This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/3IZRuu7sxQoFyN6jYXCmKYN_ZMk.roa File: 3IZRuu7sxQoFyN6jYXCmKYN_ZMk.roa (raw, json) Hash identifier: gAnkb8zd3PHjDZTfC8dT4Ka5LoLCtOrff/CEiB269iI= Subject key identifier: DC:86:51:BA:EE:EC:C5:0A:05:C8:DE:A3:61:70:A6:29:83:7F:64:C9 Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Certificate serial: 019B77C7657949E3773CE134E9769948A6EF Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/3IZRuu7sxQoFyN6jYXCmKYN_ZMk.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202987 IP address blocks: 185.127.124.0/24 maxlen: 24 185.127.125.0/24 maxlen: 24 185.127.126.0/24 maxlen: 24 185.127.127.0/24 maxlen: 24 193.27.232.0/24 maxlen: 24 193.27.233.0/24 maxlen: 24 193.27.234.0/24 maxlen: 24 193.27.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:65:79:49:e3:77:3c:e1:34:e9:76:99:48:a6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc8651baeeecc50a05c8dea36170a629837f64c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:5c:52:51:a7:df:5c:b1:fa:0f:1d:90:c7: 4f:35:28:22:b7:d9:8a:df:ae:22:a5:b6:8d:69:97: 3f:c4:d3:28:28:3c:54:cc:73:9c:d8:ca:6d:16:4d: 03:ad:3f:a2:0f:ab:05:bb:45:f9:95:27:2b:2b:7e: 61:d6:5c:75:ef:8e:9b:4a:ab:e8:27:7a:8d:e9:e9: fc:81:bd:5a:bb:a2:1f:3f:1e:49:28:26:e8:b4:2f: ac:2b:ff:26:f5:82:be:6e:1e:c4:c1:b3:40:f5:8d: a7:2e:4f:66:fd:b6:52:60:e8:69:1a:47:14:80:c7: 56:1f:2f:81:03:0a:58:42:80:0d:cf:1f:37:33:91: f9:7e:81:2f:d5:db:20:b2:6b:10:3d:0d:d5:7f:17: 40:c1:1a:da:fc:64:90:58:99:d1:0c:d2:a0:4b:3a: cf:37:24:26:5b:82:77:1a:5b:0e:dc:c5:b0:34:ff: bc:7d:7d:17:54:b8:56:fb:02:70:58:43:80:1e:b3: 85:7d:5b:8e:11:38:44:9d:f2:f3:7b:6c:14:0f:7b: d1:ad:73:80:b3:20:ff:f6:b1:39:3e:b4:fb:cd:32: 71:f4:68:25:20:ae:e9:5d:bb:a3:42:5e:5e:c9:3d: 88:75:de:d1:21:47:a9:6d:e4:b9:57:67:5a:a4:bd: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:86:51:BA:EE:EC:C5:0A:05:C8:DE:A3:61:70:A6:29:83:7F:64:C9 X509v3 Authority Key Identifier: keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/3IZRuu7sxQoFyN6jYXCmKYN_ZMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.124.0/22 193.27.232.0/22 Signature Algorithm: sha256WithRSAEncryption 12:74:3b:d9:6e:83:42:60:62:5f:62:31:8d:b8:7a:54:8c:bf: 10:cc:f8:ce:0d:98:57:22:28:59:17:2f:ba:f6:3e:0a:e0:62: 49:1b:9e:a7:0f:a8:81:4f:48:c1:a7:96:da:0e:08:b7:7e:93: 25:e3:cb:7c:33:53:12:71:b6:52:44:c2:10:3d:47:3e:1b:ca: a4:10:01:6c:0b:5e:01:9e:48:df:44:15:79:6f:d1:75:a7:c5: 16:f1:b8:a4:c6:ca:7e:d7:d4:0e:5a:71:6c:62:18:b2:bc:08: 5b:fc:27:90:20:d7:f1:99:a1:64:44:c9:02:a4:b3:1e:c1:20: 62:fb:5a:9e:3f:38:08:1e:55:7a:b6:d6:a5:8d:88:b1:92:3a: 56:be:4b:40:d6:8f:d5:a8:38:7a:41:ff:08:25:c4:6c:80:19: cc:ab:1e:79:fb:dc:f3:d0:e6:88:f9:19:85:2b:60:ec:67:82: 72:8a:83:8e:20:ba:a7:c1:c4:97:81:13:d2:aa:76:75:f4:24: 1f:94:a1:69:67:17:c9:1c:a6:96:f0:ac:b9:51:f0:6b:ce:97: 0c:70:ce:fa:e9:c7:3e:7d:27:ac:a0:2e:aa:69:de:c5:26:30: a7:c2:2b:96:5d:a3:21:2e:43:0e:2a:b1:cc:f7:d7:22:25:16: 7d:7a:66:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2V5SeN3POE06XaZSKbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDI4NWRmNWIwMzllMGYwNGUyZGZlY2UyOGE1YThmYmVj NmU5MzgwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzg2NTFiYWVlZWNjNTBhMDVjOGRlYTM2MTcwYTYyOTgzN2Y2NGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOFcUlGn31yx+g8dkMdPNSgit9mK 364ipbaNaZc/xNMoKDxUzHOc2MptFk0DrT+iD6sFu0X5lScrK35h1lx1746bSqvo J3qN6en8gb1au6IfPx5JKCbotC+sK/8m9YK+bh7EwbNA9Y2nLk9m/bZSYOhpGkcU gMdWHy+BAwpYQoANzx83M5H5foEv1dsgsmsQPQ3VfxdAwRra/GSQWJnRDNKgSzrP NyQmW4J3GlsO3MWwNP+8fX0XVLhW+wJwWEOAHrOFfVuOEThEnfLze2wUD3vRrXOA syD/9rE5PrT7zTJx9GglIK7pXbujQl5eyT2Idd7RIUepbeS5V2dapL3dYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNyGUbru7MUKBcjeo2FwpimDf2TJMB8GA1UdIwQY MBaAFMEChd9bA54PBOLf7OKKWo++xuk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUt NTJhZmM3N2NhMThmLzEvM0laUnV1N3N4UW9GeU42allYQ21LWU5fWk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUtNTJhZmM3N2NhMThm LzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuX98AwQC wRvoMA0GCSqGSIb3DQEBCwUAA4IBAQASdDvZboNCYGJfYjGNuHpUjL8QzPjODZhX IihZFy+69j4K4GJJG56nD6iBT0jBp5baDgi3fpMl48t8M1MScbZSRMIQPUc+G8qk EAFsC14BnkjfRBV5b9F1p8UW8bikxsp+19QOWnFsYhiyvAhb/CeQINfxmaFkRMkC pLMewSBi+1qePzgIHlV6ttaljYixkjpWvktA1o/VqDh6Qf8IJcRsgBnMqx55+9zz 0OaI+RmFK2DsZ4JyioOOILqnwcSXgRPSqnZ19CQflKFpZxfJHKaW8Ky5UfBrzpcM cM766cc+fSesoC6qad7FJjCnwiuWXaMhLkMOKrHM99ciJRZ9emZ2 -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:47 2026 by rpki-client