This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/3Ntb8637r4izsCpVwd5gcAHqdG4.roa File: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (raw, json) Hash identifier: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE= Subject key identifier: DC:DB:5B:F3:AD:FB:AF:88:B3:B0:2A:55:C1:DE:60:70:01:EA:74:6E Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Certificate serial: 019B797F0A22321AC0A5CDE7D1041CDF9AAC Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/3Ntb8637r4izsCpVwd5gcAHqdG4.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3598 IP address blocks: 194.69.96.0/19 maxlen: 19 194.69.100.0/22 maxlen: 24 2a01:110::/32 maxlen: 32 2a01:110:8020::/48 maxlen: 48 2a01:110:8068::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0a:22:32:1a:c0:a5:cd:e7:d1:04:1c:df:9a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcdb5bf3adfbaf88b3b02a55c1de607001ea746e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:c5:26:88:e4:b4:f3:e3:da:1d:2d:a1:54: b5:b3:17:c9:f3:a2:1a:60:23:70:10:dd:71:f4:e5: 25:81:f7:b9:26:cd:1d:87:b5:dd:d1:72:01:23:95: 80:02:f8:ea:85:c2:da:99:c4:a8:19:c2:a0:5a:90: 25:21:b9:90:56:d9:6f:59:22:1c:9c:29:52:33:f1: e6:7f:87:53:84:c4:cb:ae:dd:0f:aa:64:82:1a:18: b9:9b:d7:81:80:07:39:4e:53:d1:a7:89:ab:a5:5e: 09:90:53:ef:8a:44:a9:61:cb:f1:f7:82:1e:30:e4: 10:d8:96:51:a3:d0:a7:b0:17:cd:00:cf:74:a5:af: ec:03:60:81:86:91:45:2f:54:87:bd:e7:6e:9b:5e: 4f:ff:72:96:d7:51:63:93:1f:04:ee:42:21:14:90: af:92:27:b4:e6:c0:c4:ca:85:90:ca:18:bb:da:25: 76:6c:aa:58:5a:7c:1b:f2:69:ef:53:c3:d6:8a:6c: c9:c0:ad:aa:19:24:ac:27:87:fa:c5:7d:ee:6b:c2: b8:bb:81:2c:87:3c:49:83:a4:ec:ea:da:70:fb:f3: 0c:53:f3:54:7e:19:f1:9e:b5:f1:8e:ce:f9:a1:70: 1d:59:63:b5:96:f9:53:9a:e2:aa:35:aa:aa:3e:13: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DB:5B:F3:AD:FB:AF:88:B3:B0:2A:55:C1:DE:60:70:01:EA:74:6E X509v3 Authority Key Identifier: keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/3Ntb8637r4izsCpVwd5gcAHqdG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.69.96.0/19 IPv6: 2a01:110::/32 Signature Algorithm: sha256WithRSAEncryption 9e:49:1d:78:f1:83:81:1c:23:ba:9e:81:4c:7c:51:c6:08:59: c1:fc:c8:c8:c6:4e:ef:f0:ea:05:c7:b6:6d:f5:51:ca:f5:69: 8c:f5:a1:59:c5:08:7c:7d:05:e5:fc:95:ad:b3:ad:79:7d:19: 0d:65:4a:24:05:98:d0:3c:26:6e:45:0b:01:16:70:78:51:85: 8d:55:d3:8b:ff:aa:3d:8d:df:d1:36:69:16:d4:ee:ef:45:71: 00:76:64:33:13:21:d5:13:24:7d:bf:91:33:f4:ee:5f:c3:62: 79:8f:66:f3:8a:96:09:b2:51:cd:26:5d:55:3c:5e:35:26:62: 48:c1:3d:6b:31:3b:fe:d2:a3:f6:9c:e8:f8:7d:0d:b9:00:78: 9a:a9:26:f3:b1:f6:a0:05:70:72:1c:ef:f0:a6:d1:cf:56:3e: 9a:78:5a:4b:16:17:00:56:b6:3c:dd:d5:d8:b6:d1:99:f8:60: 63:df:63:9e:dc:65:cc:67:90:67:f7:6f:d0:7c:1f:45:a2:a0: ee:3e:97:a1:20:fe:04:86:8b:02:f9:40:71:d1:56:e4:b7:52: 31:39:40:2d:e6:c0:3d:8f:00:9f:e6:b3:c6:31:f8:6e:4f:f2: 56:2e:d4:a8:38:82:b0:b0:8c:11:c9:a8:c4:ca:36:e2:45:b3: d6:7f:9b:66 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fwoiMhrApc3n0QQc35qsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1 YjhmY2IwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2RiNWJmM2FkZmJhZjg4YjNiMDJhNTVjMWRlNjA3MDAxZWE3NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgvFJojktPPj2h0toVS1sxfJ86Ia YCNwEN1x9OUlgfe5Js0dh7Xd0XIBI5WAAvjqhcLamcSoGcKgWpAlIbmQVtlvWSIc nClSM/Hmf4dThMTLrt0PqmSCGhi5m9eBgAc5TlPRp4mrpV4JkFPvikSpYcvx94Ie MOQQ2JZRo9CnsBfNAM90pa/sA2CBhpFFL1SHvedum15P/3KW11Fjkx8E7kIhFJCv kie05sDEyoWQyhi72iV2bKpYWnwb8mnvU8PWimzJwK2qGSSsJ4f6xX3ua8K4u4Es hzxJg6Ts6tpw+/MMU/NUfhnxnrXxjs75oXAdWWO1lvlTmuKqNaqqPhP2VwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNzbW/Ot+6+Is7AqVcHeYHAB6nRuMB8GA1UdIwQY MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt MTNhMDZhMjY5YWE4LzEvM050Yjg2MzdyNGl6c0NwVndkNWdjQUhxZEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4 LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFwkVgMA0E AgACMAcDBQAqAQEQMA0GCSqGSIb3DQEBCwUAA4IBAQCeSR148YOBHCO6noFMfFHG CFnB/MjIxk7v8OoFx7Zt9VHK9WmM9aFZxQh8fQXl/JWts615fRkNZUokBZjQPCZu RQsBFnB4UYWNVdOL/6o9jd/RNmkW1O7vRXEAdmQzEyHVEyR9v5Ez9O5fw2J5j2bz ipYJslHNJl1VPF41JmJIwT1rMTv+0qP2nOj4fQ25AHiaqSbzsfagBXByHO/wptHP Vj6aeFpLFhcAVrY83dXYttGZ+GBj32Oe3GXMZ5Bn92/QfB9FoqDuPpehIP4EhosC +UBx0Vbkt1IxOUAt5sA9jwCf5rPGMfhuT/JWLtSoOIKwsIwRyajEyjbiRbPWf5tm -----END CERTIFICATE-----Generated at Sun Jan 18 17:57:34 2026 by rpki-client