This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/K3dVJzjb4UxWNn2q6SzagSp02Oo.roa File: K3dVJzjb4UxWNn2q6SzagSp02Oo.roa (raw, json) Hash identifier: vSuxNcyOp/bZV6+vMViNTDz5yQOhdkZ3pxgYsBeSdRw= Subject key identifier: 2B:77:55:27:38:DB:E1:4C:56:36:7D:AA:E9:2C:DA:81:2A:74:D8:EA Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e Certificate serial: 019B775915444B9DC6D3B4746F51A54FDC58 Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/K3dVJzjb4UxWNn2q6SzagSp02Oo.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42856 IP address blocks: 193.200.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:15:44:4b:9d:c6:d3:b4:74:6f:51:a5:4f:dc:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b77552738dbe14c56367daae92cda812a74d8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:e0:68:da:56:a7:2e:9e:e5:27:f1:4e:c3: 3e:0b:51:03:e6:b8:5d:06:b3:cb:df:5c:7d:c3:9d: 27:4a:cd:2b:6a:20:9a:1e:d6:c8:93:d8:e6:30:1d: 7f:84:81:9e:f6:1e:01:3d:42:e3:bb:e0:97:c9:bd: 66:85:b9:79:b3:fa:61:b0:d5:44:75:60:ae:f4:95: 14:f9:c5:f2:9e:b0:44:d4:1e:c0:2b:e2:19:a7:79: a7:73:53:5e:b9:6d:c1:86:01:4f:b8:8d:b7:d8:a0: 03:48:db:f1:20:86:9b:d8:e8:e4:b1:50:11:4f:c9: 40:14:ce:14:a9:e1:5a:3c:2a:69:50:19:45:13:63: 0d:de:df:12:f7:77:eb:65:af:9f:7c:1c:c3:20:7e: 45:9f:ce:60:58:30:87:78:b8:9f:8d:2d:fb:79:08: b0:9d:f9:33:ad:80:f1:9a:ca:04:ca:36:33:84:c7: 47:e8:6f:c9:a3:b0:4c:aa:f4:a3:77:30:e2:97:2e: ac:b5:d1:71:de:b7:ee:a9:4b:1d:d3:d2:78:3e:cb: a7:4a:2b:72:fc:57:ae:30:1f:57:cb:d8:6b:50:42: 7f:40:e4:2f:c4:75:69:28:f5:a3:ed:45:9a:c2:f2: 8a:4d:dc:27:a8:11:d2:82:c0:51:c1:e6:39:9a:96: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:77:55:27:38:DB:E1:4C:56:36:7D:AA:E9:2C:DA:81:2A:74:D8:EA X509v3 Authority Key Identifier: keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/K3dVJzjb4UxWNn2q6SzagSp02Oo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.137.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:47:f6:df:39:6d:2e:a8:0f:38:9a:f4:48:5c:d4:09:19:a6: 70:88:7d:70:55:8e:ca:a9:1f:8d:ac:e9:f2:d9:a7:20:40:2d: 3d:87:47:07:cf:08:40:c2:5c:91:d9:2d:89:40:27:d5:80:f2: 0b:2d:49:6c:a4:49:fa:e7:ef:c8:86:66:15:c0:27:42:a3:a5: 73:aa:53:e1:ab:2a:ad:50:d6:5c:c3:61:e4:4a:3a:38:07:cd: 76:4a:3e:52:2f:1d:d1:c4:47:4f:83:52:a1:a1:b4:4e:56:ac: 17:0d:81:c0:14:5b:9f:e0:b8:12:ed:a6:04:ec:ec:68:99:88: c2:49:24:30:74:d9:9c:04:28:d9:42:49:df:04:c6:88:57:28: 9b:4f:54:b5:98:4e:6e:14:32:1d:f1:29:b5:96:94:19:00:e8: 2f:bf:bc:ad:c9:7a:2c:7f:8a:69:01:99:f8:9c:6a:4e:40:5e: 61:14:52:49:09:c4:ec:9e:a5:af:fc:7d:cd:f0:99:3c:63:70: 2d:93:4a:db:0c:01:e6:ab:a6:4e:6a:97:16:9f:da:8b:b4:5c: 19:5e:3c:01:ba:c9:be:86:2d:0d:25:3d:c7:5d:6f:f7:e4:85: fe:cd:e8:1b:48:3c:d6:de:4c:c4:c6:5d:cb:9a:04:d5:6f:53: 0c:bc:56:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRVES53G07R0b1GlT9xYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjNhNDdlY2JmY2ZhYTlmNmNmZWNlMjYxNGM3MGU4YjVh ZGI4M2UwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjc3NTUyNzM4ZGJlMTRjNTYzNjdkYWFlOTJjZGE4MTJhNzRkOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwDgaNpWpy6e5SfxTsM+C1ED5rhd BrPL31x9w50nSs0raiCaHtbIk9jmMB1/hIGe9h4BPULju+CXyb1mhbl5s/phsNVE dWCu9JUU+cXynrBE1B7AK+IZp3mnc1NeuW3BhgFPuI232KADSNvxIIab2OjksVAR T8lAFM4UqeFaPCppUBlFE2MN3t8S93frZa+ffBzDIH5Fn85gWDCHeLifjS37eQiw nfkzrYDxmsoEyjYzhMdH6G/Jo7BMqvSjdzDily6stdFx3rfuqUsd09J4PsunSity /FeuMB9Xy9hrUEJ/QOQvxHVpKPWj7UWawvKKTdwnqBHSgsBRweY5mpYUUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCt3VSc42+FMVjZ9quks2oEqdNjqMB8GA1UdIwQY MBaAFB5jpH7L/Pqp9s/s4mFMcOi1rbg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YTk2YmUtZmJlYi00NTgwLThiYWEt MzU1YjVjZDVkOTcxLzEvSzNkVkp6amI0VXhXTm4ycTZTemFnU3AwMk9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YTk2YmUtZmJlYi00NTgwLThiYWEtMzU1YjVjZDVkOTcx LzEvSG1Pa2ZzdjgtcW4yei16aVlVeHc2TFd0dUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwciJMA0G CSqGSIb3DQEBCwUAA4IBAQBuR/bfOW0uqA84mvRIXNQJGaZwiH1wVY7KqR+NrOny 2acgQC09h0cHzwhAwlyR2S2JQCfVgPILLUlspEn65+/IhmYVwCdCo6VzqlPhqyqt UNZcw2HkSjo4B812Sj5SLx3RxEdPg1KhobROVqwXDYHAFFuf4LgS7aYE7OxomYjC SSQwdNmcBCjZQknfBMaIVyibT1S1mE5uFDId8Sm1lpQZAOgvv7ytyXosf4ppAZn4 nGpOQF5hFFJJCcTsnqWv/H3N8Jk8Y3Atk0rbDAHmq6ZOapcWn9qLtFwZXjwBusm+ hi0NJT3HXW/35IX+zegbSDzW3kzExl3LmgTVb1MMvFbg -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:35 2026 by rpki-client