This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/P7j9IEWadDPaQ_nsO00HdXrOIT4.roa File: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (raw, json) Hash identifier: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM= Subject key identifier: 3F:B8:FD:20:45:9A:74:33:DA:43:F9:EC:3B:4D:07:75:7A:CE:21:3E Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Certificate serial: 019B7C11B3FE166C8910165C8481A95C01B5 Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/P7j9IEWadDPaQ_nsO00HdXrOIT4.roa Signing time: Fri 02 Jan 2026 00:18:13 +0000 ROA not before: Fri 02 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39591 IP address blocks: 185.181.140.0/22 maxlen: 24 2a12:dfc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b3:fe:16:6c:89:10:16:5c:84:81:a9:5c:01:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Validity Not Before: Jan 2 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fb8fd20459a7433da43f9ec3b4d07757ace213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d2:79:24:6e:e2:2b:8a:fa:23:4d:31:15:76: d6:9e:d0:6e:3c:00:20:47:7f:ca:b1:11:94:d6:f0: 26:42:23:ed:91:8c:95:6e:e5:b7:c6:20:74:a2:6f: b9:5f:c2:2b:76:4b:28:6d:f8:e2:77:3d:27:28:e3: f0:5f:05:12:80:96:97:8c:b7:09:70:63:78:91:53: 91:7c:60:d0:79:37:c7:c0:cb:ce:aa:14:72:f6:00: 82:e5:70:d0:ed:83:33:24:e5:f7:35:ab:4f:33:15: d9:ea:79:6e:23:cb:0f:96:ae:48:c6:da:42:dc:3f: 0c:7b:6a:af:49:8d:66:b9:51:e5:5d:ad:54:f3:d7: 75:88:3b:e8:24:00:04:83:1d:d6:1e:54:44:3c:33: 05:3a:3c:f0:5e:b1:45:b7:5c:56:a8:9a:13:24:0f: 2f:93:5b:9a:b5:82:fe:e2:46:99:86:ae:68:9f:92: 9c:c5:e1:d3:16:51:4a:9b:9c:e5:e6:8a:44:2f:34: 0d:f0:44:07:69:4c:33:12:64:d5:8e:3c:83:76:86: 68:f5:e4:79:a4:c1:a9:22:cb:68:77:7c:d1:ee:79: fa:b8:15:cf:eb:58:af:41:f2:f4:62:1b:ed:bc:4a: 59:9c:0d:65:80:6b:80:ac:3a:25:63:2c:a0:9e:2e: a5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B8:FD:20:45:9A:74:33:DA:43:F9:EC:3B:4D:07:75:7A:CE:21:3E X509v3 Authority Key Identifier: keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/P7j9IEWadDPaQ_nsO00HdXrOIT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.140.0/22 IPv6: 2a12:dfc0::/29 Signature Algorithm: sha256WithRSAEncryption 8d:1d:a0:70:7b:08:31:ff:f7:ec:aa:2c:1a:3b:fc:8e:71:37: 9b:68:b0:bd:40:16:0f:b3:6e:df:c4:f9:80:12:8c:f5:00:de: 89:cf:f9:1f:2c:dc:e1:c2:d0:b1:26:3d:cf:5d:4a:96:ee:85: cb:ab:38:4d:44:94:b6:8a:44:d6:f2:9b:34:4d:d1:73:4b:b6: ef:94:5c:7f:a8:46:97:4c:5b:7a:94:e9:45:d4:9a:a7:69:78: c3:5e:5b:ba:39:54:d3:cc:2e:96:74:0e:45:ae:06:d8:fa:27: e0:53:a7:c7:57:9e:f8:5a:70:1d:17:be:71:be:54:1c:6e:14: 5f:23:bd:5b:bb:1d:ab:f6:b9:8a:27:05:cd:a0:d7:1d:06:31: 68:ad:80:21:97:78:3f:95:99:83:82:45:67:ab:70:30:5c:6e: ef:64:28:e6:bf:08:22:84:2f:28:a6:83:de:45:9c:51:42:20: 02:d2:57:c4:f4:d3:8c:24:62:48:0e:f7:e8:2a:4c:ab:47:a7: b5:9d:34:c5:19:38:ad:bd:65:fb:a1:b5:93:a7:fe:34:00:0e: df:ab:e0:04:c2:af:36:7d:86:20:c8:0c:49:69:61:68:e5:78: 52:23:b8:09:43:b5:b1:ad:90:5b:fe:12:5f:2e:11:31:66:38: d9:bc:99:7b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EbP+FmyJEBZchIGpXAG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzQ5ZWExYjk5NzliZmYyY2QzMDY2OTQ4ZjgzNWRkNTRj ZWRlYzAwHhcNMjYwMTAyMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmI4ZmQyMDQ1OWE3NDMzZGE0M2Y5ZWMzYjRkMDc3NTdhY2UyMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtJ5JG7iK4r6I00xFXbWntBuPAAg R3/KsRGU1vAmQiPtkYyVbuW3xiB0om+5X8Irdksobfjidz0nKOPwXwUSgJaXjLcJ cGN4kVORfGDQeTfHwMvOqhRy9gCC5XDQ7YMzJOX3NatPMxXZ6nluI8sPlq5IxtpC 3D8Me2qvSY1muVHlXa1U89d1iDvoJAAEgx3WHlREPDMFOjzwXrFFt1xWqJoTJA8v k1uatYL+4kaZhq5on5KcxeHTFlFKm5zl5opELzQN8EQHaUwzEmTVjjyDdoZo9eR5 pMGpIstod3zR7nn6uBXP61ivQfL0YhvtvEpZnA1lgGuArDolYyygni6l3QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD+4/SBFmnQz2kP57DtNB3V6ziE+MB8GA1UdIwQY MBaAFLN0nqG5l5v/LNMGaUj4Nd1Uzt7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgt ZTM1OTA5MDE4YTMzLzEvUDdqOUlFV2FkRFBhUV9uc08wMEhkWHJPSVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgtZTM1OTA5MDE4YTMz LzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubWMMA0E AgACMAcDBQMqEt/AMA0GCSqGSIb3DQEBCwUAA4IBAQCNHaBwewgx//fsqiwaO/yO cTebaLC9QBYPs27fxPmAEoz1AN6Jz/kfLNzhwtCxJj3PXUqW7oXLqzhNRJS2ikTW 8ps0TdFzS7bvlFx/qEaXTFt6lOlF1JqnaXjDXlu6OVTTzC6WdA5FrgbY+ifgU6fH V574WnAdF75xvlQcbhRfI71bux2r9rmKJwXNoNcdBjForYAhl3g/lZmDgkVnq3Aw XG7vZCjmvwgihC8opoPeRZxRQiAC0lfE9NOMJGJIDvfoKkyrR6e1nTTFGTitvWX7 obWTp/40AA7fq+AEwq82fYYgyAxJaWFo5XhSI7gJQ7WxrZBb/hJfLhExZjjZvJl7 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:12 2026 by rpki-client