This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/3v1fDqNftzfSsbjae5v8U-0Yix0.roa File: 3v1fDqNftzfSsbjae5v8U-0Yix0.roa (raw, json) Hash identifier: nSifXf8r+ikjFXrJx3sG9Ogaxxz2ug4esGN19vdxBUs= Subject key identifier: DE:FD:5F:0E:A3:5F:B7:37:D2:B1:B8:DA:7B:9B:FC:53:ED:18:8B:1D Certificate issuer: /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1 Certificate serial: 019B7CEE26892A3AE2EB4976F9C3BDF5D3B6 Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/3v1fDqNftzfSsbjae5v8U-0Yix0.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 195.42.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:26:89:2a:3a:e2:eb:49:76:f9:c3:bd:f5:d3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=defd5f0ea35fb737d2b1b8da7b9bfc53ed188b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:40:1f:71:37:ed:54:6c:81:e2:a2:88:ea:c3: d0:9f:84:37:86:83:8f:29:9b:6d:31:36:30:8b:b4: 1e:57:43:51:a3:f2:61:ba:a5:aa:9b:07:43:2e:05: 5e:29:51:18:f9:15:2f:19:98:71:d7:09:98:c5:bd: 25:ee:8f:84:af:0c:9f:84:20:59:f6:40:3a:67:a8: 96:e9:5e:59:10:f7:1a:9b:b7:de:cd:fa:c1:5b:ed: 4e:73:48:87:c6:8a:be:e8:d0:59:7e:88:61:7a:dc: 0d:1d:ed:96:b2:36:d8:75:ce:d2:1a:74:c0:6a:9f: e7:36:aa:89:13:9f:de:07:fa:27:91:49:f8:4e:45: 1a:86:b0:6a:9c:b2:f8:09:60:dc:51:95:71:18:f6: 10:07:17:c0:06:11:d7:32:28:11:ed:08:62:fe:93: d6:86:c7:46:80:b3:22:8a:0a:e9:3f:df:59:e3:00: 99:fc:7d:31:1c:0d:b6:65:a1:57:de:36:53:2c:d4: ad:d9:9f:62:b1:8a:c3:10:f9:da:88:78:a4:ba:19: ca:12:c4:b7:9c:02:ea:85:1a:81:24:1a:10:6c:4b: 52:a6:5c:a5:f7:ec:7c:b9:14:64:86:cb:27:6c:84: ed:8b:c1:19:9c:a5:38:1e:45:5a:e1:12:44:e7:45: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FD:5F:0E:A3:5F:B7:37:D2:B1:B8:DA:7B:9B:FC:53:ED:18:8B:1D X509v3 Authority Key Identifier: keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/3v1fDqNftzfSsbjae5v8U-0Yix0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.115.0/24 Signature Algorithm: sha256WithRSAEncryption 36:a7:6e:7d:95:2c:d8:72:c1:d3:ef:57:07:4d:a8:bd:c8:4c: 87:89:95:47:9d:b7:46:5a:ac:80:c3:87:17:6b:79:af:17:dd: d3:9e:ac:9e:3b:39:96:31:1f:b7:a0:ab:99:ba:87:ce:f9:90: 03:2c:41:96:96:f3:f7:02:83:9e:db:f6:e6:23:fc:3d:c4:bb: 88:84:fc:54:fa:1b:ec:d9:23:c9:c9:cc:13:5c:dd:63:fe:5b: 81:4e:22:a2:c7:b3:49:cd:67:2c:59:12:b8:98:7f:2c:cb:22: dc:e1:c4:5d:79:cc:90:f0:8f:c2:5a:e9:52:99:ca:97:73:62: e8:12:5a:0c:1c:c4:f4:96:ef:39:8f:e4:2e:bf:96:8b:77:de: dd:76:4b:a1:6d:83:3b:f5:f8:39:0e:4c:31:3e:36:c7:c3:ba: ee:bd:f8:3b:ea:5a:ba:12:01:25:58:e5:d6:1f:a9:c4:90:1e: f7:92:e8:26:3e:4d:da:5b:86:88:8d:fb:ba:44:9f:da:19:92: 60:27:c6:fe:73:f1:44:cf:e8:84:27:45:a3:bf:e2:b1:3d:af: a9:a2:e3:23:57:21:db:7f:0e:3a:94:b2:a1:1f:67:43:1b:48: 89:20:3f:c5:ea:51:31:3e:9c:06:06:d5:b9:64:b6:f3:f8:bd: 86:b9:95:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iaJKjri60l2+cO99dO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMDliNzYyM2EwODU0NTdkOGM3NmI0OTRlY2Q4ODRkOGZl ZmE0ZDEwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWZkNWYwZWEzNWZiNzM3ZDJiMWI4ZGE3YjliZmM1M2VkMTg4YjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0AfcTftVGyB4qKI6sPQn4Q3hoOP KZttMTYwi7QeV0NRo/JhuqWqmwdDLgVeKVEY+RUvGZhx1wmYxb0l7o+ErwyfhCBZ 9kA6Z6iW6V5ZEPcam7fezfrBW+1Oc0iHxoq+6NBZfohhetwNHe2WsjbYdc7SGnTA ap/nNqqJE5/eB/onkUn4TkUahrBqnLL4CWDcUZVxGPYQBxfABhHXMigR7Qhi/pPW hsdGgLMiigrpP99Z4wCZ/H0xHA22ZaFX3jZTLNSt2Z9isYrDEPnaiHikuhnKEsS3 nALqhRqBJBoQbEtSplyl9+x8uRRkhssnbITti8EZnKU4HkVa4RJE50WoWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN79Xw6jX7c30rG42nub/FPtGIsdMB8GA1UdIwQY MBaAFHoJt2I6CFRX2MdrSU7NiE2P76TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMDcwMzUtNjE5Mi00NWVmLTg4YWQt ZTg5ZTQxYzViMTA2LzEvM3YxZkRxTmZ0emZTc2JqYWU1djhVLTBZaXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kMDcwMzUtNjE5Mi00NWVmLTg4YWQtZTg5ZTQxYzViMTA2 LzEvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwypzMA0G CSqGSIb3DQEBCwUAA4IBAQA2p259lSzYcsHT71cHTai9yEyHiZVHnbdGWqyAw4cX a3mvF93TnqyeOzmWMR+3oKuZuofO+ZADLEGWlvP3AoOe2/bmI/w9xLuIhPxU+hvs 2SPJycwTXN1j/luBTiKix7NJzWcsWRK4mH8syyLc4cRdecyQ8I/CWulSmcqXc2Lo EloMHMT0lu85j+Quv5aLd97ddkuhbYM79fg5DkwxPjbHw7ruvfg76lq6EgElWOXW H6nEkB73kugmPk3aW4aIjfu6RJ/aGZJgJ8b+c/FEz+iEJ0Wjv+KxPa+pouMjVyHb fw46lLKhH2dDG0iJID/F6lExPpwGBtW5ZLbz+L2GuZUy -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:25 2026 by rpki-client