This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3dCv2OMU7JgU0UrpKeXBonFqNC0.roa File: 3dCv2OMU7JgU0UrpKeXBonFqNC0.roa (raw, json) Hash identifier: zxQoouoFxr9fChVsVAvgtRBpEfwSVFQTC9uFuPIQQjM= Subject key identifier: DD:D0:AF:D8:E3:14:EC:98:14:D1:4A:E9:29:E5:C1:A2:71:6A:34:2D Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAFDD13F837519E7907AAC7EB946D1 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3dCv2OMU7JgU0UrpKeXBonFqNC0.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210110 IP address blocks: 31.25.88.0/23 maxlen: 24 37.123.192.0/21 maxlen: 24 82.115.30.0/23 maxlen: 24 185.148.12.0/22 maxlen: 24 185.212.60.0/22 maxlen: 24 185.217.108.0/22 maxlen: 24 185.218.4.0/22 maxlen: 24 212.107.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fd:d1:3f:83:75:19:e7:90:7a:ac:7e:b9:46:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddd0afd8e314ec9814d14ae929e5c1a2716a342d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:64:f1:47:e0:e6:3b:21:b9:89:02:a9:28: 62:be:a2:55:27:d7:0a:a1:33:74:70:6a:5a:5f:b2: 58:66:68:23:6d:b9:1d:59:b9:b7:5a:70:97:17:e0: 65:5e:09:ca:5f:94:4f:72:3b:6f:10:d1:17:6d:82: b0:3b:c3:77:3f:19:05:2c:52:8b:8d:95:00:08:f7: 58:98:12:6f:d4:c6:65:87:68:84:f7:17:ce:b1:f0: 03:09:21:4b:22:1b:15:aa:15:91:fa:f3:4d:77:3f: ea:3e:cf:ff:00:2c:c3:df:f5:c3:09:87:bb:d6:63: 52:7f:fc:5f:02:cf:30:bc:39:5a:87:a0:54:58:28: 26:9e:fc:cf:c4:2c:b5:2e:68:6a:2e:89:a4:84:6f: e8:b2:2a:98:26:20:c7:4e:e1:d4:92:91:ea:3f:d8: a8:b0:d8:1e:be:c5:79:7e:e8:60:d8:54:63:93:d2: 6e:5d:d4:28:14:8f:6e:65:32:79:b3:ff:d7:cb:58: d9:9e:17:b7:34:64:40:e6:9c:3f:95:03:f9:8a:32: da:fe:64:72:aa:af:e5:3a:2c:13:57:1a:f7:73:b9: 87:7f:62:03:4c:b8:29:60:ad:2f:d9:8e:7a:c7:ee: 8e:89:c3:a5:04:fc:b2:7e:d5:70:87:31:5f:b4:1d: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:AF:D8:E3:14:EC:98:14:D1:4A:E9:29:E5:C1:A2:71:6A:34:2D X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3dCv2OMU7JgU0UrpKeXBonFqNC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.88.0/23 37.123.192.0/21 82.115.30.0/23 185.148.12.0/22 185.212.60.0/22 185.217.108.0/22 185.218.4.0/22 212.107.28.0/22 Signature Algorithm: sha256WithRSAEncryption c1:c3:4d:8a:9e:2f:cd:c4:dd:42:e4:50:b5:5a:a7:57:78:ef: ae:ec:1a:15:a9:b6:03:fd:a9:59:dd:60:fe:1c:c3:ab:19:52: 2b:0b:67:d9:58:25:f9:b3:d8:68:ac:43:e2:ec:be:1a:7a:b8: ec:f3:e6:f0:b1:9c:f9:d8:4a:b9:8c:23:e8:19:e0:f2:b9:47: be:34:55:41:0b:5c:71:06:be:bf:68:07:50:28:6a:a4:68:8e: 1c:40:6a:c0:38:33:8a:86:f0:26:c4:08:9b:32:67:9b:72:0b: 33:2b:f1:77:01:ef:6a:77:b7:1e:2f:31:3d:0a:d9:e6:c4:6e: b9:14:c6:c7:3e:1d:ff:e8:5d:a6:05:da:54:1a:c5:09:ca:7a: ea:a0:43:cc:25:dd:83:ec:2a:c5:7a:14:80:74:d0:d1:82:f6: 85:ba:d7:55:1b:78:78:53:36:e7:8e:ea:12:57:ad:f5:68:c1: de:ac:f0:42:a8:ef:46:c5:ab:74:f0:b4:10:70:ce:16:e6:d0: e2:61:a8:71:e9:94:18:8f:2c:e3:e2:f1:40:5c:ad:dc:ad:c9: 97:52:fa:2a:8e:3f:f5:51:04:5f:ab:79:26:1c:db:d0:60:29: 74:f1:cd:c4:a3:f9:32:48:b9:59:03:af:b3:09:6d:47:b7:75: dc:83:cf:b8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt26v3RP4N1GeeQeqx+uUbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGQwYWZkOGUzMTRlYzk4MTRkMTRhZTkyOWU1YzFhMjcxNmEzNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRdk8Ufg5jshuYkCqShivqJVJ9cK oTN0cGpaX7JYZmgjbbkdWbm3WnCXF+BlXgnKX5RPcjtvENEXbYKwO8N3PxkFLFKL jZUACPdYmBJv1MZlh2iE9xfOsfADCSFLIhsVqhWR+vNNdz/qPs//ACzD3/XDCYe7 1mNSf/xfAs8wvDlah6BUWCgmnvzPxCy1LmhqLomkhG/osiqYJiDHTuHUkpHqP9io sNgevsV5fuhg2FRjk9JuXdQoFI9uZTJ5s//Xy1jZnhe3NGRA5pw/lQP5ijLa/mRy qq/lOiwTVxr3c7mHf2IDTLgpYK0v2Y56x+6OicOlBPyyftVwhzFftB0ZLwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFN3Qr9jjFOyYFNFK6SnlwaJxajQtMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvM2RDdjJPTVU3SmdVMFVycEtlWEJvbkZxTkMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBHxlYAwQD JXvAAwQBUnMeAwQCuZQMAwQCudQ8AwQCudlsAwQCudoEAwQC1GscMA0GCSqGSIb3 DQEBCwUAA4IBAQDBw02Kni/NxN1C5FC1WqdXeO+u7BoVqbYD/alZ3WD+HMOrGVIr C2fZWCX5s9horEPi7L4aerjs8+bwsZz52Eq5jCPoGeDyuUe+NFVBC1xxBr6/aAdQ KGqkaI4cQGrAODOKhvAmxAibMmebcgszK/F3Ae9qd7ceLzE9CtnmxG65FMbHPh3/ 6F2mBdpUGsUJynrqoEPMJd2D7CrFehSAdNDRgvaFutdVG3h4UzbnjuoSV631aMHe rPBCqO9Gxat08LQQcM4W5tDiYahx6ZQYjyzj4vFAXK3crcmXUvoqjj/1UQRfq3km HNvQYCl08c3Eo/kySLlZA6+zCW1Ht3Xcg8+4 -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:33 2026 by rpki-client