This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/3WRLx1VuX3gbe6p64zEcEnwmqRA.roa File: 3WRLx1VuX3gbe6p64zEcEnwmqRA.roa (raw, json) Hash identifier: zZW/QliS8IhUkuGq5vajhjknN/w+jV0LcSSoeJYbhoo= Subject key identifier: DD:64:4B:C7:55:6E:5F:78:1B:7B:AA:7A:E3:31:1C:12:7C:26:A9:10 Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Certificate serial: 019B7D5C9EAE10A160B74EF1EEBEA178C8D6 Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/3WRLx1VuX3gbe6p64zEcEnwmqRA.roa Signing time: Fri 02 Jan 2026 06:19:40 +0000 ROA not before: Fri 02 Jan 2026 06:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8751 IP address blocks: 195.245.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9e:ae:10:a1:60:b7:4e:f1:ee:be:a1:78:c8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd644bc7556e5f781b7baa7ae3311c127c26a910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:a8:6e:d5:8c:a2:5b:33:08:15:da:78:fd: aa:5d:9c:89:1f:5e:4f:7a:dd:71:d7:99:e5:c5:51: d0:93:71:98:c5:18:5c:17:c4:a8:60:f4:8c:b1:f4: 25:ae:8a:c7:d8:60:3c:13:51:7b:5f:6c:5d:f6:55: a3:fe:6b:d6:f2:1b:43:9b:76:48:7f:44:aa:48:0a: de:ac:8d:44:54:ff:bc:82:e4:f6:b7:40:e3:a6:40: 2d:3e:fd:67:ad:c9:a5:f7:ec:7a:22:20:57:24:93: 0a:34:b0:27:dd:c4:71:cb:8e:59:da:7d:c2:03:28: 9f:e7:23:19:7b:8a:a7:81:d4:ac:33:46:e2:b1:4c: d1:70:8a:f6:89:8d:97:92:6f:86:e4:3d:54:81:6b: 09:41:0d:c5:f0:61:63:a8:e6:77:63:be:8c:60:f0: 8c:ad:65:12:f1:3d:ee:08:ea:06:16:35:24:9f:f1: 29:c7:4e:a3:d5:1d:4f:10:27:94:48:50:9f:00:f7: 25:a1:cc:1d:20:80:90:b9:fe:c8:f2:a9:4a:e5:3e: 1c:65:fd:ab:59:20:21:19:6c:a2:c1:27:3e:50:a9: 11:49:cb:b5:ef:79:81:12:68:b4:63:7d:9c:c7:3c: 96:7c:11:4e:9f:d2:52:b2:df:b5:eb:30:e8:5a:8f: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:64:4B:C7:55:6E:5F:78:1B:7B:AA:7A:E3:31:1C:12:7C:26:A9:10 X509v3 Authority Key Identifier: keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/3WRLx1VuX3gbe6p64zEcEnwmqRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.220.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:d0:6c:ad:18:4f:df:0c:2e:02:26:24:7f:a7:f5:3c:c1:9b: f1:88:e3:c1:d0:29:89:59:cb:7d:42:fc:fc:ce:a7:e9:06:bd: a9:1c:99:51:82:92:71:6b:bc:8d:cd:9a:04:d2:9e:85:39:58: 52:dc:a4:11:98:aa:f5:ab:73:12:ec:56:d2:bc:84:f7:a4:ca: bb:14:8f:fa:96:bc:cd:b1:20:01:f3:d5:90:19:62:0a:e7:2a: 66:f0:6c:05:81:6a:cc:6a:ee:d3:01:96:74:2b:a7:13:cd:c8: a6:a2:c9:80:46:35:af:1b:be:d7:6c:88:7c:01:f8:5c:41:f1: 2d:1f:c6:78:eb:bb:95:77:40:17:e4:e0:a5:38:e7:59:67:c8: 7d:1e:4d:e8:0c:ba:15:5d:d9:fb:95:37:3c:fa:23:e8:04:1c: 65:e5:7e:1f:36:78:ce:71:ed:21:6a:12:4c:a4:b7:14:a8:9a: 3f:6d:0f:a5:a3:72:6d:45:5e:05:3e:24:48:1b:68:cd:5a:49: 14:18:d3:3d:ea:16:c0:cb:cd:67:2a:33:71:f5:6d:e4:b1:f0: 63:24:e6:df:80:87:5c:d7:5b:82:3f:eb:b8:34:52:0a:3c:87: b0:54:d4:56:5d:70:26:e7:98:2e:11:a6:62:1b:ee:fe:ad:b4: e7:a6:ec:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJ6uEKFgt07x7r6heMjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy NGVkY2YwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDY0NGJjNzU1NmU1Zjc4MWI3YmFhN2FlMzMxMWMxMjdjMjZhOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZKobtWMolszCBXaeP2qXZyJH15P et1x15nlxVHQk3GYxRhcF8SoYPSMsfQlrorH2GA8E1F7X2xd9lWj/mvW8htDm3ZI f0SqSArerI1EVP+8guT2t0DjpkAtPv1nrcml9+x6IiBXJJMKNLAn3cRxy45Z2n3C Ayif5yMZe4qngdSsM0bisUzRcIr2iY2Xkm+G5D1UgWsJQQ3F8GFjqOZ3Y76MYPCM rWUS8T3uCOoGFjUkn/Epx06j1R1PECeUSFCfAPclocwdIICQuf7I8qlK5T4cZf2r WSAhGWyiwSc+UKkRScu173mBEmi0Y32cxzyWfBFOn9JSst+16zDoWo8mfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN1kS8dVbl94G3uqeuMxHBJ8JqkQMB8GA1UdIwQY MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt MTVhMDIwN2Q0NjA5LzEvM1dSTHgxVnVYM2diZTZwNjR6RWNFbndtcVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5 LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/XcMA0G CSqGSIb3DQEBCwUAA4IBAQAP0GytGE/fDC4CJiR/p/U8wZvxiOPB0CmJWct9Qvz8 zqfpBr2pHJlRgpJxa7yNzZoE0p6FOVhS3KQRmKr1q3MS7FbSvIT3pMq7FI/6lrzN sSAB89WQGWIK5ypm8GwFgWrMau7TAZZ0K6cTzcimosmARjWvG77XbIh8AfhcQfEt H8Z467uVd0AX5OClOOdZZ8h9Hk3oDLoVXdn7lTc8+iPoBBxl5X4fNnjOce0hahJM pLcUqJo/bQ+lo3JtRV4FPiRIG2jNWkkUGNM96hbAy81nKjNx9W3ksfBjJObfgIdc 11uCP+u4NFIKPIewVNRWXXAm55guEaZiG+7+rbTnpuxs -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:15 2026 by rpki-client