This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/n3vDiE1r5CPV-Kn2A_mpngA-za8.roa File: n3vDiE1r5CPV-Kn2A_mpngA-za8.roa (raw, json) Hash identifier: iNr9SnNJNjSupRbLQuu8OWEwivQhXnMqZVhQB/JR6g8= Subject key identifier: 9F:7B:C3:88:4D:6B:E4:23:D5:F8:A9:F6:03:F9:A9:9E:00:3E:CD:AF Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Certificate serial: 019B7FF141DD6EF78E06D693DB66C8E487DB Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/n3vDiE1r5CPV-Kn2A_mpngA-za8.roa Signing time: Fri 02 Jan 2026 18:21:15 +0000 ROA not before: Fri 02 Jan 2026 18:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39900 IP address blocks: 141.98.184.0/22 maxlen: 22 194.9.118.0/24 maxlen: 24 2a13:6c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:41:dd:6e:f7:8e:06:d6:93:db:66:c8:e4:87:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Validity Not Before: Jan 2 18:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f7bc3884d6be423d5f8a9f603f9a99e003ecdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:6e:87:d4:cf:1e:26:cf:5c:17:32:c1:69: c2:71:d3:13:dd:7a:2a:90:b5:fd:6f:5d:14:8d:b3: f5:1f:6b:60:e5:c5:b3:9d:8d:dd:5b:32:db:e0:d2: 45:29:8f:30:66:a8:85:2d:06:1d:d3:42:c7:a7:85: 59:e0:cf:3d:42:c6:51:33:ef:02:5d:da:73:1a:2a: b7:cb:c3:7c:cc:6e:17:bc:69:e1:c1:55:3f:f0:75: e3:88:64:f0:94:ca:ab:9c:89:7a:ad:a5:42:b3:0c: b7:60:6c:63:2e:82:6f:d1:a8:50:32:5a:79:ed:a9: 1c:2d:2c:31:74:f4:a6:ef:5d:27:f0:ad:02:c4:1b: 7b:6a:d8:64:b4:ab:38:80:82:b6:f7:7c:6f:2b:b9: 41:b4:22:9a:21:a1:3d:2a:2c:fd:8b:b2:d6:d0:11: aa:d6:e5:05:33:2f:07:ec:31:cb:b4:e3:1b:b8:c8: b3:8b:ff:b0:56:31:eb:7e:7f:cd:a8:53:6f:f7:10: b1:d4:53:52:a2:01:6e:14:89:92:03:93:3b:e1:42: 01:75:a1:24:ba:b0:e7:21:ad:12:5c:15:1e:68:4a: 30:b0:af:4c:fb:12:3b:bc:40:ea:06:70:be:21:d0: ff:53:8b:be:7a:27:49:b2:aa:57:c0:c4:e4:18:4c: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7B:C3:88:4D:6B:E4:23:D5:F8:A9:F6:03:F9:A9:9E:00:3E:CD:AF X509v3 Authority Key Identifier: keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/n3vDiE1r5CPV-Kn2A_mpngA-za8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.184.0/22 194.9.118.0/24 IPv6: 2a13:6c40::/29 Signature Algorithm: sha256WithRSAEncryption 19:76:45:1a:f9:14:e5:64:ad:0f:04:28:78:e7:c5:df:1d:12: 07:98:9d:d5:e8:47:d5:21:4b:fa:fb:89:63:e3:ae:25:8c:77: 6d:2f:05:92:13:32:15:52:3b:82:0c:50:79:7a:14:68:88:d7: 84:5c:1e:34:b7:bd:55:7c:97:26:37:f6:a2:cb:e6:0c:11:b0: d5:89:b3:54:5d:30:12:2f:11:b1:59:1a:ba:b5:af:45:31:cb: 2f:c0:47:e7:22:c5:d0:bd:7a:b3:b5:61:56:84:68:3a:ef:1e: c5:1c:58:84:ef:0a:1e:3e:b3:24:40:e0:fd:9b:08:10:03:43: b4:a4:13:e3:72:13:0a:ee:3b:87:35:68:fa:37:7d:0d:e4:e6: 72:6e:d6:d5:10:9c:80:d1:d7:00:42:74:0f:c0:96:a4:fc:73: 14:9d:bc:a2:00:5d:18:27:64:9e:57:fc:a8:1d:da:27:f5:94: 93:b4:1c:9f:22:56:3e:36:b8:c3:8d:ba:60:4c:17:05:6f:34: b0:f2:e6:b8:3f:55:b0:00:9e:00:c1:a4:d4:ed:d6:4f:35:94: 52:c2:52:2c:9c:83:40:02:08:06:6e:9b:df:85:04:2a:c5:cb: 73:67:57:7a:1b:1c:2e:05:fc:85:3c:09:c0:ba:68:b0:1d:41: e2:7f:dd:a8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/8UHdbveOBtaT22bI5IfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj NTU4ZWYwHhcNMjYwMTAyMTgyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjdiYzM4ODRkNmJlNDIzZDVmOGE5ZjYwM2Y5YTk5ZTAwM2VjZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszJuh9TPHibPXBcywWnCcdMT3Xoq kLX9b10UjbP1H2tg5cWznY3dWzLb4NJFKY8wZqiFLQYd00LHp4VZ4M89QsZRM+8C XdpzGiq3y8N8zG4XvGnhwVU/8HXjiGTwlMqrnIl6raVCswy3YGxjLoJv0ahQMlp5 7akcLSwxdPSm710n8K0CxBt7athktKs4gIK293xvK7lBtCKaIaE9Kiz9i7LW0BGq 1uUFMy8H7DHLtOMbuMizi/+wVjHrfn/NqFNv9xCx1FNSogFuFImSA5M74UIBdaEk urDnIa0SXBUeaEowsK9M+xI7vEDqBnC+IdD/U4u+eidJsqpXwMTkGEzUmQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ97w4hNa+Qj1fip9gP5qZ4APs2vMB8GA1UdIwQY MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt ZjNlMDUyYmFiMTQ0LzEvbjN2RGlFMXI1Q1BWLUtuMkFfbXBuZ0EtemE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0 LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCjWK4AwQA wgl2MA0EAgACMAcDBQMqE2xAMA0GCSqGSIb3DQEBCwUAA4IBAQAZdkUa+RTlZK0P BCh458XfHRIHmJ3V6EfVIUv6+4lj464ljHdtLwWSEzIVUjuCDFB5ehRoiNeEXB40 t71VfJcmN/aiy+YMEbDVibNUXTASLxGxWRq6ta9FMcsvwEfnIsXQvXqztWFWhGg6 7x7FHFiE7woePrMkQOD9mwgQA0O0pBPjchMK7juHNWj6N30N5OZybtbVEJyA0dcA QnQPwJak/HMUnbyiAF0YJ2SeV/yoHdon9ZSTtByfIlY+NrjDjbpgTBcFbzSw8ua4 P1WwAJ4AwaTU7dZPNZRSwlIsnINAAggGbpvfhQQqxctzZ1d6GxwuBfyFPAnAumiw HUHif92o -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:31 2026 by rpki-client