This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/pSL3Mi5XEdAchUtMULvCKuIdKaM.roa File: pSL3Mi5XEdAchUtMULvCKuIdKaM.roa (raw, json) Hash identifier: PIsMvcROTvHOYMP/WBLkPzqoyaR6+wBcYymEnJhYyE4= Subject key identifier: A5:22:F7:32:2E:57:11:D0:1C:85:4B:4C:50:BB:C2:2A:E2:1D:29:A3 Certificate issuer: /CN=38d0438ab56d84217131bc06fe335e4c7843eb79 Certificate serial: 019B7DCB5BAF0BED19E98B48E9156223409F Authority key identifier: 38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/pSL3Mi5XEdAchUtMULvCKuIdKaM.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58282 IP address blocks: 193.3.60.0/24 maxlen: 24 193.3.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5b:af:0b:ed:19:e9:8b:48:e9:15:62:23:40:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d0438ab56d84217131bc06fe335e4c7843eb79 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a522f7322e5711d01c854b4c50bbc22ae21d29a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:e7:91:1c:e5:68:bc:82:2f:5f:51:f5:e9: 7d:7b:bf:36:5b:1a:fd:ba:d4:d5:51:87:a3:20:c3: 06:0d:77:3b:38:36:44:db:b2:27:cc:ed:e2:33:a0: da:19:66:56:d5:17:47:4a:7c:a6:96:3e:6e:b0:c3: ee:ef:25:13:a7:9a:eb:f4:7d:65:76:88:3d:b2:e2: cf:de:f2:1b:4f:3a:ec:6d:35:23:45:5f:6f:94:d8: f7:29:f1:09:32:c0:1b:1d:d7:21:e5:27:ff:0d:f7: 61:dd:13:8b:2d:14:a0:68:b7:b9:77:cc:e3:49:6d: 1b:34:f3:33:0d:8f:81:fc:98:da:92:74:d9:04:63: 51:cf:73:e0:b3:f8:c3:f9:e8:1b:96:98:92:13:cd: bb:fb:d3:75:83:1b:a3:f8:12:05:80:ce:21:e0:f7: 38:29:c8:1b:20:1b:7e:20:a0:f7:14:39:7b:a9:ef: 90:4e:62:87:ec:ca:01:a1:a7:74:26:d8:8d:de:0d: 87:45:69:44:35:f5:a0:06:53:40:50:0b:43:b4:2a: ee:de:4b:94:d2:e0:4c:0b:a4:85:1e:33:03:ad:7d: ea:5d:d6:ca:d3:b3:fd:06:57:65:68:45:e1:37:bb: e2:42:50:a4:2d:f1:58:ff:1d:0b:8e:77:b0:79:0b: 80:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:F7:32:2E:57:11:D0:1C:85:4B:4C:50:BB:C2:2A:E2:1D:29:A3 X509v3 Authority Key Identifier: keyid:38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/pSL3Mi5XEdAchUtMULvCKuIdKaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.60.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:db:e0:04:54:b8:04:53:df:bf:11:97:ed:39:aa:d7:74:e9: d6:ec:0a:41:d9:f4:25:e2:36:a3:4b:b7:74:e5:68:a9:f8:ef: ca:a3:48:09:da:eb:d8:c0:ba:2f:16:88:fe:00:aa:6e:a7:e8: fa:8e:98:03:8c:37:59:97:c9:5a:0a:87:7c:5f:31:1b:31:00: f4:7c:58:52:16:88:41:1e:95:7e:25:e3:c4:a7:b8:af:aa:99: 2e:99:c4:cc:5e:ce:d3:ff:e5:b7:d6:21:ea:37:6c:74:c9:3e: 64:06:c9:65:ec:6d:72:02:02:d6:3d:fb:85:1c:9b:f3:fa:fc: d2:65:84:cf:fd:7c:9d:26:a6:d7:af:fb:17:f7:1f:c6:6d:63: 53:c8:27:d2:d1:f0:a7:62:18:1b:d5:e6:7a:1f:e6:e0:08:2d: 84:43:ac:5a:7c:ff:9c:cd:ce:1f:6e:33:96:25:ae:89:67:28: 49:07:9b:d5:13:b6:e0:92:b4:0c:33:73:62:7a:2c:2b:29:88: 1c:da:a2:5f:59:bd:58:4c:55:08:47:0e:51:62:59:e8:e8:04: 7b:59:94:32:6c:1a:03:30:8f:c6:a4:ac:20:9c:d7:7c:17:d7: 12:4a:dd:10:9f:5d:72:92:f1:7c:95:74:2f:e8:5c:da:6c:17: ba:13:3e:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1uvC+0Z6YtI6RViI0CfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZDA0MzhhYjU2ZDg0MjE3MTMxYmMwNmZlMzM1ZTRjNzg0 M2ViNzkwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTIyZjczMjJlNTcxMWQwMWM4NTRiNGM1MGJiYzIyYWUyMWQyOWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFfnkRzlaLyCL19R9el9e782Wxr9 utTVUYejIMMGDXc7ODZE27InzO3iM6DaGWZW1RdHSnymlj5usMPu7yUTp5rr9H1l dog9suLP3vIbTzrsbTUjRV9vlNj3KfEJMsAbHdch5Sf/Dfdh3ROLLRSgaLe5d8zj SW0bNPMzDY+B/JjaknTZBGNRz3Pgs/jD+egblpiSE827+9N1gxuj+BIFgM4h4Pc4 KcgbIBt+IKD3FDl7qe+QTmKH7MoBoad0JtiN3g2HRWlENfWgBlNAUAtDtCru3kuU 0uBMC6SFHjMDrX3qXdbK07P9BldlaEXhN7viQlCkLfFY/x0LjneweQuAhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKUi9zIuVxHQHIVLTFC7wiriHSmjMB8GA1UdIwQY MBaAFDjQQ4q1bYQhcTG8Bv4zXkx4Q+t5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT05CRGlyVnRoQ0Z4TWJ3R19qTmVUSGhENjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mZTFhOGMtOTU4NS00MjkxLTlkZjEt ZDllNmM1ZjBkMjg4LzEvcFNMM01pNVhFZEFjaFV0TVVMdkNLdUlkS2FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9mZTFhOGMtOTU4NS00MjkxLTlkZjEtZDllNmM1ZjBkMjg4 LzEvT05CRGlyVnRoQ0Z4TWJ3R19qTmVUSGhENjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwQM8MA0G CSqGSIb3DQEBCwUAA4IBAQB72+AEVLgEU9+/EZftOarXdOnW7ApB2fQl4jajS7d0 5Wip+O/Ko0gJ2uvYwLovFoj+AKpup+j6jpgDjDdZl8laCod8XzEbMQD0fFhSFohB HpV+JePEp7ivqpkumcTMXs7T/+W31iHqN2x0yT5kBsll7G1yAgLWPfuFHJvz+vzS ZYTP/XydJqbXr/sX9x/GbWNTyCfS0fCnYhgb1eZ6H+bgCC2EQ6xafP+czc4fbjOW Ja6JZyhJB5vVE7bgkrQMM3NieiwrKYgc2qJfWb1YTFUIRw5RYlno6AR7WZQybBoD MI/GpKwgnNd8F9cSSt0Qn11ykvF8lXQv6FzabBe6Ez65 -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:47 2026 by rpki-client