This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa File: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (raw, json) Hash identifier: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o= Subject key identifier: DE:4A:38:14:D4:C7:4B:77:58:26:03:F9:03:BC:1C:2E:D0:47:03:AA Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544 Certificate serial: 019B7AC7DC5553689696C6F5A44A5535EC01 Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15827 IP address blocks: 193.41.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dc:55:53:68:96:96:c6:f5:a4:4a:55:35:ec:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de4a3814d4c74b77582603f903bc1c2ed04703aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:f3:b1:f3:36:92:fc:8a:c8:8a:9d:11:34: a5:d3:13:eb:25:3a:19:3c:bd:6b:e2:d5:b7:ac:49: 08:b3:0d:b6:d7:d7:d7:d4:67:06:fb:ef:06:57:3a: 89:75:6e:74:c3:9d:2f:58:53:87:b7:f5:03:7a:1f: a2:c6:7f:34:3b:a5:d0:b0:bf:ef:10:3c:9e:8b:ef: c8:0f:2b:c5:78:ee:78:41:7b:df:16:6d:8c:0a:78: 4d:e6:f1:fa:04:6c:00:b3:6c:df:0e:89:35:d5:0f: 57:06:9f:27:23:db:a2:4d:37:59:7a:be:6d:a6:3d: 88:cc:c5:30:4d:83:4f:0f:ad:10:88:d7:a8:2a:9d: 61:dc:4e:20:54:7b:ca:49:51:51:db:44:0e:ea:78: 1c:0b:87:a5:57:a4:47:eb:d8:a8:fd:ee:f2:25:43: e0:64:62:f2:41:9f:23:85:dc:72:2e:c6:da:7e:1a: 11:0d:00:84:8c:d6:78:87:1a:83:71:65:a1:fd:f6: 1e:29:cc:76:9d:c6:bc:da:02:c3:bb:b8:2a:c8:52: d7:97:ea:22:25:65:9f:c0:59:dc:b8:97:98:fb:1b: 73:ba:a3:05:ac:57:b0:5d:3c:3a:e7:d9:0a:ea:c5: f3:0d:fa:8e:fa:9a:d6:b2:c4:b6:fe:b4:ae:a3:cf: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:38:14:D4:C7:4B:77:58:26:03:F9:03:BC:1C:2E:D0:47:03:AA X509v3 Authority Key Identifier: keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.45.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:28:6d:36:b4:78:5c:cf:60:3b:99:a4:8b:43:18:ac:2f:cc: d7:13:e4:49:e5:63:d9:9e:ee:22:c0:d8:48:84:44:80:bd:29: 7b:52:ee:26:3a:0b:64:08:c7:cb:e1:ba:84:13:04:bc:20:a0: 05:35:b1:de:12:d4:73:cb:fe:30:57:4d:a5:6e:d6:55:f1:27: d4:eb:3f:1f:0e:15:a5:8a:54:c1:e9:a6:44:f1:5e:91:2b:2d: 68:83:e1:3a:15:ba:31:c2:65:ef:9d:0f:72:94:00:c9:8c:7e: 86:3f:a5:57:57:0a:6b:2b:da:32:a5:d5:27:fe:65:30:67:fb: ed:98:2d:79:1e:11:84:1e:ba:d7:cd:af:cc:70:66:48:b3:22: 3d:03:ca:b5:a6:4c:4c:7e:59:4d:b5:cf:47:3b:08:5b:c6:44: 4f:ea:ff:f5:79:a8:cb:77:11:97:d6:c9:3b:ae:60:54:db:29: 40:3c:b1:16:00:c4:fe:6f:cf:9e:f3:32:2c:f5:05:9b:b5:4c: fa:1c:95:5a:52:76:ce:fc:e7:37:c5:a4:4e:1c:a7:db:a4:76: 73:95:0b:62:5a:2d:ac:17:21:30:1e:65:5f:b1:5e:b1:cd:ef: 61:a9:77:f1:20:27:e0:d0:3f:e9:21:10:7f:0f:7c:81:6d:51: 00:ad:73:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9xVU2iWlsb1pEpVNewBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYzM0ZTQ5ZmJhOTY0MGI4M2VhYmFhZmJhOWM0YWI5NmM4 YzM1NDQwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTRhMzgxNGQ0Yzc0Yjc3NTgyNjAzZjkwM2JjMWMyZWQwNDcwM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiTzsfM2kvyKyIqdETSl0xPrJToZ PL1r4tW3rEkIsw2219fX1GcG++8GVzqJdW50w50vWFOHt/UDeh+ixn80O6XQsL/v EDyei+/IDyvFeO54QXvfFm2MCnhN5vH6BGwAs2zfDok11Q9XBp8nI9uiTTdZer5t pj2IzMUwTYNPD60QiNeoKp1h3E4gVHvKSVFR20QO6ngcC4elV6RH69io/e7yJUPg ZGLyQZ8jhdxyLsbafhoRDQCEjNZ4hxqDcWWh/fYeKcx2nca82gLDu7gqyFLXl+oi JWWfwFncuJeY+xtzuqMFrFewXTw659kK6sXzDfqO+prWssS2/rSuo8+yiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5KOBTUx0t3WCYD+QO8HC7QRwOqMB8GA1UdIwQY MBaAFGrDTkn7qWQLg+q6r7qcSrlsjDVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAt OTNjNDU2OGIxMDNiLzEvM2tvNEZOVEhTM2RZSmdQNUE3d2NMdEJIQTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAtOTNjNDU2OGIxMDNi LzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSktMA0G CSqGSIb3DQEBCwUAA4IBAQB+KG02tHhcz2A7maSLQxisL8zXE+RJ5WPZnu4iwNhI hESAvSl7Uu4mOgtkCMfL4bqEEwS8IKAFNbHeEtRzy/4wV02lbtZV8SfU6z8fDhWl ilTB6aZE8V6RKy1og+E6FboxwmXvnQ9ylADJjH6GP6VXVwprK9oypdUn/mUwZ/vt mC15HhGEHrrXza/McGZIsyI9A8q1pkxMfllNtc9HOwhbxkRP6v/1eajLdxGX1sk7 rmBU2ylAPLEWAMT+b8+e8zIs9QWbtUz6HJVaUnbO/Oc3xaROHKfbpHZzlQtiWi2s FyEwHmVfsV6xze9hqXfxICfg0D/pIRB/D3yBbVEArXMg -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:35 2026 by rpki-client