This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/3GkC4alpDAvrmyyfcuXDAMj59Ng.roa File: 3GkC4alpDAvrmyyfcuXDAMj59Ng.roa (raw, json) Hash identifier: m2jng52J8d+SYelIcZHf8/G6o3/K/EOSsyHZ2TT8VOM= Subject key identifier: DC:69:02:E1:A9:69:0C:0B:EB:9B:2C:9F:72:E5:C3:00:C8:F9:F4:D8 Certificate issuer: /CN=ca01df493936a62e2ec9a9805a8fa36b8335bd50 Certificate serial: 019B7CEDA8017DC0400F00C35B9648387C36 Authority key identifier: CA:01:DF:49:39:36:A6:2E:2E:C9:A9:80:5A:8F:A3:6B:83:35:BD:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygHfSTk2pi4uyamAWo-ja4M1vVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/3GkC4alpDAvrmyyfcuXDAMj59Ng.roa Signing time: Fri 02 Jan 2026 04:18:28 +0000 ROA not before: Fri 02 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56407 IP address blocks: 188.190.128.0/21 maxlen: 21 188.190.136.0/21 maxlen: 21 188.190.144.0/21 maxlen: 21 188.190.152.0/22 maxlen: 22 188.190.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ygHfSTk2pi4uyamAWo-ja4M1vVA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ygHfSTk2pi4uyamAWo-ja4M1vVA.mft rsync://rpki.ripe.net/repository/DEFAULT/ygHfSTk2pi4uyamAWo-ja4M1vVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a8:01:7d:c0:40:0f:00:c3:5b:96:48:38:7c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca01df493936a62e2ec9a9805a8fa36b8335bd50 Validity Not Before: Jan 2 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc6902e1a9690c0beb9b2c9f72e5c300c8f9f4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:30:71:0c:c6:fa:24:d5:8b:72:37:e3:b5: 95:06:ce:8d:c4:fb:86:87:77:6c:82:6d:75:34:72: e7:77:9c:13:d3:14:21:8e:d2:6c:14:eb:4b:e2:77: b5:94:76:43:d4:10:38:ef:43:c2:8f:b8:7f:1b:aa: dc:d9:71:1e:fa:c4:31:a0:bd:01:8a:30:42:f7:7a: 7c:f4:11:93:83:25:a7:f4:d5:02:51:81:34:32:17: 15:be:21:63:f6:c9:fa:67:a8:ff:94:25:68:49:19: 0e:e1:25:d3:ff:70:c2:2c:82:62:68:50:e8:7a:18: aa:fc:39:d0:ad:6e:37:a4:99:f2:cb:66:7c:7f:a4: d1:9f:57:a3:ed:d9:cf:01:79:3b:16:3d:51:5b:02: e9:08:4f:ff:e1:49:88:77:83:6b:00:f2:8d:94:6c: eb:0f:ec:7d:07:d0:ad:83:39:ad:5f:8b:52:0c:10: db:93:6e:9a:f4:c1:79:e4:83:f5:05:fd:57:d1:ce: 0e:00:3d:96:e0:c2:68:b2:f0:92:4c:ef:44:af:6b: bd:02:d4:d8:12:ba:ea:2d:5b:96:97:0c:ec:52:9e: cd:6a:5a:b5:a8:0a:dd:9c:dc:42:d3:20:0e:cd:77: 54:6c:72:7e:ac:fe:4a:39:73:ba:2d:1b:5f:f0:c2: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:69:02:E1:A9:69:0C:0B:EB:9B:2C:9F:72:E5:C3:00:C8:F9:F4:D8 X509v3 Authority Key Identifier: keyid:CA:01:DF:49:39:36:A6:2E:2E:C9:A9:80:5A:8F:A3:6B:83:35:BD:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygHfSTk2pi4uyamAWo-ja4M1vVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/3GkC4alpDAvrmyyfcuXDAMj59Ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ygHfSTk2pi4uyamAWo-ja4M1vVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.190.128.0/19 Signature Algorithm: sha256WithRSAEncryption c3:bd:a0:0e:bc:74:8a:5d:49:a1:d4:ec:70:a1:ac:45:28:9d: 81:8c:8f:c8:87:aa:b0:88:27:6a:00:60:2e:89:db:ba:e7:85: e7:97:c8:07:1e:74:d0:06:10:6d:81:d1:c2:69:84:86:9d:c3: 7f:32:a4:9c:8b:bd:f7:84:13:77:1e:b1:57:f1:fa:21:06:d8: 34:80:cb:9b:c0:a6:3c:ca:4c:5b:00:a2:a4:e9:a3:73:18:f5: 23:c2:48:ac:af:bd:b2:7e:6e:78:b6:d8:61:d2:d9:1f:26:90: bd:68:19:e9:bb:23:bd:c9:8d:3f:58:81:e2:f4:70:56:22:b1: 7f:80:9a:7c:58:2b:49:a9:c0:8d:4e:55:4a:ce:a9:29:86:83: cb:60:cf:dd:b3:de:9b:52:f4:80:64:0d:5b:48:4e:84:ad:e8: 25:c6:fa:41:d6:97:da:21:54:aa:9f:72:8e:51:36:87:cf:aa: ee:eb:0c:70:41:37:dd:6c:73:92:99:0f:98:b7:42:17:a1:fb: 91:2e:80:ab:2d:4e:c2:25:1a:69:1d:69:09:7d:1c:d9:cf:ec: 1a:59:09:ba:0c:22:ca:d4:78:e5:4a:db:d1:ad:8f:ee:5b:1c: f8:09:af:77:02:76:21:d0:54:50:af:c4:a2:47:6c:1d:0b:1b: 3b:ad:34:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87agBfcBADwDDW5ZIOHw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMDFkZjQ5MzkzNmE2MmUyZWM5YTk4MDVhOGZhMzZiODMz NWJkNTAwHhcNMjYwMTAyMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzY5MDJlMWE5NjkwYzBiZWI5YjJjOWY3MmU1YzMwMGM4ZjlmNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfswcQzG+iTVi3I347WVBs6NxPuG h3dsgm11NHLnd5wT0xQhjtJsFOtL4ne1lHZD1BA470PCj7h/G6rc2XEe+sQxoL0B ijBC93p89BGTgyWn9NUCUYE0MhcVviFj9sn6Z6j/lCVoSRkO4SXT/3DCLIJiaFDo ehiq/DnQrW43pJnyy2Z8f6TRn1ej7dnPAXk7Fj1RWwLpCE//4UmId4NrAPKNlGzr D+x9B9CtgzmtX4tSDBDbk26a9MF55IP1Bf1X0c4OAD2W4MJosvCSTO9Er2u9AtTY ErrqLVuWlwzsUp7Nalq1qArdnNxC0yAOzXdUbHJ+rP5KOXO6LRtf8MJT4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxpAuGpaQwL65ssn3LlwwDI+fTYMB8GA1UdIwQY MBaAFMoB30k5NqYuLsmpgFqPo2uDNb1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWdIZlNUazJwaTR1eWFtQVdvLWphNE0xdlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82NDllODEtY2NhMi00MDRjLTk4YTUt OTYyNzU4YTNkNWVhLzEvM0drQzRhbHBEQXZybXl5ZmN1WERBTWo1OU5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82NDllODEtY2NhMi00MDRjLTk4YTUtOTYyNzU4YTNkNWVh LzEveWdIZlNUazJwaTR1eWFtQVdvLWphNE0xdlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvL6AMA0G CSqGSIb3DQEBCwUAA4IBAQDDvaAOvHSKXUmh1OxwoaxFKJ2BjI/Ih6qwiCdqAGAu idu654Xnl8gHHnTQBhBtgdHCaYSGncN/MqSci733hBN3HrFX8fohBtg0gMubwKY8 ykxbAKKk6aNzGPUjwkisr72yfm54tthh0tkfJpC9aBnpuyO9yY0/WIHi9HBWIrF/ gJp8WCtJqcCNTlVKzqkphoPLYM/ds96bUvSAZA1bSE6EreglxvpB1pfaIVSqn3KO UTaHz6ru6wxwQTfdbHOSmQ+Yt0IXofuRLoCrLU7CJRppHWkJfRzZz+waWQm6DCLK 1HjlStvRrY/uWxz4Ca93AnYh0FRQr8SiR2wdCxs7rTR6 -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:10 2026 by rpki-client