This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/3fcVrImGg7jj5KwrtAd-bYf7aAM.roa File: 3fcVrImGg7jj5KwrtAd-bYf7aAM.roa (raw, json) Hash identifier: S1b9AmYLLzxAfeSxaH7YVQhFBj8TwadZxNGNH30/GyI= Subject key identifier: DD:F7:15:AC:89:86:83:B8:E3:E4:AC:2B:B4:07:7E:6D:87:FB:68:03 Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Certificate serial: 019B7A5B8514409B920773BA01CB29792483 Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/3fcVrImGg7jj5KwrtAd-bYf7aAM.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8468 IP address blocks: 185.146.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:85:14:40:9b:92:07:73:ba:01:cb:29:79:24:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddf715ac898683b8e3e4ac2bb4077e6d87fb6803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:dc:e4:30:0c:76:4f:9e:a7:ec:8f:2b:7a: 7f:c0:ba:88:e4:f8:25:1b:fb:41:a6:ce:68:1c:61: 5e:5e:89:2e:e4:49:8f:31:e8:08:f9:e2:65:05:d4: 11:90:a1:b4:85:48:4c:ef:28:61:6a:1b:c2:6f:db: f8:fb:0e:73:c2:ef:57:0c:42:45:55:23:90:15:b8: e3:9d:46:d4:72:b8:86:25:a6:0e:22:e6:9e:d4:cb: e7:52:b4:1f:65:42:fb:9a:94:7f:6d:13:86:5b:4e: 83:2b:5e:a3:5a:04:e3:20:53:28:fc:dd:ad:82:3e: 27:1f:3d:2f:f3:e6:a2:1a:b7:3e:d1:aa:be:31:d6: f1:ef:cd:c3:15:da:6a:45:85:1c:70:a5:03:c6:8f: 3d:07:5d:34:64:eb:2f:6f:b2:8e:c5:2c:04:0b:68: 62:01:e5:bb:ce:27:b3:20:60:d0:00:e9:98:8f:d0: f8:a5:49:87:19:47:6a:c5:c4:7e:15:2f:1a:9c:87: a7:7d:90:b8:42:a5:28:20:83:26:c4:91:e0:a1:f7: 8d:d8:9b:47:d2:0d:d9:fc:53:35:02:55:63:fd:c2: c4:20:81:12:fa:c8:2d:d7:0a:85:db:1b:8d:66:d8: 58:ee:f8:8b:1d:19:cd:ed:2e:c6:b1:02:83:c6:90: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F7:15:AC:89:86:83:B8:E3:E4:AC:2B:B4:07:7E:6D:87:FB:68:03 X509v3 Authority Key Identifier: keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/3fcVrImGg7jj5KwrtAd-bYf7aAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.44.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:1b:93:21:21:54:aa:61:d3:e9:02:18:fb:42:93:30:a9:ae: 95:5c:64:2c:1e:a0:b2:38:98:d0:b9:2f:9f:1c:17:70:37:8a: 7c:7a:5e:a4:89:03:44:a0:cc:6d:e5:88:6b:f6:48:63:9a:49: 5b:a6:ef:79:84:28:b4:fd:1d:53:bf:a7:86:4c:93:bb:4f:f4: 22:49:1e:f0:58:95:1a:7a:b9:4c:da:fd:96:e7:1b:d1:b3:65: ea:cb:ed:a3:3c:b3:55:9e:88:3e:cd:17:a1:f9:9d:30:b9:f1: 3a:98:f5:74:ed:f1:19:62:8b:ec:f8:ee:00:b8:4d:e4:b9:eb: c9:db:a2:10:f7:60:7a:d4:12:6e:0f:9e:f1:68:59:c3:10:2d: 92:57:c0:97:97:07:f4:f5:aa:73:00:a2:94:49:ba:96:6b:28: 54:ef:7b:69:6a:23:e4:9b:00:39:c6:36:ab:e8:15:0b:f9:7d: 9c:c8:cc:7f:e9:df:f7:5b:4c:09:94:a6:c1:5c:10:2b:a4:fd: dd:b1:02:42:21:e7:62:59:94:76:f0:54:bb:a5:79:a8:a5:1c: e3:f2:4b:78:f4:74:c4:49:e1:b7:c0:57:fc:8d:63:de:0e:af: 98:dd:b0:69:35:54:28:9f:b9:9a:17:de:d5:8d:e1:65:02:43: 4f:d6:9e:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4UUQJuSB3O6AcspeSSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk M2UzZDQwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGY3MTVhYzg5ODY4M2I4ZTNlNGFjMmJiNDA3N2U2ZDg3ZmI2ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR/c5DAMdk+ep+yPK3p/wLqI5Pgl G/tBps5oHGFeXoku5EmPMegI+eJlBdQRkKG0hUhM7yhhahvCb9v4+w5zwu9XDEJF VSOQFbjjnUbUcriGJaYOIuae1MvnUrQfZUL7mpR/bROGW06DK16jWgTjIFMo/N2t gj4nHz0v8+aiGrc+0aq+Mdbx783DFdpqRYUccKUDxo89B100ZOsvb7KOxSwEC2hi AeW7ziezIGDQAOmYj9D4pUmHGUdqxcR+FS8anIenfZC4QqUoIIMmxJHgofeN2JtH 0g3Z/FM1AlVj/cLEIIES+sgt1wqF2xuNZthY7viLHRnN7S7GsQKDxpCBVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN33FayJhoO44+SsK7QHfm2H+2gDMB8GA1UdIwQY MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt Y2ExZTVmMDgxOTUwLzEvM2ZjVnJJbUdnN2pqNUt3cnRBZC1iWWY3YUFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZIsMA0G CSqGSIb3DQEBCwUAA4IBAQAbG5MhIVSqYdPpAhj7QpMwqa6VXGQsHqCyOJjQuS+f HBdwN4p8el6kiQNEoMxt5Yhr9khjmklbpu95hCi0/R1Tv6eGTJO7T/QiSR7wWJUa erlM2v2W5xvRs2Xqy+2jPLNVnog+zReh+Z0wufE6mPV07fEZYovs+O4AuE3kuevJ 26IQ92B61BJuD57xaFnDEC2SV8CXlwf09apzAKKUSbqWayhU73tpaiPkmwA5xjar 6BUL+X2cyMx/6d/3W0wJlKbBXBArpP3dsQJCIediWZR28FS7pXmopRzj8kt49HTE SeG3wFf8jWPeDq+Y3bBpNVQon7maF97VjeFlAkNP1p64 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:14 2026 by rpki-client