This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/g3yb9GvnR-4yvkFxTiRQRjASrNM.roa File: g3yb9GvnR-4yvkFxTiRQRjASrNM.roa (raw, json) Hash identifier: IRUvAUHV7ruHaa7xmQq2ksFvesViZHulW4HJ9YDCukA= Subject key identifier: 83:7C:9B:F4:6B:E7:47:EE:32:BE:41:71:4E:24:50:46:30:12:AC:D3 Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb Certificate serial: 019B7EA67B1B99E0CD8ADE1102DC7EAF599E Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/g3yb9GvnR-4yvkFxTiRQRjASrNM.roa Signing time: Fri 02 Jan 2026 12:19:58 +0000 ROA not before: Fri 02 Jan 2026 12:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47381 IP address blocks: 193.28.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:7b:1b:99:e0:cd:8a:de:11:02:dc:7e:af:59:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1171641f157cb57b532626359e71582742c2dccb Validity Not Before: Jan 2 12:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=837c9bf46be747ee32be41714e2450463012acd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:39:de:16:c5:b1:51:58:c7:6d:b6:dd:de: 0c:29:42:cd:5d:52:6e:d0:cd:9e:09:44:49:7a:ec: 93:8d:40:2b:60:6b:40:c8:cc:03:66:5d:97:26:16: 59:e1:42:2c:f9:33:a4:65:4c:86:80:8d:4e:6c:de: 7b:d3:9a:45:e3:bc:d7:49:e4:d9:49:36:b2:98:8d: a6:46:3e:28:ff:37:9b:82:ae:a5:55:84:e5:7b:4e: 36:2c:e0:77:aa:8e:c7:06:6f:2e:0d:cb:7f:e2:54: 1f:f7:85:93:f2:e7:02:90:40:0b:f1:b7:82:29:72: d8:52:ed:09:42:4c:6d:25:fe:2f:8b:ff:cb:f7:ad: a9:f2:8b:2a:ca:12:25:d8:e8:c8:48:2b:fc:c1:36: 03:0f:31:89:8a:b0:f6:a1:a5:6a:8d:63:3c:3a:61: 95:51:b0:61:af:46:27:3b:96:31:9d:13:69:6f:f2: e9:fe:ec:5f:ca:42:77:c0:a7:25:60:73:9c:43:98: c2:ec:52:b8:0f:b5:34:78:8b:bf:4c:91:d0:65:c1: 16:98:db:eb:c6:69:83:4e:e4:a0:d2:f2:01:20:80: 7d:92:c3:26:e4:d2:81:63:0e:69:1b:89:98:85:cd: ed:27:3c:9c:54:c4:1e:2e:49:99:fc:df:bd:15:7a: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7C:9B:F4:6B:E7:47:EE:32:BE:41:71:4E:24:50:46:30:12:AC:D3 X509v3 Authority Key Identifier: keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/g3yb9GvnR-4yvkFxTiRQRjASrNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.86.0/24 Signature Algorithm: sha256WithRSAEncryption 21:15:7b:1a:3c:cc:bb:20:1b:99:ff:26:f2:be:dd:18:5e:08: 74:12:f2:3e:26:a5:8c:7e:7f:e4:2a:df:1d:5a:bb:c9:c1:15: 06:a2:f4:8e:7d:b6:90:2f:44:75:d4:33:3e:c7:96:3e:c3:b0: d0:4c:df:96:53:c1:f5:be:28:07:60:55:32:af:cb:92:9c:a5: a6:37:a4:1d:97:f5:77:b7:a7:fe:59:a5:7e:6f:74:e5:22:6d: 68:9d:be:d9:28:58:41:ae:3f:39:ae:48:14:43:33:05:2a:fd: e8:51:a4:92:da:d8:6f:16:cf:84:de:65:73:11:c1:e4:3f:87: 6e:81:9b:d8:ee:b0:66:c7:10:eb:08:db:65:42:d9:48:82:24: b5:23:d9:bf:cf:88:98:bf:1c:4b:41:2d:ba:58:5b:28:03:44: 02:c9:2e:62:aa:34:40:18:55:0b:12:21:c6:c2:9b:44:80:9a: 98:ed:2a:79:30:2f:81:e9:5e:e9:2f:e0:f4:bd:1e:ae:30:02: 6d:21:ea:82:9a:bc:ba:44:57:59:9c:1e:5d:33:b1:ff:c3:14: f4:bb:d3:71:35:b0:70:46:41:e0:f2:23:eb:ca:47:65:bb:42: 60:9e:ef:0d:3a:e1:99:bc:60:a1:57:d9:99:6e:f7:f2:96:b9: 3c:a9:28:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pnsbmeDNit4RAtx+r1meMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNzE2NDFmMTU3Y2I1N2I1MzI2MjYzNTllNzE1ODI3NDJj MmRjY2IwHhcNMjYwMTAyMTIxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzdjOWJmNDZiZTc0N2VlMzJiZTQxNzE0ZTI0NTA0NjMwMTJhY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbo53hbFsVFYx2223d4MKULNXVJu 0M2eCURJeuyTjUArYGtAyMwDZl2XJhZZ4UIs+TOkZUyGgI1ObN5705pF47zXSeTZ STaymI2mRj4o/zebgq6lVYTle042LOB3qo7HBm8uDct/4lQf94WT8ucCkEAL8beC KXLYUu0JQkxtJf4vi//L962p8osqyhIl2OjISCv8wTYDDzGJirD2oaVqjWM8OmGV UbBhr0YnO5YxnRNpb/Lp/uxfykJ3wKclYHOcQ5jC7FK4D7U0eIu/TJHQZcEWmNvr xmmDTuSg0vIBIIB9ksMm5NKBYw5pG4mYhc3tJzycVMQeLkmZ/N+9FXpiDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIN8m/Rr50fuMr5BcU4kUEYwEqzTMB8GA1UdIwQY MBaAFBFxZB8VfLV7UyYmNZ5xWCdCwtzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzIt M2NiOWUxMDJhZmUwLzEvZzN5YjlHdm5SLTR5dmtGeFRpUlFSakFTck5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzItM2NiOWUxMDJhZmUw LzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRxWMA0G CSqGSIb3DQEBCwUAA4IBAQAhFXsaPMy7IBuZ/ybyvt0YXgh0EvI+JqWMfn/kKt8d WrvJwRUGovSOfbaQL0R11DM+x5Y+w7DQTN+WU8H1vigHYFUyr8uSnKWmN6Qdl/V3 t6f+WaV+b3TlIm1onb7ZKFhBrj85rkgUQzMFKv3oUaSS2thvFs+E3mVzEcHkP4du gZvY7rBmxxDrCNtlQtlIgiS1I9m/z4iYvxxLQS26WFsoA0QCyS5iqjRAGFULEiHG wptEgJqY7Sp5MC+B6V7pL+D0vR6uMAJtIeqCmry6RFdZnB5dM7H/wxT0u9NxNbBw RkHg8iPrykdlu0Jgnu8NOuGZvGChV9mZbvfylrk8qSgi -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:03 2026 by rpki-client