This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa File: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (raw, json) Hash identifier: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0= Subject key identifier: DE:03:EA:98:65:FF:13:8C:9A:EF:21:FB:3E:7A:C1:71:6F:C4:1C:35 Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Certificate serial: 019B7AC7A6529C85B56B6864B6DFA3D7932E Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa Signing time: Thu 01 Jan 2026 18:17:43 +0000 ROA not before: Thu 01 Jan 2026 18:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5610 IP address blocks: 195.246.96.0/23 maxlen: 23 195.246.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a6:52:9c:85:b5:6b:68:64:b6:df:a3:d7:93:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de03ea9865ff138c9aef21fb3e7ac1716fc41c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:b2:ac:48:f0:0d:d6:33:d7:91:12:08:c5: fc:7c:99:8f:8e:eb:54:ef:c7:ac:6f:2a:34:d7:35: be:8d:a4:41:c7:c5:f9:db:62:7a:6b:88:16:11:5c: 58:0f:17:08:db:7b:6a:e0:d7:e5:ce:a7:cc:25:66: a7:af:b1:24:d3:92:73:a8:9b:ac:b1:35:27:ea:10: 16:1a:71:30:07:bf:37:f5:ad:02:93:bc:04:cf:15: d5:d6:27:fe:8e:a6:0b:21:49:32:f3:63:46:19:fc: 24:16:f7:d4:6f:b3:85:ff:e2:09:7e:4c:76:11:65: 3e:66:30:46:fe:f5:45:98:d6:38:7c:7c:66:b5:37: 4d:6c:70:aa:f1:bb:71:11:82:7f:ec:98:39:dd:6c: 3f:61:02:b2:13:a4:3f:ce:13:e6:58:b8:fe:02:05: ff:6a:ff:dc:84:1b:61:64:6e:d7:0e:f9:b7:0f:b5: ee:c3:83:28:2e:d8:fa:99:a8:d5:eb:94:e7:1d:5f: dc:e0:be:b6:47:fa:3d:0e:45:27:22:d1:94:45:aa: 86:c5:40:d5:05:42:77:15:82:10:bf:ef:10:ea:b1: f3:77:ce:b7:95:89:f7:22:d5:1a:4c:f2:50:e3:e5: 2c:b3:8c:a6:e3:83:6b:d8:67:07:9d:3c:26:de:9b: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:03:EA:98:65:FF:13:8C:9A:EF:21:FB:3E:7A:C1:71:6F:C4:1C:35 X509v3 Authority Key Identifier: keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.246.96.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:05:18:96:5c:cd:c8:85:69:19:00:b8:c7:95:35:5a:a3:80: c7:ce:2a:8e:fe:73:a1:ce:a6:f2:2d:1d:22:bd:da:68:b7:5e: 1e:4c:0b:dc:ea:1b:0a:ae:16:4d:73:ff:d1:e4:e3:71:c6:fd: 27:d0:d1:18:9f:5b:8f:ea:6a:88:bf:c7:dc:40:e9:0e:d4:d4: 27:c3:a0:45:1b:fc:00:fa:fc:b4:85:c2:d8:8d:91:7d:7b:28: c1:2e:74:d9:89:b8:4f:7a:17:11:0e:7b:15:5b:12:46:a3:ff: cd:67:9c:8b:3d:48:eb:30:2d:02:4d:45:cb:fd:23:01:17:07: 44:ae:e6:77:17:09:97:e1:e9:b1:7a:b3:a7:88:d8:86:85:88: 7b:b0:af:77:6e:fd:a6:88:87:63:c8:b5:b1:7f:96:8f:ae:df: 52:99:be:61:a2:aa:67:9d:fc:38:7e:25:51:69:1b:2b:0a:a5: 79:a4:62:82:fa:8f:14:57:c4:22:51:0c:9b:0e:e8:f1:54:bd: 89:f6:5c:a7:23:66:96:57:b3:73:ec:5e:6e:08:17:c4:dd:a2: 27:f7:ea:36:a4:d8:56:14:7e:45:90:e8:cd:90:a4:8d:53:50: 3e:8a:0f:03:81:fb:2c:2f:e9:27:69:46:09:16:48:dc:d3:c6: 56:c5:2f:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6ZSnIW1a2hktt+j15MuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz NWZiZjEwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTAzZWE5ODY1ZmYxMzhjOWFlZjIxZmIzZTdhYzE3MTZmYzQxYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty6yrEjwDdYz15ESCMX8fJmPjutU 78esbyo01zW+jaRBx8X522J6a4gWEVxYDxcI23tq4NflzqfMJWanr7Ek05JzqJus sTUn6hAWGnEwB7839a0Ck7wEzxXV1if+jqYLIUky82NGGfwkFvfUb7OF/+IJfkx2 EWU+ZjBG/vVFmNY4fHxmtTdNbHCq8btxEYJ/7Jg53Ww/YQKyE6Q/zhPmWLj+AgX/ av/chBthZG7XDvm3D7Xuw4MoLtj6majV65TnHV/c4L62R/o9DkUnItGURaqGxUDV BUJ3FYIQv+8Q6rHzd863lYn3ItUaTPJQ4+Uss4ym44Nr2GcHnTwm3ptvJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN4D6phl/xOMmu8h+z56wXFvxBw1MB8GA1UdIwQY MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt NmJhZjMwMDc5MDVjLzEvM2dQcW1HWF9FNHlhN3lIN1BuckJjV19FSERVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/ZgMA0G CSqGSIb3DQEBCwUAA4IBAQB8BRiWXM3IhWkZALjHlTVao4DHziqO/nOhzqbyLR0i vdpot14eTAvc6hsKrhZNc//R5ONxxv0n0NEYn1uP6mqIv8fcQOkO1NQnw6BFG/wA +vy0hcLYjZF9eyjBLnTZibhPehcRDnsVWxJGo//NZ5yLPUjrMC0CTUXL/SMBFwdE ruZ3FwmX4emxerOniNiGhYh7sK93bv2miIdjyLWxf5aPrt9Smb5hoqpnnfw4fiVR aRsrCqV5pGKC+o8UV8QiUQybDujxVL2J9lynI2aWV7Nz7F5uCBfE3aIn9+o2pNhW FH5FkOjNkKSNU1A+ig8DgfssL+knaUYJFkjc08ZWxS+Q -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:27 2026 by rpki-client