This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa File: 3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa (raw, json) Hash identifier: +nC3QJ9RCWlqRE3Uosm7QmqFU0HBkZbw83GEtUPhBdQ= Subject key identifier: DF:F0:6D:67:BF:B7:4B:2A:DA:A2:A0:B1:61:FF:32:19:75:73:A3:51 Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019B7CEE68F0CC00ED5854011981FAE11076 Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30815 IP address blocks: 194.46.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:68:f0:cc:00:ed:58:54:01:19:81:fa:e1:10:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dff06d67bfb74b2adaa2a0b161ff32197573a351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:e0:ad:85:02:a7:9a:29:e3:7b:5a:b8:0a: f3:fc:d1:f0:4f:51:a5:d9:9d:86:df:1c:97:7f:85: 33:39:ca:1d:e5:f4:93:65:90:97:00:5b:06:ad:4c: e3:7d:3a:79:0f:f1:80:c9:ca:55:e8:d7:66:88:6b: f8:e3:b1:8a:9b:c6:84:ba:4c:7b:74:ee:3e:55:e2: 59:20:2e:54:c1:09:68:aa:63:b9:32:b2:24:e8:03: dd:e6:05:e3:15:aa:e1:a9:ef:92:78:a0:17:5b:57: e0:d2:35:08:41:7d:30:9f:00:10:cc:76:da:41:d5: 32:cf:10:20:4c:38:fc:05:9b:5f:3b:77:f3:5a:d2: 70:9d:b7:b0:dc:e4:f1:e1:06:b7:4a:c7:10:96:34: 7b:ec:0a:f1:d4:65:4c:df:2f:18:81:b0:96:3d:e5: cb:fb:d5:b2:b3:58:f9:a3:39:c3:28:a2:63:d3:22: f6:00:ed:91:e6:10:f1:45:27:e3:61:08:48:88:ee: a6:14:cf:fc:13:4c:1e:6e:3d:6f:5d:15:15:1b:e4: f2:f6:79:35:e3:e6:2d:90:4c:d5:03:b0:34:8c:0f: 35:29:36:d5:de:74:43:10:44:12:48:2a:e7:67:0e: 1c:fe:03:11:4e:1e:a4:76:ad:ab:d3:7a:79:80:53: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F0:6D:67:BF:B7:4B:2A:DA:A2:A0:B1:61:FF:32:19:75:73:A3:51 X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/3_BtZ7-3SyraoqCxYf8yGXVzo1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.46.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:82:5f:40:f1:41:26:56:37:b7:6b:a7:c6:38:74:be:7b:d4: 5a:83:f4:73:fa:48:81:cc:5a:75:ab:57:70:d1:f2:56:48:1d: de:80:93:ec:f2:89:17:55:16:dd:17:16:5e:44:eb:70:c2:5e: 57:5d:49:07:0e:ac:92:f2:b9:91:75:4d:cf:90:44:e2:5d:26: ac:58:61:33:b7:53:90:81:0c:4c:dc:81:58:51:e8:26:73:9f: 5e:aa:26:89:a8:cf:a5:cc:b6:67:10:a7:d3:f7:35:3e:c7:f8: f8:d4:b1:72:72:bf:d5:3e:61:70:fb:93:cd:f6:cc:38:92:3f: 1f:73:87:9e:2e:49:57:d2:0c:35:58:92:d3:23:35:89:c3:09: a6:98:f4:39:3a:d8:7f:c1:99:39:b4:fe:26:65:bd:79:fe:ec: ee:11:c8:96:e5:52:44:f5:1e:20:ad:07:65:62:c9:ba:3b:f9: 51:6b:ca:d0:3b:e7:d2:3d:e9:a1:ae:07:54:a8:f7:3d:b9:29: d1:7d:a5:da:d0:b0:91:e2:d0:c5:a7:dd:23:70:d3:c4:f1:d8: 54:9a:e9:18:03:5f:0c:02:32:1d:62:4d:7e:bb:9c:de:94:ce: 01:37:bd:f8:1f:fd:8e:b7:6c:aa:a8:9c:78:49:d0:64:b5:a0: 61:24:e0:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mjwzADtWFQBGYH64RB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmYwNmQ2N2JmYjc0YjJhZGFhMmEwYjE2MWZmMzIxOTc1NzNhMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxvgrYUCp5op43tauArz/NHwT1Gl 2Z2G3xyXf4UzOcod5fSTZZCXAFsGrUzjfTp5D/GAycpV6NdmiGv447GKm8aEukx7 dO4+VeJZIC5UwQloqmO5MrIk6APd5gXjFarhqe+SeKAXW1fg0jUIQX0wnwAQzHba QdUyzxAgTDj8BZtfO3fzWtJwnbew3OTx4Qa3SscQljR77Arx1GVM3y8YgbCWPeXL +9Wys1j5oznDKKJj0yL2AO2R5hDxRSfjYQhIiO6mFM/8E0webj1vXRUVG+Ty9nk1 4+YtkEzVA7A0jA81KTbV3nRDEEQSSCrnZw4c/gMRTh6kdq2r03p5gFOwqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/wbWe/t0sq2qKgsWH/Mhl1c6NRMB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvM19CdFo3LTNTeXJhb3FDeFlmOHlHWFZ6bzFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwi4mMA0G CSqGSIb3DQEBCwUAA4IBAQArgl9A8UEmVje3a6fGOHS+e9Rag/Rz+kiBzFp1q1dw 0fJWSB3egJPs8okXVRbdFxZeROtwwl5XXUkHDqyS8rmRdU3PkETiXSasWGEzt1OQ gQxM3IFYUegmc59eqiaJqM+lzLZnEKfT9zU+x/j41LFycr/VPmFw+5PN9sw4kj8f c4eeLklX0gw1WJLTIzWJwwmmmPQ5Oth/wZk5tP4mZb15/uzuEciW5VJE9R4grQdl Ysm6O/lRa8rQO+fSPemhrgdUqPc9uSnRfaXa0LCR4tDFp90jcNPE8dhUmukYA18M AjIdYk1+u5zelM4BN734H/2Ot2yqqJx4SdBktaBhJOC9 -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:04 2026 by rpki-client