This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/3mkDcoRwwb-ObrM_8IcsZraIA_c.roa File: 3mkDcoRwwb-ObrM_8IcsZraIA_c.roa (raw, json) Hash identifier: 6Re+awl9BOYfEx3GUW/91mtkwKwliVnlI2AsMG8KcqI= Subject key identifier: DE:69:03:72:84:70:C1:BF:8E:6E:B3:3F:F0:87:2C:66:B6:88:03:F7 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019BEAE452791E210E09DB00E9FB861CE40B Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/3mkDcoRwwb-ObrM_8IcsZraIA_c.roa Signing time: Fri 23 Jan 2026 12:46:30 +0000 ROA not before: Fri 23 Jan 2026 12:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 80.174.113.0/24 maxlen: 24 80.174.121.0/24 maxlen: 24 80.174.122.0/24 maxlen: 24 80.174.125.0/24 maxlen: 24 80.174.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:e4:52:79:1e:21:0e:09:db:00:e9:fb:86:1c:e4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 23 12:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de6903728470c1bf8e6eb33ff0872c66b68803f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:ce:5a:8f:71:5b:b4:cd:ff:76:d9:3e:2e: ac:37:e8:df:fa:c9:03:44:41:c2:7e:04:b9:46:4e: 01:a7:48:01:36:01:d9:7c:9c:fc:a3:fd:6c:f8:6b: c3:e6:11:9d:e1:0c:7e:40:e6:6f:ed:f8:93:e2:69: 3d:ee:80:0c:86:f5:6d:1a:c6:71:ee:43:91:2b:20: 23:92:30:f6:0b:40:bd:02:bb:df:21:0e:15:e9:9e: 89:b0:c1:3d:38:fe:8f:0f:c6:8d:14:ec:03:d5:a3: 02:4d:37:6c:80:d8:b9:9d:82:f2:01:4c:86:8f:38: 7c:df:e1:82:65:c6:d3:7b:a9:33:6c:08:94:04:9c: 41:44:4a:72:ca:2b:1c:18:9b:57:02:c3:94:7d:9a: 6a:0a:09:e4:a5:25:29:dc:80:85:2e:5f:e2:dd:c8: 8f:ab:ee:12:91:bc:3e:3e:61:9b:ec:8a:1b:98:1a: 9f:06:37:70:aa:e2:76:f0:42:db:82:f0:aa:e5:ce: a5:54:92:8f:7a:49:af:1e:4b:a6:6c:e9:ae:8c:a8: 84:91:95:e6:f9:8f:ad:58:6e:aa:c3:a0:ed:42:00: 0f:1f:a4:ba:26:90:ef:0e:fb:1c:12:f1:56:ae:37: 47:e4:c5:56:fe:c6:75:cf:a6:8f:6b:36:8d:70:58: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:69:03:72:84:70:C1:BF:8E:6E:B3:3F:F0:87:2C:66:B6:88:03:F7 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/3mkDcoRwwb-ObrM_8IcsZraIA_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.113.0/24 80.174.121.0-80.174.122.255 80.174.125.0-80.174.126.255 Signature Algorithm: sha256WithRSAEncryption 18:a9:6e:3c:e7:09:b4:69:cb:8b:f9:55:8d:31:ab:5b:ce:74: fe:f6:c1:7c:2e:53:b6:c0:2b:77:85:64:b0:f2:a7:9d:f0:a6: a1:30:09:39:18:ab:c7:68:ad:d9:7f:41:da:3f:db:30:f1:c3: 67:db:a2:49:37:86:da:d4:3d:32:5e:d9:80:ed:04:65:b7:01: 13:e3:23:68:49:51:f0:00:65:ac:d3:99:c1:11:c1:df:d8:aa: 97:4f:50:d3:2a:75:b2:08:4c:69:f6:f7:8a:a3:f1:c3:d9:48: e7:eb:3b:43:12:1e:ea:e0:60:29:e0:b8:9c:66:d3:3d:0a:2b: ae:47:9c:a7:57:d8:de:1e:63:7d:0d:57:8a:1b:ad:61:73:a4: 9b:4b:03:e5:8e:b5:32:2e:e8:17:c3:fe:b6:c7:c5:2b:0c:5b: 40:22:f6:c3:60:e6:f3:7e:0b:ba:cc:91:aa:3b:50:c6:4c:16: 01:44:63:ff:9f:74:8f:74:95:aa:c9:e1:5c:08:4f:4d:9a:30: 17:f9:fc:05:ea:1c:3f:a2:1d:7a:57:47:5e:6d:cd:d0:76:08: 71:1f:a7:0c:9e:79:f4:fc:76:4e:b9:5d:34:43:d2:cd:04:51: ce:b3:96:c1:94:78:88:c7:9a:05:57:38:72:46:68:78:ca:90: dd:f9:41:9b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZvq5FJ5HiEOCdsA6fuGHOQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTIzMTI0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTY5MDM3Mjg0NzBjMWJmOGU2ZWIzM2ZmMDg3MmM2NmI2ODgwM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooLOWo9xW7TN/3bZPi6sN+jf+skD REHCfgS5Rk4Bp0gBNgHZfJz8o/1s+GvD5hGd4Qx+QOZv7fiT4mk97oAMhvVtGsZx 7kORKyAjkjD2C0C9ArvfIQ4V6Z6JsME9OP6PD8aNFOwD1aMCTTdsgNi5nYLyAUyG jzh83+GCZcbTe6kzbAiUBJxBREpyyiscGJtXAsOUfZpqCgnkpSUp3ICFLl/i3ciP q+4Skbw+PmGb7IobmBqfBjdwquJ28ELbgvCq5c6lVJKPekmvHkumbOmujKiEkZXm +Y+tWG6qw6DtQgAPH6S6JpDvDvscEvFWrjdH5MVW/sZ1z6aPazaNcFj7FwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN5pA3KEcMG/jm6zP/CHLGa2iAP3MB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvM21rRGNvUnd3Yi1PYnJNXzhJY3NacmFJQV9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAUK5xMAwD BABQrnkDBABQrnowDAMEAFCufQMEAFCufjANBgkqhkiG9w0BAQsFAAOCAQEAGKlu POcJtGnLi/lVjTGrW850/vbBfC5TtsArd4VksPKnnfCmoTAJORirx2it2X9B2j/b MPHDZ9uiSTeG2tQ9Ml7ZgO0EZbcBE+MjaElR8ABlrNOZwRHB39iql09Q0yp1sghM afb3iqPxw9lI5+s7QxIe6uBgKeC4nGbTPQorrkecp1fY3h5jfQ1XihutYXOkm0sD 5Y61Mi7oF8P+tsfFKwxbQCL2w2Dm834LusyRqjtQxkwWAURj/590j3SVqsnhXAhP TZowF/n8BeocP6IdeldHXm3N0HYIcR+nDJ559Px2TrldNEPSzQRRzrOWwZR4iMea BVc4ckZoeMqQ3flBmw== -----END CERTIFICATE-----Generated at Sun Jan 25 08:50:32 2026 by rpki-client