This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/3DKyG4yqxD-RCxqPWmT7N7olh-A.roa File: 3DKyG4yqxD-RCxqPWmT7N7olh-A.roa (raw, json) Hash identifier: PJ5W+9gaDI7CdrxxRKkNpvIJyqlsEgvjqhtTWlW7+xo= Subject key identifier: DC:32:B2:1B:8C:AA:C4:3F:91:0B:1A:8F:5A:64:FB:37:BA:25:87:E0 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15CEDA8B5C081A14CCE97BB0973CBF Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/3DKyG4yqxD-RCxqPWmT7N7olh-A.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204769 IP address blocks: 192.144.34.0/24 maxlen: 24 193.38.248.0/24 maxlen: 24 2a09:ff00:103::/48 maxlen: 48 2a09:ff00:104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ce:da:8b:5c:08:1a:14:cc:e9:7b:b0:97:3c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc32b21b8caac43f910b1a8f5a64fb37ba2587e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:1d:bc:eb:88:7d:4e:0c:99:d9:83:39:90: 4c:b3:90:29:a7:7c:47:57:79:ec:16:3c:3d:3f:c1: ba:0f:53:2d:66:3e:0d:23:21:c8:1c:b6:1a:da:bc: a1:0e:70:a5:b3:a1:7e:81:11:2d:59:ac:88:79:f5: 07:67:53:ce:fb:c7:c5:76:03:06:8c:bc:b0:90:04: 2e:04:44:37:64:43:be:30:3f:26:a3:7e:97:e4:0f: e0:fd:9c:4b:96:b2:26:c7:4a:20:57:db:9a:36:2e: 99:10:0c:cd:7d:12:5a:7c:b5:47:25:cb:49:8d:8d: 6d:93:65:46:c8:b8:1b:04:0b:41:d3:e7:11:de:d8: 5b:e6:b5:18:c5:07:35:1a:82:e7:0b:de:1a:d0:d1: 25:f2:5c:a5:5e:9a:2f:93:70:ee:a7:d9:ac:3a:f0: 64:0f:2c:e4:2e:ad:2d:4a:a9:4e:1c:94:1f:37:7e: 7a:b8:a7:fa:de:48:49:f5:92:75:12:3e:4e:fd:22: a9:9b:25:91:a8:fb:5d:84:aa:66:62:0b:08:21:c9: a9:c5:d0:d4:bb:5b:7b:b2:2b:16:54:19:5d:81:66: ae:a9:41:91:0a:e9:23:80:c6:d8:55:31:b1:9c:8f: f8:5f:47:c8:57:fc:cd:f8:46:ad:21:a6:ef:f0:dd: c2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:32:B2:1B:8C:AA:C4:3F:91:0B:1A:8F:5A:64:FB:37:BA:25:87:E0 X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/3DKyG4yqxD-RCxqPWmT7N7olh-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.144.34.0/24 193.38.248.0/24 IPv6: 2a09:ff00:103::-2a09:ff00:104:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1e:b8:9f:77:f5:0e:2a:b8:99:ff:25:9b:28:42:6c:aa:5f:10: 48:18:71:17:ae:38:d7:ed:1d:6d:80:59:69:ff:57:a9:22:74: 26:01:4b:aa:1d:7b:c5:55:6a:4f:e0:b4:92:45:c9:eb:80:3b: 54:6e:ba:9f:77:6f:65:fb:d5:cc:e9:a1:f8:dc:9f:67:44:9c: 11:a5:19:46:20:b4:77:a8:64:95:44:42:02:2a:c4:fb:fd:11: d2:ca:30:56:c2:2b:64:a7:71:2a:50:a6:42:e1:64:56:42:8d: de:a3:ab:ae:61:a6:9e:d5:48:37:b2:e9:88:0a:8e:fa:7b:c4: 1e:95:b2:77:89:99:30:05:f3:54:65:ea:33:6f:39:5f:41:6b: 80:a8:ff:88:fe:1f:77:89:78:2c:b9:08:9e:fd:57:f2:e8:10: e9:b0:2c:06:51:20:06:c3:39:51:35:96:e1:eb:d1:e3:b9:25: 48:0b:b7:cb:f9:2f:16:29:05:f1:52:58:7f:f7:ad:b2:dc:ae: c7:19:db:da:d2:d1:bf:97:8b:82:7a:f0:a3:4e:2e:06:19:08: 61:fc:ae:9f:13:95:1f:8d:e4:16:ae:e8:15:38:71:88:61:e5: b2:d5:fd:ff:5d:dd:a8:cf:21:a6:9f:de:3b:ca:8c:e3:a7:1b: ed:32:95:35 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/Fc7ai1wIGhTM6Xuwlzy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzMyYjIxYjhjYWFjNDNmOTEwYjFhOGY1YTY0ZmIzN2JhMjU4N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF4dvOuIfU4MmdmDOZBMs5App3xH V3nsFjw9P8G6D1MtZj4NIyHIHLYa2ryhDnCls6F+gREtWayIefUHZ1PO+8fFdgMG jLywkAQuBEQ3ZEO+MD8mo36X5A/g/ZxLlrImx0ogV9uaNi6ZEAzNfRJafLVHJctJ jY1tk2VGyLgbBAtB0+cR3thb5rUYxQc1GoLnC94a0NEl8lylXpovk3Dup9msOvBk DyzkLq0tSqlOHJQfN356uKf63khJ9ZJ1Ej5O/SKpmyWRqPtdhKpmYgsIIcmpxdDU u1t7sisWVBldgWauqUGRCukjgMbYVTGxnI/4X0fIV/zN+EatIabv8N3CtQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFNwyshuMqsQ/kQsaj1pk+ze6JYfgMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvM0RLeUc0eXF4RC1SQ3hxUFdtVDdON29saC1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQAwJAiAwQA wSb4MBoEAgACMBQwEgMHACoJ/wABAwMHACoJ/wABBDANBgkqhkiG9w0BAQsFAAOC AQEAHrifd/UOKriZ/yWbKEJsql8QSBhxF6441+0dbYBZaf9XqSJ0JgFLqh17xVVq T+C0kkXJ64A7VG66n3dvZfvVzOmh+NyfZ0ScEaUZRiC0d6hklURCAirE+/0R0sow VsIrZKdxKlCmQuFkVkKN3qOrrmGmntVIN7LpiAqO+nvEHpWyd4mZMAXzVGXqM285 X0FrgKj/iP4fd4l4LLkInv1X8ugQ6bAsBlEgBsM5UTWW4evR47klSAu3y/kvFikF 8VJYf/etstyuxxnb2tLRv5eLgnrwo04uBhkIYfyunxOVH43kFq7oFThxiGHlstX9 /13dqM8hpp/eO8qM46cb7TKVNQ== -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:22 2026 by rpki-client