This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/3UqTULNUjwAb8aM5tZWDkdsXWeo.roa File: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (raw, json) Hash identifier: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE= Subject key identifier: DD:4A:93:50:B3:54:8F:00:1B:F1:A3:39:B5:95:83:91:DB:17:59:EA Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E3892627BFDC8F62BF3E67D7EEE56CD Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/3UqTULNUjwAb8aM5tZWDkdsXWeo.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57767 IP address blocks: 213.174.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:92:62:7b:fd:c8:f6:2b:f3:e6:7d:7e:ee:56:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd4a9350b3548f001bf1a339b5958391db1759ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:a7:4c:57:73:95:a1:ea:f6:97:5f:ad:3e: 73:26:b4:b0:af:c7:4d:f4:8d:ad:54:f5:61:3e:3c: 6a:44:d8:64:14:12:75:49:76:fa:62:50:49:54:b2: 52:0e:e0:0b:08:5d:ad:00:e5:e3:72:37:d2:90:7f: dc:93:aa:ba:68:5e:d6:13:0b:82:7a:e4:77:9a:e6: 5b:f0:ad:2d:f4:77:9b:79:4a:11:58:55:d3:54:46: f4:1f:61:1d:dd:9a:70:f8:aa:3e:f6:ee:3d:34:c8: b3:ff:22:c2:a3:a3:8a:fe:9e:49:9b:04:c9:01:0f: 05:63:1f:72:03:b5:15:46:7a:50:a5:69:cc:68:17: 0a:3c:6a:5f:2f:ba:6d:c3:2d:1e:3d:84:a7:c9:18: 1d:2b:49:29:73:00:18:0f:ff:b1:c1:94:07:68:8d: cc:a2:ce:b4:c8:17:7e:9e:12:94:4c:ac:dd:44:45: 28:f8:89:30:80:3a:83:95:b0:b7:08:4a:91:15:fd: 60:32:85:23:21:70:d7:a8:ea:05:9a:fe:48:ca:9a: 1b:50:a4:29:46:e9:15:81:72:db:d1:c5:03:08:e7: 99:a7:df:46:c0:2f:ea:de:c9:3b:61:b5:f8:e2:cb: 46:95:04:ee:0f:49:cd:ae:da:12:1c:c0:01:d4:82: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4A:93:50:B3:54:8F:00:1B:F1:A3:39:B5:95:83:91:DB:17:59:EA X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/3UqTULNUjwAb8aM5tZWDkdsXWeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.174.6.0/24 Signature Algorithm: sha256WithRSAEncryption a6:f1:eb:d5:f8:c4:d3:6c:f6:1c:35:fd:fe:e4:85:ab:b3:95: 3b:fe:ad:ec:06:9a:45:70:30:2f:8d:b0:ed:6e:28:3e:48:56: d5:08:2f:de:8a:f4:16:26:4d:c5:70:bd:6d:0d:16:68:96:2d: ed:0e:31:fd:bf:1c:83:9d:a9:91:9b:65:38:b4:39:6a:a1:85: dd:bd:3d:9e:1d:fc:4b:fe:06:7b:13:75:0b:fb:c5:1e:ea:8a: d1:ba:ef:43:08:4d:cb:c0:6e:52:1c:8d:c4:74:f1:46:75:69: 91:8b:d3:ad:d4:e1:53:a3:85:8b:e5:34:6a:df:70:05:b8:0b: af:76:a0:29:d6:13:a7:e0:cc:2d:60:3b:fe:3c:fc:40:20:83: 2e:2a:7c:f9:96:ab:a7:fc:4d:0b:6d:09:5f:35:b8:4f:9b:1f: fe:c7:a7:d6:0f:80:d7:19:22:a9:97:45:4a:d1:e3:bf:0d:2e: ea:ce:0e:b6:ba:5f:18:b0:b4:17:a1:74:dc:a9:03:5b:f0:2b: 26:97:9e:7d:f2:d5:e4:c0:1e:1c:27:03:ca:49:3f:2e:54:3b: b5:82:d7:43:0a:2b:f3:57:8c:5a:7d:4e:96:1b:1d:c8:99:c7: 48:7d:6f:0b:2d:0e:20:b2:a6:7b:b8:e7:41:72:aa:78:d1:6e: 14:4d:f4:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJJie/3I9ivz5n1+7lbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDRhOTM1MGIzNTQ4ZjAwMWJmMWEzMzliNTk1ODM5MWRiMTc1OWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuinTFdzlaHq9pdfrT5zJrSwr8dN 9I2tVPVhPjxqRNhkFBJ1SXb6YlBJVLJSDuALCF2tAOXjcjfSkH/ck6q6aF7WEwuC euR3muZb8K0t9HebeUoRWFXTVEb0H2Ed3Zpw+Ko+9u49NMiz/yLCo6OK/p5JmwTJ AQ8FYx9yA7UVRnpQpWnMaBcKPGpfL7ptwy0ePYSnyRgdK0kpcwAYD/+xwZQHaI3M os60yBd+nhKUTKzdREUo+IkwgDqDlbC3CEqRFf1gMoUjIXDXqOoFmv5IypobUKQp RukVgXLb0cUDCOeZp99GwC/q3sk7YbX44stGlQTuD0nNrtoSHMAB1ILz8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN1Kk1CzVI8AG/GjObWVg5HbF1nqMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvM1VxVFVMTlVqd0FiOGFNNXRaV0RrZHNYV2VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a4GMA0G CSqGSIb3DQEBCwUAA4IBAQCm8evV+MTTbPYcNf3+5IWrs5U7/q3sBppFcDAvjbDt big+SFbVCC/eivQWJk3FcL1tDRZoli3tDjH9vxyDnamRm2U4tDlqoYXdvT2eHfxL /gZ7E3UL+8Ue6orRuu9DCE3LwG5SHI3EdPFGdWmRi9Ot1OFTo4WL5TRq33AFuAuv dqAp1hOn4MwtYDv+PPxAIIMuKnz5lqun/E0LbQlfNbhPmx/+x6fWD4DXGSKpl0VK 0eO/DS7qzg62ul8YsLQXoXTcqQNb8Csml5598tXkwB4cJwPKST8uVDu1gtdDCivz V4xafU6WGx3ImcdIfW8LLQ4gsqZ7uOdBcqp40W4UTfTq -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:51 2026 by rpki-client