This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/K3EbZ7iZuigy8-vy_gPHUnvlGK8.roa File: K3EbZ7iZuigy8-vy_gPHUnvlGK8.roa (raw, json) Hash identifier: FvydpAiMHEfpD+j3qu9MlR8/b/6o4Sov3shKqicbpyU= Subject key identifier: 2B:71:1B:67:B8:99:BA:28:32:F3:EB:F2:FE:03:C7:52:7B:E5:18:AF Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA77F9040283B289770BD82A5682CBB Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/K3EbZ7iZuigy8-vy_gPHUnvlGK8.roa Signing time: Fri 02 Jan 2026 12:21:04 +0000 ROA not before: Fri 02 Jan 2026 12:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61166 IP address blocks: 178.34.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:7f:90:40:28:3b:28:97:70:bd:82:a5:68:2c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b711b67b899ba2832f3ebf2fe03c7527be518af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:40:a5:af:f4:83:1c:dd:6b:bd:2c:05:bd: 8d:d9:63:a3:cd:54:59:bb:09:69:16:60:5b:ee:04: 4a:a3:ce:97:ff:a6:1d:09:42:08:0b:a7:83:76:71: 58:dd:b2:60:09:01:dd:23:1e:7f:24:d1:19:34:da: 9b:57:b7:09:66:72:19:4c:48:30:6c:13:85:63:5f: 2b:a2:d0:3e:6b:b7:17:cb:2b:61:12:fe:27:31:dc: 2f:78:a0:b8:e7:56:85:d0:f6:a9:30:34:b4:27:c0: 23:77:ad:e5:8b:19:3f:3d:6a:e5:62:82:a7:7b:8b: 90:21:60:30:5b:17:80:29:72:4f:14:b4:2a:a2:20: 9b:e1:20:a5:86:ac:50:d1:bb:f0:25:4a:dc:42:8c: dc:e6:38:b6:4a:3d:b8:43:3b:1a:1e:04:2d:2f:46: cd:74:06:7a:f7:93:e7:1b:84:31:9c:92:77:51:bc: a3:6c:6d:2e:a4:f9:55:76:83:b7:ab:79:50:40:3b: b4:54:83:d6:c4:50:31:33:20:a0:d6:23:fb:db:34: 63:4a:65:6e:ea:19:40:7b:60:e9:89:39:ba:34:54: 59:3c:85:59:55:15:b6:c0:77:e6:02:de:9b:7e:ab: b4:ae:0f:e5:e0:3e:84:51:4a:ad:39:4c:83:66:9c: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:71:1B:67:B8:99:BA:28:32:F3:EB:F2:FE:03:C7:52:7B:E5:18:AF X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/K3EbZ7iZuigy8-vy_gPHUnvlGK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.34.81.0/24 Signature Algorithm: sha256WithRSAEncryption 03:88:03:2f:70:49:d2:e6:5e:b9:7a:de:0a:6a:cb:73:de:2a: 0b:7b:c5:b7:22:0d:25:9e:d4:56:51:51:fb:ac:a8:2a:16:a8: 02:e1:1b:06:0d:88:d1:8f:96:90:d6:f4:7c:ed:31:6b:3e:99: 1d:02:9f:a8:66:e2:3c:ad:a2:04:5a:a1:c2:46:39:d6:3f:6b: 6f:d3:71:d2:dd:6e:70:b5:ed:51:4b:e2:62:3b:d5:c3:95:57: e0:31:66:06:26:fb:cd:a9:1b:88:be:98:b5:e1:99:c6:9c:3a: 47:91:44:6a:3b:54:18:13:c0:5f:e3:41:c1:80:3e:c9:9a:c2: 6a:fb:09:c3:87:a0:65:d9:c9:be:c4:24:56:9a:30:bf:f1:64: e2:d5:e7:d2:4e:5c:d7:0a:64:9e:49:90:33:d3:07:c5:b5:bd: d0:47:41:1e:a6:80:df:2e:f8:81:50:a0:5b:75:04:59:d9:85: 4c:ec:32:22:96:9a:c7:1c:de:e9:3a:6f:03:fd:68:29:9b:64: 66:8c:e7:53:76:65:7d:d9:e6:96:11:e9:c4:18:20:54:bf:6f: 2f:46:69:f5:0e:66:9f:8f:0b:22:74:90:31:27:a2:53:39:04: bc:b1:42:d8:19:c0:d4:51:f2:76:60:f5:e1:6f:83:5c:9f:95: 08:c4:3e:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p3+QQCg7KJdwvYKlaCy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjcxMWI2N2I4OTliYTI4MzJmM2ViZjJmZTAzYzc1MjdiZTUxOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk1Apa/0gxzda70sBb2N2WOjzVRZ uwlpFmBb7gRKo86X/6YdCUIIC6eDdnFY3bJgCQHdIx5/JNEZNNqbV7cJZnIZTEgw bBOFY18rotA+a7cXyythEv4nMdwveKC451aF0PapMDS0J8Ajd63lixk/PWrlYoKn e4uQIWAwWxeAKXJPFLQqoiCb4SClhqxQ0bvwJUrcQozc5ji2Sj24QzsaHgQtL0bN dAZ695PnG4QxnJJ3UbyjbG0upPlVdoO3q3lQQDu0VIPWxFAxMyCg1iP72zRjSmVu 6hlAe2DpiTm6NFRZPIVZVRW2wHfmAt6bfqu0rg/l4D6EUUqtOUyDZpzSZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCtxG2e4mbooMvPr8v4Dx1J75RivMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvSzNFYlo3aVp1aWd5OC12eV9nUEhVbnZsR0s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsiJRMA0G CSqGSIb3DQEBCwUAA4IBAQADiAMvcEnS5l65et4Kastz3ioLe8W3Ig0lntRWUVH7 rKgqFqgC4RsGDYjRj5aQ1vR87TFrPpkdAp+oZuI8raIEWqHCRjnWP2tv03HS3W5w te1RS+JiO9XDlVfgMWYGJvvNqRuIvpi14ZnGnDpHkURqO1QYE8Bf40HBgD7JmsJq +wnDh6Bl2cm+xCRWmjC/8WTi1efSTlzXCmSeSZAz0wfFtb3QR0EepoDfLviBUKBb dQRZ2YVM7DIilprHHN7pOm8D/Wgpm2RmjOdTdmV92eaWEenEGCBUv28vRmn1Dmaf jwsidJAxJ6JTOQS8sULYGcDUUfJ2YPXhb4Ncn5UIxD74 -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:14 2026 by rpki-client