This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/3BcGBZCHDgJs9gSoEvIJqO6Wdng.roa File: 3BcGBZCHDgJs9gSoEvIJqO6Wdng.roa (raw, json) Hash identifier: QqrBTNsjue3924ijEFZUnNRSzA8ZRhSOavKbIrZOqys= Subject key identifier: DC:17:06:05:90:87:0E:02:6C:F6:04:A8:12:F2:09:A8:EE:96:76:78 Certificate issuer: /CN=bfdf5728ecabd56ef4637356955866ca5468691a Certificate serial: 019B7E3738EA179D5C90E716A8925E33A4F4 Authority key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/3BcGBZCHDgJs9gSoEvIJqO6Wdng.roa Signing time: Fri 02 Jan 2026 10:18:26 +0000 ROA not before: Fri 02 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 194.32.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:38:ea:17:9d:5c:90:e7:16:a8:92:5e:33:a4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfdf5728ecabd56ef4637356955866ca5468691a Validity Not Before: Jan 2 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc17060590870e026cf604a812f209a8ee967678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:d2:8c:25:21:61:95:39:1f:2f:12:51:85: 3a:4f:0c:eb:ce:3d:c0:92:2f:b5:a0:41:f4:ec:d8: 11:73:af:64:f2:ff:47:13:ba:40:06:f3:e8:8b:de: 4f:67:91:3a:6b:81:a0:d9:cf:26:d9:67:79:54:ab: 58:08:50:b3:85:0c:ba:d8:59:9e:25:80:04:ef:f6: 20:77:53:bd:13:3d:51:59:a8:5d:77:1c:ca:ea:23: 8d:7a:0c:b0:ae:5f:0e:28:45:64:dd:b0:2d:91:9b: c3:8b:bb:d6:f7:bf:ce:98:31:a9:d9:f5:ce:a3:4d: c7:b3:3b:be:4c:0c:26:af:13:44:ff:6e:93:8a:20: 1b:d0:65:89:52:f1:56:d0:a0:6e:f1:e0:78:07:94: 01:a0:9f:bf:c9:5a:87:d0:3d:07:75:ca:59:a3:5d: c8:d3:9b:b4:f4:d2:b1:22:2d:b9:6e:e2:8f:fc:f9: 4b:1b:aa:39:d2:60:dc:06:4f:b8:b0:b6:d5:21:21: 22:e1:80:4f:07:a4:84:88:76:c1:2d:51:fb:cc:6a: 88:7e:83:5a:fc:61:c6:2c:65:8e:88:5d:93:b8:31: 1e:98:24:67:77:8c:5e:e5:ee:7c:74:9b:9e:72:09: b0:73:bc:d9:81:5d:0c:bc:df:eb:b9:65:b4:9f:f7: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:17:06:05:90:87:0E:02:6C:F6:04:A8:12:F2:09:A8:EE:96:76:78 X509v3 Authority Key Identifier: keyid:BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/3BcGBZCHDgJs9gSoEvIJqO6Wdng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.215.0/24 Signature Algorithm: sha256WithRSAEncryption 15:d2:8a:c0:9a:b2:9c:08:3b:77:7b:2f:c3:81:b2:f9:25:7e: dd:55:40:61:28:0b:2e:f7:47:00:6a:9a:36:3c:23:15:35:bc: a7:5a:fa:84:02:fe:61:63:24:96:93:97:f7:41:de:87:79:78: ce:c6:f6:ac:56:e3:fb:f0:7d:79:a7:97:2a:7b:28:97:8b:fa: fd:71:03:16:99:bc:2f:1a:7c:b6:f1:6f:60:59:16:5d:87:dc: 48:23:fe:2e:44:ce:55:4a:c1:86:25:f5:a2:2f:21:b4:c6:da: 71:39:00:06:8c:29:da:98:fb:82:15:2b:71:8b:a2:b3:09:53: ed:2b:86:df:07:1f:6a:04:46:6f:a4:4d:00:08:e0:c4:6d:8f: b7:7b:c8:09:67:da:2f:06:0c:92:10:16:1c:00:53:f8:e8:ed: f7:59:f0:a5:8e:13:c8:f3:fc:f6:77:7e:eb:a8:68:7f:3e:7a: 0f:1b:59:c6:0c:2b:d3:a3:71:5a:f6:32:dd:b2:25:4b:b4:26: f8:9b:e6:4d:0a:ef:fa:4a:72:d3:88:75:0e:55:c6:94:e3:d9: 9a:25:d1:35:70:eb:8e:e9:51:d3:e6:09:4c:d9:e9:cb:0a:9b: 42:e7:d4:95:a1:1b:e7:a4:3b:08:09:37:16:79:bb:9d:2d:b5: 42:09:4d:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+NzjqF51ckOcWqJJeM6T0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZGY1NzI4ZWNhYmQ1NmVmNDYzNzM1Njk1NTg2NmNhNTQ2 ODY5MWEwHhcNMjYwMTAyMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzE3MDYwNTkwODcwZTAyNmNmNjA0YTgxMmYyMDlhOGVlOTY3Njc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6fSjCUhYZU5Hy8SUYU6Twzrzj3A ki+1oEH07NgRc69k8v9HE7pABvPoi95PZ5E6a4Gg2c8m2Wd5VKtYCFCzhQy62Fme JYAE7/Ygd1O9Ez1RWahddxzK6iONegywrl8OKEVk3bAtkZvDi7vW97/OmDGp2fXO o03Hszu+TAwmrxNE/26TiiAb0GWJUvFW0KBu8eB4B5QBoJ+/yVqH0D0HdcpZo13I 05u09NKxIi25buKP/PlLG6o50mDcBk+4sLbVISEi4YBPB6SEiHbBLVH7zGqIfoNa /GHGLGWOiF2TuDEemCRnd4xe5e58dJuecgmwc7zZgV0MvN/ruWW0n/fLpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwXBgWQhw4CbPYEqBLyCajulnZ4MB8GA1UdIwQY MBaAFL/fVyjsq9Vu9GNzVpVYZspUaGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjk5WEtPeXIxVzcwWTNOV2xWaG15bFJvYVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mY2YzMjItMTdjMS00ZjQwLWE2MTgt YmQxNGQzNDRiYmYyLzEvM0JjR0JaQ0hEZ0pzOWdTb0V2SUpxTzZXZG5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mY2YzMjItMTdjMS00ZjQwLWE2MTgtYmQxNGQzNDRiYmYy LzEvdjk5WEtPeXIxVzcwWTNOV2xWaG15bFJvYVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiDXMA0G CSqGSIb3DQEBCwUAA4IBAQAV0orAmrKcCDt3ey/DgbL5JX7dVUBhKAsu90cAapo2 PCMVNbynWvqEAv5hYySWk5f3Qd6HeXjOxvasVuP78H15p5cqeyiXi/r9cQMWmbwv Gny28W9gWRZdh9xII/4uRM5VSsGGJfWiLyG0xtpxOQAGjCnamPuCFStxi6KzCVPt K4bfBx9qBEZvpE0ACODEbY+3e8gJZ9ovBgySEBYcAFP46O33WfCljhPI8/z2d37r qGh/PnoPG1nGDCvTo3Fa9jLdsiVLtCb4m+ZNCu/6SnLTiHUOVcaU49maJdE1cOuO 6VHT5glM2enLCptC59SVoRvnpDsICTcWebudLbVCCU3J -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:58 2026 by rpki-client