This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/E3lm4FvyrvLHTXkXDSTYjOHsHVY.roa
File: E3lm4FvyrvLHTXkXDSTYjOHsHVY.roa (raw, json)
Hash identifier: 6QZmnjSIaFmg0mpij0y/20sY5ruAuIBmod+jn1qrIQA=
Subject key identifier: 13:79:66:E0:5B:F2:AE:F2:C7:4D:79:17:0D:24:D8:8C:E1:EC:1D:56
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 019B7758E61C8BB765C6E28F0C4346FAC981
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/E3lm4FvyrvLHTXkXDSTYjOHsHVY.roa
Signing time: Thu 01 Jan 2026 02:17:53 +0000
ROA not before: Thu 01 Jan 2026 02:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50718
IP address blocks: 193.105.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:e6:1c:8b:b7:65:c6:e2:8f:0c:43:46:fa:c9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Jan 1 02:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=137966e05bf2aef2c74d79170d24d88ce1ec1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:5f:5c:1d:02:e0:49:e1:c3:7d:0f:ed:76:
b5:01:9e:18:3f:6e:c9:51:8b:df:97:f9:92:96:8d:
cd:47:01:b5:d4:b5:a2:1c:3b:c2:ca:d5:07:c7:71:
07:19:d8:ff:3d:35:12:2d:d4:f6:b8:a6:97:31:c6:
39:2e:92:47:e2:8e:c5:4b:74:21:5b:39:85:97:38:
6e:f2:8e:43:03:06:23:89:29:8b:73:94:de:fc:13:
90:db:db:2c:0a:29:8e:68:35:15:cb:8c:bb:f4:c7:
d8:7e:77:6f:c7:ca:c9:05:28:fc:65:95:b3:e2:db:
9f:06:db:02:ed:b1:5b:58:20:e1:cc:94:c0:58:ff:
5b:68:0d:95:d4:cc:8b:82:35:35:61:5f:c9:04:d8:
3c:f2:c7:90:07:7f:fa:20:37:19:db:f4:d8:c3:fd:
75:59:e4:37:9b:e1:f8:f2:b7:7f:c0:f9:4a:b0:ac:
24:c3:02:5e:1b:f5:c8:1b:42:e4:af:47:e7:83:f8:
ef:34:a6:df:e9:f7:c5:65:e2:15:58:4c:45:fd:92:
47:09:e2:eb:44:78:b6:4e:2e:84:8c:c5:cf:69:6e:
68:f8:78:d1:33:de:41:2c:06:f4:74:57:f9:f1:bf:
96:71:96:57:2b:26:e6:5f:13:90:69:c9:49:8c:55:
5b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:79:66:E0:5B:F2:AE:F2:C7:4D:79:17:0D:24:D8:8C:E1:EC:1D:56
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/E3lm4FvyrvLHTXkXDSTYjOHsHVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.204.0/24
Signature Algorithm: sha256WithRSAEncryption
92:83:71:3f:6a:b7:06:f2:68:22:f8:28:47:7b:28:4a:5b:90:
c2:fe:51:b8:6e:5b:2c:f5:0a:49:18:51:58:40:0a:67:de:37:
f7:d8:c2:cd:c5:b2:c3:a8:e0:fd:d1:e4:83:91:4a:61:7d:b1:
7c:fa:e9:c6:20:84:6f:25:e6:95:47:b3:f1:94:df:2e:a5:cb:
8b:55:30:8c:03:bb:a8:44:75:2c:9b:58:6d:f9:6b:e5:74:f3:
6f:1c:d8:03:94:e9:5c:b1:61:f9:1f:2f:cd:fd:03:ff:42:d3:
05:99:27:82:32:b5:d8:ed:49:a5:f9:f0:df:48:57:0a:40:6a:
1f:fe:96:95:68:9c:bb:2b:f3:4d:4a:1e:80:9c:00:d4:41:98:
bd:71:8c:96:de:0c:34:0c:2e:e8:26:88:ff:94:a7:38:e5:35:
e7:d2:2e:c2:c5:5d:2a:12:ee:17:e5:2b:f6:56:c2:b9:52:06:
14:a3:e6:df:1e:f5:04:0d:26:fb:97:64:67:9e:ea:c6:f3:9d:
a6:56:ac:f3:f6:da:73:b3:20:73:bc:6e:1d:e3:88:47:6a:3d:
f3:e0:db:94:e9:44:bf:49:31:68:b5:5f:80:2d:d8:bc:8d:30:
c1:2f:75:8a:b8:29:9b:28:cc:ae:ae:e6:16:c2:53:cb:c5:b3:
f8:a0:8d:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WOYci7dlxuKPDENG+smBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk
MzYxNzMwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzc5NjZlMDViZjJhZWYyYzc0ZDc5MTcwZDI0ZDg4Y2UxZWMxZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqdfXB0C4Enhw30P7Xa1AZ4YP27J
UYvfl/mSlo3NRwG11LWiHDvCytUHx3EHGdj/PTUSLdT2uKaXMcY5LpJH4o7FS3Qh
WzmFlzhu8o5DAwYjiSmLc5Te/BOQ29ssCimOaDUVy4y79MfYfndvx8rJBSj8ZZWz
4tufBtsC7bFbWCDhzJTAWP9baA2V1MyLgjU1YV/JBNg88seQB3/6IDcZ2/TYw/11
WeQ3m+H48rd/wPlKsKwkwwJeG/XIG0Lkr0fng/jvNKbf6ffFZeIVWExF/ZJHCeLr
RHi2Ti6EjMXPaW5o+HjRM95BLAb0dFf58b+WcZZXKybmXxOQaclJjFVbnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBN5ZuBb8q7yx015Fw0k2Izh7B1WMB8GA1UdIwQY
MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct
ZWY5MWQ4YjViMDgxLzEvRTNsbTRGdnlydkxIVFhrWERTVFlqT0hzSFZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx
LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnMMA0G
CSqGSIb3DQEBCwUAA4IBAQCSg3E/arcG8mgi+ChHeyhKW5DC/lG4blss9QpJGFFY
QApn3jf32MLNxbLDqOD90eSDkUphfbF8+unGIIRvJeaVR7PxlN8upcuLVTCMA7uo
RHUsm1ht+WvldPNvHNgDlOlcsWH5Hy/N/QP/QtMFmSeCMrXY7Uml+fDfSFcKQGof
/paVaJy7K/NNSh6AnADUQZi9cYyW3gw0DC7oJoj/lKc45TXn0i7CxV0qEu4X5Sv2
VsK5UgYUo+bfHvUEDSb7l2RnnurG852mVqzz9tpzsyBzvG4d44hHaj3z4NuU6US/
STFotV+ALdi8jTDBL3WKuCmbKMyuruYWwlPLxbP4oI2H
-----END CERTIFICATE-----
Generated at Tue Jan 27 01:40:45 2026 by rpki-client