This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/3oNBPDxqPmEzCAgvOd6HFjME9OM.roa File: 3oNBPDxqPmEzCAgvOd6HFjME9OM.roa (raw, json) Hash identifier: oEX/gxqcuspBR3wSJHEr/VS6QW0PNYcAWyELJ7EqCc0= Subject key identifier: DE:83:41:3C:3C:6A:3E:61:33:08:08:2F:39:DE:87:16:33:04:F4:E3 Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607 Certificate serial: 019B7AC7ED55744C61F223185C6D326F96FC Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/3oNBPDxqPmEzCAgvOd6HFjME9OM.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24839 IP address blocks: 193.0.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ed:55:74:4c:61:f2:23:18:5c:6d:32:6f:96:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6798580bb843519c104420e59c0b5c2403414607 Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de83413c3c6a3e613308082f39de87163304f4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:69:b6:e6:fd:00:ea:6c:00:4d:22:d8:b0: 27:7d:9c:fc:4e:26:22:79:d8:86:a5:66:80:d8:2d: 25:00:44:9b:14:bb:00:d7:92:58:b4:ef:96:d1:96: 2b:3c:2c:91:f4:fd:44:9b:10:6c:be:f7:59:e7:f3: b0:92:38:a0:61:78:79:cb:d3:f3:d0:9e:19:9e:43: 78:b5:17:80:4f:2b:e9:17:ea:f6:d6:ac:63:2e:83: 17:e4:01:f2:f7:50:13:40:5b:78:34:09:d7:31:c3: 4c:d2:64:9c:ae:d1:71:27:fe:8b:55:66:33:48:ff: 85:f9:fc:8a:c3:d2:99:fe:88:9b:bf:4f:32:08:dc: 18:e9:ba:4c:92:ac:a5:0c:9c:e3:f4:61:ab:13:cf: ca:bd:31:3e:31:4a:2d:fc:d5:75:60:4c:cc:d3:b7: 06:73:97:01:38:bf:cb:28:a3:dc:10:25:b5:ef:59: 7f:0c:3d:6d:9e:ac:f1:10:f1:f4:8b:63:fb:3c:0e: 13:98:f5:97:0e:bb:44:95:51:ee:84:e7:1f:59:e4: 3c:76:6e:25:d4:3e:e8:2e:aa:e2:2e:7a:67:b2:d1: 2d:5e:37:9a:30:ee:50:74:8e:e4:65:16:60:99:96: 92:d7:88:33:7e:fa:bb:25:8f:9a:ec:d8:12:02:c5: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:83:41:3C:3C:6A:3E:61:33:08:08:2F:39:DE:87:16:33:04:F4:E3 X509v3 Authority Key Identifier: keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/3oNBPDxqPmEzCAgvOd6HFjME9OM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.225.0/24 Signature Algorithm: sha256WithRSAEncryption 16:13:cd:6c:9f:0a:42:46:25:f8:33:3c:26:7c:81:ee:5b:5b: a8:56:6d:6c:77:11:a4:00:ca:ca:49:f6:71:eb:47:3b:7f:74: f3:af:12:21:4d:c9:d6:2c:f7:b3:a3:5a:87:82:51:96:c2:9b: bc:9e:ac:2b:2d:81:f4:93:49:a1:9f:65:fd:c3:42:9b:10:b7: 6e:dc:af:d9:cd:8c:99:bc:08:ea:6e:74:7f:e1:48:54:00:a8: 8a:7e:96:b0:35:46:1c:1d:45:04:2f:0c:f2:b4:a2:09:33:a7: 1e:71:bf:5b:1b:d3:f9:0d:d6:81:eb:25:f3:4c:2a:71:03:21: 19:50:bc:ac:17:0b:44:6c:bc:e0:52:14:dc:5a:e6:53:92:19: 75:e4:4c:ce:61:30:4d:47:18:2e:f5:f0:42:f7:3f:8b:c8:11: 1e:a3:2a:24:8f:74:b3:8a:a5:8b:0d:0e:04:63:da:d4:8f:f6: 96:53:f0:39:3b:17:d0:2a:f5:12:50:ad:b1:d8:eb:bc:fe:86: 6a:c0:54:a8:e7:ca:a7:94:99:c4:a1:10:15:0b:45:07:4b:00: 0b:4e:a0:4a:2b:0f:8f:d9:55:69:26:60:b6:06:8a:2a:ed:45: af:ed:a3:2d:dd:b7:9e:66:e4:fb:38:93:e4:e0:48:d3:d4:dd: e6:e7:c2:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+1VdExh8iMYXG0yb5b8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTg1ODBiYjg0MzUxOWMxMDQ0MjBlNTljMGI1YzI0MDM0 MTQ2MDcwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTgzNDEzYzNjNmEzZTYxMzMwODA4MmYzOWRlODcxNjMzMDRmNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Rptub9AOpsAE0i2LAnfZz8TiYi ediGpWaA2C0lAESbFLsA15JYtO+W0ZYrPCyR9P1EmxBsvvdZ5/OwkjigYXh5y9Pz 0J4ZnkN4tReATyvpF+r21qxjLoMX5AHy91ATQFt4NAnXMcNM0mScrtFxJ/6LVWYz SP+F+fyKw9KZ/oibv08yCNwY6bpMkqylDJzj9GGrE8/KvTE+MUot/NV1YEzM07cG c5cBOL/LKKPcECW171l/DD1tnqzxEPH0i2P7PA4TmPWXDrtElVHuhOcfWeQ8dm4l 1D7oLqriLnpnstEtXjeaMO5QdI7kZRZgmZaS14gzfvq7JY+a7NgSAsXlmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN6DQTw8aj5hMwgILznehxYzBPTjMB8GA1UdIwQY MBaAFGeYWAu4Q1GcEEQg5ZwLXCQDQUYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hOWYyYjktNmU3ZC00ZWVhLWE0NzQt MWY2N2Q5NDViOGI5LzEvM29OQlBEeHFQbUV6Q0Fndk9kNkhGak1FOU9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hOWYyYjktNmU3ZC00ZWVhLWE0NzQtMWY2N2Q5NDViOGI5 LzEvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQDhMA0G CSqGSIb3DQEBCwUAA4IBAQAWE81snwpCRiX4MzwmfIHuW1uoVm1sdxGkAMrKSfZx 60c7f3TzrxIhTcnWLPezo1qHglGWwpu8nqwrLYH0k0mhn2X9w0KbELdu3K/ZzYyZ vAjqbnR/4UhUAKiKfpawNUYcHUUELwzytKIJM6cecb9bG9P5DdaB6yXzTCpxAyEZ ULysFwtEbLzgUhTcWuZTkhl15EzOYTBNRxgu9fBC9z+LyBEeoyokj3SziqWLDQ4E Y9rUj/aWU/A5OxfQKvUSUK2x2Ou8/oZqwFSo58qnlJnEoRAVC0UHSwALTqBKKw+P 2VVpJmC2Booq7UWv7aMt3beeZuT7OJPk4EjT1N3m58J0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:34 2026 by rpki-client