This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3x6njAWG3RSl1CwJDKXLZPAtApE.roa File: 3x6njAWG3RSl1CwJDKXLZPAtApE.roa (raw, json) Hash identifier: W5sk3Ayfnk8+UKBwmtgJ3p05MXPrGukEA3YZE/BKzK4= Subject key identifier: DF:1E:A7:8C:05:86:DD:14:A5:D4:2C:09:0C:A5:CB:64:F0:2D:02:91 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80120FCE0F2B7CDCD6858234F9CCF7 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3x6njAWG3RSl1CwJDKXLZPAtApE.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24600 IP address blocks: 193.252.117.0/24 maxlen: 24 193.252.118.0/24 maxlen: 24 193.252.121.0/24 maxlen: 24 193.252.122.0/24 maxlen: 24 193.252.123.0/24 maxlen: 24 2a01:c9c0:b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:12:0f:ce:0f:2b:7c:dc:d6:85:82:34:f9:cc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df1ea78c0586dd14a5d42c090ca5cb64f02d0291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:02:9b:e6:96:8b:fd:30:c2:8f:22:17:13: 8e:53:7e:c1:c7:74:19:07:d2:5c:dc:ad:e9:5b:c9: cb:00:2e:56:41:f5:50:b0:f3:38:56:dd:4d:f9:fe: 70:20:d9:24:16:1f:da:8a:63:d9:af:0e:1e:cb:83: 35:0e:86:dc:2f:7b:64:b0:9f:04:56:42:4f:f6:e2: 5c:26:a8:3a:5f:c1:8c:65:7e:bc:5c:f3:f0:c1:20: de:a6:23:90:34:07:6e:b1:f9:15:07:49:15:16:1d: c1:e9:32:4e:e7:c5:f7:45:68:dc:d6:35:32:41:2a: df:88:5c:38:dc:1b:a9:24:d0:1c:ab:2e:af:47:60: c2:3d:b9:45:4f:1d:f4:f3:b7:77:03:52:6f:3c:60: fb:17:fe:c5:d8:be:0d:ea:2b:b7:b7:25:68:f8:37: 91:24:64:ae:71:bc:db:18:13:af:e0:ab:4b:92:2c: 3d:68:4a:c2:43:30:96:c3:02:20:fc:5c:1a:93:9a: 9a:dc:b1:88:c0:7a:43:7a:37:ed:21:f4:73:69:59: aa:07:e0:be:52:a8:88:66:c6:be:44:64:bc:04:c8: fb:99:d8:6a:9d:1a:93:8f:86:01:4f:28:4e:54:c2: 49:54:dd:a1:7c:da:b1:02:3e:fb:93:15:a8:60:cf: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1E:A7:8C:05:86:DD:14:A5:D4:2C:09:0C:A5:CB:64:F0:2D:02:91 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/3x6njAWG3RSl1CwJDKXLZPAtApE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.252.117.0-193.252.118.255 193.252.121.0-193.252.123.255 IPv6: 2a01:c9c0:b0::/44 Signature Algorithm: sha256WithRSAEncryption 96:0e:b2:5e:e1:20:a3:fd:67:6b:6e:1e:c3:fa:8e:56:87:26: b8:fe:fe:59:28:5a:87:7c:63:26:76:6e:a4:06:0c:fd:50:69: 7f:a8:ea:f9:b7:1e:f3:93:0b:b4:d6:f3:5c:39:61:83:a3:30: 20:db:a7:26:41:c4:3c:9f:5b:3c:6e:bf:09:58:61:d9:82:3a: af:5a:e8:f4:19:c1:8e:66:6a:af:ef:6c:be:4c:d5:49:04:f7: 5c:8d:e1:c6:45:a9:7f:65:4b:0f:6e:85:06:18:b2:44:30:3e: 68:39:f7:d0:48:e2:d7:f8:31:0d:49:33:40:ee:e0:0d:4e:83: c2:bd:b0:ce:b8:df:af:fb:10:d2:83:c3:50:03:5e:5f:e2:38: f8:3a:43:59:cb:c0:95:89:ec:25:9c:20:e0:5d:e2:86:92:bd: dd:24:0a:91:db:f6:bf:00:32:89:4b:e5:ac:61:f9:5e:b6:83: 9e:53:90:e0:2f:1a:9e:26:37:44:59:ca:fe:c1:7f:2c:46:06: 5d:59:bf:f1:66:1b:fa:ef:3e:fb:57:2c:a8:a8:a6:46:01:14: b8:f2:48:01:03:de:39:42:52:a0:7b:61:aa:ee:8c:1d:f9:04: d8:51:27:17:ad:40:aa:2c:ee:93:d0:1e:31:ce:62:be:f3:25: 67:83:47:01 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8gBIPzg8rfNzWhYI0+cz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjFlYTc4YzA1ODZkZDE0YTVkNDJjMDkwY2E1Y2I2NGYwMmQwMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3scCm+aWi/0wwo8iFxOOU37Bx3QZ B9Jc3K3pW8nLAC5WQfVQsPM4Vt1N+f5wINkkFh/aimPZrw4ey4M1DobcL3tksJ8E VkJP9uJcJqg6X8GMZX68XPPwwSDepiOQNAdusfkVB0kVFh3B6TJO58X3RWjc1jUy QSrfiFw43BupJNAcqy6vR2DCPblFTx3087d3A1JvPGD7F/7F2L4N6iu3tyVo+DeR JGSucbzbGBOv4KtLkiw9aErCQzCWwwIg/Fwak5qa3LGIwHpDejftIfRzaVmqB+C+ UqiIZsa+RGS8BMj7mdhqnRqTj4YBTyhOVMJJVN2hfNqxAj77kxWoYM+oGwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFN8ep4wFht0UpdQsCQyly2TwLQKRMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvM3g2bmpBV0czUlNsMUN3SkRLWExaUEF0QXBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAiBAIAATAcMAwDBADB/HUD BADB/HYwDAMEAMH8eQMEAsH8eDAPBAIAAjAJAwcEKgHJwACwMA0GCSqGSIb3DQEB CwUAA4IBAQCWDrJe4SCj/Wdrbh7D+o5Whya4/v5ZKFqHfGMmdm6kBgz9UGl/qOr5 tx7zkwu01vNcOWGDozAg26cmQcQ8n1s8br8JWGHZgjqvWuj0GcGOZmqv72y+TNVJ BPdcjeHGRal/ZUsPboUGGLJEMD5oOffQSOLX+DENSTNA7uANToPCvbDOuN+v+xDS g8NQA15f4jj4OkNZy8CViewlnCDgXeKGkr3dJAqR2/a/ADKJS+WsYfletoOeU5Dg LxqeJjdEWcr+wX8sRgZdWb/xZhv67z77VyyoqKZGARS48kgBA945QlKge2Gq7owd +QTYUScXrUCqLO6T0B4xzmK+8yVng0cB -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:47 2026 by rpki-client