This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/3_erjLvBR9ChA8-FV4FDl1_qWOo.roa File: 3_erjLvBR9ChA8-FV4FDl1_qWOo.roa (raw, json) Hash identifier: ODC0IK0RSmBwgajSFs0H62MxGdt/m1+W1l/+zS2FxXg= Subject key identifier: DF:F7:AB:8C:BB:C1:47:D0:A1:03:CF:85:57:81:43:97:5F:EA:58:EA Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228 Certificate serial: 019B7DCA9587633491418BD5F92900561469 Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/3_erjLvBR9ChA8-FV4FDl1_qWOo.roa Signing time: Fri 02 Jan 2026 08:19:47 +0000 ROA not before: Fri 02 Jan 2026 08:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39265 IP address blocks: 193.247.32.0/22 maxlen: 22 193.247.32.0/24 maxlen: 24 2001:67c:21c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:95:87:63:34:91:41:8b:d5:f9:29:00:56:14:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228 Validity Not Before: Jan 2 08:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dff7ab8cbbc147d0a103cf85578143975fea58ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:07:f6:98:d0:3f:5f:6e:9b:8a:23:85:c6: 58:dc:78:03:0e:be:31:6d:ce:45:1a:31:54:12:5f: 4e:a8:f5:b7:66:79:25:e1:2e:d4:c9:cf:d7:be:bb: bb:87:1e:c5:0e:8a:b7:86:8d:9b:1e:1d:7c:d4:57: 3b:c1:ad:c5:44:87:34:3a:d1:6d:36:57:59:e5:ce: e0:06:d1:16:bb:be:1d:08:5a:a7:0b:21:81:f8:30: 0e:96:2c:67:b3:e1:a9:82:7f:81:13:9f:49:d8:27: b5:df:22:c8:f0:fd:99:da:96:8e:cd:87:b3:60:9f: cd:88:89:e6:35:f2:c7:5c:b2:e0:86:ad:0f:7b:4f: 46:a9:3b:06:9c:f8:d2:b9:11:d2:95:c8:35:70:08: 47:40:59:49:cb:08:90:b8:23:46:82:b3:29:14:94: 94:3e:1e:d7:93:3e:6d:b4:2d:c1:39:13:2f:58:ed: 3c:61:65:93:32:fa:d2:ee:68:15:0a:91:95:b2:35: 6d:7f:35:39:5d:41:64:c5:e7:f9:c8:18:cc:6b:fd: a5:eb:80:1f:2e:47:8f:ce:7c:90:bb:12:20:0b:05: 60:49:e9:a0:09:75:cb:43:0a:de:67:6a:f5:10:1b: 12:13:f6:a2:7a:13:5b:cd:26:ea:b5:38:08:82:2a: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F7:AB:8C:BB:C1:47:D0:A1:03:CF:85:57:81:43:97:5F:EA:58:EA X509v3 Authority Key Identifier: keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/3_erjLvBR9ChA8-FV4FDl1_qWOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.32.0/22 IPv6: 2001:67c:21c0::/48 Signature Algorithm: sha256WithRSAEncryption 94:12:b5:95:7d:a1:ce:8c:2d:6d:8e:9e:63:49:7d:f8:e0:a4: 9b:eb:84:20:54:c4:31:bf:1a:4a:c6:d0:e6:e1:f2:d7:2d:81: 91:f5:d8:67:8e:5d:4f:d9:c7:f3:79:62:e5:c0:6d:29:4e:f9: 68:d8:78:2b:3d:ee:20:5d:1f:17:f4:19:35:84:0b:eb:1b:dc: a9:79:ea:5b:f1:59:89:95:e4:1f:cc:ad:2c:b0:48:a4:cc:06: 5c:78:48:e7:d3:34:81:04:1f:8e:15:7e:25:4d:99:38:53:09: 9b:2c:72:21:06:d5:62:60:ac:2f:b9:42:7f:56:a4:96:e4:70: c5:77:cf:a4:17:e8:7d:e3:3f:49:4c:a7:80:2c:5a:b1:30:44: 9e:00:0d:16:b3:f9:56:60:6a:7c:63:f5:0a:da:7a:bd:6e:69: 76:e4:a9:5e:72:ef:1e:87:ed:54:6e:e8:b3:bf:d8:46:df:d4: 9e:67:da:98:4b:c0:f0:aa:56:28:d5:be:3b:83:2a:e4:b9:9d: 71:4a:5a:48:e0:1c:51:06:20:9b:1b:e3:c5:b9:82:67:d3:01: ab:40:6c:ac:a4:77:1a:49:bf:cb:7d:52:86:d3:5a:ef:98:f0: e6:db:49:12:09:59:39:8f:49:d8:6f:c3:b8:a2:6f:99:08:54: 5b:0d:92:d3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9ypWHYzSRQYvV+SkAVhRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OGI1YTVmYjEzODY4M2QxYThjYzcwMTlmNzg5NzBiYWU2 NzgyMjgwHhcNMjYwMTAyMDgxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmY3YWI4Y2JiYzE0N2QwYTEwM2NmODU1NzgxNDM5NzVmZWE1OGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjYH9pjQP19um4ojhcZY3HgDDr4x bc5FGjFUEl9OqPW3Znkl4S7Uyc/Xvru7hx7FDoq3ho2bHh181Fc7wa3FRIc0OtFt NldZ5c7gBtEWu74dCFqnCyGB+DAOlixns+Gpgn+BE59J2Ce13yLI8P2Z2paOzYez YJ/NiInmNfLHXLLghq0Pe09GqTsGnPjSuRHSlcg1cAhHQFlJywiQuCNGgrMpFJSU Ph7Xkz5ttC3BORMvWO08YWWTMvrS7mgVCpGVsjVtfzU5XUFkxef5yBjMa/2l64Af LkePznyQuxIgCwVgSemgCXXLQwreZ2r1EBsSE/aiehNbzSbqtTgIgiodNwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFN/3q4y7wUfQoQPPhVeBQ5df6ljqMB8GA1UdIwQY MBaAFNmLWl+xOGg9GozHAZ94lwuuZ4IoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMll0YVg3RTRhRDBhak1jQm4zaVhDNjVuZ2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMmU5NWQtMmNiNy00NmJlLWEyMjgt ODMxN2E4Mjg4ZDEwLzEvM19lcmpMdkJSOUNoQTgtRlY0RkRsMV9xV09vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lMmU5NWQtMmNiNy00NmJlLWEyMjgtODMxN2E4Mjg4ZDEw LzEvMll0YVg3RTRhRDBhak1jQm4zaVhDNjVuZ2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwfcgMA8E AgACMAkDBwAgAQZ8IcAwDQYJKoZIhvcNAQELBQADggEBAJQStZV9oc6MLW2OnmNJ ffjgpJvrhCBUxDG/GkrG0Obh8tctgZH12GeOXU/Zx/N5YuXAbSlO+WjYeCs97iBd Hxf0GTWEC+sb3Kl56lvxWYmV5B/MrSywSKTMBlx4SOfTNIEEH44VfiVNmThTCZss ciEG1WJgrC+5Qn9WpJbkcMV3z6QX6H3jP0lMp4AsWrEwRJ4ADRaz+VZganxj9Qra er1uaXbkqV5y7x6H7VRu6LO/2Ebf1J5n2phLwPCqVijVvjuDKuS5nXFKWkjgHFEG IJsb48W5gmfTAatAbKykdxpJv8t9UobTWu+Y8ObbSRIJWTmPSdhvw7iib5kIVFsN ktM= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:02 2026 by rpki-client