This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/3qQwWKb1-kVy_ayi1t9X0ckV-So.roa File: 3qQwWKb1-kVy_ayi1t9X0ckV-So.roa (raw, json) Hash identifier: 6uc0py4DUTjhUubTuSWB3rLcaAx0aZmagITkDfiQN1k= Subject key identifier: DE:A4:30:58:A6:F5:FA:45:72:FD:AC:A2:D6:DF:57:D1:C9:15:F9:2A Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9 Certificate serial: 019B7EA68B28A4DD9578A893BE1C87EB98C9 Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/3qQwWKb1-kVy_ayi1t9X0ckV-So.roa Signing time: Fri 02 Jan 2026 12:20:02 +0000 ROA not before: Fri 02 Jan 2026 12:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41295 IP address blocks: 194.24.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8b:28:a4:dd:95:78:a8:93:be:1c:87:eb:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9 Validity Not Before: Jan 2 12:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dea43058a6f5fa4572fdaca2d6df57d1c915f92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:fc:6e:42:cb:d5:2d:67:be:40:cd:6e:c4: a9:4a:49:1d:6b:6d:27:c8:35:96:96:14:80:0a:07: c4:b9:1f:56:ca:3e:a7:3f:1f:8e:29:4d:23:e8:71: c0:16:26:59:73:0e:d9:dd:53:99:71:43:39:20:2e: 29:01:21:2e:a0:4f:91:d5:8d:d5:3e:3d:6c:31:8d: f4:16:31:54:20:ac:55:b7:56:aa:27:7f:f2:8d:c2: 0c:b4:ca:5c:0b:5f:5d:37:a0:61:af:e7:25:0e:f4: f7:4f:c1:df:45:90:4b:03:d9:12:e9:57:5f:e5:50: c0:47:9f:46:9b:9b:fb:6c:ff:5d:e4:0d:8b:e7:55: 12:6b:fa:3d:59:3e:bf:7e:d4:2c:34:b1:58:b3:86: 72:48:6d:da:73:c8:69:88:41:41:43:ea:43:ee:68: 9a:04:cb:a3:62:d0:e4:5a:90:74:08:38:f0:2a:f6: 19:f5:93:60:da:6e:af:94:a0:00:a5:52:8d:e8:ab: c9:41:36:36:64:fe:56:a3:06:1f:05:99:9e:fe:1c: 66:19:f5:5d:3a:41:e2:a4:0e:6c:d7:a3:35:f5:c6: 14:f2:02:16:ca:2b:e7:c8:6d:24:05:0e:83:b1:74: ee:4d:49:e3:75:c2:96:e4:68:dd:19:95:c4:8c:7b: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A4:30:58:A6:F5:FA:45:72:FD:AC:A2:D6:DF:57:D1:C9:15:F9:2A X509v3 Authority Key Identifier: keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/3qQwWKb1-kVy_ayi1t9X0ckV-So.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.178.0/23 Signature Algorithm: sha256WithRSAEncryption 52:c8:cb:ac:97:d6:89:db:7e:77:97:8e:39:f1:a6:fe:c7:39: 73:10:04:53:64:f2:5a:82:9e:bb:8a:4a:4c:62:c0:ba:33:0b: f9:b8:9a:93:ed:89:81:e2:92:cf:fe:c3:26:a1:7f:03:cd:c9: b0:80:4c:f4:b8:06:62:8c:e3:3c:36:70:39:a3:7c:b2:fd:d6: 72:f6:4f:b2:82:76:07:75:da:11:d2:59:b0:51:8d:2f:4a:e5: 7e:dd:46:8b:5b:57:63:34:ee:e6:55:e7:6d:76:c0:52:5f:97: 54:36:e5:3d:41:e0:6c:cd:b5:02:31:65:3a:94:f1:7c:58:85: 43:78:cd:11:d7:0b:53:01:69:63:04:f7:cc:a9:d1:6d:7a:7f: 11:6b:04:17:e8:6d:8d:ab:30:e6:44:5a:d5:a4:f6:a0:76:2c: b8:f8:7f:90:45:03:43:82:89:d4:60:ae:94:02:23:74:81:da: fb:9e:54:59:f4:c7:7d:0e:50:54:72:9a:d5:37:52:f4:a4:9b: e8:f1:02:91:02:a3:bd:24:db:dd:88:fb:64:f6:8b:09:68:4b: 2b:3d:87:e7:20:b1:9b:b2:d3:2d:e1:dc:6d:5a:8e:37:97:ef: d1:4c:68:12:b6:2e:71:0b:76:8d:8f:1a:21:8a:bd:c5:6a:74: 4c:a4:b7:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+posopN2VeKiTvhyH65jJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDJjNzUyYTliMDk4MzEyOGIzZDI5NWU0NWVhMTZiMzNl ZTdkZjkwHhcNMjYwMTAyMTIyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWE0MzA1OGE2ZjVmYTQ1NzJmZGFjYTJkNmRmNTdkMWM5MTVmOTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurL8bkLL1S1nvkDNbsSpSkkda20n yDWWlhSACgfEuR9Wyj6nPx+OKU0j6HHAFiZZcw7Z3VOZcUM5IC4pASEuoE+R1Y3V Pj1sMY30FjFUIKxVt1aqJ3/yjcIMtMpcC19dN6Bhr+clDvT3T8HfRZBLA9kS6Vdf 5VDAR59Gm5v7bP9d5A2L51USa/o9WT6/ftQsNLFYs4ZySG3ac8hpiEFBQ+pD7mia BMujYtDkWpB0CDjwKvYZ9ZNg2m6vlKAApVKN6KvJQTY2ZP5WowYfBZme/hxmGfVd OkHipA5s16M19cYU8gIWyivnyG0kBQ6DsXTuTUnjdcKW5GjdGZXEjHtRgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN6kMFim9fpFcv2sotbfV9HJFfkqMB8GA1UdIwQY MBaAFItCx1KpsJgxKLPSleReoWsz7n35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMt MjVhMzhhMjQ2ZmEyLzEvM3FRd1dLYjEta1Z5X2F5aTF0OVgwY2tWLVNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMtMjVhMzhhMjQ2ZmEy LzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwhiyMA0G CSqGSIb3DQEBCwUAA4IBAQBSyMusl9aJ2353l4458ab+xzlzEARTZPJagp67ikpM YsC6Mwv5uJqT7YmB4pLP/sMmoX8DzcmwgEz0uAZijOM8NnA5o3yy/dZy9k+ygnYH ddoR0lmwUY0vSuV+3UaLW1djNO7mVedtdsBSX5dUNuU9QeBszbUCMWU6lPF8WIVD eM0R1wtTAWljBPfMqdFten8RawQX6G2NqzDmRFrVpPagdiy4+H+QRQNDgonUYK6U AiN0gdr7nlRZ9Md9DlBUcprVN1L0pJvo8QKRAqO9JNvdiPtk9osJaEsrPYfnILGb stMt4dxtWo43l+/RTGgSti5xC3aNjxohir3FanRMpLfV -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:23 2026 by rpki-client