This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa File: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (raw, json) Hash identifier: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho= Subject key identifier: DE:68:F0:59:78:24:4E:66:72:9E:13:B4:33:0C:18:61:F7:94:81:84 Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Certificate serial: 019B7F85962D4CA4ABE49A2F327EA74B22B8 Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60175 IP address blocks: 91.212.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:96:2d:4c:a4:ab:e4:9a:2f:32:7e:a7:4b:22:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8 Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de68f05978244e66729e13b4330c1861f7948184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:51:9f:4a:d9:a3:c7:c2:21:8f:df:a5:43: 62:cc:13:5c:d7:34:5f:9b:f2:8b:5e:25:50:e6:6a: 62:62:d7:4d:98:7b:de:de:a6:04:a4:fb:31:f6:b9: 8d:28:9d:68:41:26:de:50:de:e0:86:72:fd:f2:26: b8:a7:98:25:a6:d3:79:67:4c:d8:1a:21:d0:a0:17: a9:52:4a:4e:e3:96:cd:88:7e:31:3a:9e:de:e0:00: bb:f8:18:90:3f:bd:1b:4d:49:78:38:7c:77:cb:98: bc:a6:04:0f:3f:d5:17:59:c0:98:57:5d:27:50:55: ce:96:59:1e:37:84:bb:fd:bc:12:9a:a0:ac:be:98: ad:cc:7a:37:40:c8:71:bf:50:3a:cd:b1:aa:dd:74: 9f:7b:5f:9c:c5:7c:9e:d4:13:19:56:ee:2f:a6:87: da:ae:18:b3:11:e8:82:51:29:1e:8f:ee:eb:3d:aa: 3c:56:2a:e1:64:34:b1:90:da:ab:dd:7b:84:27:03: c2:e5:f5:3c:31:09:ff:20:2e:46:10:72:09:28:1f: 6d:07:42:3b:49:01:de:f9:7f:89:fa:5c:37:96:00: 0a:e2:5e:de:aa:34:b6:a4:e6:8e:0a:2b:44:2c:5d: c8:01:d8:6f:a1:1f:f6:26:cc:e2:45:ee:47:7b:28: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:F0:59:78:24:4E:66:72:9E:13:B4:33:0C:18:61:F7:94:81:84 X509v3 Authority Key Identifier: keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.83.0/24 Signature Algorithm: sha256WithRSAEncryption 18:c8:02:74:de:7a:64:a2:98:20:ba:46:bc:ea:2c:6f:a8:25: 93:8e:1b:ae:1b:f1:3c:cc:fd:4c:d7:54:3c:6e:29:bd:32:fc: 2b:0d:44:82:1a:e5:05:ea:ba:28:af:34:12:f8:da:50:31:b3: 0d:9f:ec:df:0a:b3:5e:18:9d:91:f2:03:0f:5c:40:70:c9:8f: 3d:14:02:73:d0:d1:54:6d:be:b8:43:ca:88:b4:f8:3d:cc:72: eb:38:b7:9e:5a:48:a5:c4:a0:40:db:72:bb:34:40:58:4e:a5: 2d:f0:64:f0:61:2f:45:15:d2:6c:28:f1:41:78:5b:97:bd:41: 76:f0:c4:4f:22:00:5b:03:22:00:9a:b6:58:d4:ad:d4:af:75: 5d:a3:1d:ac:e0:b0:14:f9:88:e9:5d:02:93:8e:92:34:b0:1d: 11:ab:66:22:4b:86:9e:4e:e4:89:2f:ce:20:8d:c1:d8:2c:2c: 8c:42:3a:97:c8:b1:a7:7d:59:5c:66:92:a6:85:07:5f:35:a5: 20:aa:5e:73:9c:3a:1c:d1:ad:4d:f2:9d:a3:03:54:96:d5:f7: 6d:87:08:10:32:a9:ee:da:6b:26:cc:1a:8f:ba:0b:76:34:62: 0c:7d:a4:94:75:e8:ab:73:f7:4b:c3:c0:76:3e:9e:e7:68:1c: 8a:50:77:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hZYtTKSr5JovMn6nSyK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYzVhZWVmZTlkMTI2ZWMzNjEyZGZmMmMwODIxMzU0YjE1 YmJiYTgwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTY4ZjA1OTc4MjQ0ZTY2NzI5ZTEzYjQzMzBjMTg2MWY3OTQ4MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y9Rn0rZo8fCIY/fpUNizBNc1zRf m/KLXiVQ5mpiYtdNmHve3qYEpPsx9rmNKJ1oQSbeUN7ghnL98ia4p5glptN5Z0zY GiHQoBepUkpO45bNiH4xOp7e4AC7+BiQP70bTUl4OHx3y5i8pgQPP9UXWcCYV10n UFXOllkeN4S7/bwSmqCsvpitzHo3QMhxv1A6zbGq3XSfe1+cxXye1BMZVu4vpofa rhizEeiCUSkej+7rPao8VirhZDSxkNqr3XuEJwPC5fU8MQn/IC5GEHIJKB9tB0I7 SQHe+X+J+lw3lgAK4l7eqjS2pOaOCitELF3IAdhvoR/2JsziRe5Heyi3BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5o8Fl4JE5mcp4TtDMMGGH3lIGEMB8GA1UdIwQY MBaAFJLFru/p0SbsNhLf8sCCE1SxW7uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMt NDlmNGY3ODkxMzViLzEvM21qd1dYZ2tUbVp5bmhPME13d1lZZmVVZ1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMtNDlmNGY3ODkxMzVi LzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RTMA0G CSqGSIb3DQEBCwUAA4IBAQAYyAJ03npkopgguka86ixvqCWTjhuuG/E8zP1M11Q8 bim9MvwrDUSCGuUF6roorzQS+NpQMbMNn+zfCrNeGJ2R8gMPXEBwyY89FAJz0NFU bb64Q8qItPg9zHLrOLeeWkilxKBA23K7NEBYTqUt8GTwYS9FFdJsKPFBeFuXvUF2 8MRPIgBbAyIAmrZY1K3Ur3Vdox2s4LAU+YjpXQKTjpI0sB0Rq2YiS4aeTuSJL84g jcHYLCyMQjqXyLGnfVlcZpKmhQdfNaUgql5znDoc0a1N8p2jA1SW1fdthwgQMqnu 2msmzBqPugt2NGIMfaSUdeirc/dLw8B2Pp7naByKUHeC -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:04 2026 by rpki-client