This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/3B1_EUp7x7N1kARo16GQ1nuj9Is.roa File: 3B1_EUp7x7N1kARo16GQ1nuj9Is.roa (raw, json) Hash identifier: aSJvJUBxwg2ZnRrO3zv+qRAM43Ox0HLnky8GrLpOBIA= Subject key identifier: DC:1D:7F:11:4A:7B:C7:B3:75:90:04:68:D7:A1:90:D6:7B:A3:F4:8B Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363 Certificate serial: 019B7910D12D8B6E11BDECB51BFF9E4B7695 Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/3B1_EUp7x7N1kARo16GQ1nuj9Is.roa Signing time: Thu 01 Jan 2026 10:18:23 +0000 ROA not before: Thu 01 Jan 2026 10:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6866 IP address blocks: 88.218.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d1:2d:8b:6e:11:bd:ec:b5:1b:ff:9e:4b:76:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363 Validity Not Before: Jan 1 10:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc1d7f114a7bc7b375900468d7a190d67ba3f48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:46:2a:64:31:66:b8:33:79:a6:18:3a:9d: 50:10:8b:59:7a:64:6b:98:05:47:31:9f:75:5c:e2: 79:e4:00:48:b7:0d:6d:2c:a6:66:37:53:f3:fa:67: 86:5e:f7:04:d8:61:62:29:29:1e:05:36:d8:31:46: 30:6b:38:21:e3:f2:d0:85:f5:31:32:89:7c:49:1c: 73:17:3d:e8:c8:4c:f0:27:ab:a3:04:84:97:5c:5f: 51:96:06:48:94:93:91:f6:b1:b7:c0:7e:10:ec:9c: 30:64:17:d8:71:21:a0:da:95:65:ab:0d:4b:52:68: 30:4a:6f:1c:85:04:ff:31:32:fd:7e:7f:c0:ec:66: 76:c8:e6:4e:d7:36:6b:c6:ab:b9:9d:00:50:1d:a2: 97:67:cd:3c:53:10:07:1c:f6:e6:50:44:aa:fa:86: a2:2a:6c:28:e7:8d:d5:54:57:b3:86:9b:3a:15:0e: 9b:70:3d:57:75:ec:1f:1f:d9:15:86:27:10:a4:e9: e1:4a:c8:69:4c:53:88:50:f6:9f:02:5a:3b:3d:14: 5e:06:9d:32:d5:4f:e2:44:ef:97:a7:d1:ed:fa:b6: 37:80:88:32:a0:28:f1:a3:f2:3a:8a:00:2a:7c:7f: bd:a1:3e:c3:c9:20:b8:b0:c1:c0:41:98:7a:b9:ce: eb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1D:7F:11:4A:7B:C7:B3:75:90:04:68:D7:A1:90:D6:7B:A3:F4:8B X509v3 Authority Key Identifier: keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/3B1_EUp7x7N1kARo16GQ1nuj9Is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.232.0/22 Signature Algorithm: sha256WithRSAEncryption 66:0a:10:c8:ee:af:65:8b:f4:74:e6:b0:49:cc:3d:d1:97:da: 36:d1:e3:2e:d1:d3:6c:20:35:b5:16:7e:83:d1:b4:af:9a:98: 22:a8:89:f8:01:2e:50:b2:63:e7:6b:15:38:eb:ca:bf:ec:4a: 32:f3:41:ae:26:74:75:17:b0:8e:f8:f9:d3:ef:66:3a:e0:0a: 5c:b2:d1:3d:b0:9b:9c:37:73:98:16:64:30:c9:92:d9:9a:bb: 05:7e:50:ae:b0:32:f4:6a:86:97:b9:21:f2:69:35:4d:5d:5c: 24:ee:40:1e:88:bd:9f:aa:6f:c3:5e:28:f8:ed:ab:c5:54:e2: 84:19:af:f5:e2:de:df:bf:30:8c:45:d0:c1:db:5d:4b:c2:41: a6:c8:e3:05:c4:5d:85:73:e0:92:42:86:ff:db:fd:27:d2:59: 68:75:9b:70:0e:17:42:99:89:fd:ad:ae:4e:97:5d:f7:64:10: e7:90:fd:98:3e:16:2d:bf:f2:2c:65:ee:3f:54:22:f6:b6:d6: b7:06:1a:06:90:6c:75:df:b1:f4:7c:7d:b6:25:0b:5a:be:ed: 51:eb:96:a8:40:cb:e0:64:58:3e:bf:5a:c5:fc:00:5f:49:17: 72:1f:f2:5f:00:f5:7c:82:01:5d:e0:f8:17:1a:18:e1:41:c2: 9f:bf:ff:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ENEti24Rvey1G/+eS3aVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjgyNzcyYWYzZDYxMWI5OWIxYmE2ZTNlYjZjYmZkMTY5 NjUzNjMwHhcNMjYwMTAxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzFkN2YxMTRhN2JjN2IzNzU5MDA0NjhkN2ExOTBkNjdiYTNmNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sNGKmQxZrgzeaYYOp1QEItZemRr mAVHMZ91XOJ55ABItw1tLKZmN1Pz+meGXvcE2GFiKSkeBTbYMUYwazgh4/LQhfUx Mol8SRxzFz3oyEzwJ6ujBISXXF9RlgZIlJOR9rG3wH4Q7JwwZBfYcSGg2pVlqw1L UmgwSm8chQT/MTL9fn/A7GZ2yOZO1zZrxqu5nQBQHaKXZ808UxAHHPbmUESq+oai Kmwo543VVFezhps6FQ6bcD1XdewfH9kVhicQpOnhSshpTFOIUPafAlo7PRReBp0y 1U/iRO+Xp9Ht+rY3gIgyoCjxo/I6igAqfH+9oT7DySC4sMHAQZh6uc7rUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwdfxFKe8ezdZAEaNehkNZ7o/SLMB8GA1UdIwQY MBaAFGO4J3KvPWEbmbG6bj62y/0WllNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdnbmNxODlZUnVac2JwdVByYkxfUmFXVTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jYjBkOTEtODI3MC00NTUwLThmYWMt MGNlMjAzOGFhYTdiLzEvM0IxX0VVcDd4N04xa0FSbzE2R1ExbnVqOUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jYjBkOTEtODI3MC00NTUwLThmYWMtMGNlMjAzOGFhYTdi LzEvWTdnbmNxODlZUnVac2JwdVByYkxfUmFXVTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWNroMA0G CSqGSIb3DQEBCwUAA4IBAQBmChDI7q9li/R05rBJzD3Rl9o20eMu0dNsIDW1Fn6D 0bSvmpgiqIn4AS5QsmPnaxU468q/7Eoy80GuJnR1F7CO+PnT72Y64ApcstE9sJuc N3OYFmQwyZLZmrsFflCusDL0aoaXuSHyaTVNXVwk7kAeiL2fqm/DXij47avFVOKE Ga/14t7fvzCMRdDB211LwkGmyOMFxF2Fc+CSQob/2/0n0llodZtwDhdCmYn9ra5O l133ZBDnkP2YPhYtv/IsZe4/VCL2tta3BhoGkGx137H0fH22JQtavu1R65aoQMvg ZFg+v1rF/ABfSRdyH/JfAPV8ggFd4PgXGhjhQcKfv//8 -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:52 2026 by rpki-client