This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/3XhI2AnxE9Iob8Z4cu24L14fqh0.roa File: 3XhI2AnxE9Iob8Z4cu24L14fqh0.roa (raw, json) Hash identifier: FrYruNBfkjSi7B2g8ZPV7E7JbrqIhIIg8LFhYWGl7/4= Subject key identifier: DD:78:48:D8:09:F1:13:D2:28:6F:C6:78:72:ED:B8:2F:5E:1F:AA:1D Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Certificate serial: 019B79ED3691AFF3343457FD6721CCF7A8CE Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/3XhI2AnxE9Iob8Z4cu24L14fqh0.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 185.127.180.0/24 maxlen: 24 185.127.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:36:91:af:f3:34:34:57:fd:67:21:cc:f7:a8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd7848d809f113d2286fc67872edb82f5e1faa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:db:01:2c:bc:e4:df:03:92:7d:2b:6e:d6: fb:27:e3:1c:6b:d0:da:b5:8a:1e:2d:92:a6:77:8f: cc:cf:fe:ad:33:35:c0:f5:eb:31:87:da:19:20:28: 95:66:a9:1d:6e:25:c8:f5:3b:65:e2:b6:4c:64:b0: 8e:76:f0:be:07:09:bb:99:40:e1:0e:2e:61:32:02: f6:bd:30:bf:5c:bc:87:fe:91:eb:cc:d8:f2:8f:b1: 6d:18:e0:a3:ba:a1:0d:19:d8:1d:bc:12:7a:0f:d9: 99:dc:81:b9:35:2b:93:58:76:3c:aa:81:2d:01:54: 77:8d:fb:e9:61:55:fd:f9:40:f4:ee:a9:9a:b7:ac: 00:2a:84:ca:b0:ed:5a:ac:a4:55:17:ba:49:71:31: 60:a6:b2:28:37:1c:9d:70:d6:b2:e2:ca:c2:ca:cc: aa:09:15:f6:3f:1a:c7:fe:77:22:91:7e:0f:04:53: 61:38:e3:fc:79:4f:53:a5:75:21:6d:70:3e:19:03: 4a:6f:27:98:b2:35:dd:ba:f2:4b:0f:73:9b:cd:44: b8:ab:54:ef:0b:bc:d5:eb:a5:53:b5:3d:ac:d3:4c: 33:b6:d9:7b:c7:3b:b8:f5:06:a3:57:fc:92:7f:50: 0e:60:2c:e7:3a:0c:51:7e:36:4d:9a:f7:95:6a:6d: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:78:48:D8:09:F1:13:D2:28:6F:C6:78:72:ED:B8:2F:5E:1F:AA:1D X509v3 Authority Key Identifier: keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/3XhI2AnxE9Iob8Z4cu24L14fqh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.180.0/23 Signature Algorithm: sha256WithRSAEncryption 20:9d:8c:0b:23:ff:d9:af:72:ed:59:b8:32:42:4a:20:71:c6: a2:69:ac:38:aa:7c:f8:8d:ad:c2:82:b4:9e:7b:cb:d1:89:8a: f5:5e:5a:c4:25:76:0c:81:e4:99:d6:86:af:07:e4:5a:1a:c0: df:fb:ee:0d:39:b3:29:f2:f1:3d:4d:0c:5e:f9:5d:c6:78:21: 57:b5:23:b9:33:43:26:4d:e8:03:67:85:59:ed:1d:07:56:06: 4c:b0:24:21:8b:29:cd:a6:7b:53:c2:4c:b9:9e:fe:4a:4c:2e: a3:f6:8a:ff:98:56:80:0f:ff:8a:c6:f1:1f:d2:bf:03:98:16: 02:7d:1b:23:c0:9c:91:4c:b3:31:eb:f9:cf:04:ff:9d:98:f7: 0e:1e:38:40:ca:72:fc:44:56:27:1c:8a:aa:2b:82:cf:e0:10: 7d:cc:fd:cf:54:b9:1f:c9:cb:22:e6:49:a8:b5:c4:8d:d8:30: a1:07:f6:ee:fe:59:81:b6:b6:8e:33:5f:31:ab:b8:e3:ed:82: 51:30:ef:e4:d1:2e:b6:e7:22:23:28:51:bf:30:09:d1:2f:78: 26:ce:a7:71:4d:dc:4a:5d:c0:76:0a:62:fa:c2:00:00:59:a5: 93:57:1b:a6:63:7f:c2:f2:35:d4:f5:2c:be:ea:11:61:23:bd: 13:19:74:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TaRr/M0NFf9ZyHM96jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzRiNmZjNjdiNmI5MGRiMzExYzYxZmMwZTNhOWM3NTI4 MzNjNTYwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDc4NDhkODA5ZjExM2QyMjg2ZmM2Nzg3MmVkYjgyZjVlMWZhYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5PbASy85N8Dkn0rbtb7J+Mca9Da tYoeLZKmd4/Mz/6tMzXA9esxh9oZICiVZqkdbiXI9Ttl4rZMZLCOdvC+Bwm7mUDh Di5hMgL2vTC/XLyH/pHrzNjyj7FtGOCjuqENGdgdvBJ6D9mZ3IG5NSuTWHY8qoEt AVR3jfvpYVX9+UD07qmat6wAKoTKsO1arKRVF7pJcTFgprIoNxydcNay4srCysyq CRX2PxrH/ncikX4PBFNhOOP8eU9TpXUhbXA+GQNKbyeYsjXduvJLD3ObzUS4q1Tv C7zV66VTtT2s00wzttl7xzu49QajV/ySf1AOYCznOgxRfjZNmveVam0VNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN14SNgJ8RPSKG/GeHLtuC9eH6odMB8GA1UdIwQY MBaAFBR0tvxntrkNsxHGH8DjqcdSgzxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQt OGM1NmQ4ZmUxN2I1LzEvM1hoSTJBbnhFOUlvYjhaNGN1MjRMMTRmcWgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQtOGM1NmQ4ZmUxN2I1 LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX+0MA0G CSqGSIb3DQEBCwUAA4IBAQAgnYwLI//Zr3LtWbgyQkogccaiaaw4qnz4ja3CgrSe e8vRiYr1XlrEJXYMgeSZ1oavB+RaGsDf++4NObMp8vE9TQxe+V3GeCFXtSO5M0Mm TegDZ4VZ7R0HVgZMsCQhiynNpntTwky5nv5KTC6j9or/mFaAD/+KxvEf0r8DmBYC fRsjwJyRTLMx6/nPBP+dmPcOHjhAynL8RFYnHIqqK4LP4BB9zP3PVLkfycsi5kmo tcSN2DChB/bu/lmBtraOM18xq7jj7YJRMO/k0S625yIjKFG/MAnRL3gmzqdxTdxK XcB2CmL6wgAAWaWTVxumY3/C8jXU9Sy+6hFhI70TGXRh -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:54 2026 by rpki-client