This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3G2s7RjJThViLRQ5adD_y9Bxz2g.roa File: 3G2s7RjJThViLRQ5adD_y9Bxz2g.roa (raw, json) Hash identifier: YxotY3H3FwGDBrxy40HF6XeZVD4LGolu4RkRyeZ9suo= Subject key identifier: DC:6D:AC:ED:18:C9:4E:15:62:2D:14:39:69:D0:FF:CB:D0:71:CF:68 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F849A2F8EC4493ACECC39B11EC66A5E Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3G2s7RjJThViLRQ5adD_y9Bxz2g.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41129 IP address blocks: 146.120.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9a:2f:8e:c4:49:3a:ce:cc:39:b1:1e:c6:6a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc6daced18c94e15622d143969d0ffcbd071cf68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:00:4b:e8:5f:a0:a9:4a:f1:2f:bc:19:c3:41: 31:c4:f9:b4:ef:c8:92:7e:0f:09:06:58:4f:c5:d0: c8:78:18:70:b4:14:89:1d:ad:1b:35:ab:f0:3e:fd: a8:b4:91:2e:5b:a1:71:1d:10:e5:83:e6:32:59:aa: 0f:4f:8e:aa:e9:c1:10:71:fb:14:d2:71:61:a2:38: 70:0c:27:35:dc:e4:56:8b:ea:ad:06:bc:3e:85:1f: 56:d7:71:1e:05:f1:e9:fb:61:75:f0:79:95:37:98: 1a:10:82:c5:b6:dd:47:b3:e1:21:ba:b4:62:27:52: f1:b6:3c:45:7e:b1:4c:18:5a:bf:04:80:1e:ba:79: d6:f3:cd:53:cd:fb:a4:ae:e9:56:1f:b8:6a:14:ea: 15:35:e0:cc:07:10:54:f5:50:48:53:ef:72:64:1c: 96:f6:04:30:ee:5c:ea:f8:ff:10:5b:e1:64:97:73: 1f:e7:53:47:13:70:4e:05:98:ed:d0:00:f9:b4:2b: db:7b:40:55:d2:e2:40:8c:1e:fe:b9:e7:0f:c1:11: 10:16:11:b1:be:32:fa:4c:49:8f:a8:41:26:7b:7b: 27:26:2e:86:f2:d6:76:8b:9d:19:e4:ea:2c:e6:2b: 57:e0:36:5a:a1:c4:db:99:16:5a:a6:99:91:cd:0e: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6D:AC:ED:18:C9:4E:15:62:2D:14:39:69:D0:FF:CB:D0:71:CF:68 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3G2s7RjJThViLRQ5adD_y9Bxz2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.100.0/24 Signature Algorithm: sha256WithRSAEncryption 09:f0:ce:bb:56:58:a5:f5:17:cb:d2:38:a8:84:3a:69:6a:65: 1f:61:06:18:e3:5a:4e:94:46:ca:22:43:de:66:9e:a4:b8:07: 2b:90:af:80:53:9d:71:80:6e:9e:2e:27:54:9e:e1:fe:d6:12: 02:eb:ef:be:e8:d4:d9:90:b4:f9:9a:60:07:67:16:3e:32:95: f5:73:7d:45:2e:34:e9:6e:79:28:47:52:9d:6a:db:17:ff:40: af:91:4d:d9:39:45:a6:ca:d9:f0:e9:6c:af:37:75:fd:c3:58: 80:15:a7:8e:a3:15:31:01:c7:3e:7c:50:73:f1:95:f7:cb:59: 54:b8:0f:95:76:fc:a1:9e:39:5a:32:05:75:72:5a:c5:fb:2b: 93:9d:09:da:dc:2e:44:fa:46:15:2f:6e:1b:83:06:3b:a7:ec: d3:02:51:62:23:de:1a:b6:3c:49:44:42:84:50:df:69:04:17: da:cd:3d:f6:f3:53:02:49:b4:8d:00:6a:62:31:47:0e:d6:51: 0d:3c:07:b0:e8:7f:88:d3:bd:bd:05:46:8e:52:10:b6:cd:e2: b0:58:9d:92:83:b6:b9:42:ae:ac:db:93:89:22:b9:d1:eb:13: 58:ae:ed:09:a1:e3:b2:c3:35:a9:04:2b:f0:ef:38:f3:a4:9e: 31:c2:d1:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJovjsRJOs7MObEexmpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzZkYWNlZDE4Yzk0ZTE1NjIyZDE0Mzk2OWQwZmZjYmQwNzFjZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgBL6F+gqUrxL7wZw0ExxPm078iS fg8JBlhPxdDIeBhwtBSJHa0bNavwPv2otJEuW6FxHRDlg+YyWaoPT46q6cEQcfsU 0nFhojhwDCc13ORWi+qtBrw+hR9W13EeBfHp+2F18HmVN5gaEILFtt1Hs+EhurRi J1LxtjxFfrFMGFq/BIAeunnW881TzfukrulWH7hqFOoVNeDMBxBU9VBIU+9yZByW 9gQw7lzq+P8QW+Fkl3Mf51NHE3BOBZjt0AD5tCvbe0BV0uJAjB7+uecPwREQFhGx vjL6TEmPqEEme3snJi6G8tZ2i50Z5Oos5itX4DZaocTbmRZappmRzQ6d2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxtrO0YyU4VYi0UOWnQ/8vQcc9oMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvM0cyczdSakpUaFZpTFJRNWFkRF95OUJ4ejJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknhkMA0G CSqGSIb3DQEBCwUAA4IBAQAJ8M67Vlil9RfL0jiohDppamUfYQYY41pOlEbKIkPe Zp6kuAcrkK+AU51xgG6eLidUnuH+1hIC6+++6NTZkLT5mmAHZxY+MpX1c31FLjTp bnkoR1KdatsX/0CvkU3ZOUWmytnw6WyvN3X9w1iAFaeOoxUxAcc+fFBz8ZX3y1lU uA+VdvyhnjlaMgV1clrF+yuTnQna3C5E+kYVL24bgwY7p+zTAlFiI94atjxJREKE UN9pBBfazT3281MCSbSNAGpiMUcO1lENPAew6H+I0729BUaOUhC2zeKwWJ2Sg7a5 Qq6s25OJIrnR6xNYru0JoeOywzWpBCvw7zjzpJ4xwtGD -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:39 2026 by rpki-client