This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/E3hclPoCfULnUQVutKtdRHUpQ8s.roa File: E3hclPoCfULnUQVutKtdRHUpQ8s.roa (raw, json) Hash identifier: /y2Ss9W2+m/1m/m+rDFotiDS44LnxJlrOW7rMJW05NM= Subject key identifier: 13:78:5C:94:FA:02:7D:42:E7:51:05:6E:B4:AB:5D:44:75:29:43:CB Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Certificate serial: 019BC68ABA5E6931C044BC7BFF3558F71419 Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/E3hclPoCfULnUQVutKtdRHUpQ8s.roa Signing time: Fri 16 Jan 2026 11:22:19 +0000 ROA not before: Fri 16 Jan 2026 11:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 185.161.150.0/24 maxlen: 24 185.180.193.0/24 maxlen: 24 185.180.194.0/24 maxlen: 24 185.238.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:8a:ba:5e:69:31:c0:44:bc:7b:ff:35:58:f7:14:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Validity Not Before: Jan 16 11:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13785c94fa027d42e751056eb4ab5d44752943cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:93:3f:7f:ca:aa:7d:5c:e9:2e:58:ec:6a: 5d:65:a8:6f:20:a7:ed:27:d5:89:2d:fa:21:a2:b2: a0:17:ba:c6:fc:b8:bf:de:9a:67:7d:82:61:e7:df: b9:98:35:d2:67:6f:34:fa:9f:b4:66:50:5e:1b:31: c6:3a:31:a2:ae:97:15:1b:39:c8:b1:54:63:5b:4e: e4:21:98:9c:1d:75:c0:cc:01:10:c1:e2:e2:0a:b2: 87:62:e6:ba:08:f5:4c:08:e5:ef:f3:fd:10:54:62: b1:f3:47:c3:c9:9d:d2:36:d6:67:42:64:93:b9:8f: 74:57:99:2b:9c:b8:ba:1c:c5:92:b7:11:b6:cc:d9: ea:6d:3e:c5:ad:3c:b2:5e:04:0d:59:d7:32:ff:fd: 15:e6:19:17:93:6e:51:a3:7f:07:fc:53:0e:35:42: 7f:2a:f1:c7:09:f8:97:a3:92:53:ce:d1:12:04:4f: 33:8c:e9:82:35:ca:91:0c:1c:ed:3b:b5:1a:72:9d: 7f:c6:b7:bd:ed:49:bf:af:70:50:df:c4:c7:01:b7: 43:a7:20:d7:57:f7:7a:44:af:4f:69:20:b7:a6:c6: 92:c9:e4:2a:4c:b6:7a:e1:36:9a:c6:73:17:04:00: 45:13:df:96:8b:df:24:06:c2:0a:db:30:5d:e6:4b: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:78:5C:94:FA:02:7D:42:E7:51:05:6E:B4:AB:5D:44:75:29:43:CB X509v3 Authority Key Identifier: keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/E3hclPoCfULnUQVutKtdRHUpQ8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.150.0/24 185.180.193.0-185.180.194.255 185.238.176.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:d8:cc:f1:f3:d9:19:9a:54:63:08:d2:bb:58:ef:10:cd:6d: de:7f:3a:d1:51:5d:fd:ab:3b:ef:6f:38:43:58:12:1f:f7:d3: 7f:12:ee:d4:26:bc:f2:8d:58:a2:19:c4:15:74:2d:79:df:59: 92:2b:74:d9:0c:92:b3:22:04:25:2c:cc:3b:29:c1:fb:36:98: c3:c7:3c:c4:f5:17:c3:9b:82:fb:d3:d5:c8:8f:c0:69:b7:1b: 6f:5a:65:ae:73:98:ab:99:b2:d7:54:5d:ad:9b:9f:7e:cc:91: ac:10:26:3d:31:72:78:6b:c5:b3:ad:c1:63:3a:be:aa:79:10: c4:84:41:5b:36:bd:47:08:51:65:ef:fa:83:fe:15:c3:d9:a2: ab:b0:4e:f1:d0:3d:1f:ba:3d:d2:fc:fb:45:38:e4:a7:86:0e: ac:36:b4:c9:b4:37:51:cb:14:3d:44:d2:d0:75:e7:51:ca:79: d6:3d:aa:b1:df:43:88:51:2f:30:28:44:03:aa:c3:f6:56:61: f9:6e:9c:1c:3d:de:1f:ba:73:1c:b5:d6:ef:a8:4b:c1:96:c3: 4f:b4:83:13:22:e5:65:94:1c:61:b6:6e:b4:f4:14:70:9f:5d: ba:23:b2:5b:ff:3e:6c:01:9d:73:7d:de:c0:4e:42:64:21:79: 45:44:99:1e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZvGirpeaTHARLx7/zVY9xQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWVjMjhlODQxZjI5ZjM4MGE3Y2UyY2I1Y2Q1NjczNzAw ODIxZmQwHhcNMjYwMTE2MTEyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzc4NWM5NGZhMDI3ZDQyZTc1MTA1NmViNGFiNWQ0NDc1Mjk0M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCaTP3/Kqn1c6S5Y7GpdZahvIKft J9WJLfohorKgF7rG/Li/3ppnfYJh59+5mDXSZ280+p+0ZlBeGzHGOjGirpcVGznI sVRjW07kIZicHXXAzAEQweLiCrKHYua6CPVMCOXv8/0QVGKx80fDyZ3SNtZnQmST uY90V5krnLi6HMWStxG2zNnqbT7FrTyyXgQNWdcy//0V5hkXk25Ro38H/FMONUJ/ KvHHCfiXo5JTztESBE8zjOmCNcqRDBztO7Uacp1/xre97Um/r3BQ38THAbdDpyDX V/d6RK9PaSC3psaSyeQqTLZ64TaaxnMXBABFE9+Wi98kBsIK2zBd5ksTCwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBN4XJT6An1C51EFbrSrXUR1KUPLMB8GA1UdIwQY MBaAFDpewo6EHynzgKfOLLXNVnNwCCH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMt ODM1NTk5MjYwZmY2LzEvRTNoY2xQb0NmVUxuVVFWdXRLdGRSSFVwUThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMtODM1NTk5MjYwZmY2 LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAuaGWMAwD BAC5tMEDBAC5tMIDBAC57rAwDQYJKoZIhvcNAQELBQADggEBADzYzPHz2RmaVGMI 0rtY7xDNbd5/OtFRXf2rO+9vOENYEh/3038S7tQmvPKNWKIZxBV0LXnfWZIrdNkM krMiBCUszDspwfs2mMPHPMT1F8ObgvvT1ciPwGm3G29aZa5zmKuZstdUXa2bn37M kawQJj0xcnhrxbOtwWM6vqp5EMSEQVs2vUcIUWXv+oP+FcPZoquwTvHQPR+6PdL8 +0U45KeGDqw2tMm0N1HLFD1E0tB151HKedY9qrHfQ4hRLzAoRAOqw/ZWYflunBw9 3h+6cxy11u+oS8GWw0+0gxMi5WWUHGG2brT0FHCfXbojslv/PmwBnXN93sBOQmQh eUVEmR4= -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:23 2026 by rpki-client