This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/3LIzbvk3lG3mvEIiY4M8QJFK89E.roa File: 3LIzbvk3lG3mvEIiY4M8QJFK89E.roa (raw, json) Hash identifier: RAysQsKndY90lNJkhdLE6qhTsTXHkGrsjOdD8MD6LOM= Subject key identifier: DC:B2:33:6E:F9:37:94:6D:E6:BC:42:22:63:83:3C:40:91:4A:F3:D1 Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDF58AEF86F9E0C12B388F7D70820D Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/3LIzbvk3lG3mvEIiY4M8QJFK89E.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212000 IP address blocks: 185.244.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f5:8a:ef:86:f9:e0:c1:2b:38:8f:7d:70:82:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcb2336ef937946de6bc422263833c40914af3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:54:e3:ab:a2:9c:f5:f1:0e:f8:bf:55:66: 11:7b:80:48:d9:7b:b5:4e:5a:45:fc:9e:8c:66:a3: 75:ca:29:6c:19:ba:2a:9b:97:72:b1:31:36:1f:32: 44:ad:73:f6:8c:85:d6:c2:f9:51:70:44:8d:96:a0: 41:88:5c:50:b3:52:47:88:c0:b0:72:ab:0d:37:b8: e0:87:11:ae:8a:79:bf:af:49:62:61:c6:2d:7b:2c: fd:c9:d5:a2:d8:d5:f4:92:29:13:50:4d:ef:e4:64: 52:7d:7d:72:7b:2a:a2:bb:a2:67:55:28:6b:44:b0: 97:5d:fb:6c:b1:03:a0:f0:6b:90:38:cc:88:34:b6: b8:5b:f7:b5:66:b7:76:7c:72:9e:d7:f2:66:52:c4: af:5d:f3:df:78:da:a0:3d:0f:9f:f7:d7:d4:56:81: 72:8a:8a:65:04:9f:78:14:1a:cc:d1:30:3c:07:ba: 65:d0:56:af:7a:9f:d7:f8:94:06:31:55:b0:dc:b5: c1:df:0e:ba:f2:84:be:5c:04:25:ae:b1:ee:a5:8d: 9c:bd:b8:ab:28:0d:53:ab:e5:20:7b:a5:3c:6a:e4: a0:22:bc:80:f1:80:c3:f5:c7:07:c1:b0:e6:fb:77: ab:0c:0f:a3:e6:9f:6f:bf:85:5f:47:15:a1:02:50: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B2:33:6E:F9:37:94:6D:E6:BC:42:22:63:83:3C:40:91:4A:F3:D1 X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/3LIzbvk3lG3mvEIiY4M8QJFK89E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.28.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:6a:d1:8d:cd:12:af:27:34:27:73:4b:b9:89:41:33:1f:69: 20:d5:79:f8:2a:64:d6:96:82:6d:bc:5e:18:d4:70:57:0b:46: 45:4e:a0:62:b8:eb:f7:bc:62:0f:c4:ea:e6:df:d6:32:57:c3: 5e:fe:53:20:e8:37:e2:37:f8:48:1d:f6:36:01:91:4e:34:11: 0d:33:db:d4:19:ac:c1:ca:a4:f8:7b:5c:5d:cc:15:af:9f:9e: ca:8f:1c:fe:8a:ac:6a:67:27:47:e9:c2:b8:4a:a1:1f:a0:ed: 48:b3:08:6b:f6:99:b0:b9:50:9e:33:05:90:fc:5a:15:c6:a0: 41:91:a8:10:31:75:65:36:12:aa:ed:32:ea:c9:fc:cd:2b:d8: 46:b7:9b:4a:f6:b9:ae:b0:10:8c:5f:41:fa:e4:89:76:61:2b: 43:f4:ba:ca:6c:53:64:0c:db:9d:72:aa:1f:aa:a3:e2:df:89: 92:6c:2e:66:08:e4:00:c6:b8:79:09:21:08:a5:d3:9a:cd:d1: c1:4e:19:21:17:6f:ea:95:03:f8:08:6f:2f:48:52:27:2c:e2: 47:3b:51:ea:12:73:e0:bf:c8:08:0f:c7:4d:00:cf:92:6b:af: 80:ca:2d:be:56:b8:77:3b:ba:86:29:72:9f:85:02:2e:47:05: 13:9b:2f:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fWK74b54MErOI99cIINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2IyMzM2ZWY5Mzc5NDZkZTZiYzQyMjI2MzgzM2M0MDkxNGFmM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaBU46uinPXxDvi/VWYRe4BI2Xu1 TlpF/J6MZqN1yilsGboqm5dysTE2HzJErXP2jIXWwvlRcESNlqBBiFxQs1JHiMCw cqsNN7jghxGuinm/r0liYcYteyz9ydWi2NX0kikTUE3v5GRSfX1yeyqiu6JnVShr RLCXXftssQOg8GuQOMyINLa4W/e1Zrd2fHKe1/JmUsSvXfPfeNqgPQ+f99fUVoFy ioplBJ94FBrM0TA8B7pl0Favep/X+JQGMVWw3LXB3w668oS+XAQlrrHupY2cvbir KA1Tq+Uge6U8auSgIryA8YDD9ccHwbDm+3erDA+j5p9vv4VfRxWhAlBx1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyyM275N5Rt5rxCImODPECRSvPRMB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvM0xJemJ2azNsRzNtdkVJaVk0TThRSkZLODlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufQcMA0G CSqGSIb3DQEBCwUAA4IBAQBNatGNzRKvJzQnc0u5iUEzH2kg1Xn4KmTWloJtvF4Y 1HBXC0ZFTqBiuOv3vGIPxOrm39YyV8Ne/lMg6DfiN/hIHfY2AZFONBENM9vUGazB yqT4e1xdzBWvn57Kjxz+iqxqZydH6cK4SqEfoO1Iswhr9pmwuVCeMwWQ/FoVxqBB kagQMXVlNhKq7TLqyfzNK9hGt5tK9rmusBCMX0H65Il2YStD9LrKbFNkDNudcqof qqPi34mSbC5mCOQAxrh5CSEIpdOazdHBThkhF2/qlQP4CG8vSFInLOJHO1HqEnPg v8gID8dNAM+Sa6+Ayi2+Vrh3O7qGKXKfhQIuRwUTmy8v -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:39 2026 by rpki-client