This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/3meO9SxoWZRDxtrmg7_0QH46siU.roa File: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (raw, json) Hash identifier: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8= Subject key identifier: DE:67:8E:F5:2C:68:59:94:43:C6:DA:E6:83:BF:F4:40:7E:3A:B2:25 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C773787A927C9C8062547A7F62BF8C Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/3meO9SxoWZRDxtrmg7_0QH46siU.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 185.220.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:73:78:7a:92:7c:9c:80:62:54:7a:7f:62:bf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de678ef52c68599443c6dae683bff4407e3ab225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:e3:06:15:dc:80:c8:48:fc:72:6e:57:79: 75:68:7e:19:64:de:16:2e:77:e0:38:dd:07:2a:a3: e0:3a:37:80:22:7f:cb:9a:9d:d1:38:89:20:8b:7b: 30:27:65:c9:4e:39:d3:b4:35:a3:06:80:57:10:d1: 0e:18:14:28:28:9c:8f:91:72:99:cd:9b:4d:18:95: 4f:40:05:69:e1:c5:c5:3a:b2:ad:6e:de:d6:4a:0e: 79:1d:d8:51:fa:2d:96:b1:8d:5e:0e:6f:5c:5f:a7: 85:ff:e6:b7:d0:53:5d:9a:dd:b1:f6:0e:1f:97:9e: 14:51:a4:7a:05:04:19:57:78:ad:c1:8d:bf:41:53: e0:ad:96:b4:ff:bf:32:28:45:f2:68:a5:e8:a2:53: 27:02:4b:62:67:42:c3:0c:21:3a:7a:55:f7:ca:3e: e6:d5:b4:43:aa:db:b5:d0:06:39:ea:2f:73:58:de: 3c:93:74:bd:2e:5a:45:fc:a7:f2:12:7f:99:ba:bf: 05:b1:65:5d:75:d8:b7:4d:27:6a:60:8c:ce:88:93: ee:dd:70:04:5a:ee:24:4d:63:ea:05:be:bd:31:39: b9:92:b9:a8:30:28:fb:d9:fd:cd:59:63:39:a6:e7: 0f:36:d1:b4:82:f5:e5:ac:e2:3b:ef:dd:70:ab:de: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:67:8E:F5:2C:68:59:94:43:C6:DA:E6:83:BF:F4:40:7E:3A:B2:25 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/3meO9SxoWZRDxtrmg7_0QH46siU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.196.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:8e:5d:dc:d3:f2:fc:a4:33:59:6e:24:38:db:7f:12:ba:95: 69:64:68:eb:b4:ad:63:61:c0:1d:8f:ad:87:98:bf:9f:67:b6: cb:4e:28:a9:35:67:df:43:0a:8d:56:02:39:cc:b7:01:31:7b: 32:b7:13:e4:1e:28:60:db:da:d0:72:81:0f:0a:b7:eb:2a:a3: a0:16:de:f6:ef:25:92:70:f1:ff:ea:ca:6a:74:9a:82:eb:a0: 15:b7:73:ef:11:76:00:04:45:21:42:7b:3e:96:8f:59:d7:f2: 66:3f:fb:85:6c:3b:1f:37:56:46:02:ec:94:1e:7a:e7:b9:b2: 03:9f:e8:48:6d:b9:b7:ea:ac:cc:0d:ae:14:38:a8:f8:44:a2: 50:35:04:be:88:bc:e6:15:8a:52:7c:8a:4a:dc:c3:ac:6f:9d: 93:0a:f0:e6:ee:8a:8c:70:93:70:69:57:81:c4:86:f3:ab:82: eb:3d:e8:08:91:bb:16:75:39:d8:dd:fb:03:9a:d4:f2:b6:58: 08:76:43:5a:fd:a2:45:de:72:3a:16:fd:23:fa:3d:3a:f3:ce: 27:50:4b:15:c6:cb:25:61:ac:a9:05:d8:00:72:ee:da:ab:28: c0:b2:9a:38:4e:92:77:d7:78:e3:b9:33:cf:f5:1e:b7:df:53: 26:12:b1:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3N4epJ8nIBiVHp/Yr+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTY3OGVmNTJjNjg1OTk0NDNjNmRhZTY4M2JmZjQ0MDdlM2FiMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BzjBhXcgMhI/HJuV3l1aH4ZZN4W LnfgON0HKqPgOjeAIn/Lmp3ROIkgi3swJ2XJTjnTtDWjBoBXENEOGBQoKJyPkXKZ zZtNGJVPQAVp4cXFOrKtbt7WSg55HdhR+i2WsY1eDm9cX6eF/+a30FNdmt2x9g4f l54UUaR6BQQZV3itwY2/QVPgrZa0/78yKEXyaKXoolMnAktiZ0LDDCE6elX3yj7m 1bRDqtu10AY56i9zWN48k3S9LlpF/KfyEn+Zur8FsWVdddi3TSdqYIzOiJPu3XAE Wu4kTWPqBb69MTm5krmoMCj72f3NWWM5pucPNtG0gvXlrOI7791wq94nvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5njvUsaFmUQ8ba5oO/9EB+OrIlMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvM21lTzlTeG9XWlJEeHRybWc3XzBRSDQ2c2lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudzEMA0G CSqGSIb3DQEBCwUAA4IBAQArjl3c0/L8pDNZbiQ4238SupVpZGjrtK1jYcAdj62H mL+fZ7bLTiipNWffQwqNVgI5zLcBMXsytxPkHihg29rQcoEPCrfrKqOgFt727yWS cPH/6spqdJqC66AVt3PvEXYABEUhQns+lo9Z1/JmP/uFbDsfN1ZGAuyUHnrnubID n+hIbbm36qzMDa4UOKj4RKJQNQS+iLzmFYpSfIpK3MOsb52TCvDm7oqMcJNwaVeB xIbzq4LrPegIkbsWdTnY3fsDmtTytlgIdkNa/aJF3nI6Fv0j+j06884nUEsVxssl YaypBdgAcu7aqyjAspo4TpJ313jjuTPP9R6331MmErHN -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:24 2026 by rpki-client