This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/a3t44Injkb3R_GXSuc0dS5CiLrY.roa File: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (raw, json) Hash identifier: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM= Subject key identifier: 6B:7B:78:E0:89:E3:91:BD:D1:FC:65:D2:B9:CD:1D:4B:90:A2:2E:B6 Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce Certificate serial: 019C093D7BCECC3AC0C0452CEF5CF66A47B2 Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/a3t44Injkb3R_GXSuc0dS5CiLrY.roa Signing time: Thu 29 Jan 2026 10:12:30 +0000 ROA not before: Thu 29 Jan 2026 10:12:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204858 IP address blocks: 176.119.198.0/24 maxlen: 24 185.227.184.0/22 maxlen: 22 194.13.110.0/24 maxlen: 24 194.13.134.0/24 maxlen: 24 194.15.125.0/24 maxlen: 24 194.15.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:3d:7b:ce:cc:3a:c0:c0:45:2c:ef:5c:f6:6a:47:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce Validity Not Before: Jan 29 10:12:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7b78e089e391bdd1fc65d2b9cd1d4b90a22eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:65:42:c0:43:7f:b5:88:62:b7:c7:e3:81: 75:50:73:59:48:7a:2f:74:a7:38:ad:c3:ca:08:e0: 36:1d:da:7b:15:b5:37:04:b3:74:64:a8:5d:20:a4: 64:64:f4:b4:21:83:07:25:27:95:f2:18:99:3e:88: a6:ea:ca:02:b6:42:9a:e5:9b:7e:d2:5f:06:21:23: bb:0e:80:37:dd:fa:9f:48:a4:45:8f:81:c5:e1:a9: 31:39:66:a7:86:00:0c:1a:b6:2e:67:30:1f:7e:88: b5:da:9d:d1:64:70:a4:ee:ba:58:0d:41:b8:be:33: 97:4f:84:86:dd:0c:32:3d:ff:d1:43:8c:cd:82:63: d4:77:4b:73:5f:c2:cd:89:33:70:ce:02:e7:c6:62: 79:38:40:cd:03:f3:78:cf:ba:2f:b0:b2:41:61:10: 15:e3:f3:87:7e:80:f4:54:89:4a:7b:2a:7a:24:70: 8a:77:81:1b:02:2c:2a:18:0c:5c:4c:15:1c:e3:3e: d5:de:a4:e5:0c:d1:12:32:7b:14:f1:f7:15:f1:ef: 6b:5f:67:8f:0a:bd:5a:d5:e9:1c:d3:ef:3d:01:24: 07:5d:b3:c0:31:66:84:39:b7:b7:88:ab:08:48:9e: 27:ca:8f:9b:d8:87:da:49:9e:8d:4e:8f:5a:2f:41: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:78:E0:89:E3:91:BD:D1:FC:65:D2:B9:CD:1D:4B:90:A2:2E:B6 X509v3 Authority Key Identifier: keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/a3t44Injkb3R_GXSuc0dS5CiLrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.198.0/24 185.227.184.0/22 194.13.110.0/24 194.13.134.0/24 194.15.125.0/24 194.15.136.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:7e:f5:5d:fa:53:8b:d6:26:cb:81:11:02:6d:4c:22:6a:3d: c4:4a:aa:1c:c4:e3:04:6b:19:a7:f9:9a:ba:76:67:07:03:bf: 15:41:66:64:a1:2b:07:e5:64:35:e1:4a:dd:e9:3e:e6:c4:58: b8:b8:3e:ad:d0:ba:12:45:50:74:1f:bb:ea:52:82:f2:e3:5b: 0e:dd:ca:96:73:36:ea:84:d7:82:b2:a7:e7:7e:0b:d9:d0:3f: f7:5f:73:63:4b:49:dd:a2:dc:b5:e1:ff:3a:0e:40:f7:b2:61: 29:c6:6c:0f:4d:87:76:ca:59:4d:b5:48:93:ee:28:c7:e3:1f: c0:6f:f4:8b:a6:1c:02:c8:a5:79:99:ac:01:64:6c:d2:15:95: d8:9e:21:a6:98:83:f4:63:45:d4:40:a7:19:bb:22:88:08:d3: d1:a5:a9:81:89:61:cf:4c:3c:94:0b:2f:10:d8:13:e2:6f:f1: 10:16:8e:03:3a:ad:4d:4c:3a:8e:0c:40:10:1b:e2:08:b1:0a: a1:ad:e9:af:36:1a:e1:b9:af:2d:09:5e:0b:31:ec:9f:d4:09: 22:3a:a7:0d:ad:ce:4c:2c:7d:82:d6:61:2d:3c:21:a2:90:ea: 61:d2:2d:a5:56:31:21:c5:5a:80:61:9e:f8:d2:93:d3:f0:1b: ab:b6:e1:0b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZwJPXvOzDrAwEUs71z2akeyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGUxMzNjYTBjYWQ5ZjFmZDE2MTU4MDU5MGIyOTZkYjIy MzA4Y2UwHhcNMjYwMTI5MTAxMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdiNzhlMDg5ZTM5MWJkZDFmYzY1ZDJiOWNkMWQ0YjkwYTIyZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDplQsBDf7WIYrfH44F1UHNZSHov dKc4rcPKCOA2Hdp7FbU3BLN0ZKhdIKRkZPS0IYMHJSeV8hiZPoim6soCtkKa5Zt+ 0l8GISO7DoA33fqfSKRFj4HF4akxOWanhgAMGrYuZzAffoi12p3RZHCk7rpYDUG4 vjOXT4SG3QwyPf/RQ4zNgmPUd0tzX8LNiTNwzgLnxmJ5OEDNA/N4z7ovsLJBYRAV 4/OHfoD0VIlKeyp6JHCKd4EbAiwqGAxcTBUc4z7V3qTlDNESMnsU8fcV8e9rX2eP Cr1a1ekc0+89ASQHXbPAMWaEObe3iKsISJ4nyo+b2IfaSZ6NTo9aL0FrywIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFGt7eOCJ45G90fxl0rnNHUuQoi62MB8GA1UdIwQY MBaAFHROEzygytnx/RYVgFkLKW2yIwjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUt OTVhNGVmNDNjMjE1LzEvYTN0NDRJbmprYjNSX0dYU3VjMGRTNUNpTHJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUtOTVhNGVmNDNjMjE1 LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAsHfGAwQC ueO4AwQAwg1uAwQAwg2GAwQAwg99AwQAwg+IMA0GCSqGSIb3DQEBCwUAA4IBAQBt fvVd+lOL1ibLgRECbUwiaj3ESqocxOMEaxmn+Zq6dmcHA78VQWZkoSsH5WQ14Urd 6T7mxFi4uD6t0LoSRVB0H7vqUoLy41sO3cqWczbqhNeCsqfnfgvZ0D/3X3NjS0nd oty14f86DkD3smEpxmwPTYd2yllNtUiT7ijH4x/Ab/SLphwCyKV5mawBZGzSFZXY niGmmIP0Y0XUQKcZuyKICNPRpamBiWHPTDyUCy8Q2BPib/EQFo4DOq1NTDqODEAQ G+IIsQqhremvNhrhua8tCV4LMeyf1AkiOqcNrc5MLH2C1mEtPCGikOph0i2lVjEh xVqAYZ740pPT8BurtuEL -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:05 2026 by rpki-client