This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/3gqZ21ZiXWY8Si7snLEpMyMD74g.roa File: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (raw, json) Hash identifier: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo= Subject key identifier: DE:0A:99:DB:56:62:5D:66:3C:4A:2E:EC:9C:B1:29:33:23:03:EF:88 Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Certificate serial: 019B78A22BB10F1AE5E5BF151DF692F9123F Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/3gqZ21ZiXWY8Si7snLEpMyMD74g.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198381 IP address blocks: 185.12.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2b:b1:0f:1a:e5:e5:bf:15:1d:f6:92:f9:12:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de0a99db56625d663c4a2eec9cb129332303ef88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:22:1e:ce:82:4a:72:29:1b:f6:04:0e:e3: 90:19:59:c7:d7:20:5e:a9:e3:2b:94:e2:4e:b0:8b: c1:3e:e2:91:8f:11:2e:66:56:f1:a4:f8:b5:57:37: 9c:55:af:e7:c8:3a:08:33:62:f6:25:99:d3:47:32: 70:b9:46:9b:a8:1d:a3:ba:84:06:8d:c2:78:75:32: 0f:8a:e0:7b:ea:cd:75:d1:16:34:ca:8e:b8:0d:55: 1a:7c:61:9b:7d:8d:4e:7a:0b:aa:17:1d:06:29:9a: 7a:02:89:89:ad:05:52:28:92:e2:7a:09:c2:58:a8: 53:4e:7c:31:7c:29:c6:3a:b3:d5:ba:0e:0e:49:2b: 02:6a:9a:a3:06:13:d9:ef:7b:07:24:e3:d2:f0:f8: f4:dc:f7:47:50:f6:35:ef:66:c0:34:fa:6a:d5:8a: 62:a3:65:87:64:7a:d0:d0:66:86:64:55:86:cf:2e: ae:2b:82:7b:89:67:ec:71:77:61:92:8d:35:fc:54: 8b:1c:85:90:ee:eb:08:4a:e2:cd:3f:bd:cb:32:37: 00:59:25:ff:a3:93:f9:65:2b:41:dd:7d:05:f5:8a: ea:b2:7f:10:3a:ee:d0:f1:58:7c:f2:c5:40:dd:8c: ea:ab:22:a7:9c:ab:f5:97:00:bc:ed:12:25:e1:dd: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0A:99:DB:56:62:5D:66:3C:4A:2E:EC:9C:B1:29:33:23:03:EF:88 X509v3 Authority Key Identifier: keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/3gqZ21ZiXWY8Si7snLEpMyMD74g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.27.0/24 Signature Algorithm: sha256WithRSAEncryption 16:41:2e:74:9c:99:55:6c:06:6a:d3:ae:b4:fc:bf:96:8d:7d: 4a:05:9e:85:08:f7:c1:2a:58:4c:e9:5a:5b:90:d9:74:7e:24: 93:90:0c:d7:ca:93:cf:df:10:e2:e6:8a:89:99:47:79:87:7b: 48:24:5b:f3:a9:8e:df:4e:7e:0f:43:31:26:6f:4d:26:cd:c6: da:dd:7e:8e:38:0d:ea:04:28:e9:31:36:cc:a3:5c:6b:1f:91: 76:e9:82:26:21:cd:5c:b8:3d:7c:5a:6f:98:83:2e:f0:cf:d4: 45:a0:3c:5f:ff:a5:ef:30:97:0c:94:8e:9e:59:42:d4:c2:79: a9:8b:56:bb:bc:c9:c5:6c:a5:f5:09:f3:d0:e4:51:1b:01:a6: 44:e6:66:71:37:bc:6c:de:fe:f9:ae:41:ed:c8:04:23:22:e4: 2d:95:07:2f:a6:cf:18:80:a5:fd:07:d5:1a:b8:ba:47:2e:71: 7f:e1:58:30:5b:02:72:b0:3a:26:ff:56:6c:2a:27:17:bb:06: 6a:2b:a6:32:07:a7:16:7c:3c:20:29:29:ca:a8:5e:6d:8f:8a: 11:5d:d6:28:4e:b3:64:3a:fe:4a:84:5f:1d:95:d8:2d:0d:0d: 5d:50:fd:65:18:f6:02:ed:6c:54:15:f8:2f:a3:23:aa:f1:82: b9:37:d7:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiuxDxrl5b8VHfaS+RI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzODBjZDhhZDJmODRlMTRlOWI1YjY0MjM4OTM3YjZkNDIw N2UyMjEwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTBhOTlkYjU2NjI1ZDY2M2M0YTJlZWM5Y2IxMjkzMzIzMDNlZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7QiHs6CSnIpG/YEDuOQGVnH1yBe qeMrlOJOsIvBPuKRjxEuZlbxpPi1VzecVa/nyDoIM2L2JZnTRzJwuUabqB2juoQG jcJ4dTIPiuB76s110RY0yo64DVUafGGbfY1OeguqFx0GKZp6AomJrQVSKJLiegnC WKhTTnwxfCnGOrPVug4OSSsCapqjBhPZ73sHJOPS8Pj03PdHUPY172bANPpq1Ypi o2WHZHrQ0GaGZFWGzy6uK4J7iWfscXdhko01/FSLHIWQ7usISuLNP73LMjcAWSX/ o5P5ZStB3X0F9Yrqsn8QOu7Q8Vh88sVA3YzqqyKnnKv1lwC87RIl4d05/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN4KmdtWYl1mPEou7JyxKTMjA++IMB8GA1UdIwQY MBaAFFOAzYrS+E4U6bW2QjiTe21CB+IhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQt NWUzNmQxYjA4MjVlLzEvM2dxWjIxWmlYV1k4U2k3c25MRXBNeU1ENzRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQtNWUzNmQxYjA4MjVl LzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQwbMA0G CSqGSIb3DQEBCwUAA4IBAQAWQS50nJlVbAZq0660/L+WjX1KBZ6FCPfBKlhM6Vpb kNl0fiSTkAzXypPP3xDi5oqJmUd5h3tIJFvzqY7fTn4PQzEmb00mzcba3X6OOA3q BCjpMTbMo1xrH5F26YImIc1cuD18Wm+Ygy7wz9RFoDxf/6XvMJcMlI6eWULUwnmp i1a7vMnFbKX1CfPQ5FEbAaZE5mZxN7xs3v75rkHtyAQjIuQtlQcvps8YgKX9B9Ua uLpHLnF/4VgwWwJysDom/1ZsKicXuwZqK6YyB6cWfDwgKSnKqF5tj4oRXdYoTrNk Ov5KhF8dldgtDQ1dUP1lGPYC7WxUFfgvoyOq8YK5N9f3 -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:07 2026 by rpki-client