This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/b3a10Fs4qpc8zW-15XMMyiWIZFg.roa File: b3a10Fs4qpc8zW-15XMMyiWIZFg.roa (raw, json) Hash identifier: AC/UAtGcPz6gvJiYJbS5/sjuqqGtAMAUcr1yfGMgnLg= Subject key identifier: 6F:76:B5:D0:5B:38:AA:97:3C:CD:6F:B5:E5:73:0C:CA:25:88:64:58 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C0E60C1A3F4F6DCB7B111E1722AB Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/b3a10Fs4qpc8zW-15XMMyiWIZFg.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51495 IP address blocks: 93.171.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c0:e6:0c:1a:3f:4f:6d:cb:7b:11:1e:17:22:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f76b5d05b38aa973ccd6fb5e5730cca25886458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:df:a2:e7:ea:d4:c1:94:80:2d:12:65:67: bf:54:f6:27:56:05:cc:44:68:20:33:99:73:51:c7: 44:48:1f:35:0b:70:0b:d3:6f:44:1c:87:52:00:7a: 8a:41:f7:e7:92:d2:74:62:6e:74:65:64:99:32:9f: a9:c1:23:b0:73:a6:88:8c:1f:28:0a:81:a3:b2:76: 9a:4a:8e:dc:01:65:89:52:83:71:9c:59:38:c9:22: 40:98:c3:99:eb:f8:79:2b:a9:ff:34:3c:d9:73:06: da:85:0a:d5:54:58:52:7c:8c:d9:48:b4:57:78:e0: 6c:1d:d3:10:55:9c:e9:75:d9:32:07:a1:55:06:02: ce:7d:0e:b0:7f:63:f0:bb:48:3b:89:41:1e:b3:02: 8a:b5:50:c2:56:4b:40:11:2e:ba:68:01:cc:47:b0: 9a:dd:5b:62:ba:fc:97:90:8c:13:6e:fe:6e:ca:26: 3a:9b:0d:8e:79:7b:45:0a:46:45:80:c2:8e:3e:8e: 44:1a:1f:ba:b3:a0:8b:13:e8:90:40:e6:ec:fd:d9: cf:81:eb:15:c9:b3:e1:59:a9:69:01:91:56:88:82: 17:af:d2:e2:88:68:a9:07:31:03:4e:f9:ec:1f:39: ad:e0:c4:40:06:fe:c1:1c:99:d0:29:d8:9d:c0:25: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:76:B5:D0:5B:38:AA:97:3C:CD:6F:B5:E5:73:0C:CA:25:88:64:58 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/b3a10Fs4qpc8zW-15XMMyiWIZFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.220.0/22 Signature Algorithm: sha256WithRSAEncryption 83:aa:d7:77:50:1d:ab:9e:e2:1b:9d:3f:dd:3c:89:a8:e7:d9: 48:aa:d4:93:79:90:f0:92:a5:f3:36:d4:f9:25:a6:4b:54:b9: 4f:ca:54:ac:43:5b:3e:e3:94:a8:95:5d:78:46:ba:5c:c3:85: 89:34:ae:a5:1e:06:5a:98:76:91:f7:28:df:37:49:3f:c5:87: 73:c1:d1:fc:53:91:4b:38:b6:ae:70:c9:e7:b7:89:8b:b0:96: 4f:ce:1e:9e:5b:dc:eb:c1:cf:b5:0f:0a:07:7d:d7:3c:d1:9b: 1b:8b:b3:95:29:f3:a4:c8:4c:61:6d:6c:12:b4:1a:75:10:83: 0a:bd:18:70:bd:ef:73:c3:0c:66:58:bd:0f:e2:f3:2c:da:74: 3f:a9:e5:ab:72:bb:d1:a3:a6:79:d8:52:0d:8b:f2:f8:03:9f: 27:ef:d2:7f:b8:7c:9e:de:81:91:7d:72:df:e5:f4:59:74:9b: 88:e4:9c:e7:ca:f6:f1:e9:ab:6d:31:ac:af:e1:3f:69:e4:4c: fd:cb:7f:7e:3d:5c:66:34:03:3f:cd:60:b4:75:89:b6:76:1b: a7:a2:51:6e:b7:c9:e9:68:d6:28:95:44:b2:8e:2b:78:11:eb: 37:1f:72:1b:ba:9e:5e:2b:af:6a:92:16:2e:ae:7f:f5:8a:02: a5:d5:3b:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMDmDBo/T23LexEeFyKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Zjc2YjVkMDViMzhhYTk3M2NjZDZmYjVlNTczMGNjYTI1ODg2NDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyDfoufq1MGUgC0SZWe/VPYnVgXM RGggM5lzUcdESB81C3AL029EHIdSAHqKQffnktJ0Ym50ZWSZMp+pwSOwc6aIjB8o CoGjsnaaSo7cAWWJUoNxnFk4ySJAmMOZ6/h5K6n/NDzZcwbahQrVVFhSfIzZSLRX eOBsHdMQVZzpddkyB6FVBgLOfQ6wf2Pwu0g7iUEeswKKtVDCVktAES66aAHMR7Ca 3VtiuvyXkIwTbv5uyiY6mw2OeXtFCkZFgMKOPo5EGh+6s6CLE+iQQObs/dnPgesV ybPhWalpAZFWiIIXr9LiiGipBzEDTvnsHzmt4MRABv7BHJnQKdidwCXN5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG92tdBbOKqXPM1vteVzDMoliGRYMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvYjNhMTBGczRxcGM4elctMTVYTU15aVdJWkZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXavcMA0G CSqGSIb3DQEBCwUAA4IBAQCDqtd3UB2rnuIbnT/dPImo59lIqtSTeZDwkqXzNtT5 JaZLVLlPylSsQ1s+45SolV14Rrpcw4WJNK6lHgZamHaR9yjfN0k/xYdzwdH8U5FL OLaucMnnt4mLsJZPzh6eW9zrwc+1DwoHfdc80Zsbi7OVKfOkyExhbWwStBp1EIMK vRhwve9zwwxmWL0P4vMs2nQ/qeWrcrvRo6Z52FINi/L4A58n79J/uHye3oGRfXLf 5fRZdJuI5Jznyvbx6attMayv4T9p5Ez9y39+PVxmNAM/zWC0dYm2dhunolFut8np aNYolUSyjit4Ees3H3Ibup5eK69qkhYurn/1igKl1Tvu -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:04 2026 by rpki-client