This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/ro3FcV_gSDQj6aKpD7QqUfZTKo4.roa File: ro3FcV_gSDQj6aKpD7QqUfZTKo4.roa (raw, json) Hash identifier: ifg6Pv5RJOrKerf3tvB3sx7q9buzQmUPSyqAwJuLAQk= Subject key identifier: AE:8D:C5:71:5F:E0:48:34:23:E9:A2:A9:0F:B4:2A:51:F6:53:2A:8E Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68 Certificate serial: 019B79ECF49EBCD85E730102511B2D5E1A83 Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/ro3FcV_gSDQj6aKpD7QqUfZTKo4.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199132 IP address blocks: 195.234.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f4:9e:bc:d8:5e:73:01:02:51:1b:2d:5e:1a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68 Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae8dc5715fe0483423e9a2a90fb42a51f6532a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:8f:77:eb:0a:05:ea:fe:97:c6:4c:a4:3f: c7:e6:7f:5e:ae:1a:82:5b:63:e6:c9:76:fe:8a:72: 5f:f5:e7:98:fc:58:bf:97:53:77:27:9b:0e:27:11: c6:14:a0:26:25:35:d9:02:ce:95:8b:c7:c1:df:0a: 92:4a:99:ed:7b:5b:0a:19:84:7c:c5:71:c5:aa:ad: db:d9:a6:09:27:ed:a8:82:fe:63:19:67:ce:b3:c3: 37:eb:41:54:29:bc:b1:2b:b1:b6:34:56:c0:6d:56: 3a:2d:0c:85:b3:0a:70:f9:47:61:31:9f:9f:91:1d: 15:3b:20:1c:c6:a1:64:0b:3d:24:5a:ad:eb:9c:8e: d8:b2:0b:93:74:8e:f0:fd:c5:63:47:83:b7:14:41: 9e:22:fc:fb:d4:fc:4a:3f:6a:4d:90:76:c9:65:9b: b2:89:f6:63:95:61:90:ef:cd:f5:7a:72:c8:67:94: 16:67:8a:74:3e:89:68:18:88:7a:e8:28:04:7f:3b: 9a:db:c3:1d:5a:a6:b7:ba:14:98:43:db:c7:45:8a: 7b:17:f4:ff:dd:8c:90:d5:1b:b7:a3:ca:89:6f:a0: 76:31:8c:e5:c3:40:56:d8:bf:c5:10:7e:0d:6b:e4: 81:09:ce:82:3f:59:59:27:cf:4a:0d:7d:78:dc:ab: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8D:C5:71:5F:E0:48:34:23:E9:A2:A9:0F:B4:2A:51:F6:53:2A:8E X509v3 Authority Key Identifier: keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/ro3FcV_gSDQj6aKpD7QqUfZTKo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.138.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4a:80:78:5b:37:1f:34:6e:21:19:78:d3:3d:7e:8a:87:6c: 73:28:6f:e4:9f:5d:36:cf:cf:54:57:03:ca:6f:b0:e4:c4:74: f1:da:77:f6:a2:1b:d2:58:2e:e9:67:72:d7:70:5a:d7:d3:e3: 3a:2f:11:66:70:38:f8:78:4f:f5:09:6b:60:78:d1:44:be:ba: 1c:f1:49:7e:f3:21:2b:04:42:ad:5c:ea:16:cb:75:1e:b0:68: ca:54:1d:7c:e2:ad:1c:67:37:84:17:62:01:96:0c:e3:34:d5: 50:5b:47:13:0a:d0:b4:26:8a:d7:71:7b:40:e0:21:2f:f7:a4: b2:02:64:2e:c3:a6:2d:96:07:40:43:10:1e:d1:08:3f:27:00: de:52:df:00:7f:42:07:58:0c:b2:0e:9b:93:43:ab:21:66:ef: 5b:66:2c:6d:af:5b:c1:ed:50:fa:ca:10:65:10:f4:22:99:7e: eb:28:84:1d:91:fa:44:a8:dd:b0:c5:af:8c:09:57:14:dd:28: fd:56:ee:83:be:31:b1:0f:fa:e4:be:7c:a3:a4:0a:32:35:c5: 1b:94:fb:4d:2a:f3:51:9e:41:32:8e:d2:79:65:a7:81:e8:88: 7f:38:0f:7c:6f:58:48:25:50:ea:6a:57:76:6b:8b:eb:d5:12: 03:46:32:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PSevNhecwECURstXhqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjkzZGJjMDFiY2VjM2E0Yjk4OGU4ZjhkNTMzMGE1YTJm YzRhNjgwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZThkYzU3MTVmZTA0ODM0MjNlOWEyYTkwZmI0MmE1MWY2NTMyYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO+Pd+sKBer+l8ZMpD/H5n9erhqC W2PmyXb+inJf9eeY/Fi/l1N3J5sOJxHGFKAmJTXZAs6Vi8fB3wqSSpnte1sKGYR8 xXHFqq3b2aYJJ+2ogv5jGWfOs8M360FUKbyxK7G2NFbAbVY6LQyFswpw+UdhMZ+f kR0VOyAcxqFkCz0kWq3rnI7YsguTdI7w/cVjR4O3FEGeIvz71PxKP2pNkHbJZZuy ifZjlWGQ7831enLIZ5QWZ4p0PoloGIh66CgEfzua28MdWqa3uhSYQ9vHRYp7F/T/ 3YyQ1Ru3o8qJb6B2MYzlw0BW2L/FEH4Na+SBCc6CP1lZJ89KDX143Ks4xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6NxXFf4Eg0I+miqQ+0KlH2UyqOMB8GA1UdIwQY MBaAFG65PbwBvOw6S5iOj41TMKWi/EpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDct ZDVhMGIwOThkZjM0LzEvcm8zRmNWX2dTRFFqNmFLcEQ3UXFVZlpUS280LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDctZDVhMGIwOThkZjM0 LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qKMA0G CSqGSIb3DQEBCwUAA4IBAQCTSoB4WzcfNG4hGXjTPX6Kh2xzKG/kn102z89UVwPK b7DkxHTx2nf2ohvSWC7pZ3LXcFrX0+M6LxFmcDj4eE/1CWtgeNFEvroc8Ul+8yEr BEKtXOoWy3UesGjKVB184q0cZzeEF2IBlgzjNNVQW0cTCtC0JorXcXtA4CEv96Sy AmQuw6YtlgdAQxAe0Qg/JwDeUt8Af0IHWAyyDpuTQ6shZu9bZixtr1vB7VD6yhBl EPQimX7rKIQdkfpEqN2wxa+MCVcU3Sj9Vu6DvjGxD/rkvnyjpAoyNcUblPtNKvNR nkEyjtJ5ZaeB6Ih/OA98b1hIJVDqald2a4vr1RIDRjLM -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:21 2026 by rpki-client