This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/OW3GzUlbWQENnbfu4RMR0Aal4tU.roa File: OW3GzUlbWQENnbfu4RMR0Aal4tU.roa (raw, json) Hash identifier: T8dOCgn615KaYC2W+2ZIkt7KqeRP31QpTplo42gs07s= Subject key identifier: 39:6D:C6:CD:49:5B:59:01:0D:9D:B7:EE:E1:13:11:D0:06:A5:E2:D5 Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2 Certificate serial: 019B7E37EB5C2D34214B363D15D7E6F683E7 Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/OW3GzUlbWQENnbfu4RMR0Aal4tU.roa Signing time: Fri 02 Jan 2026 10:19:12 +0000 ROA not before: Fri 02 Jan 2026 10:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16279 IP address blocks: 193.178.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:eb:5c:2d:34:21:4b:36:3d:15:d7:e6:f6:83:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=396dc6cd495b59010d9db7eee11311d006a5e2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:2d:44:87:7e:af:70:42:b6:eb:db:64:d9: 25:0f:d9:f6:37:99:36:3d:5d:04:8c:21:73:e6:39: b6:9b:57:aa:b0:b3:6e:83:22:d2:70:e0:1d:06:57: 0d:4f:b3:21:95:72:9f:2c:3a:00:77:9e:d0:97:d5: b5:1e:d0:30:b7:90:6e:45:99:61:74:c0:9a:72:7a: 1c:e7:fe:c7:18:a5:62:6a:1e:6e:70:70:af:4d:62: b2:74:ce:3d:6a:3d:14:37:a2:9f:fc:7d:44:55:14: 5f:dc:dd:9f:2b:d5:8a:90:df:d2:5b:03:47:4b:2f: ca:7d:aa:f2:96:51:52:e7:86:e0:df:9b:10:23:a7: 8a:b7:f1:4e:a5:2e:a4:3e:7d:3c:0d:43:33:56:31: ee:aa:cb:96:8a:9a:68:64:b0:bf:c2:1a:98:40:4e: 41:5b:23:93:dc:3c:37:ba:e9:9f:f2:da:2d:12:a8: 70:87:ae:01:26:c0:54:c0:b8:ee:e2:dd:6d:89:da: 9a:bc:82:e2:6d:1a:25:f9:ba:f9:05:e4:2f:f6:b3: 6a:29:9c:fb:80:52:77:e8:91:e6:d8:b5:9e:3b:5e: 5f:77:0c:15:8a:b9:dc:e1:da:96:85:44:af:c7:f0: db:13:92:f7:47:8d:80:0d:69:c4:a7:21:5d:63:ed: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6D:C6:CD:49:5B:59:01:0D:9D:B7:EE:E1:13:11:D0:06:A5:E2:D5 X509v3 Authority Key Identifier: keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/OW3GzUlbWQENnbfu4RMR0Aal4tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.176.0/21 Signature Algorithm: sha256WithRSAEncryption 53:ed:3c:31:36:ed:ba:d4:20:67:6b:3e:12:b0:66:01:81:55: 71:31:a5:81:ce:55:f6:5c:0b:95:ea:18:ae:8b:dc:cd:bf:83: 79:a0:23:e2:85:bb:36:ee:f0:90:86:ef:a4:e2:2d:76:25:c6: c0:fa:b6:06:1f:ff:79:71:8c:ee:87:a2:25:82:7b:06:70:0a: cc:1c:fb:37:e2:f0:e7:29:e9:b6:82:84:ca:87:b5:cd:74:37: 09:4b:df:ae:de:52:cd:ff:a7:f8:77:93:79:05:6c:ba:73:4e: f2:90:9a:c5:73:01:3d:0c:89:41:92:7d:15:bf:f5:bc:83:3b: c5:87:d9:0b:e0:95:76:72:8b:91:9b:10:91:4f:b9:ec:d7:09: f9:16:27:9c:26:9a:5b:87:33:35:76:39:fc:c0:ff:47:5e:ff: 10:ce:13:64:b4:f7:65:46:92:7c:cd:0e:ad:af:ac:6d:5c:d2: 7f:f6:b8:bd:fe:97:c6:1f:20:c3:49:02:8c:08:fb:59:20:0e: 92:d6:89:6b:c0:9c:74:bd:78:98:4e:f6:5c:bf:d0:fb:54:d5: 12:ee:71:89:eb:98:13:f3:bc:4a:e9:44:9b:b6:5f:7b:51:dc: c1:c7:a0:cd:43:2e:7d:24:b3:23:c6:15:ae:75:bd:c7:61:b2: 28:22:1f:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+tcLTQhSzY9Fdfm9oPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGRmZTEwOWRlODMxZDMyZmQ3OGE1OGNjNWMxZDE0OWE0 NTUzZDIwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTZkYzZjZDQ5NWI1OTAxMGQ5ZGI3ZWVlMTEzMTFkMDA2YTVlMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QotRId+r3BCtuvbZNklD9n2N5k2 PV0EjCFz5jm2m1eqsLNugyLScOAdBlcNT7MhlXKfLDoAd57Ql9W1HtAwt5BuRZlh dMCacnoc5/7HGKViah5ucHCvTWKydM49aj0UN6Kf/H1EVRRf3N2fK9WKkN/SWwNH Sy/KfaryllFS54bg35sQI6eKt/FOpS6kPn08DUMzVjHuqsuWippoZLC/whqYQE5B WyOT3Dw3uumf8totEqhwh64BJsBUwLju4t1tidqavILibRol+br5BeQv9rNqKZz7 gFJ36JHm2LWeO15fdwwVirnc4dqWhUSvx/DbE5L3R42ADWnEpyFdY+3kmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDltxs1JW1kBDZ237uETEdAGpeLVMB8GA1UdIwQY MBaAFDyN/hCd6DHTL9eKWMxcHRSaRVPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEt NTNhMDY4MGY5NzEwLzEvT1czR3pVbGJXUUVObmJmdTRSTVIwQWFsNHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNTc5NjktZWE1Zi00NTE4LTkyZTEtNTNhMDY4MGY5NzEw LzEvUEkzLUVKM29NZE12MTRwWXpGd2RGSnBGVTlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwbKwMA0G CSqGSIb3DQEBCwUAA4IBAQBT7TwxNu261CBnaz4SsGYBgVVxMaWBzlX2XAuV6hiu i9zNv4N5oCPihbs27vCQhu+k4i12JcbA+rYGH/95cYzuh6IlgnsGcArMHPs34vDn Kem2goTKh7XNdDcJS9+u3lLN/6f4d5N5BWy6c07ykJrFcwE9DIlBkn0Vv/W8gzvF h9kL4JV2couRmxCRT7ns1wn5FiecJppbhzM1djn8wP9HXv8QzhNktPdlRpJ8zQ6t r6xtXNJ/9ri9/pfGHyDDSQKMCPtZIA6S1olrwJx0vXiYTvZcv9D7VNUS7nGJ65gT 87xK6USbtl97UdzBx6DNQy59JLMjxhWudb3HYbIoIh/s -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:47 2026 by rpki-client