This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/3CbB-gU8Fkh_ywYdbqAJCeJYWoE.roa File: 3CbB-gU8Fkh_ywYdbqAJCeJYWoE.roa (raw, json) Hash identifier: iBZA24ojW5yz7VpoZ8gZBo7ejClO8z0JYYTLlgfEF4Q= Subject key identifier: DC:26:C1:FA:05:3C:16:48:7F:CB:06:1D:6E:A0:09:09:E2:58:5A:81 Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Certificate serial: 019B7E38C59A32E4B03A9C0348F561C389E9 Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/3CbB-gU8Fkh_ywYdbqAJCeJYWoE.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 185.205.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c5:9a:32:e4:b0:3a:9c:03:48:f5:61:c3:89:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc26c1fa053c16487fcb061d6ea00909e2585a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:e4:6c:d9:bd:f7:c1:24:d8:eb:44:29:38: d1:78:7e:0d:56:5a:d2:24:38:bb:15:64:7e:50:b1: e6:21:83:38:bf:7b:47:ec:cb:33:21:c1:f8:aa:de: 4f:97:d2:0d:a6:37:7a:96:65:f9:e1:f0:4d:16:43: b0:67:2b:ca:ab:2c:1a:93:ad:f2:2e:89:96:96:35: d8:b3:16:1d:75:df:d8:e1:3e:99:9f:0f:37:81:0a: f7:2c:e1:75:e0:1f:62:35:81:b9:f1:69:39:c9:dd: 81:83:a3:99:99:1e:97:de:20:91:b4:ed:02:49:6b: f4:6e:29:c4:04:4a:5c:43:f8:04:e2:b4:1c:7a:62: 7a:35:ef:52:4f:7d:07:4d:2b:2b:8c:b5:fa:12:73: b1:ad:bd:64:87:4c:c1:f3:b1:99:c9:7e:78:c9:46: 85:0d:87:e7:b3:40:11:83:c6:62:86:e8:bf:4e:b7: f6:68:c9:4e:fd:49:c9:50:da:ae:23:56:f1:9d:85: 57:39:06:ec:41:de:c1:52:11:ef:13:81:c2:4d:93: e7:04:ea:bd:ae:69:ba:29:98:1e:e9:83:60:8b:76: 73:f7:0d:18:e7:2d:4d:13:76:7c:4a:2e:3a:40:74: f9:90:f8:ee:0b:13:20:12:9d:d4:97:cf:06:c8:98: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:26:C1:FA:05:3C:16:48:7F:CB:06:1D:6E:A0:09:09:E2:58:5A:81 X509v3 Authority Key Identifier: keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/3CbB-gU8Fkh_ywYdbqAJCeJYWoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.34.0/24 Signature Algorithm: sha256WithRSAEncryption 78:55:dc:bc:32:15:02:05:89:67:23:89:a0:61:e3:8a:3a:c8: 99:88:3e:13:c1:4d:80:41:e6:e4:48:87:90:e7:48:c4:bf:4e: 62:19:62:6b:37:e6:4d:0c:8f:5f:24:04:0f:6a:b7:81:af:8e: 41:d1:e0:6e:a5:d8:bb:3a:86:59:8f:50:6a:81:f5:9c:5c:f3: b4:dd:a7:c2:cd:af:60:e6:89:26:bc:3f:22:06:c9:a4:d6:58: 5e:e4:93:c6:ea:9f:1b:0f:21:37:3c:b0:95:cb:a9:4f:e6:83: 92:ba:75:bf:0c:ac:70:93:95:25:85:54:48:f1:f5:78:c2:61: 2e:8a:f9:a7:8a:d8:97:10:9d:23:be:9e:80:ab:28:93:73:d3: 5e:5d:42:d5:11:76:76:a8:4b:d8:84:91:d0:6c:84:c5:77:5b: 3a:12:08:87:19:b3:ac:64:f4:6b:ec:41:10:07:c0:f9:a6:ea: bf:a4:45:c1:43:ca:d1:48:39:86:6e:a9:30:d1:30:5f:2d:07: ae:a1:2f:ec:9c:64:66:c8:dd:43:28:78:fd:41:31:d8:50:77: 9e:79:70:a5:e7:4f:58:16:b2:30:fa:c6:47:77:c2:08:56:21: 97:03:b8:85:3a:d3:7a:f3:a5:a3:15:eb:d4:1a:e2:b4:7c:47: 38:56:66:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMWaMuSwOpwDSPVhw4npMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw YjIzZDgwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzI2YzFmYTA1M2MxNjQ4N2ZjYjA2MWQ2ZWEwMDkwOWUyNTg1YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJPkbNm998Ek2OtEKTjReH4NVlrS JDi7FWR+ULHmIYM4v3tH7MszIcH4qt5Pl9INpjd6lmX54fBNFkOwZyvKqywak63y LomWljXYsxYddd/Y4T6Znw83gQr3LOF14B9iNYG58Wk5yd2Bg6OZmR6X3iCRtO0C SWv0binEBEpcQ/gE4rQcemJ6Ne9ST30HTSsrjLX6EnOxrb1kh0zB87GZyX54yUaF DYfns0ARg8Zihui/Trf2aMlO/UnJUNquI1bxnYVXOQbsQd7BUhHvE4HCTZPnBOq9 rmm6KZge6YNgi3Zz9w0Y5y1NE3Z8Si46QHT5kPjuCxMgEp3Ul88GyJiGywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwmwfoFPBZIf8sGHW6gCQniWFqBMB8GA1UdIwQY MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt NWViNzVjMjMxOGFhLzEvM0NiQi1nVThGa2hfeXdZZGJxQUpDZUpZV29FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc0iMA0G CSqGSIb3DQEBCwUAA4IBAQB4Vdy8MhUCBYlnI4mgYeOKOsiZiD4TwU2AQebkSIeQ 50jEv05iGWJrN+ZNDI9fJAQPareBr45B0eBupdi7OoZZj1BqgfWcXPO03afCza9g 5okmvD8iBsmk1lhe5JPG6p8bDyE3PLCVy6lP5oOSunW/DKxwk5UlhVRI8fV4wmEu ivmnitiXEJ0jvp6AqyiTc9NeXULVEXZ2qEvYhJHQbITFd1s6EgiHGbOsZPRr7EEQ B8D5puq/pEXBQ8rRSDmGbqkw0TBfLQeuoS/snGRmyN1DKHj9QTHYUHeeeXCl509Y FrIw+sZHd8IIViGXA7iFOtN686WjFevUGuK0fEc4VmZA -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:34 2026 by rpki-client