8:e3:2c:01:eb:78:f7:67:57: 85:f9:30:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFMjQxuFXwMqTsNPPaM8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTQ0YTQ1ZGE5MDA3ZWRjYTg1YTY1N2E4NTYzNDRkN2MyYzM3NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowMPSNHCL8L2SSdcqO2RFZsw9yQG 5WyexzFTtdtx/AEGKkOLj94Zl+S0q3EZ7vFjMjUnpA5zmxpkGBjdafHPb9GaE5uM f2Rt8BZLbBo0pk9L8wuRWmCdYs8bA+01oCBwrPPsYu7Bh2ILQcpsCYk82vAWRqhe M8Qwl7pTEx2nTtoV3PRr/mwmrgVoNrQGGmNy9EQpys6IBfJmNiEAl6a0Ksw50TG1 mM25GyrqL5Gm9Ao0zQuMdLhsk/MldM7h5YR5HDYWmu91rYBkcOghaAE6sDXEKIW9 0zjvf8qMl+AhEb81/qIYr9rqo5LcCkVLmocxvukMQW0jtGRJDyxY2qlsaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5EpF2pAH7cqFpleoVjRNfCw3ZDMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvM2tTa1hha0FmdHlvV21WNmhXTkUxOExEZGtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISyMA0G CSqGSIb3DQEBCwUAA4IBAQBiVufaoTuZMe3Y+EBaY1MGnUtulvYDXOoWngEhQg1L V0MxIZwAC5J1c2TyBrjTn53CWZLN26NWqSmvKMVNIsHWReHkB6ZptJqoaBI2jtw1 sVI4md3vfdliDp7BZnDWkLGJH4OnWrW+DcBxTmXvS0hYLx9ZwDx/K40MEoMgXLH3 PN734/ZLFtA+/ysJAvFmN3+HaaMkJaZpwVfpxkuEV12kLjyo1Hjud4ObFoq0qqvb uRiy/QVoRl0/HImWpwj6323BvLh40YyzMgXKRV7MD92c+d+istQwBEnpXMTJXCe5 IyxupXlbvyPUVE6ESuaqD0aRtZDI4ywB63j3Z1eF+TCS -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:57 2026 by rpki-client