This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/1-ehuABryUVINj2W3NK-g46DB49o.roa File: 1-ehuABryUVINj2W3NK-g46DB49o.roa (raw, json) Hash identifier: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU= Subject key identifier: F9:E8:6E:00:1A:F2:51:52:0D:8F:65:B7:34:AF:A0:E3:A0:C1:E3:DA Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019B78A304DDB4C4906C7A80ACB01B9BF16C Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/1-ehuABryUVINj2W3NK-g46DB49o.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209908 IP address blocks: 149.3.186.0/24 maxlen: 24 185.161.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:04:dd:b4:c4:90:6c:7a:80:ac:b0:1b:9b:f1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e86e001af251520d8f65b734afa0e3a0c1e3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:cb:d2:b6:b4:d6:a5:c3:ca:ef:41:37:04: 7a:7a:8f:d5:92:66:db:b9:5a:74:42:dc:49:97:9d: 10:e5:dc:e0:92:66:fa:38:58:1d:09:cb:b3:bf:2d: 8d:a0:94:03:45:13:e6:0e:bc:e9:d6:69:0d:75:54: 4f:25:2d:c7:4a:fb:58:ba:a8:a5:ca:12:bd:53:fc: 43:0e:97:82:59:fb:88:8a:73:93:4c:66:28:17:17: f8:8e:34:90:66:0c:88:c9:5b:29:9c:c1:23:6e:0f: bf:98:d8:5f:e7:56:b9:0c:b2:2b:50:f8:65:a6:0c: cd:0e:e2:3a:f0:a6:4d:14:c2:d8:89:9a:ab:ad:fb: 9d:c3:68:e5:cc:3d:b7:c0:88:cb:77:91:df:5b:47: 68:6c:5c:2c:87:cc:66:db:52:c9:10:48:e8:42:a5: fa:74:06:55:a8:a1:a9:37:6d:49:02:f3:34:c6:4d: b8:eb:cc:1a:4f:29:02:b8:17:fa:ca:38:39:21:1d: ca:03:08:5a:df:c1:b9:b9:32:b8:02:f4:d8:7e:cb: 01:31:29:f8:03:83:02:71:28:99:12:87:37:8c:bf: b0:d7:1c:5f:ef:9a:7c:af:91:9f:4c:f5:10:bd:19: 78:93:98:bb:e2:1b:af:a1:63:c9:65:ee:b1:43:99: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E8:6E:00:1A:F2:51:52:0D:8F:65:B7:34:AF:A0:E3:A0:C1:E3:DA X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/1-ehuABryUVINj2W3NK-g46DB49o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.3.186.0/24 185.161.216.0/23 Signature Algorithm: sha256WithRSAEncryption bb:19:0b:fb:a5:dc:dd:dc:cd:f2:24:93:dd:a8:4d:40:9e:71: 66:0d:75:42:e9:26:30:53:6d:de:f4:be:ea:46:8e:5b:d8:16: 65:e6:75:d9:a2:06:c5:ad:05:bb:e2:92:f0:7e:c3:16:72:16: fb:74:df:ee:f8:4d:ac:4f:7c:ad:ec:e4:ad:38:f8:af:aa:af: 5a:38:fd:cf:f4:b2:ad:b1:83:96:70:55:7a:09:cd:07:92:55: 7a:1f:38:5d:94:8e:d1:bb:64:dc:8f:f7:a1:b5:19:c0:b8:a7: 10:e1:f5:11:7f:12:0e:fd:2f:fa:22:61:33:f7:26:39:c8:be: 4d:f0:fd:ab:1c:7a:f9:c9:d3:91:60:82:70:b5:51:e5:1d:c7: 9a:3c:d2:00:4e:37:ee:9d:07:08:58:af:9a:06:0b:f9:12:e0: cc:f4:7a:5c:18:a9:83:ef:72:30:c4:9f:5c:6f:5f:db:9e:d1: ad:53:ff:14:aa:7a:53:18:1d:4a:ee:e8:8f:b2:4b:59:c2:8a: 9c:12:73:63:2d:4c:b1:c4:12:9a:0d:38:ec:13:0b:d7:0e:5e: db:40:0f:d4:e9:a4:71:04:5f:95:1d:13:f7:c2:97:4c:90:bc: ed:11:3c:dc:45:ce:6a:93:da:ef:f1:91:35:17:d5:5b:63:b4: 0a:54:54:82 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt4owTdtMSQbHqArLAbm/FsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWU4NmUwMDFhZjI1MTUyMGQ4ZjY1YjczNGFmYTBlM2EwYzFlM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBbL0ra01qXDyu9BNwR6eo/Vkmbb uVp0QtxJl50Q5dzgkmb6OFgdCcuzvy2NoJQDRRPmDrzp1mkNdVRPJS3HSvtYuqil yhK9U/xDDpeCWfuIinOTTGYoFxf4jjSQZgyIyVspnMEjbg+/mNhf51a5DLIrUPhl pgzNDuI68KZNFMLYiZqrrfudw2jlzD23wIjLd5HfW0dobFwsh8xm21LJEEjoQqX6 dAZVqKGpN21JAvM0xk2468waTykCuBf6yjg5IR3KAwha38G5uTK4AvTYfssBMSn4 A4MCcSiZEoc3jL+w1xxf75p8r5GfTPUQvRl4k5i74huvoWPJZe6xQ5lRxQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPnobgAa8lFSDY9ltzSvoOOgwePaMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvMS1laHVBQnJ5VVZJTmoyVzNOSy1nNDZEQjQ5by5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjYvYTQ3Y2RmLWQyMWItNGYxZC04OTAxLTkyZWM1MTVjNTk1 YS8xL09fcG1OdjVrUUt6eWs3ZFhCYWVoM0syb1Fncy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAJUDugME Abmh2DANBgkqhkiG9w0BAQsFAAOCAQEAuxkL+6Xc3dzN8iST3ahNQJ5xZg11Qukm MFNt3vS+6kaOW9gWZeZ12aIGxa0Fu+KS8H7DFnIW+3Tf7vhNrE98rezkrTj4r6qv Wjj9z/SyrbGDlnBVegnNB5JVeh84XZSO0btk3I/3obUZwLinEOH1EX8SDv0v+iJh M/cmOci+TfD9qxx6+cnTkWCCcLVR5R3HmjzSAE437p0HCFivmgYL+RLgzPR6XBip g+9yMMSfXG9f257RrVP/FKp6UxgdSu7oj7JLWcKKnBJzYy1MscQSmg047BML1w5e 20AP1OmkcQRflR0T98KXTJC87RE83EXOapPa7/GRNRfVW2O0ClRUgg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:32 2026 by rpki-client