This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/e3rUNCM0Xf2LeGKAo_m6z686FVs.roa File: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (raw, json) Hash identifier: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI= Subject key identifier: 7B:7A:D4:34:23:34:5D:FD:8B:78:62:80:A3:F9:BA:CF:AF:3A:15:5B Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Certificate serial: 019B7F144CE76BFFED23A509EEDB885D1FD1 Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/e3rUNCM0Xf2LeGKAo_m6z686FVs.roa Signing time: Fri 02 Jan 2026 14:19:55 +0000 ROA not before: Fri 02 Jan 2026 14:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57363 IP address blocks: 185.141.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4c:e7:6b:ff:ed:23:a5:09:ee:db:88:5d:1f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9 Validity Not Before: Jan 2 14:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b7ad43423345dfd8b786280a3f9bacfaf3a155b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:36:ed:30:9e:ea:b6:45:8a:ce:23:9d:aa: c1:a8:49:0e:90:1b:ca:4d:b2:64:08:b8:d8:9e:29: 25:66:be:6e:bf:8d:fb:fb:43:15:ec:e3:0c:f0:aa: 05:7d:af:01:fa:88:a7:34:0d:59:33:f0:e6:5c:14: c2:e8:ef:46:43:3c:06:ad:d7:06:b4:f5:11:43:86: 5d:d5:62:c6:55:d6:40:5f:3b:79:b2:57:4f:8c:9b: 7e:9f:ca:39:09:84:d2:1c:19:67:90:f1:1c:62:3a: da:18:e1:96:1c:a8:16:3d:45:0b:26:f4:42:f0:87: 94:5d:40:14:5a:f3:72:cc:30:81:34:12:70:b3:57: 69:47:d2:1d:46:ba:17:5b:c4:e6:0c:6f:2e:d7:69: 5d:be:71:a1:09:2e:bd:5f:30:70:cd:4f:f4:47:b5: 92:7b:74:16:a3:a4:44:89:15:a0:5e:bd:22:d9:e6: c2:eb:75:d4:5a:36:20:34:19:21:94:51:af:b3:e1: 1f:b3:91:03:3d:48:e8:5f:15:05:90:75:ef:e7:bd: 08:3e:a8:7b:c2:7b:10:45:a4:c0:a2:3e:c8:dc:76: 27:b0:2c:08:18:6c:dd:d9:78:66:ae:0f:9d:a9:bb: 38:8e:e2:60:3e:9c:38:61:02:78:56:d2:17:9e:38: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7A:D4:34:23:34:5D:FD:8B:78:62:80:A3:F9:BA:CF:AF:3A:15:5B X509v3 Authority Key Identifier: keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/e3rUNCM0Xf2LeGKAo_m6z686FVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.225.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:1f:ca:6a:bf:8a:9e:8d:ef:3a:8a:85:0e:8e:bb:7c:6e:b2: 85:c0:d1:7d:84:24:f9:6f:c4:e2:d0:4f:d8:5d:e3:b6:72:eb: bf:0b:eb:b0:61:9a:7d:db:70:b7:16:63:f0:ce:31:4d:3e:4e: bb:33:53:d0:fa:e1:f5:35:ed:a9:48:e8:5e:2a:e1:13:3a:b9: b6:96:79:25:7b:94:92:2c:02:19:9a:23:07:b6:be:7c:80:0f: a7:ca:58:42:a2:39:be:26:ae:77:bd:46:5a:93:ea:a0:89:5b: 5d:53:a9:43:92:c8:66:ef:6c:4c:be:c5:b0:3a:33:82:9c:67: d0:48:74:07:c8:38:cb:06:f3:d5:b8:47:72:72:8e:55:85:35: 7b:ce:c6:90:17:7f:d7:83:88:06:f7:6b:3f:c9:18:05:b2:23: 2e:4a:69:05:64:d6:03:32:32:42:6a:f0:7a:cc:67:f7:a3:48: 52:6b:aa:3b:27:39:7a:b0:96:aa:12:17:49:4a:a6:d1:f1:33: 94:ee:e9:59:39:4a:e4:de:68:6a:9b:0a:48:cb:1e:61:1e:c7: 99:97:94:f5:88:e8:0c:fc:9c:c9:88:92:e6:7b:4c:96:35:dd: fd:06:ab:d9:cf:3e:fb:da:e4:60:90:c8:38:eb:14:61:b2:cd: 66:61:af:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEzna//tI6UJ7tuIXR/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODdhMTY5NjU4NzVmNmY1M2JjYzMxZjBlNDkzYTk2MTU0 ZWI3YjkwHhcNMjYwMTAyMTQxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjdhZDQzNDIzMzQ1ZGZkOGI3ODYyODBhM2Y5YmFjZmFmM2ExNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4g27TCe6rZFis4jnarBqEkOkBvK TbJkCLjYniklZr5uv437+0MV7OMM8KoFfa8B+oinNA1ZM/DmXBTC6O9GQzwGrdcG tPURQ4Zd1WLGVdZAXzt5sldPjJt+n8o5CYTSHBlnkPEcYjraGOGWHKgWPUULJvRC 8IeUXUAUWvNyzDCBNBJws1dpR9IdRroXW8TmDG8u12ldvnGhCS69XzBwzU/0R7WS e3QWo6REiRWgXr0i2ebC63XUWjYgNBkhlFGvs+Efs5EDPUjoXxUFkHXv570IPqh7 wnsQRaTAoj7I3HYnsCwIGGzd2Xhmrg+dqbs4juJgPpw4YQJ4VtIXnjhmCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHt61DQjNF39i3higKP5us+vOhVbMB8GA1UdIwQY MBaAFHiHoWllh19vU7zDHw5JOpYVTre5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDIt NzU2OGExMGRmNDQzLzEvZTNyVU5DTTBYZjJMZUdLQW9fbTZ6Njg2RlZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xOTdlZWMtNzYyYS00ZTQyLWI5ZDItNzU2OGExMGRmNDQz LzEvZUllaGFXV0hYMjlUdk1NZkRrazZsaFZPdDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY3hMA0G CSqGSIb3DQEBCwUAA4IBAQBbH8pqv4qeje86ioUOjrt8brKFwNF9hCT5b8Ti0E/Y XeO2cuu/C+uwYZp923C3FmPwzjFNPk67M1PQ+uH1Ne2pSOheKuETOrm2lnkle5SS LAIZmiMHtr58gA+nylhCojm+Jq53vUZak+qgiVtdU6lDkshm72xMvsWwOjOCnGfQ SHQHyDjLBvPVuEdyco5VhTV7zsaQF3/Xg4gG92s/yRgFsiMuSmkFZNYDMjJCavB6 zGf3o0hSa6o7Jzl6sJaqEhdJSqbR8TOU7ulZOUrk3mhqmwpIyx5hHseZl5T1iOgM /JzJiJLme0yWNd39BqvZzz772uRgkMg46xRhss1mYa+L -----END CERTIFICATE-----Generated at Mon Jan 26 12:10:21 2026 by rpki-client