This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/3D06yHKsQUT2InNv-XYHYJNizhE.roa File: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (raw, json) Hash identifier: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk= Subject key identifier: DC:3D:3A:C8:72:AC:41:44:F6:22:73:6F:F9:76:07:60:93:62:CE:11 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B7BA39DC08E3CBFFE8751D0E04FD5294C Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/3D06yHKsQUT2InNv-XYHYJNizhE.roa Signing time: Thu 01 Jan 2026 22:17:58 +0000 ROA not before: Thu 01 Jan 2026 22:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203558 IP address blocks: 188.75.71.0/24 maxlen: 24 188.75.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9d:c0:8e:3c:bf:fe:87:51:d0:e0:4f:d5:29:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 1 22:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc3d3ac872ac4144f622736ff97607609362ce11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:9f:30:87:a7:c4:27:51:3b:54:56:9c:8a: 64:8d:38:0b:4a:24:c9:e8:40:50:4b:e0:3a:b8:0b: d5:ec:98:cc:d9:05:e0:c9:c9:57:46:0d:c7:e6:78: 33:3c:1f:8b:5d:30:4d:47:8b:3d:12:92:d1:36:41: b7:1f:f1:b3:27:62:90:97:b7:8d:ec:a5:75:6f:44: 33:56:96:16:85:d8:47:f2:f8:71:bb:06:75:75:0e: 94:10:5d:d2:b4:c0:30:95:08:52:41:b3:b6:5e:81: 57:6a:83:61:e1:a9:42:aa:51:e8:00:8c:22:b0:7e: 82:60:84:56:09:1b:07:40:ee:e2:cf:ff:9a:95:0d: 81:36:ba:0f:86:bf:7c:6f:51:52:dd:88:cd:cf:90: dc:be:70:ec:35:04:9d:36:e1:8f:e0:a4:06:a3:a2: 00:2c:da:70:ed:0f:eb:c8:46:b7:e3:09:e3:49:68: 0b:0a:0b:b3:74:68:12:9b:49:70:87:9b:cc:ae:5b: e2:53:5a:47:6a:1d:07:1c:e8:52:d3:4b:ba:e8:e8: 89:5e:a7:cc:e0:fc:e1:9c:91:d9:0f:a2:7b:1b:a1: e2:91:72:35:fd:c4:12:d4:ac:53:e4:df:73:46:98: a3:74:8c:28:fa:28:05:07:fa:a7:ef:26:b2:26:01: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3D:3A:C8:72:AC:41:44:F6:22:73:6F:F9:76:07:60:93:62:CE:11 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/3D06yHKsQUT2InNv-XYHYJNizhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.75.71.0/24 188.75.109.0/24 Signature Algorithm: sha256WithRSAEncryption aa:56:4b:89:1f:99:6e:3a:21:31:28:f3:94:86:2e:fe:6d:a5: c8:3a:c2:f9:29:94:bd:d0:bd:ee:f9:6d:6c:6e:13:f7:fd:d3: 43:36:45:fa:ef:08:72:9d:1c:13:8a:b2:65:95:a4:62:27:ea: bf:10:13:b6:fa:ca:e9:2e:b2:42:0e:6c:4a:7a:a8:ce:26:2f: 68:17:3c:5b:84:24:f0:ee:f5:eb:b2:3e:dc:5b:e1:42:a1:42: 20:8c:23:2f:95:b3:0c:83:e0:aa:5d:d8:89:93:e9:82:b4:60: aa:fe:8b:99:d2:92:12:c4:e0:27:02:ed:dc:11:14:77:e7:e0: 2c:32:5a:65:5a:85:a5:9d:23:ce:3e:ac:f7:8d:24:25:93:ec: aa:fc:42:11:5d:f9:1c:4e:f9:04:12:06:95:9b:ff:4d:e0:a8: bc:36:1d:d2:47:d0:40:02:f4:ea:a9:ef:67:92:96:72:8e:0b: 92:52:d4:f7:b5:f5:28:f8:be:8b:65:f3:5a:5b:ed:26:f5:e4: 43:f0:c2:c3:b6:b8:53:ea:57:47:99:a3:a3:74:27:c0:fa:c5: fa:4b:f7:63:12:26:4f:5c:b1:a5:a8:f7:d7:a6:62:72:a2:af: da:f5:2e:6b:af:4a:7d:1e:25:c4:60:e1:9c:51:d0:51:8a:a9: c9:91:a4:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o53Ajjy//odR0OBP1SlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzNkM2FjODcyYWM0MTQ0ZjYyMjczNmZmOTc2MDc2MDkzNjJjZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst6fMIenxCdRO1RWnIpkjTgLSiTJ 6EBQS+A6uAvV7JjM2QXgyclXRg3H5ngzPB+LXTBNR4s9EpLRNkG3H/GzJ2KQl7eN 7KV1b0QzVpYWhdhH8vhxuwZ1dQ6UEF3StMAwlQhSQbO2XoFXaoNh4alCqlHoAIwi sH6CYIRWCRsHQO7iz/+alQ2BNroPhr98b1FS3YjNz5DcvnDsNQSdNuGP4KQGo6IA LNpw7Q/ryEa34wnjSWgLCguzdGgSm0lwh5vMrlviU1pHah0HHOhS00u66OiJXqfM 4PzhnJHZD6J7G6HikXI1/cQS1KxT5N9zRpijdIwo+igFB/qn7yayJgFu5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNw9OshyrEFE9iJzb/l2B2CTYs4RMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvM0QwNnlIS3NRVVQySW5Odi1YWUhZSk5pemhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvEtHAwQA vEttMA0GCSqGSIb3DQEBCwUAA4IBAQCqVkuJH5luOiExKPOUhi7+baXIOsL5KZS9 0L3u+W1sbhP3/dNDNkX67whynRwTirJllaRiJ+q/EBO2+srpLrJCDmxKeqjOJi9o FzxbhCTw7vXrsj7cW+FCoUIgjCMvlbMMg+CqXdiJk+mCtGCq/ouZ0pISxOAnAu3c ERR35+AsMlplWoWlnSPOPqz3jSQlk+yq/EIRXfkcTvkEEgaVm/9N4Ki8Nh3SR9BA AvTqqe9nkpZyjguSUtT3tfUo+L6LZfNaW+0m9eRD8MLDtrhT6ldHmaOjdCfA+sX6 S/djEiZPXLGlqPfXpmJyoq/a9S5rr0p9HiXEYOGcUdBRiqnJkaQ2 -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:33 2026 by rpki-client