This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/3qd6ryJVoFRB650Q_vjYdE5FH3c.roa File: 3qd6ryJVoFRB650Q_vjYdE5FH3c.roa (raw, json) Hash identifier: 9UIvBWdv4SEGNEIJba6xg1//2eKqhjadOAhSloqCY4U= Subject key identifier: DE:A7:7A:AF:22:55:A0:54:41:EB:9D:10:FE:F8:D8:74:4E:45:1F:77 Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f Certificate serial: 019B7DC98CE215E9E2A45AD7ED31C0E27DEF Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/3qd6ryJVoFRB650Q_vjYdE5FH3c.roa Signing time: Fri 02 Jan 2026 08:18:39 +0000 ROA not before: Fri 02 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209061 IP address blocks: 185.223.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:8c:e2:15:e9:e2:a4:5a:d7:ed:31:c0:e2:7d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f Validity Not Before: Jan 2 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dea77aaf2255a05441eb9d10fef8d8744e451f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:14:16:24:16:10:d7:5b:ac:1d:5d:87:bb: 00:09:d3:32:b2:32:ed:66:dd:7c:58:3b:40:c0:6d: c5:d3:27:68:2a:f2:0a:9c:ce:a3:3a:c0:17:a3:dd: 28:65:14:6f:17:cf:5d:1d:dd:05:b3:00:66:6d:b2: 34:3e:05:d9:a3:ce:f8:61:5f:33:e6:fd:95:56:70: 31:41:d4:01:b5:91:67:a7:3f:22:3a:3c:f9:77:31: 9f:66:ee:2e:30:1d:18:7a:2b:12:1e:01:03:e6:73: bd:96:e0:68:56:a9:49:98:b8:6d:62:a1:57:1e:9c: 17:7d:60:a4:e6:94:87:5e:30:65:00:ab:1d:a6:9c: f7:2e:eb:13:a4:17:73:1a:de:72:46:05:ef:fd:74: 12:6c:b5:5c:86:dc:4c:11:a0:b8:06:5b:e8:1d:42: 1a:49:fc:3b:94:9d:4e:3c:6c:81:b2:bc:0d:21:26: f1:59:8a:04:70:84:9d:2d:4f:6c:30:10:32:ba:52: a1:98:61:ea:b0:20:82:9b:86:00:d6:86:42:45:4c: 1e:49:43:16:64:e6:96:32:c8:d9:4f:cb:b3:18:82: c3:aa:cf:17:86:9c:52:30:d2:b8:b0:34:b4:6e:27: 7c:fc:de:33:e6:0f:61:45:19:e1:e9:4e:ff:eb:2b: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A7:7A:AF:22:55:A0:54:41:EB:9D:10:FE:F8:D8:74:4E:45:1F:77 X509v3 Authority Key Identifier: keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/3qd6ryJVoFRB650Q_vjYdE5FH3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.215.0/24 Signature Algorithm: sha256WithRSAEncryption 79:bb:90:28:ba:e4:3b:0c:11:a9:a8:53:8a:8a:ae:1e:7a:01: b9:77:7b:d7:df:f2:90:f4:a8:c4:ce:da:cf:45:d5:ab:ea:81: 5c:6c:3c:df:60:f5:1d:0c:54:b5:72:aa:ea:df:72:72:7d:49: ec:ce:98:ab:3d:4a:95:3c:f1:c7:44:71:de:49:8e:91:74:05: c9:32:66:53:4f:de:11:64:91:8c:e5:04:bf:e7:eb:74:20:15: 77:85:50:15:e3:94:46:69:df:1e:0c:5c:29:6a:9e:a4:0f:fb: d7:a1:87:75:13:b0:10:04:26:db:3d:46:30:f5:f2:a2:4f:6e: 0e:52:d2:a8:03:fd:3c:8e:ea:d4:99:4c:4c:ca:69:24:87:37: 4a:a8:b7:ae:b6:c9:c7:e6:d3:3e:36:df:19:dc:c1:a3:30:10: 05:d0:e5:0c:e6:31:0e:c1:1b:35:1f:b6:8f:cd:41:a6:4e:69: db:8b:57:e7:5f:4e:d5:b2:4a:40:76:5b:53:54:1b:0c:d8:d6: 11:b2:8a:b4:7f:a6:f0:41:05:cd:be:55:d8:b3:e8:58:8c:72: 28:0a:d4:f1:42:1d:1b:c2:84:cc:10:48:e6:9f:66:87:12:b8: ae:c1:b6:ac:07:2d:6e:a7:2f:12:c7:7b:df:9d:fb:3c:9a:0f: e3:aa:4a:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yYziFenipFrX7THA4n3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNTU3NTJiN2Q2ZmNlNzI4NmIxYTFhMmU0M2JjODZkNDU4 NGU4M2YwHhcNMjYwMTAyMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWE3N2FhZjIyNTVhMDU0NDFlYjlkMTBmZWY4ZDg3NDRlNDUxZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FkUFiQWENdbrB1dh7sACdMysjLt Zt18WDtAwG3F0ydoKvIKnM6jOsAXo90oZRRvF89dHd0FswBmbbI0PgXZo874YV8z 5v2VVnAxQdQBtZFnpz8iOjz5dzGfZu4uMB0YeisSHgED5nO9luBoVqlJmLhtYqFX HpwXfWCk5pSHXjBlAKsdppz3LusTpBdzGt5yRgXv/XQSbLVchtxMEaC4BlvoHUIa Sfw7lJ1OPGyBsrwNISbxWYoEcISdLU9sMBAyulKhmGHqsCCCm4YA1oZCRUweSUMW ZOaWMsjZT8uzGILDqs8XhpxSMNK4sDS0bid8/N4z5g9hRRnh6U7/6ytLbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN6neq8iVaBUQeudEP742HRORR93MB8GA1UdIwQY MBaAFHxVdSt9b85yhrGhouQ7yG1FhOg/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNGUwNzYtNTk4OS00MDJkLTk2ZGUt ZTg4Njk1ZmRkNmU1LzEvM3FkNnJ5SlZvRlJCNjUwUV92allkRTVGSDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zNGUwNzYtNTk4OS00MDJkLTk2ZGUtZTg4Njk1ZmRkNmU1 LzEvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud/XMA0G CSqGSIb3DQEBCwUAA4IBAQB5u5AouuQ7DBGpqFOKiq4eegG5d3vX3/KQ9KjEztrP RdWr6oFcbDzfYPUdDFS1cqrq33JyfUnszpirPUqVPPHHRHHeSY6RdAXJMmZTT94R ZJGM5QS/5+t0IBV3hVAV45RGad8eDFwpap6kD/vXoYd1E7AQBCbbPUYw9fKiT24O UtKoA/08jurUmUxMymkkhzdKqLeutsnH5tM+Nt8Z3MGjMBAF0OUM5jEOwRs1H7aP zUGmTmnbi1fnX07VskpAdltTVBsM2NYRsoq0f6bwQQXNvlXYs+hYjHIoCtTxQh0b woTMEEjmn2aHEriuwbasBy1upy8Sx3vfnfs8mg/jqkoP -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:28 2026 by rpki-client