This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/C3dW_FiIoEs6GrFhvU5lar2mS5g.roa File: C3dW_FiIoEs6GrFhvU5lar2mS5g.roa (raw, json) Hash identifier: fqgtLb5/szWJ2+3XnL0HEWrQ0seXWzzVVKN65vv4UQo= Subject key identifier: 0B:77:56:FC:58:88:A0:4B:3A:1A:B1:61:BD:4E:65:6A:BD:A6:4B:98 Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2 Certificate serial: 019B7AC8B48F289E063F310FE5A3034C72C3 Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/C3dW_FiIoEs6GrFhvU5lar2mS5g.roa Signing time: Thu 01 Jan 2026 18:18:52 +0000 ROA not before: Thu 01 Jan 2026 18:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43104 IP address blocks: 193.200.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b4:8f:28:9e:06:3f:31:0f:e5:a3:03:4c:72:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2 Validity Not Before: Jan 1 18:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b7756fc5888a04b3a1ab161bd4e656abda64b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:d7:df:8f:a7:da:65:3b:0c:b2:db:4b:d4: e4:50:60:9e:a9:24:51:04:b0:d2:34:f4:1b:c4:cf: 50:81:c8:38:af:d4:62:74:75:22:9c:54:0f:47:59: e2:52:ba:aa:cc:9e:7c:95:f2:97:3d:85:a1:b1:e8: e6:73:2f:57:a3:ab:22:a3:91:99:90:f2:4a:40:06: 9e:17:09:30:ba:83:c6:70:1c:e4:36:3e:d1:f0:4b: 61:95:79:05:06:75:e2:05:81:01:f4:93:12:79:89: b0:70:2c:37:04:7f:b6:d1:a5:ed:92:c0:f7:50:46: 0f:e1:9c:a9:9f:a6:7e:f6:bd:1b:9d:b5:35:11:ca: 17:a5:17:cd:b5:99:30:e0:ce:1d:7e:45:24:b6:a2: db:1f:1f:ad:be:89:80:57:c8:7b:42:91:4f:7e:dc: 8d:dd:15:f1:1c:ff:06:78:35:42:bd:98:24:cd:0b: 37:9f:df:86:ad:57:c6:ec:f8:01:e3:3f:e2:66:6d: 19:ed:2e:68:e1:20:53:29:27:2a:df:4f:e2:88:2a: 14:28:7a:0c:28:3c:aa:bf:7e:bb:fe:72:09:f1:d0: 2d:03:a5:38:5a:84:1a:02:81:84:8d:76:ae:d0:7b: 44:a9:9a:8b:27:b4:41:bf:f4:fe:e6:05:4e:20:d6: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:77:56:FC:58:88:A0:4B:3A:1A:B1:61:BD:4E:65:6A:BD:A6:4B:98 X509v3 Authority Key Identifier: keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/C3dW_FiIoEs6GrFhvU5lar2mS5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.224.0/24 Signature Algorithm: sha256WithRSAEncryption af:21:92:7e:e4:39:0c:f6:ac:bf:af:56:7f:ac:63:8d:e6:c4: c9:cd:95:d0:b7:2e:95:6c:7e:ec:f6:dd:f2:d2:91:0d:5b:68: dc:e0:16:b5:64:5e:97:82:50:8d:ef:65:be:ce:54:33:95:ef: bf:a8:03:47:ac:0b:d9:07:e7:99:62:43:4a:8e:e2:32:ef:12: 46:7b:6d:a6:0a:a2:ec:07:73:b5:db:c8:1e:33:2f:03:e6:e3: 57:b3:4e:24:6e:14:7b:b7:ef:cd:d4:ff:66:0e:cd:95:f8:cf: 80:3e:de:cf:9d:6d:46:4b:9c:68:00:31:b5:92:ed:e1:32:db: 45:c0:a8:00:4c:af:70:8e:4f:61:e0:73:65:2a:6f:34:f4:5f: 13:02:63:7f:e5:8e:85:72:86:13:be:49:07:8b:c8:ba:fe:7b: bb:7f:d5:78:67:94:32:48:19:7e:69:86:c5:23:c5:ea:96:1e: 63:04:7a:df:21:74:c2:5f:23:96:57:e7:d4:a7:43:e4:00:35: 68:a8:9c:ae:1f:6a:ff:bd:22:20:8d:12:c8:ce:99:4c:64:be: 4f:5a:48:34:29:9d:c1:08:0b:22:17:ef:19:c5:33:1e:0f:53: 8a:95:d6:5c:9e:58:5c:37:be:f1:10:11:09:ac:98:8b:88:2f: 73:44:ec:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yLSPKJ4GPzEP5aMDTHLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMDA1OTZiYmYzODJkNDk4YmM1ZWMyYjNmZDY1MzM5ZTg1 Yjk4ZjIwHhcNMjYwMTAxMTgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjc3NTZmYzU4ODhhMDRiM2ExYWIxNjFiZDRlNjU2YWJkYTY0Yjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus3X34+n2mU7DLLbS9TkUGCeqSRR BLDSNPQbxM9Qgcg4r9RidHUinFQPR1niUrqqzJ58lfKXPYWhsejmcy9Xo6sio5GZ kPJKQAaeFwkwuoPGcBzkNj7R8EthlXkFBnXiBYEB9JMSeYmwcCw3BH+20aXtksD3 UEYP4Zypn6Z+9r0bnbU1EcoXpRfNtZkw4M4dfkUktqLbHx+tvomAV8h7QpFPftyN 3RXxHP8GeDVCvZgkzQs3n9+GrVfG7PgB4z/iZm0Z7S5o4SBTKScq30/iiCoUKHoM KDyqv367/nIJ8dAtA6U4WoQaAoGEjXau0HtEqZqLJ7RBv/T+5gVOINZKYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAt3VvxYiKBLOhqxYb1OZWq9pkuYMB8GA1UdIwQY MBaAFIIAWWu/OC1Ji8XsKz/WUznoW5jyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYt NjhhZDJkMTExYmFjLzEvQzNkV19GaUlvRXM2R3JGaHZVNWxhcjJtUzVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYtNjhhZDJkMTExYmFj LzEvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcjgMA0G CSqGSIb3DQEBCwUAA4IBAQCvIZJ+5DkM9qy/r1Z/rGON5sTJzZXQty6VbH7s9t3y 0pENW2jc4Ba1ZF6XglCN72W+zlQzle+/qANHrAvZB+eZYkNKjuIy7xJGe22mCqLs B3O128geMy8D5uNXs04kbhR7t+/N1P9mDs2V+M+APt7PnW1GS5xoADG1ku3hMttF wKgATK9wjk9h4HNlKm809F8TAmN/5Y6FcoYTvkkHi8i6/nu7f9V4Z5QySBl+aYbF I8Xqlh5jBHrfIXTCXyOWV+fUp0PkADVoqJyuH2r/vSIgjRLIzplMZL5PWkg0KZ3B CAsiF+8ZxTMeD1OKldZcnlhcN77xEBEJrJiLiC9zROyo -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:34 2026 by rpki-client