This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/5t3r-e7tyLlW84cUDqRXL5ROFSo.roa File: 5t3r-e7tyLlW84cUDqRXL5ROFSo.roa (raw, json) Hash identifier: LjPlWorNn2ybzLX8+yX/V0IpzdHIQY94ZXTGvGnunJ4= Subject key identifier: E6:DD:EB:F9:EE:ED:C8:B9:56:F3:87:14:0E:A4:57:2F:94:4E:15:2A Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5 Certificate serial: 019B7F136514CB756197171026616587309B Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/5t3r-e7tyLlW84cUDqRXL5ROFSo.roa Signing time: Fri 02 Jan 2026 14:18:56 +0000 ROA not before: Fri 02 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35819 IP address blocks: 194.36.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 08:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:65:14:cb:75:61:97:17:10:26:61:65:87:30:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5 Validity Not Before: Jan 2 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6ddebf9eeedc8b956f387140ea4572f944e152a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:40:e7:a1:f7:09:9e:8e:57:43:b8:e7:4b: 47:59:7b:07:71:f6:5c:e9:fb:ee:96:2b:27:3a:46: 6a:51:a4:7a:ef:d8:15:5e:00:f2:03:7e:f7:6e:90: 8c:48:3b:20:81:9b:f4:b1:60:04:aa:ce:13:d0:2f: bf:f3:1f:92:4d:8a:b6:d8:68:0f:25:7d:56:52:da: 4e:87:40:8c:22:e5:42:0c:46:a1:a3:d0:b5:3c:81: 01:4a:60:51:09:8e:3e:17:c1:5f:90:8b:d9:45:07: 02:0e:5f:f5:6b:8e:57:25:16:2d:c3:25:a3:b3:0c: 28:18:c1:a8:ed:5d:d4:fc:12:5b:6d:47:46:2e:53: fd:90:90:3d:b9:79:45:0e:b9:d3:1d:12:c2:ab:66: 21:e3:43:b9:0a:65:0c:c1:76:a0:8d:22:4e:57:de: 75:bd:6e:21:b1:38:5b:22:c7:79:6a:d4:ef:a5:25: bb:22:12:b0:fe:ca:c5:af:74:b7:88:ef:91:e5:a8: fa:03:2f:7f:58:59:44:fc:d7:19:af:b3:8a:c3:e3: 7d:f6:f8:e1:50:24:7d:42:93:5e:87:87:28:f6:7c: 0c:a9:26:14:ed:65:a2:94:34:d1:1d:5e:4d:b3:7d: 2b:b9:5c:f5:83:08:80:8f:6f:21:8c:5e:5b:67:c3: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DD:EB:F9:EE:ED:C8:B9:56:F3:87:14:0E:A4:57:2F:94:4E:15:2A X509v3 Authority Key Identifier: keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/5t3r-e7tyLlW84cUDqRXL5ROFSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.164.0/24 Signature Algorithm: sha256WithRSAEncryption 86:44:d6:47:d7:52:04:e7:12:b5:69:00:39:af:84:bf:7f:1a: 85:0e:da:9a:7d:7e:a0:6e:a9:cf:ec:8f:08:75:ad:57:66:93: ed:73:5c:8a:6f:5d:a1:6a:d3:cb:35:2d:33:77:51:63:27:ff: 64:f4:d3:e5:1a:81:f5:c2:16:e1:47:24:93:8b:13:72:a7:0c: 2b:b1:dc:da:bb:92:d2:9f:63:50:eb:18:a2:48:f1:02:e4:97: c6:bd:7f:21:d4:fe:74:be:49:17:5f:ed:4f:ca:1c:db:e2:74: dc:ad:77:46:2a:d1:81:93:17:00:d3:bc:25:c1:a3:9d:3f:68: 69:93:d2:b1:f2:2b:74:01:8f:f9:e8:84:b3:eb:ea:9e:14:d9: a2:a2:e5:13:a9:38:ab:b0:38:84:14:c1:a2:69:53:93:30:19: 31:fe:9e:b9:60:cd:08:61:6d:89:61:9c:8a:2e:ef:4f:5d:d4: 59:c0:aa:72:16:21:7b:5d:7c:54:7b:be:70:9c:dc:38:48:8c: 7d:a5:ac:86:0e:85:98:ec:82:2d:bf:e4:fb:b1:e5:53:f1:a2: 1d:6d:de:37:80:d0:69:d3:37:7b:9b:59:1a:9f:ae:d3:d7:ff: 25:21:92:f6:ff:1d:ad:be:a1:5d:d6:83:30:e0:5a:e1:10:27: f9:8b:e2:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E2UUy3VhlxcQJmFlhzCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2VmOTNjYjdhY2IwZmI0OWJhMjg4YTdhMGZiZjI2ZDMw MDRmYTUwHhcNMjYwMTAyMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmRkZWJmOWVlZWRjOGI5NTZmMzg3MTQwZWE0NTcyZjk0NGUxNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUJA56H3CZ6OV0O450tHWXsHcfZc 6fvulisnOkZqUaR679gVXgDyA373bpCMSDsggZv0sWAEqs4T0C+/8x+STYq22GgP JX1WUtpOh0CMIuVCDEaho9C1PIEBSmBRCY4+F8FfkIvZRQcCDl/1a45XJRYtwyWj swwoGMGo7V3U/BJbbUdGLlP9kJA9uXlFDrnTHRLCq2Yh40O5CmUMwXagjSJOV951 vW4hsThbIsd5atTvpSW7IhKw/srFr3S3iO+R5aj6Ay9/WFlE/NcZr7OKw+N99vjh UCR9QpNeh4co9nwMqSYU7WWilDTRHV5Ns30ruVz1gwiAj28hjF5bZ8O7zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFObd6/nu7ci5VvOHFA6kVy+UThUqMB8GA1UdIwQY MBaAFKPO+Ty3rLD7SbooinoPvybTAE+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zMGVlN2QtOGU3MC00M2Q4LTk4ZDkt NGI1Njk0OWVlNzUwLzEvNXQzci1lN3R5TGxXODRjVURxUlhMNVJPRlNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zMGVlN2QtOGU3MC00M2Q4LTk4ZDktNGI1Njk0OWVlNzUw LzEvbzg3NVBMZXNzUHRKdWlpS2VnLV9KdE1BVDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiSkMA0G CSqGSIb3DQEBCwUAA4IBAQCGRNZH11IE5xK1aQA5r4S/fxqFDtqafX6gbqnP7I8I da1XZpPtc1yKb12hatPLNS0zd1FjJ/9k9NPlGoH1whbhRySTixNypwwrsdzau5LS n2NQ6xiiSPEC5JfGvX8h1P50vkkXX+1Pyhzb4nTcrXdGKtGBkxcA07wlwaOdP2hp k9Kx8it0AY/56ISz6+qeFNmiouUTqTirsDiEFMGiaVOTMBkx/p65YM0IYW2JYZyK Lu9PXdRZwKpyFiF7XXxUe75wnNw4SIx9payGDoWY7IItv+T7seVT8aIdbd43gNBp 0zd7m1kan67T1/8lIZL2/x2tvqFd1oMw4FrhECf5i+IJ -----END CERTIFICATE-----Generated at Fri Jan 30 18:25:31 2026 by rpki-client