This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/s-3ruvcKud9U7370JDBXzcGQZys.roa File: s-3ruvcKud9U7370JDBXzcGQZys.roa (raw, json) Hash identifier: tCp7O7pXDtx/sN3JpkwD8B4anvePfCGURA3ahQrQX/8= Subject key identifier: B3:ED:EB:BA:F7:0A:B9:DF:54:EF:7E:F4:24:30:57:CD:C1:90:67:2B Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B7DCAE21DD1769500DC129C74F5C1817A Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/s-3ruvcKud9U7370JDBXzcGQZys.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154049 IP address blocks: 87.254.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e2:1d:d1:76:95:00:dc:12:9c:74:f5:c1:81:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3edebbaf70ab9df54ef7ef4243057cdc190672b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:15:6e:9b:d5:a9:8b:9e:38:ca:1a:fc:bd:dc: b4:fa:10:d7:67:90:39:c9:85:fc:04:0c:8e:ae:6a: fc:ab:a6:f7:3b:c9:a2:8e:c8:92:1d:9d:29:14:84: 20:1d:6c:81:71:b3:84:fb:f7:1f:c7:ce:72:68:44: 73:09:47:51:96:02:8b:ec:d8:5b:d6:7c:16:8c:7e: bf:b5:6c:85:38:84:50:19:dc:c7:ee:84:43:f7:bd: 39:68:1d:54:de:96:f7:f6:bc:02:95:d0:65:8d:dc: 0c:61:ee:ae:30:ee:bb:70:76:79:a9:6e:1f:f4:7c: 96:90:87:cc:3c:b7:cb:cb:07:57:3d:fc:70:dd:2d: 64:4b:f2:78:15:d2:e9:be:2b:4b:55:71:c5:09:1d: e2:fa:26:42:0b:8c:0c:77:01:36:da:ab:ac:17:ee: ae:06:b9:94:5f:b2:ed:1b:88:47:ce:12:cc:da:74: 92:f8:bd:fd:69:eb:e2:a2:f9:03:03:e8:ca:34:e4: dc:51:97:60:11:78:49:b6:a3:db:47:86:dd:ce:b1: 5e:fa:c2:93:06:aa:01:7f:6d:38:42:5e:88:00:01: f8:87:6f:84:63:85:5d:3d:83:fd:2f:5d:36:d1:c1: bf:5c:ef:2a:b1:38:40:32:db:74:31:68:ae:21:58: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:ED:EB:BA:F7:0A:B9:DF:54:EF:7E:F4:24:30:57:CD:C1:90:67:2B X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/s-3ruvcKud9U7370JDBXzcGQZys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.9.0/24 Signature Algorithm: sha256WithRSAEncryption 05:06:99:5a:db:2a:1b:9f:c9:47:e7:8d:3d:25:7e:d3:16:4b: 82:55:ac:02:80:79:4b:b4:5b:c6:75:01:2c:1f:52:96:54:2e: 9f:30:69:94:8b:0d:f7:34:f8:2a:04:c6:77:2f:da:f3:43:4b: cb:53:c0:77:b0:7e:ad:9a:07:d0:27:af:43:3f:e6:92:31:ab: 59:72:56:9e:94:53:a8:2e:30:56:b9:4d:04:ac:fb:9a:9d:10: b0:b6:13:6d:b2:c1:0a:09:9f:22:9c:f1:fa:3b:7c:dc:40:ba: 6c:60:c9:b1:5f:de:1e:b8:86:79:63:54:83:4f:a0:08:b9:7b: d7:73:90:1f:29:1a:55:a1:06:69:fb:08:96:c7:13:90:2f:41: 7c:be:3a:71:ce:ce:d9:91:57:d5:1c:1e:23:23:01:1a:ce:8b: 85:9c:57:f5:29:7b:49:61:af:c2:37:78:4c:34:91:4b:be:19: 4f:4b:66:df:c7:a6:76:2f:59:50:98:84:a1:b5:bd:e7:9f:32: 53:97:5d:3e:17:fc:3b:f4:6a:04:c0:0d:f9:ff:92:9c:65:3e: d8:8f:21:40:31:69:66:41:b6:61:4c:76:b1:12:71:17:94:dc: dc:14:93:ed:e9:a6:f7:d1:13:2e:43:bd:3f:5c:9b:dc:0e:35: 89:f1:4f:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yuId0XaVANwSnHT1wYF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2VkZWJiYWY3MGFiOWRmNTRlZjdlZjQyNDMwNTdjZGMxOTA2NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xVum9Wpi544yhr8vdy0+hDXZ5A5 yYX8BAyOrmr8q6b3O8mijsiSHZ0pFIQgHWyBcbOE+/cfx85yaERzCUdRlgKL7Nhb 1nwWjH6/tWyFOIRQGdzH7oRD9705aB1U3pb39rwCldBljdwMYe6uMO67cHZ5qW4f 9HyWkIfMPLfLywdXPfxw3S1kS/J4FdLpvitLVXHFCR3i+iZCC4wMdwE22qusF+6u BrmUX7LtG4hHzhLM2nSS+L39aeviovkDA+jKNOTcUZdgEXhJtqPbR4bdzrFe+sKT BqoBf204Ql6IAAH4h2+EY4VdPYP9L1020cG/XO8qsThAMtt0MWiuIVib5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLPt67r3CrnfVO9+9CQwV83BkGcrMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvcy0zcnV2Y0t1ZDlVNzM3MEpEQlh6Y0dRWnlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/4JMA0G CSqGSIb3DQEBCwUAA4IBAQAFBpla2yobn8lH5409JX7TFkuCVawCgHlLtFvGdQEs H1KWVC6fMGmUiw33NPgqBMZ3L9rzQ0vLU8B3sH6tmgfQJ69DP+aSMatZclaelFOo LjBWuU0ErPuanRCwthNtssEKCZ8inPH6O3zcQLpsYMmxX94euIZ5Y1SDT6AIuXvX c5AfKRpVoQZp+wiWxxOQL0F8vjpxzs7ZkVfVHB4jIwEazouFnFf1KXtJYa/CN3hM NJFLvhlPS2bfx6Z2L1lQmIShtb3nnzJTl10+F/w79GoEwA35/5KcZT7YjyFAMWlm QbZhTHaxEnEXlNzcFJPt6ab30RMuQ70/XJvcDjWJ8U+b -----END CERTIFICATE-----Generated at Fri Jan 9 23:45:02 2026 by rpki-client