This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa File: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (raw, json) Hash identifier: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc= Subject key identifier: BB:A5:99:D2:08:D4:62:0F:4A:CD:33:FB:05:16:3D:0E:EF:8A:11:BE Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8E59633274D8AA8F81834C77623D Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 65024 IP address blocks: 84.108.0.0/22 maxlen: 22 84.108.10.0/23 maxlen: 23 84.108.12.0/23 maxlen: 23 84.108.14.0/23 maxlen: 23 84.108.100.0/23 maxlen: 23 84.108.102.0/24 maxlen: 24 84.108.103.0/24 maxlen: 24 84.108.104.0/22 maxlen: 22 84.108.108.0/22 maxlen: 22 84.108.112.0/22 maxlen: 22 84.108.116.0/22 maxlen: 22 84.108.120.0/22 maxlen: 22 84.108.124.0/23 maxlen: 23 84.108.126.0/23 maxlen: 23 84.108.128.0/22 maxlen: 22 84.108.132.0/22 maxlen: 22 84.108.136.0/22 maxlen: 22 84.108.140.0/24 maxlen: 24 84.108.142.0/24 maxlen: 24 84.108.143.0/24 maxlen: 24 84.108.144.0/23 maxlen: 23 84.108.146.0/23 maxlen: 23 84.108.148.0/22 maxlen: 22 84.108.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8e:59:63:32:74:d8:aa:8f:81:83:4c:77:62:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bba599d208d4620f4acd33fb05163d0eef8a11be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:6f:ee:5c:2c:87:62:9d:9b:b1:0b:7c:5b: 1a:7e:7d:60:3f:43:42:82:32:9c:97:5e:49:35:44: b4:b4:56:ab:df:9d:e3:30:92:97:79:aa:6c:5a:d7: 58:52:4a:bd:ac:5e:cf:05:ba:ee:5b:01:60:0b:88: f2:0c:ad:5a:1a:d0:bc:0c:d8:40:37:c7:a3:eb:83: c6:98:d1:67:d6:d3:e0:ab:2e:e4:e5:da:19:0a:d9: e3:0a:de:02:13:82:b1:d2:64:87:87:42:18:e0:54: a4:74:8f:32:8a:1f:62:98:ff:2f:ad:64:61:43:82: f4:47:72:78:69:17:8a:95:3d:c0:15:de:c9:11:8a: 51:ed:0e:9d:ee:2c:23:58:10:ff:b8:66:bc:04:29: cc:9a:2d:b7:c8:3b:b1:7f:94:59:07:2b:b7:a0:6c: fc:b5:3f:05:6a:c3:7c:d1:5d:f9:dc:b6:15:50:30: 28:30:a4:cf:44:a8:86:98:c0:8e:a6:b3:66:d8:8e: d3:f7:34:f0:46:17:e9:f5:83:90:98:bc:f0:0b:0f: 17:15:44:90:cb:8a:be:d8:64:48:7d:39:84:4b:7f: c7:26:1c:6f:98:84:2d:f4:4b:df:0a:c1:60:c7:c6: f3:82:4a:ca:a2:a5:aa:e2:db:6d:60:64:7a:22:9b: 55:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A5:99:D2:08:D4:62:0F:4A:CD:33:FB:05:16:3D:0E:EF:8A:11:BE X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.108.0.0/22 84.108.10.0-84.108.15.255 84.108.100.0-84.108.140.255 84.108.142.0-84.108.155.255 Signature Algorithm: sha256WithRSAEncryption 2d:aa:4e:76:aa:4f:7e:a0:ad:5e:00:28:a6:99:33:fd:73:0f: 7a:8f:34:28:2c:a8:31:05:3f:03:ea:38:f4:74:16:0c:e8:75: 02:5f:50:15:dd:73:52:cd:42:ce:ca:cd:04:3a:96:07:a3:e4: 77:30:3d:1f:0a:fa:72:ce:1e:c2:b4:c1:94:96:f5:a7:ac:91: 65:40:aa:99:f7:bb:bd:af:23:de:85:05:7a:82:be:f6:50:72: a5:47:52:76:94:e8:72:67:22:0a:f9:0c:3f:5d:bf:60:c0:1b: a1:6f:16:9f:9a:5e:29:63:25:e2:25:3e:40:a5:3a:c9:7d:d2: 21:9c:2b:41:18:62:87:9d:43:58:a7:4e:7c:63:87:1d:55:24: de:6f:00:c4:1f:a0:94:dc:7a:26:44:84:6e:48:ba:92:c6:ed: 2a:41:31:93:98:15:42:c6:af:ec:f0:aa:29:c3:9b:ca:b4:43: 76:6d:d5:94:07:3b:11:95:3c:77:1f:dd:03:81:13:ca:25:3d: 9a:7a:72:c0:19:9d:f5:53:92:e2:92:ef:52:4d:bf:91:e3:23: 37:dc:fe:6b:7c:17:4a:24:d5:70:de:80:9d:cc:ef:4f:25:e6: 36:1e:88:8c:ff:89:19:b7:18:c4:6c:0b:44:8c:c0:57:71:45: 2d:91:a8:06 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt2645ZYzJ02KqPgYNMd2I9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmE1OTlkMjA4ZDQ2MjBmNGFjZDMzZmIwNTE2M2QwZWVmOGExMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/hv7lwsh2Kdm7ELfFsafn1gP0NC gjKcl15JNUS0tFar353jMJKXeapsWtdYUkq9rF7PBbruWwFgC4jyDK1aGtC8DNhA N8ej64PGmNFn1tPgqy7k5doZCtnjCt4CE4Kx0mSHh0IY4FSkdI8yih9imP8vrWRh Q4L0R3J4aReKlT3AFd7JEYpR7Q6d7iwjWBD/uGa8BCnMmi23yDuxf5RZByu3oGz8 tT8FasN80V353LYVUDAoMKTPRKiGmMCOprNm2I7T9zTwRhfp9YOQmLzwCw8XFUSQ y4q+2GRIfTmES3/HJhxvmIQt9EvfCsFgx8bzgkrKoqWq4tttYGR6IptVhQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFLulmdII1GIPSs0z+wUWPQ7vihG+MB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvdTZXWjBnalVZZzlLelRQN0JSWTlEdS1LRWI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCVGwAMAwD BAFUbAoDBARUbAAwDAMEAlRsZAMEAFRsjDAMAwQBVGyOAwQCVGyYMA0GCSqGSIb3 DQEBCwUAA4IBAQAtqk52qk9+oK1eACimmTP9cw96jzQoLKgxBT8D6jj0dBYM6HUC X1AV3XNSzULOys0EOpYHo+R3MD0fCvpyzh7CtMGUlvWnrJFlQKqZ97u9ryPehQV6 gr72UHKlR1J2lOhyZyIK+Qw/Xb9gwBuhbxafml4pYyXiJT5ApTrJfdIhnCtBGGKH nUNYp058Y4cdVSTebwDEH6CU3HomRIRuSLqSxu0qQTGTmBVCxq/s8Kopw5vKtEN2 bdWUBzsRlTx3H90DgRPKJT2aenLAGZ31U5Liku9STb+R4yM33P5rfBdKJNVw3oCd zO9PJeY2HoiM/4kZtxjEbAtEjMBXcUUtkagG -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:11 2026 by rpki-client