This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/3aV_UzeZWkVLYdBcdJhGvghnl4c.roa File: 3aV_UzeZWkVLYdBcdJhGvghnl4c.roa (raw, json) Hash identifier: zIZrgZNehbD7uBxLcLO/tdVtklU882uJK8x5m1rGUnw= Subject key identifier: DD:A5:7F:53:37:99:5A:45:4B:61:D0:5C:74:98:46:BE:08:67:97:87 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019B76EAE7488601F50190B4EA90C241790E Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/3aV_UzeZWkVLYdBcdJhGvghnl4c.roa Signing time: Thu 01 Jan 2026 00:17:44 +0000 ROA not before: Thu 01 Jan 2026 00:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28917 IP address blocks: 82.194.244.0/22 maxlen: 22 89.188.164.0/22 maxlen: 24 89.188.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e7:48:86:01:f5:01:90:b4:ea:90:c2:41:79:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dda57f5337995a454b61d05c749846be08679787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:a1:72:ae:a3:b6:ab:36:23:5a:2e:0a:8d: 25:89:d8:33:01:aa:0b:29:dc:73:43:39:1b:e1:f6: fd:91:eb:06:1f:39:ff:ce:66:b1:b6:f8:91:39:8e: e6:79:2a:df:61:e9:b8:53:68:c4:72:f9:90:23:3d: 03:f7:0d:bc:d2:44:ec:ad:57:03:e3:c8:3d:bf:ea: 54:c4:cc:41:e0:9c:f5:bc:39:5b:eb:eb:0f:3f:c6: 11:57:00:93:6b:eb:a1:95:b8:53:bd:8e:12:f1:70: 0c:9b:ab:95:ce:5b:82:c6:ac:7e:95:0c:8f:55:bf: ad:d8:0a:28:d8:bb:b3:45:de:47:5b:63:60:58:82: 9c:1b:6f:99:72:f9:9b:85:d0:3b:b7:0d:d8:13:44: e7:bd:e3:d7:fc:73:5c:01:94:a7:17:34:8a:ea:2e: b2:32:94:bd:92:7c:81:bf:62:d1:9f:43:40:e7:97: 2c:e2:50:df:43:8e:df:7e:99:dc:08:73:91:94:64: ef:25:90:b1:15:7f:dc:03:f4:df:be:04:95:f4:0f: 88:b3:55:2a:ce:dc:38:e9:c7:77:dd:52:dd:6d:90: 78:f2:92:c3:33:2b:4b:c8:b1:a8:6a:a5:06:6d:5a: 27:8c:5f:1a:63:21:32:e7:86:86:2c:d0:24:fb:a6: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A5:7F:53:37:99:5A:45:4B:61:D0:5C:74:98:46:BE:08:67:97:87 X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/3aV_UzeZWkVLYdBcdJhGvghnl4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.194.244.0/22 89.188.164.0/22 89.188.176.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:ad:59:f8:2d:82:4c:b4:b9:ee:72:2b:53:a7:54:a8:db:2a: 45:36:0d:c0:89:c6:8c:75:04:22:67:73:c4:c2:fd:f2:f2:e8: bb:0f:36:ed:48:87:27:2e:1f:e5:8b:8f:78:3e:4e:4c:e3:9f: 04:20:08:26:b0:97:e5:af:99:17:ae:e9:51:b2:dd:51:96:ba: fc:63:39:61:bb:db:64:49:6e:cc:7b:a3:7f:7b:90:45:c5:cf: 95:47:78:76:e2:30:8f:03:58:48:f8:7f:30:ea:81:7b:e7:a7: c5:85:7e:a3:b4:f8:c6:13:29:2e:d8:0a:16:a3:ed:d0:ce:82: c0:a3:7b:f2:ca:84:77:42:51:77:73:84:f5:2d:04:d5:7b:4b: 5c:ae:17:da:21:33:f2:91:15:22:57:92:a3:ab:26:ce:6f:61: 68:82:55:f5:c7:6d:51:e2:6d:0e:42:d0:bb:62:1a:8e:12:5b: e7:0d:32:e8:48:d7:a9:77:89:5a:3e:c2:6d:08:f3:fb:52:c6: 99:79:48:09:68:9b:4d:d1:5e:2f:9c:47:a6:4b:59:50:31:da: d7:14:34:c5:39:b0:eb:5c:4b:f9:f6:59:76:d8:55:f1:03:0c: 96:16:ba:ca:ac:56:4d:95:9a:6a:30:11:f9:93:36:98:09:93: 37:f0:60:8c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26udIhgH1AZC06pDCQXkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGE1N2Y1MzM3OTk1YTQ1NGI2MWQwNWM3NDk4NDZiZTA4Njc5Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUGhcq6jtqs2I1ouCo0lidgzAaoL KdxzQzkb4fb9kesGHzn/zmaxtviROY7meSrfYem4U2jEcvmQIz0D9w280kTsrVcD 48g9v+pUxMxB4Jz1vDlb6+sPP8YRVwCTa+uhlbhTvY4S8XAMm6uVzluCxqx+lQyP Vb+t2Aoo2LuzRd5HW2NgWIKcG2+ZcvmbhdA7tw3YE0TnvePX/HNcAZSnFzSK6i6y MpS9knyBv2LRn0NA55cs4lDfQ47ffpncCHORlGTvJZCxFX/cA/TfvgSV9A+Is1Uq ztw46cd33VLdbZB48pLDMytLyLGoaqUGbVonjF8aYyEy54aGLNAk+6YsTQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN2lf1M3mVpFS2HQXHSYRr4IZ5eHMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvM2FWX1V6ZVpXa1ZMWWRCY2RKaEd2Z2hubDRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUsL0AwQC WbykAwQCWbywMA0GCSqGSIb3DQEBCwUAA4IBAQBvrVn4LYJMtLnucitTp1So2ypF Ng3AicaMdQQiZ3PEwv3y8ui7DzbtSIcnLh/li494Pk5M458EIAgmsJflr5kXrulR st1Rlrr8Yzlhu9tkSW7Me6N/e5BFxc+VR3h24jCPA1hI+H8w6oF756fFhX6jtPjG Eyku2AoWo+3QzoLAo3vyyoR3QlF3c4T1LQTVe0tcrhfaITPykRUiV5KjqybOb2Fo glX1x21R4m0OQtC7YhqOElvnDTLoSNepd4laPsJtCPP7UsaZeUgJaJtN0V4vnEem S1lQMdrXFDTFObDrXEv59ll22FXxAwyWFrrKrFZNlZpqMBH5kzaYCZM38GCM -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:46 2026 by rpki-client