This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/3vC4pYqybSvnyiv9AWSFuid8GOw.roa File: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (raw, json) Hash identifier: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ= Subject key identifier: DE:F0:B8:A5:8A:B2:6D:2B:E7:CA:2B:FD:01:64:85:BA:27:7C:18:EC Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454 Certificate serial: 019B76EB21107226CA36A4EB701396BD8E1E Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/3vC4pYqybSvnyiv9AWSFuid8GOw.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39319 IP address blocks: 94.199.224.0/21 maxlen: 21 185.47.72.0/22 maxlen: 22 2a00:ed8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:21:10:72:26:ca:36:a4:eb:70:13:96:bd:8e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454 Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=def0b8a58ab26d2be7ca2bfd016485ba277c18ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:0a:8f:45:50:51:08:37:5b:57:42:67:79: aa:1f:e1:42:29:24:c5:9e:55:5c:90:a0:87:61:20: 6c:8d:03:10:c6:3c:e4:50:0e:62:00:57:90:4e:d4: c1:52:14:ac:e4:9e:92:a7:6c:fb:bc:87:e6:09:26: 56:50:c4:e6:95:f7:be:ae:98:61:8c:d1:c3:91:ea: 20:c0:23:8f:42:c5:df:49:40:95:4b:6f:7a:ae:52: c2:5c:69:44:76:af:01:39:75:cd:70:1b:b2:1b:6e: c6:17:19:bb:91:e3:70:57:cc:68:62:ac:4d:03:26: f6:40:cf:0a:df:f2:f9:3a:e6:26:60:71:26:65:11: 7a:de:bd:69:3f:14:0c:f2:b2:41:f7:99:df:e1:e6: 39:e9:8e:34:a4:39:32:0d:47:2c:51:a5:83:89:4a: 1d:88:00:4e:a9:46:e7:c9:89:cc:92:ac:36:f0:ef: f5:99:64:f1:c6:fe:94:ad:57:79:99:1e:c5:7c:a4: 55:f3:97:59:fe:6b:7d:62:cd:2b:9f:8c:05:bd:e4: 52:90:18:ab:a4:5c:cc:76:1b:c5:73:ca:74:55:d1: 81:39:db:e6:24:9d:a9:d8:f4:eb:b0:d7:eb:60:79: 77:19:8f:fb:a0:d8:85:db:8b:3c:f0:76:54:13:1f: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F0:B8:A5:8A:B2:6D:2B:E7:CA:2B:FD:01:64:85:BA:27:7C:18:EC X509v3 Authority Key Identifier: keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/3vC4pYqybSvnyiv9AWSFuid8GOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.199.224.0/21 185.47.72.0/22 IPv6: 2a00:ed8::/32 Signature Algorithm: sha256WithRSAEncryption 41:d4:e5:5c:35:b7:3f:e6:ac:6c:0c:3d:a5:c9:ba:63:24:c2: a0:13:8d:8c:cb:b2:e8:2e:6d:3d:2e:c9:d4:20:2c:e4:38:a9: 8f:51:7f:06:f2:04:62:9a:ad:51:72:60:84:a6:48:3b:12:27: 2a:6b:9f:58:ba:58:bb:d6:67:2c:c5:2a:be:17:45:71:68:fc: 0d:5f:59:e0:63:25:cb:97:ee:02:50:37:97:c7:f3:bb:87:b3: 36:1e:ea:ff:88:a0:6d:25:10:fd:22:3f:46:10:1a:f6:f0:22: c4:d6:36:83:b6:89:a9:88:48:23:25:4f:b9:f1:2f:7f:67:ec: 95:e4:3d:32:d6:7c:7c:d9:ce:68:6c:87:28:ba:3d:86:b9:1e: e6:08:a6:f8:c2:af:b9:12:94:a4:03:7e:cd:29:1b:b4:ce:32: 85:54:da:9b:c3:80:e2:e4:2f:1c:53:45:98:88:ae:9f:da:b5: eb:8b:67:bb:a2:a8:4f:55:bd:a5:7e:b9:7d:a5:86:12:be:83: 5c:5d:24:89:bc:f5:01:a3:dc:a5:83:e5:97:ce:25:d5:fd:e7: 71:9d:e6:da:35:a3:c7:4c:12:ca:b2:96:14:a0:ca:1d:ed:dc: c2:3a:58:f0:fa:19:d1:dd:f7:6f:22:3b:ac:5c:9c:d1:88:7b: bc:3f:e0:aa -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt26yEQcibKNqTrcBOWvY4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTYxZTI5YzE2NmJmMDYzNWM4Y2VmZThkYTgyMTA0YTc4 M2I0NTQwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWYwYjhhNThhYjI2ZDJiZTdjYTJiZmQwMTY0ODViYTI3N2MxOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA198Kj0VQUQg3W1dCZ3mqH+FCKSTF nlVckKCHYSBsjQMQxjzkUA5iAFeQTtTBUhSs5J6Sp2z7vIfmCSZWUMTmlfe+rphh jNHDkeogwCOPQsXfSUCVS296rlLCXGlEdq8BOXXNcBuyG27GFxm7keNwV8xoYqxN Ayb2QM8K3/L5OuYmYHEmZRF63r1pPxQM8rJB95nf4eY56Y40pDkyDUcsUaWDiUod iABOqUbnyYnMkqw28O/1mWTxxv6UrVd5mR7FfKRV85dZ/mt9Ys0rn4wFveRSkBir pFzMdhvFc8p0VdGBOdvmJJ2p2PTrsNfrYHl3GY/7oNiF24s88HZUEx9vpQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFN7wuKWKsm0r58or/QFkhbonfBjsMB8GA1UdIwQY MBaAFPqmHinBZr8GNcjO/o2oIQSng7RUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xWWVLY0ZtdndZMXlNNy1qYWdoQktlRHRGUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTQ2NzFlLTg2ZDItNDJmYy04MGQ5 LTgyNWQzZmYxZGRlOC8xLzN2QzRwWXF5YlN2bnlpdjlBV1NGdWlkOEdPdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTkvMTQ2NzFlLTg2ZDItNDJmYy04MGQ5LTgyNWQzZmYxZGRl OC8xLzEtcVllS2NGbXZ3WTF5TTctamFnaEJLZUR0RlEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBANex+AD BAK5L0gwDQQCAAIwBwMFACoADtgwDQYJKoZIhvcNAQELBQADggEBAEHU5Vw1tz/m rGwMPaXJumMkwqATjYzLsugubT0uydQgLOQ4qY9RfwbyBGKarVFyYISmSDsSJypr n1i6WLvWZyzFKr4XRXFo/A1fWeBjJcuX7gJQN5fH87uHszYe6v+IoG0lEP0iP0YQ GvbwIsTWNoO2iamISCMlT7nxL39n7JXkPTLWfHzZzmhshyi6PYa5HuYIpvjCr7kS lKQDfs0pG7TOMoVU2pvDgOLkLxxTRZiIrp/ateuLZ7uiqE9VvaV+uX2lhhK+g1xd JIm89QGj3KWD5ZfOJdX953Gd5to1o8dMEsqylhSgyh3t3MI6WPD6GdHd928iO6xc nNGIe7w/4Ko= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:25 2026 by rpki-client