This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/C3g4bPj0WpteooCh1kAuPYqRZBg.roa File: C3g4bPj0WpteooCh1kAuPYqRZBg.roa (raw, json) Hash identifier: 0XrpEklayrORIBGmjGj7RMMjUbxEU4fiPGHiYSn1AmY= Subject key identifier: 0B:78:38:6C:F8:F4:5A:9B:5E:A2:80:A1:D6:40:2E:3D:8A:91:64:18 Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1 Certificate serial: 019B7A5B150E9A2FB604753B4AFCC6BB4FF3 Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/C3g4bPj0WpteooCh1kAuPYqRZBg.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49478 IP address blocks: 91.234.164.0/22 maxlen: 32 194.150.254.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:15:0e:9a:2f:b6:04:75:3b:4a:fc:c6:bb:4f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1 Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b78386cf8f45a9b5ea280a1d6402e3d8a916418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:94:d4:a4:e3:a4:d5:35:ed:de:68:39:b9: 71:aa:29:11:97:a8:ff:1b:40:b6:34:c0:b8:90:a2: 98:b5:03:23:35:05:a4:fd:fe:c5:1d:ea:2f:4d:7c: 43:b1:4d:d5:85:57:4b:47:1b:61:a0:5f:22:40:42: 27:e5:49:b1:fb:05:27:8a:13:cc:4c:9e:85:b0:bb: af:2d:af:fb:a3:a4:4f:66:b4:1c:31:81:b8:ff:c7: 36:96:fd:8d:45:89:c6:b0:88:d3:e6:85:03:96:ac: 37:64:ef:42:e0:b2:b8:4f:30:a3:b5:4e:7b:99:60: ed:89:c8:eb:7b:89:5d:48:f1:37:cc:fe:fe:b1:7a: ef:ad:43:e1:94:1d:5d:b9:dd:ef:c8:9e:ba:6f:a3: c7:46:1a:e2:b5:d6:70:e5:2b:42:f1:e1:e3:c2:94: aa:27:13:32:de:a1:9c:dc:cb:72:17:56:74:63:50: 3d:23:ea:69:58:1a:b2:77:a8:76:4f:95:90:20:ac: 4a:28:bf:cc:ed:8a:5a:42:47:f2:a2:47:2a:d1:d5: 60:28:8f:89:76:b4:a7:be:26:3c:95:33:34:3c:4a: 66:09:2f:b9:df:2f:f5:f4:60:ff:61:55:bf:ac:0a: bf:29:11:3b:5d:44:7d:c0:f6:3f:aa:41:54:bb:a1: b8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:78:38:6C:F8:F4:5A:9B:5E:A2:80:A1:D6:40:2E:3D:8A:91:64:18 X509v3 Authority Key Identifier: keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/C3g4bPj0WpteooCh1kAuPYqRZBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.164.0/22 194.150.254.0/23 Signature Algorithm: sha256WithRSAEncryption db:9b:de:1a:1f:77:10:9b:fd:ea:e9:a7:90:30:d6:b2:14:c1: 26:0c:4a:d1:a9:55:4c:5f:9a:17:ac:12:f6:d4:5b:e6:07:b4: 31:49:42:1d:d4:01:76:ac:4c:b5:44:e1:5c:6e:7e:5a:be:66: aa:ff:67:57:7e:1c:2d:09:86:2d:1a:f0:0f:e6:ee:4f:cc:6d: 7e:88:f0:5d:51:88:41:ee:38:23:e0:cf:54:66:c7:01:ca:86: fc:f5:24:ff:03:79:46:4b:e0:a1:9e:2a:fa:e1:4d:94:16:81: e3:32:2b:4f:94:1f:7d:99:c6:1a:c6:a2:4d:59:bb:14:c6:ee: 25:33:c6:ac:d8:f1:bc:8a:a7:ea:cb:76:ca:b5:d3:43:e7:18: e4:22:33:79:56:50:29:c7:9c:db:19:a4:b8:39:4b:89:3d:f2: c7:4d:da:29:73:c0:76:19:61:9a:29:15:b8:3f:66:41:df:63: f7:12:ae:f3:1b:da:5e:57:cc:e3:74:81:26:a9:85:ca:52:49: 4d:d8:aa:ea:61:ea:ff:ae:e1:09:89:72:66:6c:8f:0c:ce:69: 44:80:2a:0a:dc:fc:a9:2d:31:82:84:9c:42:2f:3d:04:bb:4c: bc:c0:fd:83:ca:4b:2e:6a:5b:b1:39:9e:5d:b9:d2:43:9a:aa: 3c:19:50:61 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WxUOmi+2BHU7SvzGu0/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl ZWM1YjEwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjc4Mzg2Y2Y4ZjQ1YTliNWVhMjgwYTFkNjQwMmUzZDhhOTE2NDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF2U1KTjpNU17d5oOblxqikRl6j/ G0C2NMC4kKKYtQMjNQWk/f7FHeovTXxDsU3VhVdLRxthoF8iQEIn5Umx+wUnihPM TJ6FsLuvLa/7o6RPZrQcMYG4/8c2lv2NRYnGsIjT5oUDlqw3ZO9C4LK4TzCjtU57 mWDticjre4ldSPE3zP7+sXrvrUPhlB1dud3vyJ66b6PHRhritdZw5StC8eHjwpSq JxMy3qGc3MtyF1Z0Y1A9I+ppWBqyd6h2T5WQIKxKKL/M7YpaQkfyokcq0dVgKI+J drSnviY8lTM0PEpmCS+53y/19GD/YVW/rAq/KRE7XUR9wPY/qkFUu6G4WQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAt4OGz49FqbXqKAodZALj2KkWQYMB8GA1UdIwQY MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt OWRkODU2MWNhZWRlLzEvQzNnNGJQajBXcHRlb29DaDFrQXVQWXFSWkJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+qkAwQB wpb+MA0GCSqGSIb3DQEBCwUAA4IBAQDbm94aH3cQm/3q6aeQMNayFMEmDErRqVVM X5oXrBL21FvmB7QxSUId1AF2rEy1ROFcbn5avmaq/2dXfhwtCYYtGvAP5u5PzG1+ iPBdUYhB7jgj4M9UZscByob89ST/A3lGS+Chnir64U2UFoHjMitPlB99mcYaxqJN WbsUxu4lM8as2PG8iqfqy3bKtdND5xjkIjN5VlApx5zbGaS4OUuJPfLHTdopc8B2 GWGaKRW4P2ZB32P3Eq7zG9peV8zjdIEmqYXKUklN2KrqYer/ruEJiXJmbI8MzmlE gCoK3PypLTGChJxCLz0Eu0y8wP2DyksualuxOZ5dudJDmqo8GVBh -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:30 2026 by rpki-client