This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/G3RuhmzfG29w9YFS7oTygz6W0Vw.roa File: G3RuhmzfG29w9YFS7oTygz6W0Vw.roa (raw, json) Hash identifier: JX85b3D4X40BgCYerPxa2mnW3gNxZep/hukddR8oH8k= Subject key identifier: 1B:74:6E:86:6C:DF:1B:6F:70:F5:81:52:EE:84:F2:83:3E:96:D1:5C Certificate issuer: /CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603 Certificate serial: 019B7F156CB8F43A6C178C3976876969707C Authority key identifier: 72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/G3RuhmzfG29w9YFS7oTygz6W0Vw.roa Signing time: Fri 02 Jan 2026 14:21:09 +0000 ROA not before: Fri 02 Jan 2026 14:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34968 IP address blocks: 46.38.192.0/19 maxlen: 24 89.207.24.0/21 maxlen: 24 95.155.184.0/21 maxlen: 24 193.238.240.0/22 maxlen: 24 2a01:710::/32 maxlen: 64 2a0f:4880::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6c:b8:f4:3a:6c:17:8c:39:76:87:69:69:70:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603 Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b746e866cdf1b6f70f58152ee84f2833e96d15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1d:4c:ce:83:38:d1:b7:df:17:55:b6:f6:f6: 0a:48:d3:e2:e3:93:11:a9:6e:53:35:a0:74:31:ad: c6:54:79:ed:3c:50:83:0d:25:5a:aa:62:46:8b:81: 43:5a:dc:0e:b0:26:41:c5:3a:7e:f0:46:3e:4e:1b: 7a:0a:bb:14:28:ff:05:f3:f4:d7:92:80:94:ad:9f: 44:35:a5:ad:ea:ae:2e:45:f1:71:74:dc:e0:91:42: c2:dc:a4:e9:47:99:99:79:9d:64:17:43:4d:b5:b2: 0a:16:e8:ea:14:52:ec:25:04:8b:4b:68:0d:f6:2f: 19:10:ad:4b:06:54:18:55:08:a4:d7:bf:10:cb:98: 1f:a7:f9:47:d2:b4:dd:2a:02:15:c2:b6:fb:8c:86: 97:85:be:06:70:4a:d8:c0:f9:c3:46:bf:a8:80:c2: bd:aa:51:f4:37:8f:35:46:fc:9c:99:7a:8d:a1:b3: ae:06:3f:42:3a:6d:7b:7b:17:ed:82:ce:d6:d2:51: fe:f2:5b:20:6d:22:0c:14:cb:d8:72:bb:17:f1:9f: 83:8a:37:b8:29:4d:9c:84:a5:ed:84:83:81:38:66: 00:05:68:c7:7e:2e:25:91:cf:90:26:1e:d7:3a:1d: d0:05:3f:b3:1e:82:00:68:4e:9f:c0:50:02:4e:03: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:74:6E:86:6C:DF:1B:6F:70:F5:81:52:EE:84:F2:83:3E:96:D1:5C X509v3 Authority Key Identifier: keyid:72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/G3RuhmzfG29w9YFS7oTygz6W0Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.192.0/19 89.207.24.0/21 95.155.184.0/21 193.238.240.0/22 IPv6: 2a01:710::/32 2a0f:4880::/29 Signature Algorithm: sha256WithRSAEncryption 24:fc:a8:87:54:28:f2:79:b7:74:05:75:31:d2:7a:d2:00:04: c7:ee:d7:98:4b:cb:db:9f:92:29:1e:5d:4e:21:ba:47:70:89: 44:34:70:c5:6f:8c:3d:05:bb:42:a2:24:fd:4b:54:9c:7a:09: 8d:d3:41:96:fd:24:49:4a:5a:92:90:91:9e:09:21:b7:09:1b: 6d:e4:f1:65:e9:79:d2:9e:39:2c:08:96:23:79:62:41:b6:2f: 85:8d:7f:a5:26:cc:20:2a:69:f2:86:7e:24:03:b1:42:bb:38: cc:06:37:b7:fe:09:ae:84:c9:9b:d0:37:fb:ff:93:a0:4d:43: 08:80:de:3a:e5:9c:4d:37:57:ed:89:c0:21:58:76:55:3d:00: f1:09:92:40:b6:72:cf:4d:d2:7b:4c:c4:7f:7f:53:30:da:45: 99:db:b3:d0:4f:88:20:d3:d6:2e:f9:5d:e4:33:c1:f2:14:c2: b2:37:7f:0b:f8:0c:a0:e6:24:8a:ac:0d:b9:e2:87:54:2e:dd: b7:36:75:f3:4b:ac:01:5b:db:70:2a:62:2f:9f:62:f2:6d:af: 18:59:95:f2:0e:75:1f:21:90:05:c8:80:ed:67:18:c1:82:09: f8:a6:72:82:b0:fa:88:40:9f:1d:8b:f4:69:ca:09:ee:52:03: 31:a0:24:29 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt/FWy49DpsF4w5dodpaXB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWFkYzdhN2VjZTQ3N2Q1ZjRkNzc3MjQzYjYwZjJiYmJi NzU2MDMwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjc0NmU4NjZjZGYxYjZmNzBmNTgxNTJlZTg0ZjI4MzNlOTZkMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9B1MzoM40bffF1W29vYKSNPi45MR qW5TNaB0Ma3GVHntPFCDDSVaqmJGi4FDWtwOsCZBxTp+8EY+Tht6CrsUKP8F8/TX koCUrZ9ENaWt6q4uRfFxdNzgkULC3KTpR5mZeZ1kF0NNtbIKFujqFFLsJQSLS2gN 9i8ZEK1LBlQYVQik178Qy5gfp/lH0rTdKgIVwrb7jIaXhb4GcErYwPnDRr+ogMK9 qlH0N481RvycmXqNobOuBj9COm17exftgs7W0lH+8lsgbSIMFMvYcrsX8Z+Dije4 KU2chKXthIOBOGYABWjHfi4lkc+QJh7XOh3QBT+zHoIAaE6fwFACTgMegwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFBt0boZs3xtvcPWBUu6E8oM+ltFcMB8GA1UdIwQY MBaAFHLq3Hp+zkd9X013ckO2Dyu7t1YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VyY2VuN09SMzFmVFhkeVE3WVBLN3UzVmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMDljNjQtMGJhZi00YjA3LThkMjkt NDczODUxNzA5YzU4LzEvRzNSdWhtemZHMjl3OVlGUzdvVHlnejZXMFZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jMDljNjQtMGJhZi00YjA3LThkMjktNDczODUxNzA5YzU4 LzEvY3VyY2VuN09SMzFmVFhkeVE3WVBLN3UzVmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQFLibAAwQD Wc8YAwQDX5u4AwQCwe7wMBQEAgACMA4DBQAqAQcQAwUDKg9IgDANBgkqhkiG9w0B AQsFAAOCAQEAJPyoh1Qo8nm3dAV1MdJ60gAEx+7XmEvL25+SKR5dTiG6R3CJRDRw xW+MPQW7QqIk/UtUnHoJjdNBlv0kSUpakpCRngkhtwkbbeTxZel50p45LAiWI3li QbYvhY1/pSbMICpp8oZ+JAOxQrs4zAY3t/4JroTJm9A3+/+ToE1DCIDeOuWcTTdX 7YnAIVh2VT0A8QmSQLZyz03Se0zEf39TMNpFmduz0E+IINPWLvld5DPB8hTCsjd/ C/gMoOYkiqwNueKHVC7dtzZ180usAVvbcCpiL59i8m2vGFmV8g51HyGQBciA7WcY wYIJ+KZygrD6iECfHYv0acoJ7lIDMaAkKQ== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:03 2026 by rpki-client