This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/3lFiJAi9xcyPhHbde0XIskVsgIs.roa File: 3lFiJAi9xcyPhHbde0XIskVsgIs.roa (raw, json) Hash identifier: qs21NuisUl0QxWCvF+rTCWm7FC1OO83XG3sDyW4a0mM= Subject key identifier: DE:51:62:24:08:BD:C5:CC:8F:84:76:DD:7B:45:C8:B2:45:6C:80:8B Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b Certificate serial: 019B797EE25809B00AEBF81D487312A80A6D Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/3lFiJAi9xcyPhHbde0XIskVsgIs.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42181 IP address blocks: 194.0.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e2:58:09:b0:0a:eb:f8:1d:48:73:12:a8:0a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de51622408bdc5cc8f8476dd7b45c8b2456c808b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:49:e0:71:bc:03:86:5e:11:a6:a5:58:83: d7:0b:6a:a3:cc:24:83:ce:de:f4:44:54:3d:4d:8a: 01:77:09:65:48:59:25:99:4d:1d:57:cd:8f:f9:16: 31:42:1f:85:47:40:90:eb:bf:56:a3:d6:3a:95:75: e5:fa:ef:02:3c:6e:87:aa:a1:78:5a:1f:31:06:55: a0:56:86:fa:9f:26:21:5c:a3:c4:db:6b:9c:d1:d4: 90:78:93:82:54:03:57:20:39:52:32:47:67:36:65: f9:7e:08:12:f1:77:06:be:3e:19:86:cc:ae:55:1e: b9:6b:99:5d:da:cc:60:f3:10:c1:99:08:9a:30:81: 23:f2:78:9a:18:8c:a6:43:bf:c0:bf:b9:b6:74:e9: fb:b6:8a:20:e3:32:bb:f6:be:f4:62:b2:0e:cd:8f: 9e:43:1a:d2:a3:95:01:75:1a:0f:b1:fb:ee:c7:8a: 8b:17:20:6d:eb:6d:f1:62:7a:62:9a:e3:f7:5e:54: 4d:83:97:65:21:57:fd:9c:57:4f:2a:f4:ea:ce:38: 33:eb:9c:1b:75:fe:a5:96:c1:d9:c6:92:58:d0:38: 16:95:a1:9b:bf:47:d9:35:cf:dc:5b:c6:a0:7f:43: 81:57:24:19:7d:4f:ec:b1:f7:30:ff:43:e5:e1:71: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:51:62:24:08:BD:C5:CC:8F:84:76:DD:7B:45:C8:B2:45:6C:80:8B X509v3 Authority Key Identifier: keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/3lFiJAi9xcyPhHbde0XIskVsgIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.160.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ea:42:b8:56:38:94:77:24:c9:45:5d:66:54:69:79:07:6a: 04:60:03:32:a9:50:7f:da:e9:62:bc:46:cf:b6:79:ea:6d:52: 29:5d:bc:0b:42:fa:7f:22:4b:c5:34:90:fd:47:7f:4b:4c:c8: de:6d:63:ea:88:1c:9a:b3:b1:11:cf:1c:82:03:cc:e4:fa:19: 7e:c9:7a:7d:b9:cf:7a:a0:a4:3b:e0:71:93:fb:78:f7:65:54: 39:7e:2d:b1:2c:e8:37:79:77:32:f6:25:67:dc:5e:b6:46:06: 1f:9b:4d:20:ed:6e:98:a3:e0:0e:38:3b:d5:20:9e:e0:fc:49: 06:5a:82:5f:d4:f6:35:c4:87:b0:29:06:10:5e:5f:6c:ba:64: b8:4f:97:a9:44:ee:c3:d0:c5:54:b4:f9:9e:4d:94:81:d2:01: 2d:ed:e4:75:72:25:d6:3b:7a:6a:db:2c:d1:4d:f7:f9:33:b3: 94:c8:6a:13:0f:eb:04:3a:a0:95:31:8b:17:2c:0d:cd:9d:5a: a8:bf:61:09:a6:a6:4c:d2:2f:9e:0a:08:b3:25:53:be:ba:de: 9b:44:92:ee:c4:3d:59:88:f4:c3:5e:3f:f4:19:9a:50:24:82: 2f:77:70:b1:e4:58:b0:5c:fc:fe:27:bc:20:ab:21:a9:9e:f1: b5:76:be:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuJYCbAK6/gdSHMSqAptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZmJiY2UyYzIwODBmODFmNWEwZjk4ZjI3OTIyOTgyNmRl NDg1MGIwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTUxNjIyNDA4YmRjNWNjOGY4NDc2ZGQ3YjQ1YzhiMjQ1NmM4MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIJJ4HG8A4ZeEaalWIPXC2qjzCSD zt70RFQ9TYoBdwllSFklmU0dV82P+RYxQh+FR0CQ679Wo9Y6lXXl+u8CPG6HqqF4 Wh8xBlWgVob6nyYhXKPE22uc0dSQeJOCVANXIDlSMkdnNmX5fggS8XcGvj4Zhsyu VR65a5ld2sxg8xDBmQiaMIEj8niaGIymQ7/Av7m2dOn7toog4zK79r70YrIOzY+e QxrSo5UBdRoPsfvux4qLFyBt623xYnpimuP3XlRNg5dlIVf9nFdPKvTqzjgz65wb df6llsHZxpJY0DgWlaGbv0fZNc/cW8agf0OBVyQZfU/ssfcw/0Pl4XHqMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5RYiQIvcXMj4R23XtFyLJFbICLMB8GA1UdIwQY MBaAFHf7vOLCCA+B9aD5jyeSKYJt5IULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZWQ3MzktMjc1NC00NDBmLTk1NDYt M2FhMjdkZjQ3NTIxLzEvM2xGaUpBaTl4Y3lQaEhiZGUwWElza1ZzZ0lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xZWQ3MzktMjc1NC00NDBmLTk1NDYtM2FhMjdkZjQ3NTIx LzEvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCgMA0G CSqGSIb3DQEBCwUAA4IBAQA56kK4VjiUdyTJRV1mVGl5B2oEYAMyqVB/2ulivEbP tnnqbVIpXbwLQvp/IkvFNJD9R39LTMjebWPqiByas7ERzxyCA8zk+hl+yXp9uc96 oKQ74HGT+3j3ZVQ5fi2xLOg3eXcy9iVn3F62RgYfm00g7W6Yo+AOODvVIJ7g/EkG WoJf1PY1xIewKQYQXl9sumS4T5epRO7D0MVUtPmeTZSB0gEt7eR1ciXWO3pq2yzR Tff5M7OUyGoTD+sEOqCVMYsXLA3NnVqov2EJpqZM0i+eCgizJVO+ut6bRJLuxD1Z iPTDXj/0GZpQJIIvd3Cx5FiwXPz+J7wgqyGpnvG1dr4t -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:24 2026 by rpki-client