This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/3_TF1Jd76sN3QxPbPepv9qZrq6c.roa File: 3_TF1Jd76sN3QxPbPepv9qZrq6c.roa (raw, json) Hash identifier: ML2ZijwEfiwVvzhcT4qRWRAEYKvPQK5MksfX4SSNLgQ= Subject key identifier: DF:F4:C5:D4:97:7B:EA:C3:77:43:13:DB:3D:EA:6F:F6:A6:6B:AB:A7 Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff Certificate serial: 019B7758F52CDBBF5A0D155D03BD7EF6B934 Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/3_TF1Jd76sN3QxPbPepv9qZrq6c.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13244 IP address blocks: 194.9.170.0/24 maxlen: 24 194.153.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f5:2c:db:bf:5a:0d:15:5d:03:bd:7e:f6:b9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dff4c5d4977beac3774313db3dea6ff6a66baba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:6d:cb:38:06:01:47:06:e5:4e:d6:33:3b: 48:04:d0:14:d0:de:62:ef:fe:39:79:fd:cb:68:41: 56:60:29:7d:50:0e:2d:6c:65:f7:2d:0d:4a:36:b0: da:37:a1:1a:87:e8:ab:ec:9a:d0:b0:79:a1:44:5e: 63:e2:18:30:d8:dd:f0:ed:6c:04:aa:ee:13:f1:e6: e2:ea:eb:e5:6b:d3:1e:19:91:f1:33:9e:f1:7d:f6: 87:3a:f8:78:eb:ab:e8:f0:ed:65:dd:dd:4b:63:e6: cc:38:f6:7d:04:4f:83:a1:b7:39:ea:b7:d0:f4:5d: 0f:8d:15:66:0e:23:78:b0:85:6e:11:78:5b:fe:44: 17:4c:52:50:28:07:bb:f6:43:4a:c7:b5:8b:c3:35: 4b:96:31:01:64:24:4d:a2:a9:3c:db:87:47:d5:90: a9:8c:4f:26:ae:56:9e:5c:06:40:f1:de:eb:3a:e5: 7b:5e:40:fe:f6:2c:93:ff:be:fa:4d:97:2d:62:a8: b6:c3:76:05:c8:28:59:3d:c7:63:22:51:8c:63:bf: 6a:f6:03:62:30:5e:8c:ea:29:a0:e6:fa:aa:53:78: 54:74:03:f0:22:b5:66:22:d1:cf:39:fb:80:83:36: 2b:ae:9c:ff:ae:79:55:d6:69:4c:9b:0d:cd:14:bd: 9d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F4:C5:D4:97:7B:EA:C3:77:43:13:DB:3D:EA:6F:F6:A6:6B:AB:A7 X509v3 Authority Key Identifier: keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/3_TF1Jd76sN3QxPbPepv9qZrq6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.170.0/24 194.153.171.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:1d:4e:22:2b:f5:2c:9c:f6:c6:51:29:6a:83:54:66:f1:81: bd:da:8e:2a:46:2d:96:ec:c9:ea:22:4c:fa:64:e3:ef:e0:92: d1:af:cc:ad:e4:1c:75:bd:f2:ba:c9:41:a7:f2:97:bc:8c:06: c0:cb:67:8b:30:26:28:15:3a:31:0c:fe:33:2b:e6:dd:37:62: fd:12:1f:d3:34:29:77:1a:d9:45:b3:08:e0:55:d9:bc:6e:45: ff:ea:92:c7:9a:3a:d2:9b:a2:0d:31:5a:01:cb:cb:07:44:c3: ca:ed:4a:fe:2d:59:4e:30:15:bd:4a:a0:b4:be:f7:cb:77:48: 91:7a:e1:7d:95:74:52:df:cb:09:5d:35:22:ff:53:4f:c3:80: 18:9b:7e:f2:2a:4a:57:d3:ed:c9:9b:2d:13:d0:05:3c:31:e5: 6c:b8:0e:35:a3:c8:e7:d5:5c:b1:d6:ed:ee:38:2e:1e:77:89: 4f:c9:17:1d:a5:2d:57:24:fc:4e:df:1e:a6:d8:3e:02:d3:c6: 14:98:1e:31:fc:d8:86:59:bc:3d:55:30:81:ed:0c:ef:fe:ae: f0:c9:74:60:13:a5:a0:3f:e8:83:d6:8d:65:1e:e0:05:04:29: 77:9c:66:32:97:50:18:2d:f4:ea:6b:03:71:e2:53:16:77:1b: d0:16:fd:90 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WPUs279aDRVdA71+9rk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTUwYjIzODJlMDBmYTdkZjE5NGU2NDg1ZmUxNDI1ODM2 MjEzZmYwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmY0YzVkNDk3N2JlYWMzNzc0MzEzZGIzZGVhNmZmNmE2NmJhYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsERtyzgGAUcG5U7WMztIBNAU0N5i 7/45ef3LaEFWYCl9UA4tbGX3LQ1KNrDaN6Eah+ir7JrQsHmhRF5j4hgw2N3w7WwE qu4T8ebi6uvla9MeGZHxM57xffaHOvh466vo8O1l3d1LY+bMOPZ9BE+Dobc56rfQ 9F0PjRVmDiN4sIVuEXhb/kQXTFJQKAe79kNKx7WLwzVLljEBZCRNoqk824dH1ZCp jE8mrlaeXAZA8d7rOuV7XkD+9iyT/776TZctYqi2w3YFyChZPcdjIlGMY79q9gNi MF6M6img5vqqU3hUdAPwIrVmItHPOfuAgzYrrpz/rnlV1mlMmw3NFL2d0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN/0xdSXe+rDd0MT2z3qb/ama6unMB8GA1UdIwQY MBaAFFNVCyOC4A+n3xlOZIX+FCWDYhP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNWJiNmItNjQyNS00NTNhLWI5NDIt ODljNTNkNjMwNzY1LzEvM19URjFKZDc2c04zUXhQYlBlcHY5cVpycTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNWJiNmItNjQyNS00NTNhLWI5NDItODljNTNkNjMwNzY1 LzEvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgmqAwQA wpmrMA0GCSqGSIb3DQEBCwUAA4IBAQBsHU4iK/UsnPbGUSlqg1Rm8YG92o4qRi2W 7MnqIkz6ZOPv4JLRr8yt5Bx1vfK6yUGn8pe8jAbAy2eLMCYoFToxDP4zK+bdN2L9 Eh/TNCl3GtlFswjgVdm8bkX/6pLHmjrSm6INMVoBy8sHRMPK7Ur+LVlOMBW9SqC0 vvfLd0iReuF9lXRS38sJXTUi/1NPw4AYm37yKkpX0+3Jmy0T0AU8MeVsuA41o8jn 1Vyx1u3uOC4ed4lPyRcdpS1XJPxO3x6m2D4C08YUmB4x/NiGWbw9VTCB7Qzv/q7w yXRgE6WgP+iD1o1lHuAFBCl3nGYyl1AYLfTqawNx4lMWdxvQFv2Q -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:21 2026 by rpki-client