This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/a3rA8eGuwHcYBSwVzbbc11I2Urk.roa File: a3rA8eGuwHcYBSwVzbbc11I2Urk.roa (raw, json) Hash identifier: cT4DoQsTYje8hNsAaND3rx8+vYRHrFLlE/W9JtRBh+8= Subject key identifier: 6B:7A:C0:F1:E1:AE:C0:77:18:05:2C:15:CD:B6:DC:D7:52:36:52:B9 Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d Certificate serial: 019B76EAB85A9FC9FE37D2C0397BD79D1F7E Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/a3rA8eGuwHcYBSwVzbbc11I2Urk.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8038 IP address blocks: 185.54.92.0/23 maxlen: 24 2a00:8642::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b8:5a:9f:c9:fe:37:d2:c0:39:7b:d7:9d:1f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7ac0f1e1aec07718052c15cdb6dcd7523652b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:2f:c9:b3:4a:52:4d:62:fd:80:08:95:ee: 54:4b:8c:96:12:2d:2f:d8:c5:30:91:2c:fb:c9:f3: fa:36:a3:08:d3:3e:b4:02:08:f0:56:34:ef:bf:f6: 98:2f:bc:9a:ad:d3:c7:73:81:5b:24:a1:ad:1b:64: 3d:89:27:a3:63:65:3a:fb:b6:c2:f2:53:1d:60:29: 1a:71:f2:3a:d2:6d:1c:26:d4:7a:98:bc:61:db:92: 8f:a4:2b:a8:e6:d0:73:f1:e7:8f:46:0d:0d:fc:76: 5c:b9:5b:85:02:5a:a3:eb:98:76:02:07:ec:fa:17: e1:f1:4e:e1:72:ba:7c:67:c3:0c:0e:0b:d2:81:90: 59:eb:4b:52:ce:44:13:e5:3b:5d:1f:23:c5:e7:5c: 5f:cd:8f:76:ef:8e:51:99:db:0f:90:6d:2a:f7:22: 9f:23:48:a1:43:46:f4:31:34:e1:6a:1a:18:3b:a9: 95:8c:06:7b:b6:ad:f5:f5:f4:e3:3a:37:0a:de:34: 14:0e:65:a8:37:d5:0c:cb:f0:98:c7:86:f8:09:54: bf:2b:bf:88:e8:f1:78:3f:6e:1d:0d:8a:8d:0a:d7: 51:85:d8:e9:03:2b:02:a6:f3:d0:7d:cd:98:61:c3: 89:4d:43:8b:9a:db:1e:bd:e8:8c:3e:2b:13:fc:10: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7A:C0:F1:E1:AE:C0:77:18:05:2C:15:CD:B6:DC:D7:52:36:52:B9 X509v3 Authority Key Identifier: keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/a3rA8eGuwHcYBSwVzbbc11I2Urk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.92.0/23 IPv6: 2a00:8642::/32 Signature Algorithm: sha256WithRSAEncryption c1:e5:a9:25:ea:c7:bf:15:01:9e:e8:25:4e:6c:89:c5:e5:b1: 1a:61:38:64:ab:b9:5a:d1:24:03:13:a7:ae:c9:67:6f:0e:ef: 1f:66:11:33:89:5b:40:2c:19:ab:23:49:c8:86:fe:6e:78:27: b2:5c:58:dd:9c:ce:94:bd:37:8c:2c:4e:71:76:39:6f:11:4f: ea:74:3b:04:03:5f:6a:f4:97:5f:53:5e:08:cf:19:15:d4:21: 61:24:6e:07:ed:93:e2:f1:8b:e1:2a:41:a9:61:fa:bd:69:5d: 7b:b0:b6:60:d2:2a:70:52:84:ec:ef:78:37:2f:32:8b:e7:fb: ad:c4:05:17:fe:51:76:9f:8d:47:b4:90:6b:74:ea:65:a3:9c: 02:2a:e9:25:98:18:0a:7b:5a:92:a4:a9:fa:0a:89:1a:19:3d: c8:45:69:d9:51:02:ee:3e:b2:7a:e6:46:0f:ec:c1:d7:5c:69: 05:85:d1:7c:fd:41:c5:da:2e:3c:e6:9b:ec:b9:06:33:f1:b8: 9b:e7:e9:65:6a:00:ab:30:68:11:dd:b1:16:a7:8f:05:c3:7a: b1:0c:3b:2c:b3:7e:b3:c4:f1:bb:8c:cc:7e:4e:2a:17:25:a3: d8:b3:38:5c:06:3d:88:d3:f7:69:73:8f:6d:de:3a:a0:e7:92: 33:75:f2:29 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26rhan8n+N9LAOXvXnR9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2 Nzc3MGQwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdhYzBmMWUxYWVjMDc3MTgwNTJjMTVjZGI2ZGNkNzUyMzY1MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVEvybNKUk1i/YAIle5US4yWEi0v 2MUwkSz7yfP6NqMI0z60AgjwVjTvv/aYL7yardPHc4FbJKGtG2Q9iSejY2U6+7bC 8lMdYCkacfI60m0cJtR6mLxh25KPpCuo5tBz8eePRg0N/HZcuVuFAlqj65h2Agfs +hfh8U7hcrp8Z8MMDgvSgZBZ60tSzkQT5TtdHyPF51xfzY92745RmdsPkG0q9yKf I0ihQ0b0MTThahoYO6mVjAZ7tq319fTjOjcK3jQUDmWoN9UMy/CYx4b4CVS/K7+I 6PF4P24dDYqNCtdRhdjpAysCpvPQfc2YYcOJTUOLmtseveiMPisT/BAzDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGt6wPHhrsB3GAUsFc223NdSNlK5MB8GA1UdIwQY MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt Y2NmNjQ1NGJiMjRjLzEvYTNyQThlR3V3SGNZQlN3VnpiYmMxMUkyVXJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuTZcMA0E AgACMAcDBQAqAIZCMA0GCSqGSIb3DQEBCwUAA4IBAQDB5akl6se/FQGe6CVObInF 5bEaYThkq7la0SQDE6euyWdvDu8fZhEziVtALBmrI0nIhv5ueCeyXFjdnM6UvTeM LE5xdjlvEU/qdDsEA19q9JdfU14IzxkV1CFhJG4H7ZPi8YvhKkGpYfq9aV17sLZg 0ipwUoTs73g3LzKL5/utxAUX/lF2n41HtJBrdOplo5wCKuklmBgKe1qSpKn6Coka GT3IRWnZUQLuPrJ65kYP7MHXXGkFhdF8/UHF2i485pvsuQYz8bib5+llagCrMGgR 3bEWp48Fw3qxDDsss36zxPG7jMx+TioXJaPYszhcBj2I0/dpc49t3jqg55IzdfIp -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:56 2026 by rpki-client