This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/3s9WMYEcQ2eeR7WmEF0cPyYnnoc.roa File: 3s9WMYEcQ2eeR7WmEF0cPyYnnoc.roa (raw, json) Hash identifier: I5I/yKJ6+N12F+Oii5+qZSRYetGEm6Nazf/isv9EOH0= Subject key identifier: DE:CF:56:31:81:1C:43:67:9E:47:B5:A6:10:5D:1C:3F:26:27:9E:87 Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520 Certificate serial: 019B7E3927BA584927D1C77F816B8A4068A4 Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/3s9WMYEcQ2eeR7WmEF0cPyYnnoc.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58111 IP address blocks: 193.47.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:27:ba:58:49:27:d1:c7:7f:81:6b:8a:40:68:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=decf5631811c43679e47b5a6105d1c3f26279e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d1:09:e6:7a:07:4f:16:c4:f0:2a:6b:ec:74: ae:d6:6f:e7:7b:db:1a:c1:45:f8:56:46:bc:b7:be: 1d:0d:ad:a1:1e:0f:0f:f2:74:c0:65:a0:28:e0:91: 98:46:b7:22:c3:ab:77:12:24:ec:05:ea:55:34:b8: 1b:15:e1:f7:9f:fc:e6:eb:8a:5e:38:97:a4:a3:5a: ff:08:79:f7:2a:55:3e:16:9f:e0:d0:78:d6:e8:bd: 00:05:b0:13:23:1f:ad:69:bd:2a:53:58:2f:9e:fd: 65:df:c4:5a:5a:f7:eb:47:c7:a5:37:58:c4:d7:fe: 08:57:df:b3:14:3a:63:97:67:c6:ad:c6:52:78:64: f3:3a:2d:23:db:6a:1c:f9:72:7d:d7:0e:97:58:4d: ed:27:fa:a9:5d:9f:2e:f2:28:d1:9a:6f:98:42:0b: db:02:8e:0c:08:12:61:da:6b:59:37:0d:9a:42:d4: f5:12:4b:ff:e7:cc:45:a0:b6:da:77:2d:58:8c:92: 7a:51:d3:49:89:e5:97:1d:54:97:fd:6d:d0:f4:6f: f3:ba:ce:40:9e:17:b9:2a:a4:0b:fd:fe:46:c8:87: 2f:55:79:4e:c9:95:48:c2:af:51:35:14:36:31:31: 63:3a:2d:66:95:24:1e:f2:1d:1d:e8:e2:9f:20:b5: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CF:56:31:81:1C:43:67:9E:47:B5:A6:10:5D:1C:3F:26:27:9E:87 X509v3 Authority Key Identifier: keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/3s9WMYEcQ2eeR7WmEF0cPyYnnoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.71.0/24 Signature Algorithm: sha256WithRSAEncryption 66:d5:9c:11:dd:af:fb:50:38:64:3b:4f:b3:42:2b:54:d1:41: 62:28:0f:c4:63:8e:fc:3c:3e:e1:31:49:eb:e5:1e:59:ce:5c: da:b4:5d:2d:1b:43:45:61:67:fc:bb:0c:46:9d:0a:80:f6:8f: e8:c0:17:9b:04:51:0d:41:c4:0a:8c:05:5d:f2:83:76:12:a2: 2b:68:f0:28:c0:bb:08:ef:eb:8c:4e:f7:62:62:11:64:77:ef: a0:c6:42:56:46:3d:d8:63:c2:35:aa:59:f4:a6:3e:d7:ea:31: 27:b3:56:7d:e0:54:60:f1:2e:78:2d:ea:36:fb:a9:1d:08:69: 6e:fe:39:09:be:ac:27:a6:ab:f3:90:d8:45:43:a3:eb:57:3b: 32:51:31:d4:01:6b:a3:96:2e:44:c4:38:64:0a:f6:e6:b5:ef: 93:77:cc:ba:fa:f4:1c:4f:f3:bb:5a:90:e6:20:9c:75:ec:fe: 09:ca:bb:42:72:c2:fe:7a:bd:f5:ed:82:39:5f:45:fa:9b:63: ba:9d:36:32:32:fd:a2:0b:5d:ea:43:8e:a8:7e:ae:fb:37:cc: e5:4c:f5:b0:58:ab:8a:a1:ce:b4:11:be:60:80:6d:03:9b:01: 1d:70:64:9d:e3:8e:53:a3:75:c1:6f:7c:27:05:69:dc:d3:ca: b5:9e:57:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSe6WEkn0cd/gWuKQGikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjZkZTNjZDkxMGYzYmZmN2ZmODVkZWQ0NTJjNDMxYjFl OGE1MjAwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWNmNTYzMTgxMWM0MzY3OWU0N2I1YTYxMDVkMWMzZjI2Mjc5ZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tEJ5noHTxbE8Cpr7HSu1m/ne9sa wUX4Vka8t74dDa2hHg8P8nTAZaAo4JGYRrciw6t3EiTsBepVNLgbFeH3n/zm64pe OJeko1r/CHn3KlU+Fp/g0HjW6L0ABbATIx+tab0qU1gvnv1l38RaWvfrR8elN1jE 1/4IV9+zFDpjl2fGrcZSeGTzOi0j22oc+XJ91w6XWE3tJ/qpXZ8u8ijRmm+YQgvb Ao4MCBJh2mtZNw2aQtT1Ekv/58xFoLbady1YjJJ6UdNJieWXHVSX/W3Q9G/zus5A nhe5KqQL/f5GyIcvVXlOyZVIwq9RNRQ2MTFjOi1mlSQe8h0d6OKfILUnyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7PVjGBHENnnke1phBdHD8mJ56HMB8GA1UdIwQY MBaAFEy23jzZEPO/9/+F3tRSxDGx6KUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgt MDNmNjA0MzI0ZmNmLzEvM3M5V01ZRWNRMmVlUjdXbUVGMGNQeVlubm9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgtMDNmNjA0MzI0ZmNm LzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS9HMA0G CSqGSIb3DQEBCwUAA4IBAQBm1ZwR3a/7UDhkO0+zQitU0UFiKA/EY478PD7hMUnr 5R5ZzlzatF0tG0NFYWf8uwxGnQqA9o/owBebBFENQcQKjAVd8oN2EqIraPAowLsI 7+uMTvdiYhFkd++gxkJWRj3YY8I1qln0pj7X6jEns1Z94FRg8S54Leo2+6kdCGlu /jkJvqwnpqvzkNhFQ6PrVzsyUTHUAWujli5ExDhkCvbmte+Td8y6+vQcT/O7WpDm IJx17P4JyrtCcsL+er317YI5X0X6m2O6nTYyMv2iC13qQ46ofq77N8zlTPWwWKuK oc60Eb5ggG0DmwEdcGSd445To3XBb3wnBWnc08q1nlcO -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:49 2026 by rpki-client