This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa File: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (raw, json) Hash identifier: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y= Subject key identifier: 13:7C:CA:64:F0:45:85:D1:81:C5:D3:C4:D7:3E:6C:51:96:6A:5A:AB Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b Certificate serial: 019B7A5AE1E24CCA5AC9294A32415AEE1DD6 Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25094 IP address blocks: 194.154.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e1:e2:4c:ca:5a:c9:29:4a:32:41:5a:ee:1d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=137cca64f04585d181c5d3c4d73e6c51966a5aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:37:c6:91:10:0c:52:bf:f0:02:1b:2c:93: f2:b4:cc:de:6f:79:72:d0:0f:c5:82:cc:82:ed:bb: 3f:e3:b8:b8:c5:db:58:18:1f:b5:a2:1b:e9:5e:16: 96:08:27:48:ed:0e:67:0a:14:61:21:13:8a:50:5e: 53:3f:35:8b:32:35:86:61:79:a7:d2:59:24:5c:47: 5a:73:ba:af:b0:24:c4:4e:dc:d4:3f:d9:bc:f0:8e: 57:bb:cf:9f:0f:ea:2a:10:ea:81:a2:05:e6:47:6d: 14:93:e9:86:ce:76:14:41:43:b4:82:96:4f:fa:c7: 1c:c8:5b:01:25:61:76:6a:5e:ec:d5:59:68:85:2c: 8f:34:3f:93:35:0d:3a:13:d7:48:e0:57:56:93:70: 8d:0e:08:1c:1b:50:9e:87:6f:f6:c3:15:8d:53:0f: 08:42:cd:df:3b:23:f6:0b:83:1b:ab:e5:b2:25:c3: 4a:38:41:87:79:ee:c8:01:c7:ef:b9:f8:54:2d:6b: 14:c9:10:7c:a7:e1:9e:95:70:61:c6:59:20:e6:8a: 04:64:bc:04:f0:17:b5:28:9c:26:d5:93:53:3e:67: 03:10:1b:76:e9:cd:eb:41:ac:98:0f:5a:a0:f6:16: b0:a9:48:8b:0e:df:ac:21:98:20:77:f7:2b:a8:76: b8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7C:CA:64:F0:45:85:D1:81:C5:D3:C4:D7:3E:6C:51:96:6A:5A:AB X509v3 Authority Key Identifier: keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.154.205.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:f5:34:ca:f0:b4:e8:d3:56:21:70:a5:59:81:77:49:b8:4e: b8:18:c1:9b:15:7b:60:e6:e6:36:bc:7b:2e:73:59:a3:03:1c: 9f:2a:4e:91:03:54:37:0c:0c:29:11:fe:af:34:97:94:26:b8: 6c:39:16:ad:af:28:29:1b:6e:a5:20:fa:5e:e6:8f:b9:e9:0b: a8:29:df:f0:94:d8:99:e4:53:2d:45:99:dc:b3:1a:3f:96:bc: 69:f3:2c:4f:79:9c:1a:26:b6:dc:2e:83:63:47:b5:d1:46:42: 60:0a:ba:a9:24:50:61:44:40:5a:a4:f1:2b:06:5a:cd:08:26: 7e:92:73:51:06:45:d0:63:25:fd:6d:ff:f0:fd:fd:9a:77:72: b6:d2:03:58:0a:26:34:fa:e5:c7:d0:05:e2:ce:33:ad:1e:66: 59:f5:d2:c4:8a:f7:d9:5d:de:a0:a9:d8:2d:90:5b:8c:61:7e: 18:29:79:a5:13:32:6f:28:b5:90:88:86:d4:07:e8:18:b3:59: d2:f8:7a:32:9c:c8:9e:63:a4:7c:6f:da:76:d0:de:6f:a7:dd: c8:8a:61:6a:37:30:58:e1:ae:1f:28:1a:ef:97:d2:57:04:9f: 62:ac:a5:4b:15:50:c1:ef:ab:4c:5d:a3:f8:ad:1e:08:93:44: 68:a9:6d:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuHiTMpaySlKMkFa7h3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjNkYTZlYjNiN2EwN2ZkYzQ1MjU4ODMwMDQ5NzBkNjQw YjAzNmIwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzdjY2E2NGYwNDU4NWQxODFjNWQzYzRkNzNlNmM1MTk2NmE1YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr83xpEQDFK/8AIbLJPytMzeb3ly 0A/FgsyC7bs/47i4xdtYGB+1ohvpXhaWCCdI7Q5nChRhIROKUF5TPzWLMjWGYXmn 0lkkXEdac7qvsCTETtzUP9m88I5Xu8+fD+oqEOqBogXmR20Uk+mGznYUQUO0gpZP +sccyFsBJWF2al7s1VlohSyPND+TNQ06E9dI4FdWk3CNDggcG1Ceh2/2wxWNUw8I Qs3fOyP2C4Mbq+WyJcNKOEGHee7IAcfvufhULWsUyRB8p+GelXBhxlkg5ooEZLwE 8Be1KJwm1ZNTPmcDEBt26c3rQayYD1qg9hawqUiLDt+sIZggd/crqHa4OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBN8ymTwRYXRgcXTxNc+bFGWalqrMB8GA1UdIwQY MBaAFPVj2m6zt6B/3EUliDAElw1kCwNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUt ZTU1MjBhYTdiYTM3LzEvRTN6S1pQQkZoZEdCeGRQRTF6NXNVWlpxV3FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUtZTU1MjBhYTdiYTM3 LzEvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwprNMA0G CSqGSIb3DQEBCwUAA4IBAQCd9TTK8LTo01YhcKVZgXdJuE64GMGbFXtg5uY2vHsu c1mjAxyfKk6RA1Q3DAwpEf6vNJeUJrhsORatrygpG26lIPpe5o+56QuoKd/wlNiZ 5FMtRZncsxo/lrxp8yxPeZwaJrbcLoNjR7XRRkJgCrqpJFBhREBapPErBlrNCCZ+ knNRBkXQYyX9bf/w/f2ad3K20gNYCiY0+uXH0AXizjOtHmZZ9dLEivfZXd6gqdgt kFuMYX4YKXmlEzJvKLWQiIbUB+gYs1nS+HoynMieY6R8b9p20N5vp93IimFqNzBY 4a4fKBrvl9JXBJ9irKVLFVDB76tMXaP4rR4Ik0RoqW0Q -----END CERTIFICATE-----Generated at Tue Jan 27 10:39:41 2026 by rpki-client