This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3B4ODpeO-LT4LGLpcOqspoeYnT8.roa File: 3B4ODpeO-LT4LGLpcOqspoeYnT8.roa (raw, json) Hash identifier: jU9KCBMN+LfzfZ6FJCIxMCWo8c1J9pArShLkf/ibck4= Subject key identifier: DC:1E:0E:0E:97:8E:F8:B4:F8:2C:62:E9:70:EA:AC:A6:87:98:9D:3F Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1D330B3F0A552E11CC99C9613E20A Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3B4ODpeO-LT4LGLpcOqspoeYnT8.roa Signing time: Fri 02 Jan 2026 18:21:53 +0000 ROA not before: Fri 02 Jan 2026 18:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 194.33.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d3:30:b3:f0:a5:52:e1:1c:c9:9c:96:13:e2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc1e0e0e978ef8b4f82c62e970eaaca687989d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:53:48:9f:d3:51:e5:56:ed:59:3f:61:b0:40: 97:c8:c3:68:e5:af:b7:da:e4:3e:71:88:06:fa:d9: 14:50:54:7c:ac:a1:20:b0:99:4b:c5:f5:58:71:a0: 59:96:55:d6:f8:72:4d:c1:6d:a8:16:db:f7:b8:b5: 25:a7:da:de:d7:50:a0:d2:04:30:b3:b3:5f:e1:3a: fa:a6:08:7e:1a:1d:11:9f:84:48:79:23:38:6b:9e: 2e:76:46:c2:6d:ba:a3:ff:82:43:79:1f:71:6d:69: 16:08:5d:a2:14:3e:31:a2:72:e6:a2:83:a7:2a:5f: 78:43:a0:44:9b:bb:c2:9b:c8:32:7a:70:1e:e5:2c: 44:c0:4d:51:ab:9d:6e:15:6c:a1:af:ef:30:c6:4f: bd:03:e7:6d:9e:40:83:7f:f2:fe:37:b9:fa:bc:61: ca:f7:52:97:4e:81:b2:c5:d6:cc:8e:17:3f:b9:89: 0e:2a:74:0d:9c:1b:d8:f0:bd:d6:7e:65:72:43:1b: 81:21:c8:28:ee:fe:c7:3d:e4:aa:6c:d8:a4:ca:1d: 9a:9e:7f:c2:ab:c3:33:45:ec:70:fa:e8:33:b7:94: 51:ff:30:98:d3:01:b7:1f:fe:59:5e:82:1c:d3:53: 8f:44:78:1e:36:c7:0e:57:a3:d9:9f:93:5d:0e:4a: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1E:0E:0E:97:8E:F8:B4:F8:2C:62:E9:70:EA:AC:A6:87:98:9D:3F X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3B4ODpeO-LT4LGLpcOqspoeYnT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.61.0/24 Signature Algorithm: sha256WithRSAEncryption 56:d6:01:13:bf:47:ab:27:6d:90:2a:1e:33:28:2d:ad:10:4b: 31:d0:86:48:c5:1f:63:49:f0:d0:20:2e:70:cb:d7:c8:fc:5e: 04:d2:9b:c3:7a:1e:e3:bf:cb:45:29:12:48:ca:d9:b4:a4:fd: 88:fa:56:61:be:40:67:85:2e:5c:97:cb:62:69:de:11:bc:68: c9:7b:29:f9:65:5f:e3:6b:1a:7a:3a:40:68:b1:76:41:9f:80: f2:f0:1f:9a:8e:c7:e0:03:a2:9e:90:eb:5e:06:40:e6:8a:6b: 9f:5f:7c:75:08:4b:0b:0f:d8:32:53:3a:78:99:2a:99:a6:43: aa:35:1f:70:55:93:11:8c:8a:73:5d:fb:26:ba:b3:9c:71:0a: b5:11:86:05:40:e6:28:80:a7:f3:db:53:c3:d0:86:a8:55:c7: b7:bd:1b:92:e3:61:86:90:d5:e5:bf:2b:d1:c5:22:7e:df:cb: 0d:64:a9:01:2e:ba:eb:1e:5e:81:8e:fe:3d:0d:4e:bc:96:ee: df:3e:87:97:eb:e1:20:fb:8c:65:fe:83:af:34:ea:31:52:78: 1a:92:05:9b:6b:66:32:dc:00:87:99:53:24:3c:95:09:a3:03: 13:a9:42:25:9d:0d:34:ee:25:54:0b:67:51:b3:14:db:93:68: 0f:98:7d:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8dMws/ClUuEcyZyWE+IKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzFlMGUwZTk3OGVmOGI0ZjgyYzYyZTk3MGVhYWNhNjg3OTg5ZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VNIn9NR5VbtWT9hsECXyMNo5a+3 2uQ+cYgG+tkUUFR8rKEgsJlLxfVYcaBZllXW+HJNwW2oFtv3uLUlp9re11Cg0gQw s7Nf4Tr6pgh+Gh0Rn4RIeSM4a54udkbCbbqj/4JDeR9xbWkWCF2iFD4xonLmooOn Kl94Q6BEm7vCm8gyenAe5SxEwE1Rq51uFWyhr+8wxk+9A+dtnkCDf/L+N7n6vGHK 91KXToGyxdbMjhc/uYkOKnQNnBvY8L3WfmVyQxuBIcgo7v7HPeSqbNikyh2ann/C q8MzRexw+ugzt5RR/zCY0wG3H/5ZXoIc01OPRHgeNscOV6PZn5NdDkopPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNweDg6Xjvi0+Cxi6XDqrKaHmJ0/MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvM0I0T0RwZU8tTFQ0TEdMcGNPcXNwb2VZblQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiE9MA0G CSqGSIb3DQEBCwUAA4IBAQBW1gETv0erJ22QKh4zKC2tEEsx0IZIxR9jSfDQIC5w y9fI/F4E0pvDeh7jv8tFKRJIytm0pP2I+lZhvkBnhS5cl8tiad4RvGjJeyn5ZV/j axp6OkBosXZBn4Dy8B+ajsfgA6KekOteBkDmimufX3x1CEsLD9gyUzp4mSqZpkOq NR9wVZMRjIpzXfsmurOccQq1EYYFQOYogKfz21PD0IaoVce3vRuS42GGkNXlvyvR xSJ+38sNZKkBLrrrHl6Bjv49DU68lu7fPoeX6+Eg+4xl/oOvNOoxUngakgWba2Yy 3ACHmVMkPJUJowMTqUIlnQ007iVUC2dRsxTbk2gPmH3C -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:54 2026 by rpki-client