This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/3sQGG7lc8Ue6Aqs5p0AFUtAeaf4.roa File: 3sQGG7lc8Ue6Aqs5p0AFUtAeaf4.roa (raw, json) Hash identifier: xQBHQAaq9hM8X7UsWewldzkOn1BKCLRfc2H9cPBtG10= Subject key identifier: DE:C4:06:1B:B9:5C:F1:47:BA:02:AB:39:A7:40:05:52:D0:1E:69:FE Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18 Certificate serial: 019B7E3897D64AA259616E7265E83542C6C4 Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/3sQGG7lc8Ue6Aqs5p0AFUtAeaf4.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 193.176.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:97:d6:4a:a2:59:61:6e:72:65:e8:35:42:c6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dec4061bb95cf147ba02ab39a7400552d01e69fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1d:d4:dc:28:aa:7c:8c:5a:9c:e1:96:27:3e: 5e:45:b9:9e:ba:17:3c:ef:50:a6:de:90:f4:da:7d: a3:3b:d0:b3:c8:30:b2:33:17:dc:26:fb:93:5a:23: b1:d7:34:f8:b5:8d:91:38:40:2d:2a:d3:6c:b0:ae: dc:89:28:fb:e4:5a:4b:f6:63:b0:cc:1e:3f:73:66: 14:33:ce:c4:eb:fc:35:a9:c6:09:cb:4d:e7:98:27: 63:b1:00:d0:25:42:b1:16:5b:92:61:58:bd:43:16: 8e:7f:5d:6c:dd:82:d1:b1:4a:c0:b5:4e:3e:a9:08: 47:1b:c7:02:8d:c6:d5:77:7c:bf:fa:74:b7:fe:70: d8:5f:88:6b:bb:48:fc:03:5e:d1:97:fd:fb:b8:db: 2b:6e:fc:8b:db:77:0e:29:10:7b:96:ce:42:5b:72: 09:b5:3e:7c:88:dc:db:25:a4:cb:35:a3:12:2e:a3: 75:f6:94:a3:f1:ad:d5:96:44:0e:23:f6:bc:33:c2: 70:a9:24:4d:98:0a:f2:82:45:ba:07:f8:79:56:b9: 57:26:d7:04:f4:e3:6d:84:93:3a:59:e6:22:fe:e1: a8:1b:d8:71:79:95:f1:9b:9f:31:fb:e4:81:32:46: c9:01:3a:92:80:76:38:32:e4:2f:78:04:c1:8a:15: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C4:06:1B:B9:5C:F1:47:BA:02:AB:39:A7:40:05:52:D0:1E:69:FE X509v3 Authority Key Identifier: keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/3sQGG7lc8Ue6Aqs5p0AFUtAeaf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.98.0/24 Signature Algorithm: sha256WithRSAEncryption a2:eb:fb:fe:73:b7:ea:24:d8:aa:12:9b:2c:f2:11:b7:b7:f6: 1c:e1:ca:94:47:6c:04:49:3c:9d:68:d5:ed:07:ba:3f:21:35: 4c:9a:81:65:5d:09:5d:82:95:63:f2:e4:24:48:94:4a:db:20: 9c:4f:83:8e:f9:9a:7d:3b:fd:82:d3:b1:6d:c7:75:76:86:3c: fe:41:5a:40:e7:da:61:0d:37:73:27:b7:53:2c:5c:b3:e3:d8: 85:87:3c:3f:0c:52:9c:26:f9:4d:b5:a4:f8:e9:eb:4b:ca:53: 0f:0a:f5:6e:09:2e:fe:ed:7e:b4:e8:fb:0a:39:8a:9e:fd:bf: 7c:1f:c7:dc:5f:d2:8b:07:02:b4:a8:67:52:7e:9c:98:13:ab: 54:77:e4:7a:25:b0:be:61:fb:24:80:00:fe:be:23:82:27:4a: f6:5c:9e:90:0c:a2:13:80:0e:ed:53:bf:4e:ea:78:e3:9e:c9: b1:af:5a:31:30:7b:d5:1f:68:d6:b1:00:45:0a:9d:c2:88:54: 73:64:77:36:b7:60:6a:3d:5a:15:b6:0d:82:67:58:1c:52:5a: 1d:85:64:aa:ab:e3:4c:ec:b8:e4:3d:78:1d:5d:94:dd:d3:3d: 79:3e:4b:14:33:54:78:15:0b:3d:36:d6:70:6c:56:3b:f5:f8: c7:b2:55:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJfWSqJZYW5yZeg1QsbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTE1NGUxYzU1NzhiMGZlZjhhYmI3NzlmODExN2U2NGU4 ODRkMTgwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWM0MDYxYmI5NWNmMTQ3YmEwMmFiMzlhNzQwMDU1MmQwMWU2OWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h3U3CiqfIxanOGWJz5eRbmeuhc8 71Cm3pD02n2jO9CzyDCyMxfcJvuTWiOx1zT4tY2ROEAtKtNssK7ciSj75FpL9mOw zB4/c2YUM87E6/w1qcYJy03nmCdjsQDQJUKxFluSYVi9QxaOf11s3YLRsUrAtU4+ qQhHG8cCjcbVd3y/+nS3/nDYX4hru0j8A17Rl/37uNsrbvyL23cOKRB7ls5CW3IJ tT58iNzbJaTLNaMSLqN19pSj8a3VlkQOI/a8M8JwqSRNmArygkW6B/h5VrlXJtcE 9ONthJM6WeYi/uGoG9hxeZXxm58x++SBMkbJATqSgHY4MuQveATBihUMIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7EBhu5XPFHugKrOadABVLQHmn+MB8GA1UdIwQY MBaAFBqRVOHFV4sP74q7d5+BF+ZOiE0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDIt Mzg4ZDhhZDJhNWJiLzEvM3NRR0c3bGM4VWU2QXFzNXAwQUZVdEFlYWY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDItMzg4ZDhhZDJhNWJi LzEvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbBiMA0G CSqGSIb3DQEBCwUAA4IBAQCi6/v+c7fqJNiqEpss8hG3t/Yc4cqUR2wESTydaNXt B7o/ITVMmoFlXQldgpVj8uQkSJRK2yCcT4OO+Zp9O/2C07Ftx3V2hjz+QVpA59ph DTdzJ7dTLFyz49iFhzw/DFKcJvlNtaT46etLylMPCvVuCS7+7X606PsKOYqe/b98 H8fcX9KLBwK0qGdSfpyYE6tUd+R6JbC+YfskgAD+viOCJ0r2XJ6QDKITgA7tU79O 6njjnsmxr1oxMHvVH2jWsQBFCp3CiFRzZHc2t2BqPVoVtg2CZ1gcUlodhWSqq+NM 7LjkPXgdXZTd0z15PksUM1R4FQs9NtZwbFY79fjHslXW -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:38 2026 by rpki-client