This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/3zzsb1jQ_lvXG-VEnpZCp86b5j8.roa File: 3zzsb1jQ_lvXG-VEnpZCp86b5j8.roa (raw, json) Hash identifier: LiKv+aa3BFXXs2ma47Vq9z++KB7KeUjRWOrIp2T9EgY= Subject key identifier: DF:3C:EC:6F:58:D0:FE:5B:D7:1B:E5:44:9E:96:42:A7:CE:9B:E6:3F Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F140F2A289B3958CED203147E2F3B99 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/3zzsb1jQ_lvXG-VEnpZCp86b5j8.roa Signing time: Fri 02 Jan 2026 14:19:39 +0000 ROA not before: Fri 02 Jan 2026 14:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43180 IP address blocks: 84.37.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:0f:2a:28:9b:39:58:ce:d2:03:14:7e:2f:3b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df3cec6f58d0fe5bd71be5449e9642a7ce9be63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:3d:8d:10:4a:b8:e7:8e:70:d6:50:bd:8d: 00:31:68:c8:58:12:85:c3:00:d1:fa:a0:60:d9:1b: 65:6e:b3:f5:7b:87:13:4e:85:11:b8:88:9b:27:dc: 4f:14:3e:24:22:76:3a:cd:20:31:c3:1a:2b:49:2b: 76:c4:04:d0:d7:5d:18:0e:16:8e:76:3a:18:4c:4e: e8:67:e0:a1:68:2e:ee:27:85:b4:87:54:b2:17:a3: 50:cb:50:1b:70:73:6e:36:d1:98:eb:eb:d3:fa:aa: d9:39:cc:fd:f4:31:8e:8b:f5:ff:95:20:a7:3a:ae: 0d:62:28:0c:3a:1c:ed:43:18:5f:25:d0:88:7a:d2: 33:ea:0c:f2:3b:05:77:87:80:32:d6:6a:50:bd:a0: 17:cb:dc:e4:b6:35:7e:d1:6b:31:24:ba:e8:a1:8d: e3:f0:eb:6f:02:43:43:1c:f2:63:3d:b4:df:48:5b: 62:cd:55:82:73:73:b6:ff:9b:ce:8e:51:57:84:b6: 34:81:95:2f:e4:0a:bf:cf:7e:78:78:cb:84:5a:f5: a4:db:60:01:f2:cc:0a:07:65:c3:a8:4f:e6:f0:0f: 4e:4f:95:6d:59:2f:65:88:9b:91:7f:f1:16:01:f4: f8:fd:d0:71:6b:bd:7c:f5:f7:92:ae:10:31:27:21: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3C:EC:6F:58:D0:FE:5B:D7:1B:E5:44:9E:96:42:A7:CE:9B:E6:3F X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/3zzsb1jQ_lvXG-VEnpZCp86b5j8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.37.44.0/23 Signature Algorithm: sha256WithRSAEncryption 67:e4:c7:a4:34:c2:02:26:cc:34:df:73:be:3c:4e:ac:0f:5f: 1d:6f:66:58:86:76:22:1d:97:6c:8c:2e:32:27:db:f1:91:41: 70:14:28:87:8e:74:7b:0c:65:8d:9e:48:1d:38:8d:34:65:37: 51:36:d6:38:f8:5e:0f:d6:f0:c0:5a:1e:ed:38:c5:47:bf:06: dc:f8:c8:f7:9e:9e:a4:b1:95:8e:ec:99:1e:61:a7:4d:a1:e7: 43:28:56:16:05:ca:5f:ed:3e:ab:cf:6b:86:c4:14:e6:ad:d9: b0:5d:36:a7:d9:46:b8:92:56:b8:98:df:be:35:ce:3f:93:80: 11:28:5d:27:fc:51:73:7b:e1:9e:df:91:ae:6b:a3:c1:7d:13: 83:cb:59:79:12:d3:cf:e4:54:5b:d1:dd:74:30:df:84:8d:9c: c4:e1:b7:e7:49:5e:eb:24:53:c6:12:57:15:83:ed:29:95:29: 33:77:cb:5e:d9:0a:bc:a3:43:88:8c:b6:f9:88:21:97:b4:ce: c2:8e:95:a0:36:02:b8:ae:36:35:cc:c1:28:7b:00:58:b4:28: 45:70:78:95:4c:00:7f:ae:04:18:ca:e0:70:2d:e7:de:9d:41: c8:68:77:b2:59:07:8a:a4:08:d5:e8:89:f0:84:63:1a:f5:a7: 4e:d4:ad:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FA8qKJs5WM7SAxR+LzuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjNjZWM2ZjU4ZDBmZTViZDcxYmU1NDQ5ZTk2NDJhN2NlOWJlNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQU9jRBKuOeOcNZQvY0AMWjIWBKF wwDR+qBg2RtlbrP1e4cTToURuIibJ9xPFD4kInY6zSAxwxorSSt2xATQ110YDhaO djoYTE7oZ+ChaC7uJ4W0h1SyF6NQy1AbcHNuNtGY6+vT+qrZOcz99DGOi/X/lSCn Oq4NYigMOhztQxhfJdCIetIz6gzyOwV3h4Ay1mpQvaAXy9zktjV+0WsxJLrooY3j 8OtvAkNDHPJjPbTfSFtizVWCc3O2/5vOjlFXhLY0gZUv5Aq/z354eMuEWvWk22AB 8swKB2XDqE/m8A9OT5VtWS9liJuRf/EWAfT4/dBxa7189feSrhAxJyHmqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN887G9Y0P5b1xvlRJ6WQqfOm+Y/MB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvM3p6c2IxalFfbHZYRy1WRW5wWkNwODZiNWo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVCUsMA0G CSqGSIb3DQEBCwUAA4IBAQBn5MekNMICJsw033O+PE6sD18db2ZYhnYiHZdsjC4y J9vxkUFwFCiHjnR7DGWNnkgdOI00ZTdRNtY4+F4P1vDAWh7tOMVHvwbc+Mj3np6k sZWO7JkeYadNoedDKFYWBcpf7T6rz2uGxBTmrdmwXTan2Ua4kla4mN++Nc4/k4AR KF0n/FFze+Ge35Gua6PBfRODy1l5EtPP5FRb0d10MN+EjZzE4bfnSV7rJFPGElcV g+0plSkzd8te2Qq8o0OIjLb5iCGXtM7CjpWgNgK4rjY1zMEoewBYtChFcHiVTAB/ rgQYyuBwLefenUHIaHeyWQeKpAjV6InwhGMa9adO1K3h -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:35 2026 by rpki-client