This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/Ewp2Al5ax1LZmRmmNwpqPtsvCR8.roa File: Ewp2Al5ax1LZmRmmNwpqPtsvCR8.roa (raw, json) Hash identifier: PsSncA5sbwhm+qYpwUvXOsucHxELXyU7nMC4Byz/38I= Subject key identifier: 13:0A:76:02:5E:5A:C7:52:D9:99:19:A6:37:0A:6A:3E:DB:2F:09:1F Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec Certificate serial: 019B7E39367F04D655CE2CA6BE6BD0195E6F Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/Ewp2Al5ax1LZmRmmNwpqPtsvCR8.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12665 IP address blocks: 195.238.128.0/19 maxlen: 20 195.238.144.0/20 maxlen: 20 212.4.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:36:7f:04:d6:55:ce:2c:a6:be:6b:d0:19:5e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=130a76025e5ac752d99919a6370a6a3edb2f091f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:b2:0b:f0:e3:34:4d:de:42:2b:09:4c:04: d9:76:61:a4:ac:af:2e:e2:41:c8:ce:85:a1:5f:f2: fe:4f:d7:76:08:9f:54:5c:e9:6e:98:d8:a1:6e:a0: ba:6a:ff:db:53:0d:26:05:cd:45:d9:aa:08:7c:ce: c7:f8:62:c4:c3:9e:e2:77:bb:dc:a9:10:38:6f:a2: 17:28:47:d9:f0:99:70:85:4f:f0:93:5f:07:a0:71: 1f:1f:c7:66:41:1c:b6:61:07:74:d8:81:63:3d:6b: ff:ea:1e:ba:14:42:39:c8:aa:37:10:b1:ec:61:87: b8:47:ff:c4:9c:01:ab:47:c5:6a:97:06:78:e4:13: 2f:87:76:0f:f3:c8:72:ad:17:9e:28:ab:a1:dd:08: cb:28:15:44:7a:2e:19:a6:bf:47:26:0e:68:2b:07: 1f:60:da:7b:bc:95:c1:7b:63:64:b7:92:7f:cd:f5: 5d:eb:e6:22:2b:14:df:03:0f:18:a6:4e:75:79:c6: 6e:06:69:fa:ed:65:a5:ea:75:2c:d2:1b:a5:ae:82: 04:7f:57:59:34:19:95:40:6e:1e:d4:cb:52:c6:5b: 15:a8:6d:c9:13:2d:c9:e9:39:2c:11:83:f3:89:49: 66:ca:33:bb:f8:5c:09:84:ac:51:75:58:72:5a:7d: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0A:76:02:5E:5A:C7:52:D9:99:19:A6:37:0A:6A:3E:DB:2F:09:1F X509v3 Authority Key Identifier: keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/Ewp2Al5ax1LZmRmmNwpqPtsvCR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.238.128.0/19 212.4.224.0/19 Signature Algorithm: sha256WithRSAEncryption 0e:6f:e8:e3:dc:14:c6:0d:20:2d:d1:91:de:d3:2e:97:9d:27: a9:e8:c1:af:5c:e3:8e:57:2c:b0:41:ae:5a:f3:b2:0d:24:f0: 3a:5e:e0:1a:2e:f6:3d:d3:cd:c6:70:94:12:a7:2f:2b:8d:10: d2:cc:a4:7e:48:22:ae:ec:fe:ad:0e:ae:c9:0d:dd:70:a6:8a: 89:3b:4f:58:cd:38:88:5a:c9:b9:d3:f9:23:d9:3a:1e:e0:4c: 73:75:db:06:9c:08:e5:1d:07:0c:3a:3b:3f:95:e4:65:b9:51: 5e:90:34:93:97:43:22:07:fa:3c:d8:ea:a3:29:c0:49:3f:fa: 10:0d:2b:35:6b:66:a7:5b:fc:47:d4:46:09:42:6c:e2:bc:64: 29:ca:59:3f:08:7a:3f:b7:24:2e:70:a8:c3:4d:86:67:a7:c9: 14:db:d9:6c:89:88:1a:c1:71:5c:7d:a0:8c:c8:0d:33:d6:eb: 80:a5:54:22:48:f7:cc:e1:85:ce:19:ad:26:92:87:9c:97:73: 56:e1:a0:22:e8:58:d0:48:07:4f:8f:a5:f8:c4:77:11:a4:dd: 84:0c:c6:9f:01:70:93:b6:ab:4f:96:c2:24:d2:17:b1:e9:77: 68:b6:cd:62:6b:ff:b7:25:84:f8:29:a3:da:3a:a0:22:5c:61: bf:c6:2d:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OTZ/BNZVziymvmvQGV5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZjhhNDBjNmEyYzY5OTNjOWZiZTgxZGYzZWE3ZGQzNzJm OTZkZWMwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzBhNzYwMjVlNWFjNzUyZDk5OTE5YTYzNzBhNmEzZWRiMmYwOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEayC/DjNE3eQisJTATZdmGkrK8u 4kHIzoWhX/L+T9d2CJ9UXOlumNihbqC6av/bUw0mBc1F2aoIfM7H+GLEw57id7vc qRA4b6IXKEfZ8JlwhU/wk18HoHEfH8dmQRy2YQd02IFjPWv/6h66FEI5yKo3ELHs YYe4R//EnAGrR8VqlwZ45BMvh3YP88hyrReeKKuh3QjLKBVEei4Zpr9HJg5oKwcf YNp7vJXBe2Nkt5J/zfVd6+YiKxTfAw8Ypk51ecZuBmn67WWl6nUs0hulroIEf1dZ NBmVQG4e1MtSxlsVqG3JEy3J6TksEYPziUlmyjO7+FwJhKxRdVhyWn2p5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBMKdgJeWsdS2ZkZpjcKaj7bLwkfMB8GA1UdIwQY MBaAFD34pAxqLGmTyfvoHfPqfdNy+W3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZpa0RHb3NhWlBKLS1nZDgtcDkwM0w1YmV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTY2ODctN2E0NC00MGQ4LTk5M2Yt ODk1YTVhMzkyNDM4LzEvRXdwMkFsNWF4MUxabVJtbU53cHFQdHN2Q1I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8zZTY2ODctN2E0NC00MGQ4LTk5M2YtODk1YTVhMzkyNDM4 LzEvUGZpa0RHb3NhWlBKLS1nZDgtcDkwM0w1YmV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFw+6AAwQF 1ATgMA0GCSqGSIb3DQEBCwUAA4IBAQAOb+jj3BTGDSAt0ZHe0y6XnSep6MGvXOOO VyywQa5a87INJPA6XuAaLvY9083GcJQSpy8rjRDSzKR+SCKu7P6tDq7JDd1wpoqJ O09YzTiIWsm50/kj2Toe4ExzddsGnAjlHQcMOjs/leRluVFekDSTl0MiB/o82Oqj KcBJP/oQDSs1a2anW/xH1EYJQmzivGQpylk/CHo/tyQucKjDTYZnp8kU29lsiYga wXFcfaCMyA0z1uuApVQiSPfM4YXOGa0mkoecl3NW4aAi6FjQSAdPj6X4xHcRpN2E DMafAXCTtqtPlsIk0hex6Xdots1ia/+3JYT4KaPaOqAiXGG/xi2x -----END CERTIFICATE-----Generated at Sun Jan 18 11:24:58 2026 by rpki-client