This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/AD3DllK0spDacTrZOzUoNjsaEXY.roa File: AD3DllK0spDacTrZOzUoNjsaEXY.roa (raw, json) Hash identifier: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU= Subject key identifier: 00:3D:C3:96:52:B4:B2:90:DA:71:3A:D9:3B:35:28:36:3B:1A:11:76 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019B7AC935CA196D1896D7035894B238CEAE Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/AD3DllK0spDacTrZOzUoNjsaEXY.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139341 IP address blocks: 86.51.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:35:ca:19:6d:18:96:d7:03:58:94:b2:38:ce:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=003dc39652b4b290da713ad93b3528363b1a1176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6c:bb:0e:6f:c9:f4:58:15:fb:de:3b:9e:a3: 4b:4a:a6:9f:e4:ff:51:ad:71:3b:55:bf:02:92:d8: 33:d0:eb:58:78:70:21:43:2c:49:95:aa:79:ca:71: 6a:ad:5e:45:07:0d:cb:0d:72:4b:be:74:1f:b5:d2: 06:07:12:1f:53:5a:98:5e:2c:8f:b7:b9:8f:41:89: b3:35:c3:9b:2a:02:be:37:54:1b:29:d9:69:5e:7a: 82:30:e7:14:c6:dd:d0:29:11:04:7a:d8:a1:ce:8c: 8e:ca:bd:f6:17:f7:0b:cd:31:11:21:ef:e0:70:19: 00:85:fd:02:57:cd:31:e8:b6:3c:e8:c3:64:33:f3: 82:79:04:a8:36:37:0d:8b:45:53:9c:dd:58:e1:63: a4:94:c7:2f:54:6a:36:68:83:bb:65:72:42:8c:ee: f3:61:ad:be:3a:4d:c3:18:bc:9f:69:06:2d:17:74: 43:d3:0d:d9:8a:f1:aa:0d:a9:5c:97:a4:62:b1:47: cc:41:f1:1c:d4:8d:cc:82:65:6d:33:01:b8:4d:98: 30:ba:b5:cb:00:da:e2:09:71:f1:cb:e5:a6:0e:89: 89:4b:b2:0e:c2:b2:83:18:b6:0c:d0:d3:e9:b3:8a: 58:69:ea:df:79:71:ca:72:16:03:c3:e5:6c:34:a6: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3D:C3:96:52:B4:B2:90:DA:71:3A:D9:3B:35:28:36:3B:1A:11:76 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/AD3DllK0spDacTrZOzUoNjsaEXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.51.92.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:a7:b4:bd:b5:2a:14:25:dc:dd:7b:18:d7:3d:91:a5:ad:91: 39:73:c0:3e:61:55:71:01:46:07:b0:17:d7:ba:df:18:47:f2: 03:06:4a:92:4b:9a:c2:bb:9f:de:6f:b5:9d:db:a1:46:e8:d1: 43:b2:75:22:37:45:a9:41:5c:5e:3a:7b:ff:bd:91:7a:66:14: 36:3f:f7:47:35:0a:12:02:7b:74:69:a4:46:fc:fa:3a:06:c3: e5:83:e0:fb:ef:b7:96:09:3d:24:2a:8d:52:8d:77:c0:e4:d9: d9:21:74:0d:85:58:09:1c:7d:92:8b:ef:07:46:20:85:b7:7f: 8f:01:9d:51:76:20:83:a5:69:da:dd:c5:47:e3:1b:f2:c8:3a: 6e:82:11:73:ae:e0:d5:14:00:00:a8:c3:98:b4:7e:4d:77:24: 9e:44:68:59:ec:41:2b:33:1e:0f:c5:a9:f7:a0:82:b6:34:3c: b2:af:68:46:25:24:b7:3a:23:8f:ad:d0:75:1a:bf:d6:b6:0a: 12:9e:2d:73:21:00:dc:2b:a6:7a:e2:b8:ec:51:74:67:58:3b: d3:f7:34:32:a9:d6:71:8f:5c:cf:d3:9b:a8:58:83:60:e1:af: 33:1b:1e:a5:50:fc:32:9a:7d:8b:99:3e:0c:af:9e:90:84:40: b8:9b:f2:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTXKGW0YltcDWJSyOM6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDNkYzM5NjUyYjRiMjkwZGE3MTNhZDkzYjM1MjgzNjNiMWExMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42y7Dm/J9FgV+947nqNLSqaf5P9R rXE7Vb8Cktgz0OtYeHAhQyxJlap5ynFqrV5FBw3LDXJLvnQftdIGBxIfU1qYXiyP t7mPQYmzNcObKgK+N1QbKdlpXnqCMOcUxt3QKREEetihzoyOyr32F/cLzTERIe/g cBkAhf0CV80x6LY86MNkM/OCeQSoNjcNi0VTnN1Y4WOklMcvVGo2aIO7ZXJCjO7z Ya2+Ok3DGLyfaQYtF3RD0w3ZivGqDalcl6RisUfMQfEc1I3MgmVtMwG4TZgwurXL ANriCXHxy+WmDomJS7IOwrKDGLYM0NPps4pYaerfeXHKchYDw+VsNKZs2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAA9w5ZStLKQ2nE62Ts1KDY7GhF2MB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvQUQzRGxsSzBzcERhY1RyWk96VW9OanNhRVhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVjNcMA0G CSqGSIb3DQEBCwUAA4IBAQA6p7S9tSoUJdzdexjXPZGlrZE5c8A+YVVxAUYHsBfX ut8YR/IDBkqSS5rCu5/eb7Wd26FG6NFDsnUiN0WpQVxeOnv/vZF6ZhQ2P/dHNQoS Ant0aaRG/Po6BsPlg+D777eWCT0kKo1SjXfA5NnZIXQNhVgJHH2Si+8HRiCFt3+P AZ1RdiCDpWna3cVH4xvyyDpughFzruDVFAAAqMOYtH5NdySeRGhZ7EErMx4Pxan3 oIK2NDyyr2hGJSS3OiOPrdB1Gr/WtgoSni1zIQDcK6Z64rjsUXRnWDvT9zQyqdZx j1zP05uoWINg4a8zGx6lUPwymn2LmT4Mr56QhEC4m/Lm -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:22 2026 by rpki-client