This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/3o9USRveK81MSe2kQ4zc3sxEt9w.roa File: 3o9USRveK81MSe2kQ4zc3sxEt9w.roa (raw, json) Hash identifier: IFKuL1PDKwNZHcGFxJk8ylaICmG+MyPGR58awe6xsGU= Subject key identifier: DE:8F:54:49:1B:DE:2B:CD:4C:49:ED:A4:43:8C:DC:DE:CC:44:B7:DC Certificate issuer: /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0 Certificate serial: 019B7BA3844049CEC1059902B6CFF4596BCD Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/3o9USRveK81MSe2kQ4zc3sxEt9w.roa Signing time: Thu 01 Jan 2026 22:17:52 +0000 ROA not before: Thu 01 Jan 2026 22:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.35.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:84:40:49:ce:c1:05:99:02:b6:cf:f4:59:6b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0 Validity Not Before: Jan 1 22:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de8f54491bde2bcd4c49eda4438cdcdecc44b7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:70:08:f0:36:2a:31:6c:3b:6c:f2:ab:7b: 46:05:5e:82:42:f3:6b:8d:3a:eb:66:c5:01:3c:d5: d0:1e:42:aa:d6:e0:7d:03:ab:e3:bb:af:99:18:2f: 15:f1:74:10:ed:30:9b:e6:15:03:9b:ba:11:ce:98: 0a:b6:15:43:84:00:f6:d2:77:2f:d1:a3:bb:3b:a0: 10:ae:b1:11:57:5a:36:16:1a:2d:f0:33:fb:dd:ab: 7d:2c:7f:d7:a4:85:59:9a:53:7f:a0:a6:30:8f:0f: af:86:39:fa:36:ce:5f:8d:0d:e5:36:fc:54:af:85: 85:a0:a4:ae:1c:3b:db:56:c3:20:f4:24:33:7f:d4: c6:ca:16:01:3c:cd:b4:7e:10:05:ed:10:fe:d1:79: a4:58:a6:99:ed:2f:9d:fb:0b:c1:64:2c:77:e6:0d: bd:03:f3:90:a1:71:c2:04:34:ff:16:ae:da:38:fa: ff:ce:c4:94:14:fb:d0:2f:51:56:5f:d4:8a:0a:61: c4:5a:7c:ac:7b:44:e1:ca:55:d6:00:6b:11:b3:4e: 31:6c:30:40:d1:89:fd:36:5a:fb:87:29:ae:56:2d: 3e:c1:07:ec:ba:28:47:30:62:61:d6:8f:92:1f:e3: 09:1a:82:f8:48:9a:c1:d1:50:5a:a6:9d:ad:dd:fa: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8F:54:49:1B:DE:2B:CD:4C:49:ED:A4:43:8C:DC:DE:CC:44:B7:DC X509v3 Authority Key Identifier: keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/3o9USRveK81MSe2kQ4zc3sxEt9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.35.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:a3:0d:38:72:28:c2:2a:10:ac:26:b0:a6:11:63:b8:1a:17: 16:a4:99:c4:7e:72:af:d1:5d:37:8f:95:c4:25:1f:d4:bf:fa: 44:13:52:75:8f:1a:cf:09:2f:5b:32:8d:57:9d:31:36:2b:8f: 70:87:87:6f:05:e0:7f:fd:b0:c7:31:7f:1d:cc:f1:d0:fd:79: 7f:d7:c2:f6:64:34:95:0c:57:d3:94:58:0d:a2:e6:df:a8:ec: 22:71:c1:9a:2c:c4:db:1f:b6:3b:36:4b:c4:a7:67:ec:16:aa: 1f:2c:94:3d:ce:fa:b4:db:c5:e5:bb:93:f2:dc:e4:c8:34:d4: 82:2e:0c:05:d1:74:0f:16:0a:fd:6d:46:02:64:62:9b:44:24: 7a:e4:2b:80:02:2e:f2:36:ef:8b:31:1c:f9:15:ec:05:6f:ff: 20:81:70:b0:b1:de:3b:03:d0:23:8b:1b:44:0f:56:3b:46:b1: c5:6b:95:4e:a7:61:ea:18:85:98:31:5c:a6:94:11:c0:0d:7f: 3a:f3:b8:a1:0c:44:e1:e9:73:c6:b0:2b:e3:86:4e:4e:79:5a: c1:73:ee:2c:b0:8f:aa:51:fd:a0:59:18:61:c5:a2:10:68:88: 23:8e:12:00:0e:ad:a9:e8:3d:04:6a:7a:7a:3e:97:a8:43:82: 1a:7a:83:bf -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7o4RASc7BBZkCts/0WWvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNTM3YTBjMGEzMzEwOTFiMzA3MjUzYzZmMDdlOGY4Mjg1 NGU2YjAwHhcNMjYwMTAxMjIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZThmNTQ0OTFiZGUyYmNkNGM0OWVkYTQ0MzhjZGNkZWNjNDRiN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuntwCPA2KjFsO2zyq3tGBV6CQvNr jTrrZsUBPNXQHkKq1uB9A6vju6+ZGC8V8XQQ7TCb5hUDm7oRzpgKthVDhAD20ncv 0aO7O6AQrrERV1o2Fhot8DP73at9LH/XpIVZmlN/oKYwjw+vhjn6Ns5fjQ3lNvxU r4WFoKSuHDvbVsMg9CQzf9TGyhYBPM20fhAF7RD+0XmkWKaZ7S+d+wvBZCx35g29 A/OQoXHCBDT/Fq7aOPr/zsSUFPvQL1FWX9SKCmHEWnyse0ThylXWAGsRs04xbDBA 0Yn9Nlr7hymuVi0+wQfsuihHMGJh1o+SH+MJGoL4SJrB0VBapp2t3fopBwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFN6PVEkb3ivNTEntpEOM3N7MRLfcMB8GA1UdIwQY MBaAFBpTegwKMxCRswclPG8H6PgoVOawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xONkRBb3pFSkd6QnlVOGJ3Zm8tQ2hVNXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80NjE2OWYtY2Y5NC00ZDFiLWIyZDct NzIxMjUyOTdhZjI4LzEvM285VVNSdmVLODFNU2Uya1E0emMzc3hFdDl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80NjE2OWYtY2Y5NC00ZDFiLWIyZDctNzIxMjUyOTdhZjI4 LzEvR2xONkRBb3pFSkd6QnlVOGJ3Zm8tQ2hVNXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjSMwDQYJ KoZIhvcNAQELBQADggEBAASjDThyKMIqEKwmsKYRY7gaFxakmcR+cq/RXTePlcQl H9S/+kQTUnWPGs8JL1syjVedMTYrj3CHh28F4H/9sMcxfx3M8dD9eX/XwvZkNJUM V9OUWA2i5t+o7CJxwZosxNsftjs2S8SnZ+wWqh8slD3O+rTbxeW7k/Lc5Mg01IIu DAXRdA8WCv1tRgJkYptEJHrkK4ACLvI274sxHPkV7AVv/yCBcLCx3jsD0COLG0QP VjtGscVrlU6nYeoYhZgxXKaUEcANfzrzuKEMROHpc8awK+OGTk55WsFz7iywj6pR /aBZGGHFohBoiCOOEgAOranoPQRqeno+l6hDghp6g78= -----END CERTIFICATE-----Generated at Tue Jan 27 11:27:36 2026 by rpki-client