This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/B3jjvlnWK_ho4oeQ7H-8m6t4uX8.roa File: B3jjvlnWK_ho4oeQ7H-8m6t4uX8.roa (raw, json) Hash identifier: iNRcPuAK86hIo1jsy7oarAHxhqJd5nCDCcCEDbaTlTQ= Subject key identifier: 07:78:E3:BE:59:D6:2B:F8:68:E2:87:90:EC:7F:BC:9B:AB:78:B9:7F Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570 Certificate serial: 019B78A2DBCBEEE213D4515749DB37DBD5BD Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/B3jjvlnWK_ho4oeQ7H-8m6t4uX8.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35332 IP address blocks: 185.100.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:db:cb:ee:e2:13:d4:51:57:49:db:37:db:d5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570 Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0778e3be59d62bf868e28790ec7fbc9bab78b97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3a:f4:36:8a:84:a1:f5:9f:e9:ed:f4:6f:68: c8:33:06:9a:52:41:34:1d:0a:f6:e0:fe:b0:35:e7: 3e:88:03:bc:6b:1e:46:13:db:90:d2:b4:8d:ad:dd: cf:ef:ed:3e:09:49:ad:be:b6:28:72:b7:eb:26:78: 81:21:db:fa:40:89:cd:94:67:04:f0:a1:52:75:2d: 5c:3d:28:8b:ab:6b:70:33:f6:09:29:c6:4c:0f:fb: 85:7f:22:7d:a3:0c:20:d7:6c:29:44:13:b8:23:75: b6:9e:1e:cf:38:52:17:25:7d:2e:4e:b1:52:29:8c: 4b:6d:f7:cc:e6:08:c5:a5:60:bd:39:c8:e5:39:68: b0:25:a1:a8:76:0b:01:75:ab:e3:a0:4a:f0:d8:49: 93:40:2d:79:4a:dc:3a:2a:0d:97:1d:de:31:cf:fa: 63:9c:e4:01:98:26:de:aa:95:46:7d:91:93:5a:b8: c8:9e:3b:95:c5:04:e4:2d:8e:e0:95:3a:43:2f:1b: 74:98:d8:6f:63:b9:59:16:cc:4a:84:40:fa:54:05: bb:ac:89:2f:8b:23:f2:f1:4d:21:09:49:f6:71:cc: 24:bc:d7:c4:82:1b:62:a4:6e:8d:a8:8b:09:37:d5: f2:13:19:10:e8:01:f4:11:25:f9:4e:89:7e:72:49: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:78:E3:BE:59:D6:2B:F8:68:E2:87:90:EC:7F:BC:9B:AB:78:B9:7F X509v3 Authority Key Identifier: keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/B3jjvlnWK_ho4oeQ7H-8m6t4uX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.192.0/22 Signature Algorithm: sha256WithRSAEncryption cd:a8:90:af:41:f0:0a:1a:5d:06:0c:54:b7:ea:f7:cc:9b:27: cf:b8:28:6d:d6:8e:d9:c9:3d:97:96:90:60:2f:73:fb:be:ca: 3a:6e:48:87:d8:dd:77:f6:7f:d6:82:1e:6c:3b:09:1f:92:2c: 73:c3:7f:d5:bb:97:1f:27:8e:ac:3c:76:68:72:b3:fb:f3:35: d5:93:ae:9b:39:86:75:bf:af:58:d7:9e:13:38:b8:b0:2a:5a: ad:56:54:a7:9d:7b:e8:a3:76:ca:09:d6:d2:2c:a9:41:0c:7f: d8:09:c6:3a:2e:0d:19:54:5b:71:a2:f6:42:14:ea:e9:cc:81: f5:13:7a:14:5d:b5:2d:50:9f:43:e7:d2:5e:30:3e:a4:8e:f7: 47:ff:96:51:a2:35:bb:a0:ad:37:49:ff:d1:60:8c:f6:a5:f6: 2a:af:48:58:c8:96:46:0e:8d:76:e4:ae:8b:44:73:32:b5:75: e1:19:f1:53:ce:66:56:99:23:2e:67:a9:16:23:e4:ff:87:15: 3d:66:41:e6:9d:9e:22:a2:5d:9d:ab:7c:25:df:08:56:72:db: c7:1f:5e:d1:b1:51:de:bc:f4:9e:1d:a2:79:d0:86:74:eb:9a: 76:7d:4b:00:9a:39:ce:22:98:7e:35:be:5d:60:70:cd:55:3b: 0a:b7:48:81 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4otvL7uIT1FFXSds329W9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNzBiNDJkN2FmNmFkNzgyMjJiMzBmMDVmMmI3OTEzZjgw NjM1NzAwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzc4ZTNiZTU5ZDYyYmY4NjhlMjg3OTBlYzdmYmM5YmFiNzhiOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDr0NoqEofWf6e30b2jIMwaaUkE0 HQr24P6wNec+iAO8ax5GE9uQ0rSNrd3P7+0+CUmtvrYocrfrJniBIdv6QInNlGcE 8KFSdS1cPSiLq2twM/YJKcZMD/uFfyJ9owwg12wpRBO4I3W2nh7POFIXJX0uTrFS KYxLbffM5gjFpWC9OcjlOWiwJaGodgsBdavjoErw2EmTQC15Stw6Kg2XHd4xz/pj nOQBmCbeqpVGfZGTWrjInjuVxQTkLY7glTpDLxt0mNhvY7lZFsxKhED6VAW7rIkv iyPy8U0hCUn2ccwkvNfEghtipG6NqIsJN9XyExkQ6AH0ESX5Tol+ckmcQwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAd4475Z1iv4aOKHkOx/vJureLl/MB8GA1UdIwQY MBaAFPpwtC169q14Iisw8F8reRP4BjVwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uQzBMWHIyclhnaUt6RHdYeXQ1RV9nR05YQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5 LWI5MTQxNTliYThhZC8xL0Izamp2bG5XS19obzRvZVE3SC04bTZ0NHVYOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5LWI5MTQxNTliYThh ZC8xLzEtbkMwTFhyMnJYZ2lLekR3WHl0NUVfZ0dOWEEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5ZMAw DQYJKoZIhvcNAQELBQADggEBAM2okK9B8AoaXQYMVLfq98ybJ8+4KG3WjtnJPZeW kGAvc/u+yjpuSIfY3Xf2f9aCHmw7CR+SLHPDf9W7lx8njqw8dmhys/vzNdWTrps5 hnW/r1jXnhM4uLAqWq1WVKede+ijdsoJ1tIsqUEMf9gJxjouDRlUW3Gi9kIU6unM gfUTehRdtS1Qn0Pn0l4wPqSO90f/llGiNbugrTdJ/9FgjPal9iqvSFjIlkYOjXbk rotEczK1deEZ8VPOZlaZIy5nqRYj5P+HFT1mQeadniKiXZ2rfCXfCFZy28cfXtGx Ud689J4donnQhnTrmnZ9SwCaOc4imH41vl1gcM1VOwq3SIE= -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:38 2026 by rpki-client