This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/0C3-RBDeBEJHq-GMCpkbepyqeas.roa File: 0C3-RBDeBEJHq-GMCpkbepyqeas.roa (raw, json) Hash identifier: R8WsGdih9UgzIgy88xBMPJbYD5HZmR7kpCNGX1pKVbQ= Subject key identifier: D0:2D:FE:44:10:DE:04:42:47:AB:E1:8C:0A:99:1B:7A:9C:AA:79:AB Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED4EFCDF4E39F741BFF3EB714EC723 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/0C3-RBDeBEJHq-GMCpkbepyqeas.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50599 IP address blocks: 91.196.14.0/23 maxlen: 23 185.216.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4e:fc:df:4e:39:f7:41:bf:f3:eb:71:4e:c7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d02dfe4410de044247abe18c0a991b7a9caa79ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:47:6e:7e:1c:c2:db:04:cf:f5:81:d3:02: 41:4d:e6:d8:24:d8:2a:dd:df:a6:14:68:be:6d:82: c7:74:44:46:d5:03:1e:53:8f:5a:3e:cd:c9:52:ea: 7c:07:ff:01:ea:3e:fd:44:9b:a7:fa:45:9d:dc:85: 4b:f7:8f:cf:32:8d:a3:ae:79:99:0c:61:c1:c9:b3: d0:79:cf:87:2d:2e:1c:40:3c:d1:2b:e8:48:0f:91: b8:ab:da:3d:17:32:e2:2c:c9:1d:be:ba:64:47:12: 37:9b:78:5c:84:b2:cf:14:2b:aa:b5:8a:e4:89:b4: bb:33:9f:1a:e9:b0:10:94:84:e0:ad:b0:b9:e7:30: 62:8b:fe:7e:82:e9:80:9e:45:05:cc:91:59:92:1d: 23:3d:14:4d:80:a9:5b:22:53:b3:87:6b:04:00:fd: 52:71:da:18:d7:0f:9c:e9:ba:c7:3a:3f:1d:23:38: 20:9f:4a:94:42:08:66:a0:02:ec:82:16:3d:0e:06: 66:1f:32:4d:ca:b4:91:22:89:07:fa:46:89:de:04: 08:a2:9e:58:aa:db:35:21:b0:47:4b:a1:e7:b2:b9: d2:3e:09:07:fa:4b:8d:14:01:da:1e:87:b1:ce:27: 0d:9b:b6:2e:0c:1d:31:86:b5:62:8c:0d:f7:cd:17: a2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2D:FE:44:10:DE:04:42:47:AB:E1:8C:0A:99:1B:7A:9C:AA:79:AB X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/0C3-RBDeBEJHq-GMCpkbepyqeas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.14.0/23 185.216.174.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:37:3b:2a:72:22:fb:61:d1:c3:3f:13:f1:52:05:18:22:37: 71:8a:1a:32:ff:fc:29:c3:6a:f2:33:42:69:c8:a6:1b:64:ff: 97:51:c1:b2:c9:9b:0a:a9:bf:da:c0:1f:b3:82:1a:2a:df:c5: 9e:06:9a:c4:11:3e:43:28:df:bd:2a:9f:3f:61:0d:b2:01:87: ae:34:4b:67:58:96:c9:be:ff:f9:9c:f0:af:33:c6:1d:20:12: 54:79:6a:95:5e:82:33:26:f3:14:54:83:35:67:7c:48:f3:4c: b5:2c:2d:c0:50:1b:d1:cd:86:aa:ba:cd:e1:53:0d:2f:75:9e: 99:bb:ad:d8:2f:62:8c:81:23:e4:f1:f9:2b:af:0a:a1:ef:aa: fc:5e:f4:24:08:2e:b2:8f:b2:13:d2:39:97:62:a2:4c:f0:17: d5:42:ef:11:c0:03:34:be:c7:15:d0:59:59:43:7e:26:25:b6: cf:a4:b2:9f:58:dc:aa:cd:7e:7a:49:0a:1b:46:05:f3:2c:02: b4:7f:55:e2:10:9b:0f:73:93:aa:9c:98:cf:b7:97:0d:88:cf: 67:93:cd:bf:ac:4d:2f:e6:2b:af:58:72:26:6c:c5:1c:af:97: 93:24:d5:3a:21:4b:ed:bd:4b:45:19:94:4c:9e:a6:b8:02:91: 80:50:84:cb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57U78304590G/8+txTscjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDJkZmU0NDEwZGUwNDQyNDdhYmUxOGMwYTk5MWI3YTljYWE3OWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozlHbn4cwtsEz/WB0wJBTebYJNgq 3d+mFGi+bYLHdERG1QMeU49aPs3JUup8B/8B6j79RJun+kWd3IVL94/PMo2jrnmZ DGHBybPQec+HLS4cQDzRK+hID5G4q9o9FzLiLMkdvrpkRxI3m3hchLLPFCuqtYrk ibS7M58a6bAQlITgrbC55zBii/5+gumAnkUFzJFZkh0jPRRNgKlbIlOzh2sEAP1S cdoY1w+c6brHOj8dIzggn0qUQghmoALsghY9DgZmHzJNyrSRIokH+kaJ3gQIop5Y qts1IbBHS6HnsrnSPgkH+kuNFAHaHoexzicNm7YuDB0xhrVijA33zRei5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNAt/kQQ3gRCR6vhjAqZG3qcqnmrMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvMEMzLVJCRGVCRUpIcS1HTUNwa2JlcHlxZWFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8QOAwQB udiuMA0GCSqGSIb3DQEBCwUAA4IBAQAtNzsqciL7YdHDPxPxUgUYIjdxihoy//wp w2ryM0JpyKYbZP+XUcGyyZsKqb/awB+zghoq38WeBprEET5DKN+9Kp8/YQ2yAYeu NEtnWJbJvv/5nPCvM8YdIBJUeWqVXoIzJvMUVIM1Z3xI80y1LC3AUBvRzYaqus3h Uw0vdZ6Zu63YL2KMgSPk8fkrrwqh76r8XvQkCC6yj7IT0jmXYqJM8BfVQu8RwAM0 vscV0FlZQ34mJbbPpLKfWNyqzX56SQobRgXzLAK0f1XiEJsPc5OqnJjPt5cNiM9n k82/rE0v5iuvWHImbMUcr5eTJNU6IUvtvUtFGZRMnqa4ApGAUITL -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:51 2026 by rpki-client