This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3wU2MdnB0IW1XzEyaWJRFlXyTTY.roa File: 3wU2MdnB0IW1XzEyaWJRFlXyTTY.roa (raw, json) Hash identifier: 5qq32sXVvEMLRa9R0qys7rMcwGSe8rYQ3gYOF3KE+Hk= Subject key identifier: DF:05:36:31:D9:C1:D0:85:B5:5F:31:32:69:62:51:16:55:F2:4D:36 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C773EE3687D1D99F521FDAB24A2134 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3wU2MdnB0IW1XzEyaWJRFlXyTTY.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39437 IP address blocks: 195.136.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:73:ee:36:87:d1:d9:9f:52:1f:da:b2:4a:21:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df053631d9c1d085b55f31326962511655f24d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:de:9c:08:b8:a5:75:d0:63:17:97:72:29: 8c:0e:ee:80:24:26:3a:e1:d9:67:a6:ce:53:b8:b3: d1:6c:db:80:80:ce:8b:e0:8e:30:d4:bc:c1:8e:a0: 82:af:68:01:aa:86:b2:61:00:12:bd:dd:9f:ed:e2: 0e:6c:5b:7c:5f:58:69:ab:d6:d7:61:b9:18:bd:8c: 14:67:5b:b5:e0:11:f7:b6:c3:69:10:a5:fd:61:b5: 7b:d9:82:73:9f:5c:3d:2a:2e:0a:ff:1e:f5:58:0b: b7:a9:57:59:27:8f:78:78:7e:48:71:1e:c4:a5:d7: 41:14:7e:c9:9f:59:06:9a:9a:44:bc:a2:4b:0a:04: d6:d7:4b:81:c8:ce:b3:1e:33:c8:3f:62:86:40:09: 2d:eb:ba:37:fa:cc:05:4f:50:72:3d:b3:c5:c2:59: a8:80:5c:d5:25:9a:d4:85:75:09:ff:f8:a8:0d:d1: 7e:12:89:8b:82:a5:4e:bd:52:1e:f2:63:4c:8c:c7: 71:d6:54:16:65:93:14:22:46:d5:8a:0a:e4:74:16: 16:11:e3:e7:27:9c:6c:1b:57:f5:b3:05:48:b1:4c: 00:97:31:fd:1f:1b:3d:b4:54:23:8b:f5:2c:b9:9a: 6b:24:f2:01:17:81:53:c4:fc:ac:37:f0:7d:62:9b: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:05:36:31:D9:C1:D0:85:B5:5F:31:32:69:62:51:16:55:F2:4D:36 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3wU2MdnB0IW1XzEyaWJRFlXyTTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.79.0/24 Signature Algorithm: sha256WithRSAEncryption 36:18:d5:64:3b:c6:55:30:ea:3c:10:70:d7:73:20:c6:d0:5a: 95:2a:3e:b7:40:67:8a:4c:1d:d1:25:ef:57:76:42:63:4e:b6: 21:00:16:61:9c:1e:ed:74:b4:cf:50:00:52:37:84:c6:0a:b3: de:5b:3e:1a:8a:fd:e0:8f:4b:91:c5:06:51:42:6d:e3:8b:28: c5:bf:07:f7:36:a2:cf:be:89:65:ef:c9:a4:36:21:77:fb:da: 0d:fb:3d:e1:d4:de:e5:07:01:50:53:a1:b7:83:67:c4:a3:0c: f0:4b:0a:3b:a6:b2:3a:00:8b:57:95:eb:49:35:8d:03:58:ae: 49:3d:73:3d:01:b1:12:53:8d:cf:44:9e:bb:dc:d2:72:c3:09: 18:95:05:85:9d:94:93:f0:ac:c5:a6:d6:39:54:9e:ee:44:f7: 8e:b6:fc:1a:22:74:39:fb:77:58:d7:28:ee:eb:95:f7:21:a2: 65:7a:7e:77:85:f7:65:71:b8:ba:54:e1:3f:ed:26:58:a2:70: 4e:91:66:44:10:99:af:99:8a:1e:57:2d:f6:b7:d9:f6:49:79: 77:e6:f0:9b:8d:05:fa:d7:03:cf:d1:67:09:80:01:a8:7d:fd: 1f:96:bc:2f:e2:4b:26:31:5a:9e:68:cd:44:a1:c7:41:62:c8: 56:90:51:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3PuNofR2Z9SH9qySiE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjA1MzYzMWQ5YzFkMDg1YjU1ZjMxMzI2OTYyNTExNjU1ZjI0ZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbjenAi4pXXQYxeXcimMDu6AJCY6 4dlnps5TuLPRbNuAgM6L4I4w1LzBjqCCr2gBqoayYQASvd2f7eIObFt8X1hpq9bX YbkYvYwUZ1u14BH3tsNpEKX9YbV72YJzn1w9Ki4K/x71WAu3qVdZJ494eH5IcR7E pddBFH7Jn1kGmppEvKJLCgTW10uByM6zHjPIP2KGQAkt67o3+swFT1ByPbPFwlmo gFzVJZrUhXUJ//ioDdF+EomLgqVOvVIe8mNMjMdx1lQWZZMUIkbVigrkdBYWEePn J5xsG1f1swVIsUwAlzH9Hxs9tFQji/UsuZprJPIBF4FTxPysN/B9YptM1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8FNjHZwdCFtV8xMmliURZV8k02MB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvM3dVMk1kbkIwSVcxWHpFeWFXSlJGbFh5VFRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4hPMA0G CSqGSIb3DQEBCwUAA4IBAQA2GNVkO8ZVMOo8EHDXcyDG0FqVKj63QGeKTB3RJe9X dkJjTrYhABZhnB7tdLTPUABSN4TGCrPeWz4aiv3gj0uRxQZRQm3jiyjFvwf3NqLP voll78mkNiF3+9oN+z3h1N7lBwFQU6G3g2fEowzwSwo7prI6AItXletJNY0DWK5J PXM9AbESU43PRJ673NJywwkYlQWFnZST8KzFptY5VJ7uRPeOtvwaInQ5+3dY1yju 65X3IaJlen53hfdlcbi6VOE/7SZYonBOkWZEEJmvmYoeVy32t9n2SXl35vCbjQX6 1wPP0WcJgAGoff0flrwv4ksmMVqeaM1EocdBYshWkFGj -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:22 2026 by rpki-client