This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/s3A2C1YnSyHhxEfVoTVMiH87vAk.roa File: s3A2C1YnSyHhxEfVoTVMiH87vAk.roa (raw, json) Hash identifier: MNg/HtGNSEAU6JM2GvPKlMX0wCyEJFk2vuXxUMALprU= Subject key identifier: B3:70:36:0B:56:27:4B:21:E1:C4:47:D5:A1:35:4C:88:7F:3B:BC:09 Certificate issuer: /CN=e3de21b0636c614ebf43664798012afd56c5ee86 Certificate serial: 019B7F8501A7BECA254D6EDE9CB4133303C1 Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/s3A2C1YnSyHhxEfVoTVMiH87vAk.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200052 IP address blocks: 185.21.216.0/22 maxlen: 22 193.28.252.0/23 maxlen: 23 193.29.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:01:a7:be:ca:25:4d:6e:de:9c:b4:13:33:03:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b370360b56274b21e1c447d5a1354c887f3bbc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:3e:4a:89:57:e6:a4:37:85:56:5a:6c:e1: f7:fc:28:f7:18:e4:ef:0c:45:f2:cc:12:2b:a1:f9: 21:ee:fd:ab:66:8f:34:31:20:9b:23:8e:7d:ea:dd: c0:de:61:a7:45:25:b1:93:a5:a3:2f:df:cd:39:28: 9f:2e:d3:15:bb:ca:ad:76:d3:74:9f:42:c0:b6:d4: 25:2a:19:d4:ef:96:c4:63:72:99:09:b1:1d:bf:2e: bc:85:59:d1:c5:b5:bc:46:ac:80:0b:80:62:b0:54: d5:c2:04:a8:d8:02:79:29:1f:76:af:d1:93:4a:b0: 35:58:e9:24:1b:20:16:38:98:39:87:b7:ae:6f:c7: bd:a1:1b:88:e6:74:81:1f:b7:b3:b2:06:f3:a6:40: d5:7b:4c:ac:cc:b6:c1:aa:66:c5:e2:c3:15:b0:40: 7e:31:e4:9a:91:83:b5:59:fb:8b:5e:3d:3c:3d:e5: 5b:da:30:5b:31:33:e1:b9:77:0d:c6:d5:c5:61:66: 45:3e:46:ef:4b:b3:da:20:40:ef:d9:b9:7b:fe:32: e0:19:d1:63:42:23:17:1a:df:c4:19:39:e7:af:bd: 21:aa:d1:1c:af:ce:1f:a5:d8:8b:61:e1:16:b7:a2: 08:85:76:b1:6e:ce:84:b5:0a:36:a9:a1:3b:72:ad: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:70:36:0B:56:27:4B:21:E1:C4:47:D5:A1:35:4C:88:7F:3B:BC:09 X509v3 Authority Key Identifier: keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/s3A2C1YnSyHhxEfVoTVMiH87vAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.216.0/22 193.28.252.0/23 193.29.6.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:c3:df:22:88:8d:0c:57:6c:71:0f:f3:64:2b:b5:c9:15:62: b7:0a:68:57:b5:df:24:0d:36:c9:fb:48:c1:01:10:0a:1b:bc: ef:f2:39:36:cc:9a:d7:54:f0:2d:f0:69:66:13:28:0f:68:c1: f4:21:d6:12:3c:ad:7f:85:ae:fa:c9:ad:8a:d6:10:2d:bb:12: b7:7a:8a:ef:af:1e:52:80:3a:f1:cc:4e:da:31:52:16:7a:6a: 2c:b4:8d:c4:13:9e:62:4c:ab:9b:ab:59:1b:46:f8:ee:2d:8e: dc:d4:e9:f9:9c:1f:e8:53:b1:d3:ff:a9:07:5a:1e:c1:79:14: 2a:18:36:24:32:9e:27:7f:fc:e6:12:af:93:57:4e:53:a6:fb: 3a:fb:55:23:06:6b:5d:78:6b:97:55:8a:86:02:35:d5:c6:17: 6b:c6:53:f2:45:be:02:8d:fd:56:dd:db:4b:97:e7:88:f1:8a: eb:40:d3:4a:06:11:63:c6:2c:14:98:73:63:52:3a:52:86:0a: 2e:fe:d1:36:cf:12:33:f9:93:43:3e:82:e3:7c:96:6f:26:9f: 0e:a1:8e:bf:ab:e6:90:04:3d:75:dc:2c:90:1f:7e:3d:c8:80: c7:db:5c:c4:16:e0:de:2b:fd:d5:8e:1c:f6:c7:c2:fc:be:cc: 62:a5:9e:89 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hQGnvsolTW7enLQTMwPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZGUyMWIwNjM2YzYxNGViZjQzNjY0Nzk4MDEyYWZkNTZj NWVlODYwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzcwMzYwYjU2Mjc0YjIxZTFjNDQ3ZDVhMTM1NGM4ODdmM2JiYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kE+SolX5qQ3hVZabOH3/Cj3GOTv DEXyzBIrofkh7v2rZo80MSCbI4596t3A3mGnRSWxk6WjL9/NOSifLtMVu8qtdtN0 n0LAttQlKhnU75bEY3KZCbEdvy68hVnRxbW8RqyAC4BisFTVwgSo2AJ5KR92r9GT SrA1WOkkGyAWOJg5h7eub8e9oRuI5nSBH7ezsgbzpkDVe0yszLbBqmbF4sMVsEB+ MeSakYO1WfuLXj08PeVb2jBbMTPhuXcNxtXFYWZFPkbvS7PaIEDv2bl7/jLgGdFj QiMXGt/EGTnnr70hqtEcr84fpdiLYeEWt6IIhXaxbs6EtQo2qaE7cq0BhwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLNwNgtWJ0sh4cRH1aE1TIh/O7wJMB8GA1UdIwQY MBaAFOPeIbBjbGFOv0NmR5gBKv1Wxe6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYt YjgyNTk2N2E3NTdhLzEvczNBMkMxWW5TeUhoeEVmVm9UVk1pSDg3dkFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYtYjgyNTk2N2E3NTdh LzEvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuRXYAwQB wRz8AwQBwR0GMA0GCSqGSIb3DQEBCwUAA4IBAQCaw98iiI0MV2xxD/NkK7XJFWK3 CmhXtd8kDTbJ+0jBARAKG7zv8jk2zJrXVPAt8GlmEygPaMH0IdYSPK1/ha76ya2K 1hAtuxK3eorvrx5SgDrxzE7aMVIWemostI3EE55iTKubq1kbRvjuLY7c1On5nB/o U7HT/6kHWh7BeRQqGDYkMp4nf/zmEq+TV05Tpvs6+1UjBmtdeGuXVYqGAjXVxhdr xlPyRb4Cjf1W3dtLl+eI8YrrQNNKBhFjxiwUmHNjUjpShgou/tE2zxIz+ZNDPoLj fJZvJp8OoY6/q+aQBD113CyQH349yIDH21zEFuDeK/3Vjhz2x8L8vsxipZ6J -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:45 2026 by rpki-client