This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/3GavzMAbCuU_7XxsDf7ryjx5mm4.roa File: 3GavzMAbCuU_7XxsDf7ryjx5mm4.roa (raw, json) Hash identifier: 5lj6u+PVxfRxZzq0tJiNI844Q2BPDCOyHDGilv4wvUo= Subject key identifier: DC:66:AF:CC:C0:1B:0A:E5:3F:ED:7C:6C:0D:FE:EB:CA:3C:79:9A:6E Certificate issuer: /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e Certificate serial: 019B7E3884F8644663919DD95ED313104EEF Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/3GavzMAbCuU_7XxsDf7ryjx5mm4.roa Signing time: Fri 02 Jan 2026 10:19:51 +0000 ROA not before: Fri 02 Jan 2026 10:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12338 IP address blocks: 94.101.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:84:f8:64:46:63:91:9d:d9:5e:d3:13:10:4e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc66afccc01b0ae53fed7c6c0dfeebca3c799a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:55:8a:d3:9f:c6:ea:d3:8c:d4:93:0c:3b:76: 40:0c:5f:e2:9f:f0:29:03:d0:92:0e:f2:57:57:cb: e6:eb:62:f8:20:03:ba:88:77:b8:01:76:ab:6c:70: a3:13:9c:3c:71:b7:87:31:ba:20:fb:f6:2f:91:93: c8:a2:dc:f2:30:fb:16:00:be:dd:ad:38:64:c9:44: 04:6d:e0:a2:31:fe:ad:7e:2d:3a:e9:d4:c4:95:b2: 8c:28:70:ea:6b:df:e4:0a:7b:a8:2d:74:3f:fa:fe: 38:0b:ab:b7:be:70:03:b7:3d:eb:1a:81:81:96:e1: 60:6c:9f:85:a8:e6:1e:0f:2b:b4:22:42:1c:45:bc: 4e:ab:4f:1a:8d:08:91:f8:33:74:aa:2d:f3:f3:e5: 95:89:b9:83:a4:49:5e:f1:71:04:42:d3:f3:79:1c: 55:83:46:83:93:f2:be:e6:9c:17:85:fb:5d:51:f0: 11:b4:a8:44:b0:4f:f0:ca:cf:1f:3e:3b:a7:83:66: bb:d5:95:5c:3f:98:42:43:63:1e:84:80:2b:59:02: 41:97:8b:e6:9f:56:2c:86:ef:00:01:71:2a:82:cb: 2c:71:15:49:a6:de:fb:da:57:00:1b:1a:a8:3c:5a: 4f:39:77:75:2c:bc:11:f3:19:0d:19:9a:0b:ca:98: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:66:AF:CC:C0:1B:0A:E5:3F:ED:7C:6C:0D:FE:EB:CA:3C:79:9A:6E X509v3 Authority Key Identifier: keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/3GavzMAbCuU_7XxsDf7ryjx5mm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.106.0/24 Signature Algorithm: sha256WithRSAEncryption 37:da:63:8c:62:97:0f:1a:77:2d:2c:1e:77:f9:60:03:6a:d4: 98:6f:4a:49:ab:dc:b6:1f:92:98:88:87:ad:2f:ff:74:14:7c: 3e:2a:2f:ac:36:1a:53:6c:0b:8f:6a:dc:77:20:e8:01:08:fd: 3c:6b:7e:58:4d:66:9d:a4:a4:c6:5c:88:4d:7a:68:9a:39:53: 28:80:2a:92:83:7d:47:b1:a7:70:94:85:d9:d1:d1:67:dc:45: a7:45:9d:14:7e:4f:45:e4:4d:82:80:dd:0f:ff:25:0a:fd:09: 77:46:6d:b0:33:b5:2b:bc:93:a8:c0:f8:98:a4:86:0e:8f:6e: 02:44:70:26:de:09:2e:07:cd:51:60:02:16:bc:77:a8:1e:bc: b9:cb:e8:fb:00:f0:53:83:92:b0:cc:0d:90:bf:e2:0c:49:77: f5:e8:78:92:05:42:2a:59:59:c6:ad:ba:60:ec:ff:09:74:d7: 3e:37:4f:3d:3d:0a:24:66:ac:c6:8a:f6:88:d2:38:fe:6a:b1: 0e:46:cc:c3:72:04:52:47:c7:3d:bd:ba:1d:60:8c:e7:23:4a: 09:a2:19:82:20:4a:2c:c4:5e:7e:9f:51:8c:6b:a9:7e:62:33: e5:72:23:77:26:a9:b8:5b:de:48:71:66:b2:fe:9a:36:a9:77: bd:72:60:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIT4ZEZjkZ3ZXtMTEE7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMTgxYTkyM2U5YWMzYzAwNWViNGM3M2VkYzdhMWU4MzI1 YTViMWUwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzY2YWZjY2MwMWIwYWU1M2ZlZDdjNmMwZGZlZWJjYTNjNzk5YTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81WK05/G6tOM1JMMO3ZADF/in/Ap A9CSDvJXV8vm62L4IAO6iHe4AXarbHCjE5w8cbeHMbog+/YvkZPIotzyMPsWAL7d rThkyUQEbeCiMf6tfi066dTElbKMKHDqa9/kCnuoLXQ/+v44C6u3vnADtz3rGoGB luFgbJ+FqOYeDyu0IkIcRbxOq08ajQiR+DN0qi3z8+WVibmDpEle8XEEQtPzeRxV g0aDk/K+5pwXhftdUfARtKhEsE/wys8fPjung2a71ZVcP5hCQ2MehIArWQJBl4vm n1Yshu8AAXEqgssscRVJpt772lcAGxqoPFpPOXd1LLwR8xkNGZoLypgMQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxmr8zAGwrlP+18bA3+68o8eZpuMB8GA1UdIwQY MBaAFMMYGpI+msPABetMc+3HoegyWlseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQt ZjllYzU2NjY4NmI5LzEvM0dhdnpNQWJDdVVfN1h4c0RmN3J5ang1bW00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQtZjllYzU2NjY4NmI5 LzEvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmVqMA0G CSqGSIb3DQEBCwUAA4IBAQA32mOMYpcPGnctLB53+WADatSYb0pJq9y2H5KYiIet L/90FHw+Ki+sNhpTbAuPatx3IOgBCP08a35YTWadpKTGXIhNemiaOVMogCqSg31H sadwlIXZ0dFn3EWnRZ0Ufk9F5E2CgN0P/yUK/Ql3Rm2wM7UrvJOowPiYpIYOj24C RHAm3gkuB81RYAIWvHeoHry5y+j7APBTg5KwzA2Qv+IMSXf16HiSBUIqWVnGrbpg 7P8JdNc+N089PQokZqzGivaI0jj+arEORszDcgRSR8c9vbodYIznI0oJohmCIEos xF5+n1GMa6l+YjPlciN3Jqm4W95IcWay/po2qXe9cmDO -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:37 2026 by rpki-client