This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/3bVeZ4jtU_nod0fE248hvJ8HwmE.roa File: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (raw, json) Hash identifier: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE= Subject key identifier: DD:B5:5E:67:88:ED:53:F9:E8:77:47:C4:DB:8F:21:BC:9F:07:C2:61 Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df Certificate serial: 019B7C11E8913DA7558F9C80322662EFD23C Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/3bVeZ4jtU_nod0fE248hvJ8HwmE.roa Signing time: Fri 02 Jan 2026 00:18:26 +0000 ROA not before: Fri 02 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209275 IP address blocks: 185.174.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e8:91:3d:a7:55:8f:9c:80:32:26:62:ef:d2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df Validity Not Before: Jan 2 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddb55e6788ed53f9e87747c4db8f21bc9f07c261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:62:dc:5f:c6:ef:d7:e7:80:d5:a2:d0:4d: c0:e7:c3:95:41:9f:f2:57:b5:e6:2a:72:29:90:a1: 2b:25:cc:d9:57:5c:a5:13:65:fe:75:a2:93:47:a3: 48:71:3a:dd:54:08:97:1d:6d:9c:3c:0d:22:97:10: b2:3b:31:93:48:fe:80:61:62:b8:3d:9e:52:f2:40: 7f:2b:d4:b1:61:c0:61:07:c1:70:7a:da:cf:45:bf: 47:4a:f9:53:4b:5b:da:ee:bc:5f:73:75:15:6a:6b: 0e:4a:89:b4:0e:57:36:a2:db:e3:6a:20:97:06:aa: 0a:71:33:bf:30:2c:82:04:3e:4f:c0:c3:2a:76:9b: 56:0e:25:5c:55:e7:85:05:6e:16:22:dd:4c:ed:3c: ea:98:98:71:d5:e1:e2:35:78:9c:31:aa:8f:90:fb: 73:a7:51:a2:f5:a3:03:f4:d0:02:d7:7b:70:b6:f1: c1:f1:67:0b:a4:17:1f:e1:56:68:30:73:51:ee:df: 4d:76:22:f5:90:52:51:ee:fb:ff:8a:d4:69:4b:22: 4d:5e:bd:0e:a5:c9:63:d1:e7:88:d8:7b:38:b2:78: 44:5f:05:9d:b5:11:c6:5e:57:14:e0:d5:1a:d0:06: cd:90:ee:a7:67:06:4d:94:03:20:3d:ab:54:40:79: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B5:5E:67:88:ED:53:F9:E8:77:47:C4:DB:8F:21:BC:9F:07:C2:61 X509v3 Authority Key Identifier: keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/3bVeZ4jtU_nod0fE248hvJ8HwmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.31.0/24 Signature Algorithm: sha256WithRSAEncryption 58:e6:df:c4:fa:65:77:3e:b7:ce:bc:c0:c9:de:37:c7:5e:a8: 0e:15:b8:ff:71:7a:a9:2e:b0:c6:eb:6f:60:f6:8b:1a:a0:4b: e6:ca:76:13:68:02:e5:44:a8:4e:52:fd:2a:4f:e0:ba:d6:de: 6d:2d:b8:cd:f1:35:ea:c8:57:02:99:06:2d:31:95:b5:09:36: 02:96:5e:6e:b4:5d:d7:02:dd:3d:a4:52:19:47:39:f2:95:6c: 8b:ef:b4:de:76:05:d9:07:40:f9:b9:30:92:39:1b:f2:2d:be: a4:8b:d3:d5:20:20:5f:9f:78:f2:dc:57:13:26:b6:9d:12:52: 11:6c:bc:67:82:09:4e:67:1e:fd:b3:27:88:2d:7b:4f:38:48: ba:54:8d:1f:f7:e2:a7:e8:85:b4:ae:b4:fb:3d:a6:da:3e:f5: e6:df:97:ff:d2:fc:4a:8a:61:9a:70:8f:5f:34:e4:16:aa:b8: fc:27:7d:8c:e5:6b:d1:b0:15:e4:4d:f7:96:c1:30:65:53:1b: 03:88:49:6a:fc:97:73:79:a0:88:ad:8f:6d:02:0c:78:32:50: dd:19:3e:17:4f:04:a4:35:2d:cf:d0:c6:f1:9f:f3:b0:cb:aa: 3d:e4:33:1b:ae:15:57:91:dd:b9:78:55:ad:65:65:c7:ad:e4: ff:9d:fa:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EeiRPadVj5yAMiZi79I8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTEzOGUxZmFjZjdiNjVkYmI1NzVmYTdkNDcyNDBjMjc4 YjM0ZGYwHhcNMjYwMTAyMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGI1NWU2Nzg4ZWQ1M2Y5ZTg3NzQ3YzRkYjhmMjFiYzlmMDdjMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRti3F/G79fngNWi0E3A58OVQZ/y V7XmKnIpkKErJczZV1ylE2X+daKTR6NIcTrdVAiXHW2cPA0ilxCyOzGTSP6AYWK4 PZ5S8kB/K9SxYcBhB8FwetrPRb9HSvlTS1va7rxfc3UVamsOSom0Dlc2otvjaiCX BqoKcTO/MCyCBD5PwMMqdptWDiVcVeeFBW4WIt1M7TzqmJhx1eHiNXicMaqPkPtz p1Gi9aMD9NAC13twtvHB8WcLpBcf4VZoMHNR7t9NdiL1kFJR7vv/itRpSyJNXr0O pclj0eeI2Hs4snhEXwWdtRHGXlcU4NUa0AbNkO6nZwZNlAMgPatUQHlhdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN21XmeI7VP56HdHxNuPIbyfB8JhMB8GA1UdIwQY MBaAFJ1ROOH6z3tl27V1+n1HJAwnizTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDAxZmYtODMyMy00Yjg5LWJlM2Qt YzJlZmViM2IzMmE1LzEvM2JWZVo0anRVX25vZDBmRTI0OGh2SjhId21FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDAxZmYtODMyMy00Yjg5LWJlM2QtYzJlZmViM2IzMmE1 LzEvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua4fMA0G CSqGSIb3DQEBCwUAA4IBAQBY5t/E+mV3PrfOvMDJ3jfHXqgOFbj/cXqpLrDG629g 9osaoEvmynYTaALlRKhOUv0qT+C61t5tLbjN8TXqyFcCmQYtMZW1CTYCll5utF3X At09pFIZRznylWyL77TedgXZB0D5uTCSORvyLb6ki9PVICBfn3jy3FcTJradElIR bLxngglOZx79syeILXtPOEi6VI0f9+Kn6IW0rrT7PabaPvXm35f/0vxKimGacI9f NOQWqrj8J32M5WvRsBXkTfeWwTBlUxsDiElq/JdzeaCIrY9tAgx4MlDdGT4XTwSk NS3P0Mbxn/Owy6o95DMbrhVXkd25eFWtZWXHreT/nfpL -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:57 2026 by rpki-client