This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/A_Limg3OLYd13ZlGUJbwD_dgooY.roa File: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (raw, json) Hash identifier: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8= Subject key identifier: 03:F2:E2:9A:0D:CE:2D:87:75:DD:99:46:50:96:F0:0F:F7:60:A2:86 Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB895FB1803857733A109489001F52 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/A_Limg3OLYd13ZlGUJbwD_dgooY.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6810 IP address blocks: 31.168.36.0/23 maxlen: 24 79.177.128.0/18 maxlen: 24 79.181.128.0/18 maxlen: 24 85.130.128.0/18 maxlen: 24 85.130.192.0/18 maxlen: 24 85.130.192.0/19 maxlen: 24 109.67.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:89:5f:b1:80:38:57:73:3a:10:94:89:00:1f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03f2e29a0dce2d8775dd99465096f00ff760a286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:f0:20:34:6f:90:c6:37:3f:3d:06:e3:3a: f9:f6:98:91:34:74:ed:ac:c1:07:20:91:ff:4b:bd: 2a:a8:5c:35:e7:e9:75:60:f7:c5:bc:a6:bc:ed:74: 40:e4:61:ea:d7:52:f3:8c:f3:33:10:2e:83:0d:e0: cc:56:db:40:0a:ca:6c:49:9f:44:df:bd:50:11:89: 5f:75:10:dc:83:86:ef:25:e6:f7:36:5e:d4:35:4f: aa:c9:f5:97:c2:31:dd:5b:87:87:27:7e:0e:1a:8a: 7d:63:61:ca:7e:af:d1:6f:f7:aa:96:fc:23:5b:9d: d1:97:ab:32:cf:ca:f4:53:4b:ed:9c:ee:17:d7:46: 3a:af:d0:96:2c:a4:b8:80:d0:91:bd:19:a4:78:d4: bd:08:30:bd:67:fc:7a:a4:1f:fa:b4:1e:08:80:f7: df:11:7d:d4:c7:13:e6:bb:9d:02:ca:78:9a:17:11: 05:f3:fa:1b:a8:ea:58:51:a5:ea:45:80:62:c6:44: c5:8c:92:b6:86:e1:3c:7e:24:c1:be:22:8a:50:02: ba:5c:bd:56:b3:b7:b3:57:a9:be:d8:30:af:e1:56: cc:ab:d4:6d:bb:62:21:1a:3c:94:e8:3b:fe:f0:38: df:06:ed:77:d9:62:c9:c9:18:f3:fe:37:b5:a3:df: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F2:E2:9A:0D:CE:2D:87:75:DD:99:46:50:96:F0:0F:F7:60:A2:86 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/A_Limg3OLYd13ZlGUJbwD_dgooY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.168.36.0/23 79.177.128.0/18 79.181.128.0/18 85.130.128.0/17 109.67.128.0/18 Signature Algorithm: sha256WithRSAEncryption 3a:b9:4a:9e:99:8c:04:40:3c:23:76:ef:56:e2:2b:01:55:1d: 3d:88:75:79:22:61:06:00:2e:3e:7a:0a:e4:05:b1:69:1c:97: 15:e3:39:1d:b6:27:39:8b:4f:ab:cb:9a:79:6a:5e:62:0a:aa: 4a:3b:84:e3:72:e0:1b:03:4b:40:eb:66:60:23:9f:63:b3:84: a5:60:30:91:48:cd:c2:c2:47:f3:97:64:bc:49:51:a5:52:a4: 8e:d7:16:4f:12:6c:6a:fd:05:48:af:d1:0c:ac:1c:fb:e7:2a: 00:6f:a8:4a:bd:6d:f9:7c:00:78:f2:4f:0f:71:44:55:91:9d: a3:c8:0d:1b:03:1c:54:92:f2:6c:5c:19:f3:d8:71:ef:40:5e: 5e:8d:3b:e2:c1:7d:81:6b:3f:73:f8:11:fb:dc:45:42:48:bf: be:ee:a9:32:cb:9c:1d:d7:87:ab:48:c5:a4:ad:d7:79:79:7b: 8d:ab:d8:bf:6c:bb:57:8a:b2:73:41:03:2d:1f:5e:32:27:c0: ba:1d:08:8b:a5:23:e3:88:36:0f:94:2d:f5:7b:05:ea:37:09: 33:f0:91:84:99:d0:d4:f9:64:3b:17:a4:bb:a0:b3:c5:c2:71: 2e:14:cb:63:fc:82:7b:66:59:df:17:2f:a0:b7:a3:41:f2:66: ed:e9:e1:dd -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt264lfsYA4V3M6EJSJAB9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2YyZTI5YTBkY2UyZDg3NzVkZDk5NDY1MDk2ZjAwZmY3NjBhMjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh3wIDRvkMY3Pz0G4zr59piRNHTt rMEHIJH/S70qqFw15+l1YPfFvKa87XRA5GHq11LzjPMzEC6DDeDMVttACspsSZ9E 371QEYlfdRDcg4bvJeb3Nl7UNU+qyfWXwjHdW4eHJ34OGop9Y2HKfq/Rb/eqlvwj W53Rl6syz8r0U0vtnO4X10Y6r9CWLKS4gNCRvRmkeNS9CDC9Z/x6pB/6tB4IgPff EX3UxxPmu50CyniaFxEF8/obqOpYUaXqRYBixkTFjJK2huE8fiTBviKKUAK6XL1W s7ezV6m+2DCv4VbMq9Rtu2IhGjyU6Dv+8DjfBu132WLJyRjz/je1o9/tWQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAPy4poNzi2Hdd2ZRlCW8A/3YKKGMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvQV9MaW1nM09MWWQxM1psR1VKYndEX2Rnb29ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBH6gkAwQG T7GAAwQGT7WAAwQHVYKAAwQGbUOAMA0GCSqGSIb3DQEBCwUAA4IBAQA6uUqemYwE QDwjdu9W4isBVR09iHV5ImEGAC4+egrkBbFpHJcV4zkdtic5i0+ry5p5al5iCqpK O4TjcuAbA0tA62ZgI59js4SlYDCRSM3Cwkfzl2S8SVGlUqSO1xZPEmxq/QVIr9EM rBz75yoAb6hKvW35fAB48k8PcURVkZ2jyA0bAxxUkvJsXBnz2HHvQF5ejTviwX2B az9z+BH73EVCSL++7qkyy5wd14erSMWkrdd5eXuNq9i/bLtXirJzQQMtH14yJ8C6 HQiLpSPjiDYPlC31ewXqNwkz8JGEmdDU+WQ7F6S7oLPFwnEuFMtj/IJ7ZlnfFy+g t6NB8mbt6eHd -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:34 2026 by rpki-client