This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/eSL82eEcvzSK2dkw6o4hr1h_hm0.roa File: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (raw, json) Hash identifier: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q= Subject key identifier: 79:22:FC:D9:E1:1C:BF:34:8A:D9:D9:30:EA:8E:21:AF:58:7F:86:6D Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019B78A30310D68C717CC619059109B4B48F Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/eSL82eEcvzSK2dkw6o4hr1h_hm0.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208062 IP address blocks: 149.3.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:03:10:d6:8c:71:7c:c6:19:05:91:09:b4:b4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7922fcd9e11cbf348ad9d930ea8e21af587f866d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:70:5e:ea:39:55:3f:85:ba:06:3f:44:69: d7:ec:57:64:f4:07:2e:91:d3:4c:00:d0:e0:2e:64: ce:66:ad:aa:46:05:ac:bd:89:30:52:48:0a:7c:3d: 12:95:5c:c4:8d:b5:12:60:b8:13:80:2b:17:85:11: 83:a4:34:03:86:aa:ef:de:27:93:eb:99:fc:24:9d: a1:97:0b:73:09:27:9d:1f:10:b2:18:70:d3:1b:f3: 51:d5:24:cb:3a:16:c9:3f:de:4b:03:60:11:99:5c: 72:6c:bd:ad:14:5e:4b:d5:5e:f4:4f:62:20:aa:81: e9:17:d0:5f:2e:03:e9:fb:f3:ea:10:7b:5c:e1:38: 0e:80:2a:6a:c7:31:52:41:6d:5f:1b:ca:e8:ef:4a: 1f:a4:36:38:2d:6d:bf:3d:06:2e:af:11:62:2a:14: 45:84:a1:49:a3:db:09:93:08:04:39:38:d9:9a:33: 39:9a:b9:02:e3:ef:ec:47:c0:91:21:d1:79:77:7c: f0:69:42:2b:26:8c:6d:01:c9:fb:ea:9f:64:0d:4f: ae:d5:71:d8:83:6d:2d:74:36:09:90:fb:5e:76:52: 4a:54:08:4f:ac:c6:54:b3:bd:98:cc:db:b7:c0:bf: 13:4e:0b:9e:0e:6f:3a:5c:39:21:73:fa:b4:b1:e9: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:FC:D9:E1:1C:BF:34:8A:D9:D9:30:EA:8E:21:AF:58:7F:86:6D X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/eSL82eEcvzSK2dkw6o4hr1h_hm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.3.188.0/24 Signature Algorithm: sha256WithRSAEncryption 56:7a:90:eb:ce:c6:85:a4:5a:78:6e:11:bc:35:da:a1:be:d1: 96:39:05:b4:4c:3f:cd:df:a1:5a:31:96:41:c7:61:24:6f:56: 9a:ad:9c:e5:03:b2:0b:a0:3e:af:1a:51:97:de:fa:3e:5b:96: 54:d0:48:c6:dd:12:b1:f0:8d:92:b5:f2:fc:0d:85:5a:6b:05: 09:10:cb:17:e6:78:28:d4:07:71:c8:79:78:be:64:16:de:0a: 79:54:04:df:ee:97:2b:53:61:1b:39:74:09:ec:3f:9b:bc:01: f4:75:b9:51:83:01:4f:a5:e1:bb:61:7c:d7:cc:43:99:70:f9: 5d:51:6f:3d:8e:d8:f0:b1:97:fe:f4:5a:05:84:fb:29:55:8c: 8b:bf:9e:7c:d7:67:8f:5d:b4:9c:3f:e8:66:00:ee:08:6a:89: ea:8d:5e:e8:d6:90:c0:31:57:9f:69:42:28:3e:20:74:b2:a5: 3c:94:ef:b4:e5:b3:2e:c9:7c:e4:97:08:5f:dd:45:82:5b:0e: b2:0a:54:df:ff:13:e8:41:f6:44:bb:05:27:a7:1d:d7:23:4b: 6a:36:29:b8:b1:32:34:4c:4d:61:ad:f5:fa:36:93:97:ef:40: 67:8f:c5:a3:95:c5:2a:dc:3d:da:b3:53:7f:c8:57:c6:d4:7b: a7:7a:3d:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owMQ1oxxfMYZBZEJtLSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTIyZmNkOWUxMWNiZjM0OGFkOWQ5MzBlYThlMjFhZjU4N2Y4NjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBpwXuo5VT+FugY/RGnX7Fdk9Acu kdNMANDgLmTOZq2qRgWsvYkwUkgKfD0SlVzEjbUSYLgTgCsXhRGDpDQDhqrv3ieT 65n8JJ2hlwtzCSedHxCyGHDTG/NR1STLOhbJP95LA2ARmVxybL2tFF5L1V70T2Ig qoHpF9BfLgPp+/PqEHtc4TgOgCpqxzFSQW1fG8ro70ofpDY4LW2/PQYurxFiKhRF hKFJo9sJkwgEOTjZmjM5mrkC4+/sR8CRIdF5d3zwaUIrJoxtAcn76p9kDU+u1XHY g20tdDYJkPtedlJKVAhPrMZUs72YzNu3wL8TTgueDm86XDkhc/q0semHFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHki/NnhHL80itnZMOqOIa9Yf4ZtMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvZVNMODJlRWN2elNLMmRrdzZvNGhyMWhfaG0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlQO8MA0G CSqGSIb3DQEBCwUAA4IBAQBWepDrzsaFpFp4bhG8NdqhvtGWOQW0TD/N36FaMZZB x2Ekb1aarZzlA7ILoD6vGlGX3vo+W5ZU0EjG3RKx8I2StfL8DYVaawUJEMsX5ngo 1AdxyHl4vmQW3gp5VATf7pcrU2EbOXQJ7D+bvAH0dblRgwFPpeG7YXzXzEOZcPld UW89jtjwsZf+9FoFhPspVYyLv55812ePXbScP+hmAO4IaonqjV7o1pDAMVefaUIo PiB0sqU8lO+05bMuyXzklwhf3UWCWw6yClTf/xPoQfZEuwUnpx3XI0tqNim4sTI0 TE1hrfX6NpOX70Bnj8WjlcUq3D3as1N/yFfG1Hunej0A -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:24 2026 by rpki-client