This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa File: 3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa (raw, json) Hash identifier: NIhxzfLk3mbiT3cRk3puqCB8KvdXHUd8N5EcFBnPSDo= Subject key identifier: DC:3A:67:95:73:E3:0D:0A:3A:B3:73:05:21:5D:7C:14:79:34:8F:14 Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f Certificate serial: 019B7A5A7AA454DAAC3ECF6A6960AB5599D8 Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa Signing time: Thu 01 Jan 2026 16:18:28 +0000 ROA not before: Thu 01 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202639 IP address blocks: 193.56.152.0/22 maxlen: 22 193.56.152.0/24 maxlen: 24 193.56.153.0/24 maxlen: 24 193.56.154.0/24 maxlen: 24 193.56.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:7a:a4:54:da:ac:3e:cf:6a:69:60:ab:55:99:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f Validity Not Before: Jan 1 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc3a679573e30d0a3ab37305215d7c1479348f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:c1:03:f8:08:4a:c0:f2:bf:af:56:96:64: 11:b6:e8:e4:99:26:1d:dd:e9:4e:3a:dd:0f:c9:20: 5f:da:32:96:fe:31:e0:39:81:24:b8:c1:af:10:75: 9c:ae:b7:bd:09:f8:e0:9f:93:0c:87:77:f6:b5:5e: 69:25:27:b4:d5:43:97:ff:f9:84:87:9a:cd:85:2f: 10:8c:ed:11:e7:02:77:bc:ca:d7:f6:cf:f2:23:95: 66:c5:c9:63:f6:8d:ee:04:a0:2c:4e:ac:d1:e9:4c: 8d:0a:c2:67:67:46:9b:08:a9:11:46:ee:27:bb:bc: 04:dd:ed:85:9e:7d:95:78:c9:68:e0:16:75:84:b4: ca:d0:58:16:ce:f5:df:7e:d7:3d:7a:48:d6:de:06: 70:73:86:98:14:e4:7a:ca:ec:f0:b3:84:54:61:43: 92:7a:82:b8:4f:ba:dd:62:cd:7a:4c:81:af:1e:13: 82:73:c3:f8:f0:7e:25:79:3f:02:b4:02:19:42:ce: 69:f9:59:4b:d1:6e:5d:84:25:d8:35:f0:f9:b9:bf: fc:70:d0:0f:ed:b1:48:43:c9:71:dc:41:0a:17:36: 7d:d9:c5:08:57:34:dc:82:5a:0e:45:cd:9f:9c:bd: e2:53:b3:1b:af:df:b6:8d:d3:a7:24:8c:a9:28:19: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3A:67:95:73:E3:0D:0A:3A:B3:73:05:21:5D:7C:14:79:34:8F:14 X509v3 Authority Key Identifier: keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.152.0/22 Signature Algorithm: sha256WithRSAEncryption a1:1d:b1:48:ae:a3:ca:08:fd:5e:17:86:ef:60:5f:9e:c3:c3: b1:f4:41:10:8b:d7:45:f8:05:76:42:c8:ff:9b:57:21:2c:d1: cf:35:71:0b:1a:ed:ef:d0:b0:b6:8b:9e:c4:9b:a1:94:72:ca: 9c:c9:6e:1c:ad:17:d7:31:6d:ef:b4:86:bd:eb:07:1c:79:15: 15:b4:d6:e4:ec:ab:a4:87:4f:24:7c:c8:6f:4b:e0:8d:75:5e: c0:6c:5d:d2:83:6a:dc:fc:7e:c5:de:fd:09:be:60:77:f7:09: 70:1d:0e:5e:df:82:1b:27:f8:c2:90:30:e2:89:f6:36:2e:3d: 2e:7d:d9:5f:d6:2e:27:7e:35:e9:cd:d4:44:0a:34:6d:0d:c7: 2a:e7:3b:e1:35:aa:3f:57:bc:59:d7:07:1c:ea:f1:85:17:93: 2a:6f:ef:25:c7:9e:12:37:a6:59:76:ec:4c:7c:8d:0d:72:31: f8:60:b3:cd:3e:59:6f:3a:5d:91:00:41:1c:e6:23:8a:7e:87: 59:b5:7f:d0:d8:f9:ff:5f:7b:43:f9:d2:c5:fd:12:cf:d3:89: 02:46:2b:24:db:7c:f1:8a:e6:a8:f7:63:a8:0d:1c:b3:50:3c: 8b:3a:49:a7:08:2b:bb:4f:4e:74:84:69:b0:06:ba:91:e3:40: 36:3d:93:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WnqkVNqsPs9qaWCrVZnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODdhNGUyY2ZhOGVjZDAyYjUwNzMwMmIzYzZkYjE3ZjIx MTc0MmYwHhcNMjYwMTAxMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzNhNjc5NTczZTMwZDBhM2FiMzczMDUyMTVkN2MxNDc5MzQ4ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN/BA/gISsDyv69WlmQRtujkmSYd 3elOOt0PySBf2jKW/jHgOYEkuMGvEHWcrre9Cfjgn5MMh3f2tV5pJSe01UOX//mE h5rNhS8QjO0R5wJ3vMrX9s/yI5Vmxclj9o3uBKAsTqzR6UyNCsJnZ0abCKkRRu4n u7wE3e2Fnn2VeMlo4BZ1hLTK0FgWzvXfftc9ekjW3gZwc4aYFOR6yuzws4RUYUOS eoK4T7rdYs16TIGvHhOCc8P48H4leT8CtAIZQs5p+VlL0W5dhCXYNfD5ub/8cNAP 7bFIQ8lx3EEKFzZ92cUIVzTcgloORc2fnL3iU7Mbr9+2jdOnJIypKBk3CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNw6Z5Vz4w0KOrNzBSFdfBR5NI8UMB8GA1UdIwQY MBaAFAKHpOLPqOzQK1BzArPG2xfyEXQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAt OWVmOTY3ZmM3N2Q4LzEvM0RwbmxYUGpEUW82czNNRklWMThGSGswanhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAtOWVmOTY3ZmM3N2Q4 LzEvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwTiYMA0G CSqGSIb3DQEBCwUAA4IBAQChHbFIrqPKCP1eF4bvYF+ew8Ox9EEQi9dF+AV2Qsj/ m1chLNHPNXELGu3v0LC2i57Em6GUcsqcyW4crRfXMW3vtIa96wcceRUVtNbk7Kuk h08kfMhvS+CNdV7AbF3Sg2rc/H7F3v0JvmB39wlwHQ5e34IbJ/jCkDDiifY2Lj0u fdlf1i4nfjXpzdRECjRtDccq5zvhNao/V7xZ1wcc6vGFF5Mqb+8lx54SN6ZZduxM fI0NcjH4YLPNPllvOl2RAEEc5iOKfodZtX/Q2Pn/X3tD+dLF/RLP04kCRisk23zx iuao92OoDRyzUDyLOkmnCCu7T050hGmwBrqR40A2PZMV -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:55 2026 by rpki-client