This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/3jOuXM8eQYteMz68O8y6FmrYuok.roa File: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (raw, json) Hash identifier: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0= Subject key identifier: DE:33:AE:5C:CF:1E:41:8B:5E:33:3E:BC:3B:CC:BA:16:6A:D8:BA:89 Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e Certificate serial: 019B7AC8B0FD098D70ADF6D00A5A1D09042E Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/3jOuXM8eQYteMz68O8y6FmrYuok.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60703 IP address blocks: 185.26.220.0/24 maxlen: 24 185.26.221.0/24 maxlen: 24 185.26.222.0/24 maxlen: 24 2a04:3a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b0:fd:09:8d:70:ad:f6:d0:0a:5a:1d:09:04:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de33ae5ccf1e418b5e333ebc3bccba166ad8ba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:81:9e:1e:da:9c:f5:9c:91:65:9d:2a:21: 66:39:28:dd:10:1d:91:48:b6:ff:da:b5:bd:c7:48: 16:1a:de:36:b4:0e:cf:0b:ba:73:54:a1:e4:af:9a: 8f:4f:97:f1:d6:bc:29:13:cd:41:24:26:da:d8:b8: 2f:4a:d3:48:df:29:94:11:5c:af:52:ba:ac:fe:62: 24:f5:3e:01:6d:18:f4:f2:be:b7:c0:a6:68:c7:a2: 45:95:6a:1d:43:e3:28:f1:d8:77:97:df:13:90:c2: a5:5a:0d:e5:d7:0c:0b:d9:56:80:70:29:8e:ff:35: 72:5c:ab:b9:8d:4f:41:e9:b5:b5:96:69:e8:20:34: 74:ec:35:21:fd:ef:81:ae:d4:23:20:03:b7:aa:1f: 02:eb:1a:f2:e8:5b:38:d3:38:0f:07:24:05:2d:b0: 6d:a3:c9:9e:bf:d7:24:19:6c:45:f7:87:90:87:b3: 08:57:63:c5:37:09:cd:7c:12:e7:f5:44:ce:a4:7b: 78:8f:33:d2:da:e2:0e:a5:5c:bf:80:ba:20:f3:de: 1a:e8:2f:0b:b5:12:14:53:78:63:aa:ba:1e:5f:72: 8f:9d:cc:cf:99:85:79:db:46:28:d0:b0:33:cd:ad: 9d:e6:1c:b0:a1:54:83:16:22:1b:2c:8c:6a:51:77: b9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:33:AE:5C:CF:1E:41:8B:5E:33:3E:BC:3B:CC:BA:16:6A:D8:BA:89 X509v3 Authority Key Identifier: keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/3jOuXM8eQYteMz68O8y6FmrYuok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.220.0-185.26.222.255 IPv6: 2a04:3a00::/29 Signature Algorithm: sha256WithRSAEncryption 4f:3d:0e:2e:75:7c:e0:2a:20:8e:46:9c:67:7b:b5:55:91:f8: 9d:1d:14:0b:05:9c:60:4b:fe:d7:c0:42:99:16:c8:ba:9b:5d: b0:dc:5a:b5:54:fd:ad:28:48:91:fd:9e:28:37:f6:df:4c:36: e6:fb:dd:9c:6d:df:53:67:73:3a:6a:c7:6e:5a:3c:ef:c7:fe: 8f:00:33:90:0b:14:8f:4f:5f:eb:56:dd:b7:3b:96:ea:b2:21: 3a:d5:a2:73:c8:ca:96:82:95:f5:ba:c3:2a:d9:bf:24:c9:80: da:1e:45:d6:7f:de:34:07:44:0f:ff:cb:ed:44:8d:68:e8:ee: 45:70:3c:05:64:7e:6f:4f:d3:e9:e3:36:9c:e2:08:fc:fb:bc: b1:e0:78:71:3c:71:51:27:c8:01:ac:84:c6:83:90:fc:ac:bf: c1:74:f0:37:4d:41:a0:63:99:08:5a:bf:14:fd:35:8e:4d:43: ff:d0:59:c3:45:0b:9a:90:9b:82:7b:f0:65:16:29:af:53:c6: a5:78:0c:6a:fc:01:35:a3:17:e3:6c:5a:52:e8:58:b0:9c:9a: e4:9f:a5:4f:f1:b9:48:7f:ed:b7:64:93:da:24:e0:ba:55:38: 8e:49:dc:93:88:66:78:1e:7e:d1:e3:77:61:9e:85:8e:7b:35: 4b:b7:d4:d4 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6yLD9CY1wrfbQClodCQQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMjM4MGQ3NjRhOTYxMWRmZTJmYmMwY2UwY2M0MDQ5NmVj MWU4M2UwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTMzYWU1Y2NmMWU0MThiNWUzMzNlYmMzYmNjYmExNjZhZDhiYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnySBnh7anPWckWWdKiFmOSjdEB2R SLb/2rW9x0gWGt42tA7PC7pzVKHkr5qPT5fx1rwpE81BJCba2LgvStNI3ymUEVyv Urqs/mIk9T4BbRj08r63wKZox6JFlWodQ+Mo8dh3l98TkMKlWg3l1wwL2VaAcCmO /zVyXKu5jU9B6bW1lmnoIDR07DUh/e+BrtQjIAO3qh8C6xry6Fs40zgPByQFLbBt o8mev9ckGWxF94eQh7MIV2PFNwnNfBLn9UTOpHt4jzPS2uIOpVy/gLog894a6C8L tRIUU3hjqroeX3KPnczPmYV520Yo0LAzza2d5hywoVSDFiIbLIxqUXe54QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFN4zrlzPHkGLXjM+vDvMuhZq2LqJMB8GA1UdIwQY MBaAFHwjgNdkqWEd/i+8DODMQEluweg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMt NWQ4Y2E2MzY4MWFkLzEvM2pPdVhNOGVRWXRlTXo2OE84eTZGbXJZdW9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMtNWQ4Y2E2MzY4MWFk LzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5GtwD BAC5Gt4wDQQCAAIwBwMFAyoEOgAwDQYJKoZIhvcNAQELBQADggEBAE89Di51fOAq II5GnGd7tVWR+J0dFAsFnGBL/tfAQpkWyLqbXbDcWrVU/a0oSJH9nig39t9MNub7 3Zxt31Nnczpqx25aPO/H/o8AM5ALFI9PX+tW3bc7luqyITrVonPIypaClfW6wyrZ vyTJgNoeRdZ/3jQHRA//y+1EjWjo7kVwPAVkfm9P0+njNpziCPz7vLHgeHE8cVEn yAGshMaDkPysv8F08DdNQaBjmQhavxT9NY5NQ//QWcNFC5qQm4J78GUWKa9TxqV4 DGr8ATWjF+NsWlLoWLCcmuSfpU/xuUh/7bdkk9ok4LpVOI5J3JOIZngeftHjd2Ge hY57NUu31NQ= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:34 2026 by rpki-client