This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/F3wnJ14wpFXo4Kkt1OTO7NN80MU.roa File: F3wnJ14wpFXo4Kkt1OTO7NN80MU.roa (raw, json) Hash identifier: AQh1pzxu9Qi4lXo1/bbI8gjGmAourDLEyYfmscp1pII= Subject key identifier: 17:7C:27:27:5E:30:A4:55:E8:E0:A9:2D:D4:E4:CE:EC:D3:7C:D0:C5 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C7FFC4BCED346CD3C6034F7B25BE5F5 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/F3wnJ14wpFXo4Kkt1OTO7NN80MU.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 193.253.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fc:4b:ce:d3:46:cd:3c:60:34:f7:b2:5b:e5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=177c27275e30a455e8e0a92dd4e4ceecd37cd0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:0c:72:41:63:50:21:ee:bf:a1:3e:da:15: a7:45:17:f3:51:0d:46:35:48:c8:fa:ef:49:bc:8d: 3b:f5:7c:e4:2c:62:40:2d:43:ec:13:b6:27:b3:68: bf:7a:9a:df:80:1b:cb:5b:32:01:c1:77:d2:d2:58: 49:e0:16:8d:5f:b8:46:7d:25:bf:b8:4b:a5:8a:31: 21:5b:4a:f0:6f:f4:d8:92:de:e1:08:5f:dd:fb:a6: 16:7a:f4:d3:73:fb:af:ab:43:ac:04:be:5a:d1:e3: 71:34:bd:f2:ca:f6:83:d5:56:e3:a6:e3:05:dd:70: 48:8c:e8:37:1d:d4:ec:b4:3e:bf:2a:cd:b3:50:f8: 35:a8:c3:d2:91:58:98:19:18:83:07:cb:96:bb:45: b6:1e:65:47:9e:47:78:ec:d2:fb:9c:ff:39:33:90: 84:b4:c3:34:dc:25:09:35:52:c4:c6:bd:cf:99:d0: 8d:75:66:cf:c9:14:d7:3d:54:21:8d:46:16:0b:8e: 5d:ff:41:e6:68:9a:95:3d:4b:63:73:27:41:a2:7d: 92:5b:bb:d8:d9:21:90:87:c6:e6:31:d2:91:f3:f5: b0:c9:8a:16:87:da:a4:0f:03:e0:73:c7:b7:68:3e: 2d:72:59:6f:71:7b:11:9b:2b:79:72:52:71:62:be: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7C:27:27:5E:30:A4:55:E8:E0:A9:2D:D4:E4:CE:EC:D3:7C:D0:C5 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/F3wnJ14wpFXo4Kkt1OTO7NN80MU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.253.149.0/24 Signature Algorithm: sha256WithRSAEncryption 77:76:c7:f1:8f:94:20:fd:b3:50:74:c6:b9:48:3d:94:57:44: f6:b7:47:27:2a:67:58:ca:a5:01:e5:fe:56:b2:fd:3b:9d:6a: 5d:55:98:ab:8c:2c:03:d6:49:b0:8d:3e:3c:45:e6:21:67:7b: d2:0c:a3:0b:7a:46:16:cd:5d:ed:e1:c5:ef:ee:ab:0b:9e:d2: b6:2e:b6:89:79:f5:4b:09:e9:3f:59:59:87:ee:d6:12:19:0c: e9:50:22:f5:e6:65:21:1d:3d:68:45:1d:72:2c:f0:51:64:18: 70:16:42:9e:6e:01:62:34:d0:e1:48:dd:2d:2d:33:14:54:34: d9:29:15:a8:8e:81:94:0b:73:c8:b7:08:eb:ce:f0:ef:dc:14: 98:62:8e:b3:9f:15:95:d7:48:89:e2:d6:a5:7d:a4:21:a3:a8: 6e:9e:cb:39:c8:6b:7b:95:1c:54:f0:36:26:3d:7b:47:88:3a: 6f:01:21:dd:c0:d2:a2:54:63:3f:fd:d4:fd:7f:33:f2:23:7d: 17:b3:9c:bc:87:0e:ec:4a:6d:d2:6f:21:67:87:bc:e5:9c:c0: ef:79:4c:30:f8:84:19:08:d0:97:d0:cf:e8:7d:ff:4a:b1:a9: 78:19:b2:88:76:f1:35:8f:fd:ad:59:79:00:9f:92:d3:2c:ec: d7:bc:ab:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/xLztNGzTxgNPeyW+X1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzdjMjcyNzVlMzBhNDU1ZThlMGE5MmRkNGU0Y2VlY2QzN2NkMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVUMckFjUCHuv6E+2hWnRRfzUQ1G NUjI+u9JvI079XzkLGJALUPsE7Yns2i/eprfgBvLWzIBwXfS0lhJ4BaNX7hGfSW/ uEulijEhW0rwb/TYkt7hCF/d+6YWevTTc/uvq0OsBL5a0eNxNL3yyvaD1VbjpuMF 3XBIjOg3HdTstD6/Ks2zUPg1qMPSkViYGRiDB8uWu0W2HmVHnkd47NL7nP85M5CE tMM03CUJNVLExr3PmdCNdWbPyRTXPVQhjUYWC45d/0HmaJqVPUtjcydBon2SW7vY 2SGQh8bmMdKR8/WwyYoWh9qkDwPgc8e3aD4tcllvcXsRmyt5clJxYr4jRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBd8JydeMKRV6OCpLdTkzuzTfNDFMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvRjN3bkoxNHdwRlhvNEtrdDFPVE83Tk44ME1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwf2VMA0G CSqGSIb3DQEBCwUAA4IBAQB3dsfxj5Qg/bNQdMa5SD2UV0T2t0cnKmdYyqUB5f5W sv07nWpdVZirjCwD1kmwjT48ReYhZ3vSDKMLekYWzV3t4cXv7qsLntK2LraJefVL Cek/WVmH7tYSGQzpUCL15mUhHT1oRR1yLPBRZBhwFkKebgFiNNDhSN0tLTMUVDTZ KRWojoGUC3PItwjrzvDv3BSYYo6znxWV10iJ4talfaQho6hunss5yGt7lRxU8DYm PXtHiDpvASHdwNKiVGM//dT9fzPyI30Xs5y8hw7sSm3SbyFnh7zlnMDveUww+IQZ CNCX0M/off9Ksal4GbKIdvE1j/2tWXkAn5LTLOzXvKtF -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:13 2026 by rpki-client