This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3zlAX4jKfUZ1EcXo0PndnRlycPk.roa File: 3zlAX4jKfUZ1EcXo0PndnRlycPk.roa (raw, json) Hash identifier: 52vR1y1cctMtOEn2eK6SrDU4G4O59tCI+ImmW6bib+w= Subject key identifier: DF:39:40:5F:88:CA:7D:46:75:11:C5:E8:D0:F9:DD:9D:19:72:70:F9 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D03BCE6C89FA51530C9449B71568 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3zlAX4jKfUZ1EcXo0PndnRlycPk.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59718 IP address blocks: 93.171.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d0:3b:ce:6c:89:fa:51:53:0c:94:49:b7:15:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df39405f88ca7d467511c5e8d0f9dd9d197270f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:7d:a4:f6:0c:5a:6d:0d:70:a4:62:09:bc: e5:00:1a:7a:ad:ed:95:cb:6b:7d:6c:ea:95:1e:e4: d8:72:79:74:77:ba:a1:7c:e6:7f:cf:df:ab:7e:1c: 2f:f1:70:e3:40:6a:93:d4:e9:d0:28:31:79:44:50: 0f:f0:bb:ee:34:5a:1a:eb:36:db:8e:84:ee:3f:ab: ec:38:c3:99:72:1c:e7:f0:98:f9:cc:e6:9d:ff:54: 4b:01:0b:1e:d8:4e:9e:1b:6b:1d:21:8b:d1:aa:95: 29:0f:bb:5e:b1:5a:8a:5a:d4:b7:13:3e:0f:c8:36: 98:fb:d4:44:20:cf:78:2d:91:3c:95:47:4b:83:7d: a4:03:09:99:86:ef:72:16:fd:7f:41:27:b4:94:b7: 64:3a:4f:29:3f:23:41:82:56:6a:86:8f:c0:8c:d0: 42:c4:92:29:b5:b6:35:5b:b8:91:c4:74:13:d3:dd: 3e:2f:7e:92:65:a5:a7:a8:a7:04:07:18:c0:70:4c: 4a:1f:24:0b:a1:98:68:2b:e0:86:ca:25:76:8b:f1: e0:6c:c6:2f:3f:6f:40:20:1a:dd:c6:5f:a9:0b:33: f3:ec:17:90:ce:49:5a:dd:b9:c7:ae:f5:09:d6:c1: 26:2a:d2:01:b5:72:13:83:c4:73:40:ed:30:af:0c: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:39:40:5F:88:CA:7D:46:75:11:C5:E8:D0:F9:DD:9D:19:72:70:F9 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3zlAX4jKfUZ1EcXo0PndnRlycPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.139.0/24 Signature Algorithm: sha256WithRSAEncryption 63:ce:75:39:ef:5d:b2:23:49:2b:d2:c0:ba:d9:df:1b:72:20: aa:e0:5b:d1:67:8d:97:c3:81:a0:08:01:f1:23:90:ad:88:cc: 85:62:03:76:6c:65:d2:4d:07:87:46:e7:25:44:ba:b8:b2:0e: 65:92:b7:bb:41:1d:ed:0f:3e:49:0d:c8:99:94:f3:c3:88:7f: f6:d3:98:63:d5:89:0c:c0:ab:0c:af:9c:2c:f6:c9:ad:38:f6: d4:47:e1:5d:0c:3c:5c:a8:d0:17:cd:a2:22:bc:d6:77:fc:a0: 17:a8:cd:93:89:4a:ce:49:4e:c2:fb:30:39:2d:a3:7b:87:f3: 84:da:88:18:e6:2a:a4:a1:ca:ac:43:55:b9:35:b4:73:ee:3e: 0c:2d:e6:84:2d:43:8d:19:ba:b7:7b:e0:10:94:36:df:7a:44: 06:78:19:76:c7:b1:24:24:30:f3:f6:a0:9a:54:d9:74:08:60: b1:c4:9a:25:d8:5c:6b:a7:cb:18:b1:0c:f6:60:24:51:5e:13: a9:6b:fb:b7:ca:a5:0a:c7:e1:6b:19:01:e5:ff:30:e5:b4:8b: 09:a9:02:1c:46:c9:02:f2:8b:2f:23:fe:3a:b2:a4:46:4f:c1: 48:88:6d:c0:36:80:b8:27:e4:32:86:f4:9a:dd:ec:14:a3:4d: 91:ac:63:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNA7zmyJ+lFTDJRJtxVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjM5NDA1Zjg4Y2E3ZDQ2NzUxMWM1ZThkMGY5ZGQ5ZDE5NzI3MGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNV9pPYMWm0NcKRiCbzlABp6re2V y2t9bOqVHuTYcnl0d7qhfOZ/z9+rfhwv8XDjQGqT1OnQKDF5RFAP8LvuNFoa6zbb joTuP6vsOMOZchzn8Jj5zOad/1RLAQse2E6eG2sdIYvRqpUpD7tesVqKWtS3Ez4P yDaY+9REIM94LZE8lUdLg32kAwmZhu9yFv1/QSe0lLdkOk8pPyNBglZqho/AjNBC xJIptbY1W7iRxHQT090+L36SZaWnqKcEBxjAcExKHyQLoZhoK+CGyiV2i/HgbMYv P29AIBrdxl+pCzPz7BeQzkla3bnHrvUJ1sEmKtIBtXITg8RzQO0wrwxXGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN85QF+Iyn1GdRHF6ND53Z0ZcnD5MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvM3psQVg0aktmVVoxRWNYbzBQbmRuUmx5Y1BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXauLMA0G CSqGSIb3DQEBCwUAA4IBAQBjznU5712yI0kr0sC62d8bciCq4FvRZ42Xw4GgCAHx I5CtiMyFYgN2bGXSTQeHRuclRLq4sg5lkre7QR3tDz5JDciZlPPDiH/205hj1YkM wKsMr5ws9smtOPbUR+FdDDxcqNAXzaIivNZ3/KAXqM2TiUrOSU7C+zA5LaN7h/OE 2ogY5iqkocqsQ1W5NbRz7j4MLeaELUONGbq3e+AQlDbfekQGeBl2x7EkJDDz9qCa VNl0CGCxxJol2Fxrp8sYsQz2YCRRXhOpa/u3yqUKx+FrGQHl/zDltIsJqQIcRskC 8osvI/46sqRGT8FIiG3ANoC4J+QyhvSa3ewUo02RrGMW -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:12 2026 by rpki-client