This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/pr3f_Vyx9e_vf_-0bQjNPiE6gmI.roa File: pr3f_Vyx9e_vf_-0bQjNPiE6gmI.roa (raw, json) Hash identifier: 8UYNtf7B63yOwod177cqEevQ5oC6um/ojCWeUy8Lku4= Subject key identifier: A6:BD:DF:FD:5C:B1:F5:EF:EF:7F:FF:B4:6D:08:CD:3E:21:3A:82:62 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C117FF31BFCF445CCC1D69701D9E301 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/pr3f_Vyx9e_vf_-0bQjNPiE6gmI.roa Signing time: Fri 02 Jan 2026 00:18:00 +0000 ROA not before: Fri 02 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61371 IP address blocks: 94.131.196.0/23 maxlen: 23 94.131.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7f:f3:1b:fc:f4:45:cc:c1:d6:97:01:d9:e3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6bddffd5cb1f5efef7fffb46d08cd3e213a8262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:1f:46:cd:47:77:4d:db:07:a2:15:43:d9: 5b:18:34:7a:20:bd:a1:85:a2:05:d5:47:ee:8c:f7: da:43:4d:e4:d0:2e:32:bb:23:0c:d8:f2:1d:4b:93: af:16:e7:f9:a2:a9:98:59:ae:13:13:ec:47:d1:17: 22:5b:48:c3:db:e8:1e:d4:31:a3:35:54:c7:5d:a7: 48:6b:90:b3:86:3a:ab:a3:84:ab:d4:de:c4:73:11: f5:66:d0:5e:18:ff:da:a6:3b:d3:10:71:d4:50:23: 91:2a:51:8d:f9:19:b6:68:6b:ad:0b:56:9a:7c:94: b3:c4:e4:b9:07:54:f2:58:f1:13:bc:05:51:28:8d: 54:97:32:40:86:c5:1f:12:90:d8:66:1c:c5:3e:56: be:0b:26:76:f0:29:9a:d7:b9:26:f7:5c:40:24:3b: 21:14:aa:13:3c:a4:99:2e:b4:1e:3a:45:39:65:7e: 2c:c2:3e:19:db:91:ef:e4:8a:13:74:04:31:8b:ba: 65:c2:08:c2:71:f4:16:e2:37:eb:a2:bc:ec:bc:4d: da:54:58:0e:c7:b9:fb:f0:cc:31:bb:a0:ab:c9:f1: 02:df:7d:cc:8c:48:be:67:6a:d5:1b:6a:2b:1f:4c: d3:97:16:7b:b5:59:65:5c:25:02:0c:9c:4d:cc:be: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BD:DF:FD:5C:B1:F5:EF:EF:7F:FF:B4:6D:08:CD:3E:21:3A:82:62 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/pr3f_Vyx9e_vf_-0bQjNPiE6gmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.196.0/22 Signature Algorithm: sha256WithRSAEncryption 16:54:c3:bc:0c:19:ab:84:96:11:aa:c4:c3:dc:4b:56:31:52: 56:5f:3e:87:c9:74:2c:e1:8a:1b:10:81:89:ef:b5:2b:07:e1: ad:27:36:66:c9:89:7e:6f:3c:f4:ab:2f:fe:bf:51:50:09:1b: d5:ec:55:0b:97:f4:b4:c8:89:ba:2c:b7:a1:96:6a:11:da:9c: e0:34:c3:7a:ad:8a:8a:32:b3:d1:29:eb:dd:7d:1a:78:09:52: 92:fa:b6:a2:7f:6a:b3:64:a9:79:5c:4b:46:87:72:59:5b:38: 0f:e8:9c:c9:f1:e6:1f:7e:2a:8c:fc:df:a3:65:22:cd:38:96: da:49:dd:8f:75:2c:9e:5c:ef:8f:5c:6a:86:af:a3:d6:9f:83: e9:0f:87:6c:0b:69:9d:94:24:72:f2:3c:a3:f1:26:eb:58:25: 37:ff:80:4e:fe:63:f5:95:ed:8a:bd:50:09:32:14:0f:83:c2: 38:a2:49:2d:1d:99:82:95:9f:fb:12:15:23:9d:23:48:37:a1: 63:87:e6:42:52:b9:47:e5:3f:07:99:fe:8e:9c:91:e1:c4:62: c4:aa:11:04:a5:8d:30:a0:d1:a5:09:0f:69:43:22:a2:99:40: d9:cf:5b:8b:17:8e:52:e9:b3:68:35:a8:20:d0:46:da:4d:af: 3c:a2:f9:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EX/zG/z0RczB1pcB2eMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmJkZGZmZDVjYjFmNWVmZWY3ZmZmYjQ2ZDA4Y2QzZTIxM2E4MjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzAfRs1Hd03bB6IVQ9lbGDR6IL2h haIF1UfujPfaQ03k0C4yuyMM2PIdS5OvFuf5oqmYWa4TE+xH0RciW0jD2+ge1DGj NVTHXadIa5Czhjqro4Sr1N7EcxH1ZtBeGP/apjvTEHHUUCORKlGN+Rm2aGutC1aa fJSzxOS5B1TyWPETvAVRKI1UlzJAhsUfEpDYZhzFPla+CyZ28Cma17km91xAJDsh FKoTPKSZLrQeOkU5ZX4swj4Z25Hv5IoTdAQxi7plwgjCcfQW4jfrorzsvE3aVFgO x7n78Mwxu6CryfEC333MjEi+Z2rVG2orH0zTlxZ7tVllXCUCDJxNzL4j4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKa93/1csfXv73//tG0IzT4hOoJiMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvcHIzZl9WeXg5ZV92Zl8tMGJRak5QaUU2Z21JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXoPEMA0G CSqGSIb3DQEBCwUAA4IBAQAWVMO8DBmrhJYRqsTD3EtWMVJWXz6HyXQs4YobEIGJ 77UrB+GtJzZmyYl+bzz0qy/+v1FQCRvV7FULl/S0yIm6LLehlmoR2pzgNMN6rYqK MrPRKevdfRp4CVKS+raif2qzZKl5XEtGh3JZWzgP6JzJ8eYffiqM/N+jZSLNOJba Sd2PdSyeXO+PXGqGr6PWn4PpD4dsC2mdlCRy8jyj8SbrWCU3/4BO/mP1le2KvVAJ MhQPg8I4okktHZmClZ/7EhUjnSNIN6Fjh+ZCUrlH5T8Hmf6OnJHhxGLEqhEEpY0w oNGlCQ9pQyKimUDZz1uLF45S6bNoNagg0EbaTa88ovnB -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:51 2026 by rpki-client