This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/3JDOgau4GXIlP-8TxtcC06uAWi0.roa File: 3JDOgau4GXIlP-8TxtcC06uAWi0.roa (raw, json) Hash identifier: QjML2vUB5G/DnLmOZku9aV5tntgCQSEVJ8kdiDg/M3E= Subject key identifier: DC:90:CE:81:AB:B8:19:72:25:3F:EF:13:C6:D7:02:D3:AB:80:5A:2D Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6 Certificate serial: 019B7F143FBBF3673C4C31A961B9D09DA3C3 Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/3JDOgau4GXIlP-8TxtcC06uAWi0.roa Signing time: Fri 02 Jan 2026 14:19:52 +0000 ROA not before: Fri 02 Jan 2026 14:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16313 IP address blocks: 193.31.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:3f:bb:f3:67:3c:4c:31:a9:61:b9:d0:9d:a3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6 Validity Not Before: Jan 2 14:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc90ce81abb81972253fef13c6d702d3ab805a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:a1:95:e5:fb:fd:94:e1:95:c8:02:e6:3e: c5:eb:59:4a:e5:bf:cc:b3:6a:09:87:d7:10:4a:13: 11:c0:34:2c:00:34:4f:01:37:ea:f3:73:e9:64:45: e1:4c:71:bc:0e:df:b6:ea:a2:ab:ce:9d:b9:f7:5d: 75:a9:31:57:a3:98:96:6c:ba:30:9f:8f:c4:e7:53: d0:2a:22:b4:1b:65:3d:f4:de:c2:1b:05:1e:f1:88: 8a:1e:ee:b7:dd:b0:40:4e:23:78:c4:ea:42:08:b3: 6e:67:e2:8b:4d:28:27:9c:f5:89:41:80:ee:1e:8b: b6:04:5a:9e:46:97:25:44:a6:14:be:a3:be:21:d2: 05:6d:bb:eb:60:88:f4:88:dc:bd:cf:3f:04:74:82: 7d:d2:11:36:de:e8:a0:c1:d3:e6:5e:28:6f:3d:c6: 50:f8:ba:52:a5:24:12:7a:a7:b1:82:60:5a:c8:d4: 2a:f4:08:3a:ca:30:e8:a3:d5:be:f6:d5:dd:a0:da: 3c:0c:1d:08:b2:fb:4a:cc:73:24:23:9b:26:3e:04: 56:3b:7e:c8:06:33:6f:87:a9:59:eb:d8:34:2e:45: 46:ba:cd:cf:5e:d9:c6:b6:24:e1:56:40:99:e4:22: c8:86:9b:87:02:60:b9:58:4c:5f:14:43:6b:a1:2a: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:90:CE:81:AB:B8:19:72:25:3F:EF:13:C6:D7:02:D3:AB:80:5A:2D X509v3 Authority Key Identifier: keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/3JDOgau4GXIlP-8TxtcC06uAWi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.31.160.0/19 Signature Algorithm: sha256WithRSAEncryption 5e:d8:09:41:f8:0e:20:9d:3b:7d:44:6b:73:35:93:ee:c0:36: ec:42:e1:6c:fb:9d:91:98:50:91:fb:a8:cc:48:6f:09:83:87: f9:78:fd:16:66:0b:2a:67:2b:ce:d6:6a:43:00:d6:f9:63:30: 19:f2:ba:6f:ef:8a:36:19:b8:b0:35:eb:59:c1:13:7c:86:dc: 00:c0:67:f3:93:10:9a:fc:3f:4e:24:0d:65:64:d1:c1:e8:40: 64:9f:46:39:80:59:a9:be:42:3b:ee:44:eb:3a:4c:5c:7c:da: 7c:ce:7d:51:be:a4:d3:28:95:35:69:96:80:7c:aa:96:c4:22: a4:90:5c:31:11:5a:9a:82:62:98:06:7d:2a:56:40:be:27:a5: 62:51:fd:72:82:61:b1:dc:1d:f6:bb:8a:75:a7:c3:30:bb:af: 35:ba:23:c4:ae:57:ad:85:ef:46:5a:89:dd:ca:7f:61:d6:2d: 98:ec:29:5e:1b:01:5e:6c:3b:ad:51:b6:3c:d7:5a:e1:cf:3e: 45:1b:d5:c0:50:ab:94:b7:b5:ec:fd:6b:a8:69:7d:c5:00:d0: f9:e7:71:7a:31:4c:fb:12:41:7e:d5:b7:88:fe:31:35:fd:16: 59:ac:c8:d2:40:e2:c1:72:89:74:5d:3d:aa:59:76:81:7f:f8: cf:95:9f:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FD+782c8TDGpYbnQnaPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNTMzZDllZWY1YTgxMjhkYzQzNWQwMmYyMjMzMjgwMzQ4 ZGMyYjYwHhcNMjYwMTAyMTQxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzkwY2U4MWFiYjgxOTcyMjUzZmVmMTNjNmQ3MDJkM2FiODA1YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNKhleX7/ZThlcgC5j7F61lK5b/M s2oJh9cQShMRwDQsADRPATfq83PpZEXhTHG8Dt+26qKrzp259111qTFXo5iWbLow n4/E51PQKiK0G2U99N7CGwUe8YiKHu633bBATiN4xOpCCLNuZ+KLTSgnnPWJQYDu Hou2BFqeRpclRKYUvqO+IdIFbbvrYIj0iNy9zz8EdIJ90hE23uigwdPmXihvPcZQ +LpSpSQSeqexgmBayNQq9Ag6yjDoo9W+9tXdoNo8DB0IsvtKzHMkI5smPgRWO37I BjNvh6lZ69g0LkVGus3PXtnGtiThVkCZ5CLIhpuHAmC5WExfFENroSoDCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyQzoGruBlyJT/vE8bXAtOrgFotMB8GA1UdIwQY MBaAFDNTPZ7vWoEo3ENdAvIjMoA0jcK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYt ZDJjM2I0YzA5ZWExLzEvM0pET2dhdTRHWElsUC04VHh0Y0MwNnVBV2kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYtZDJjM2I0YzA5ZWEx LzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwR+gMA0G CSqGSIb3DQEBCwUAA4IBAQBe2AlB+A4gnTt9RGtzNZPuwDbsQuFs+52RmFCR+6jM SG8Jg4f5eP0WZgsqZyvO1mpDANb5YzAZ8rpv74o2GbiwNetZwRN8htwAwGfzkxCa /D9OJA1lZNHB6EBkn0Y5gFmpvkI77kTrOkxcfNp8zn1RvqTTKJU1aZaAfKqWxCKk kFwxEVqagmKYBn0qVkC+J6ViUf1ygmGx3B32u4p1p8Mwu681uiPErlethe9GWond yn9h1i2Y7CleGwFebDutUbY811rhzz5FG9XAUKuUt7Xs/WuoaX3FAND553F6MUz7 EkF+1beI/jE1/RZZrMjSQOLBcol0XT2qWXaBf/jPlZ8m -----END CERTIFICATE-----Generated at Sat Jan 3 06:25:51 2026 by rpki-client