This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3u8K_-aWskMxZ0pffrTyE3lmi_I.roa File: 3u8K_-aWskMxZ0pffrTyE3lmi_I.roa (raw, json) Hash identifier: b0a7YvA+TZ/EzfQIjdFyOM7ZZFbRSPxYSk9indZ7snw= Subject key identifier: DE:EF:0A:FF:E6:96:B2:43:31:67:4A:5F:7E:B4:F2:13:79:66:8B:F2 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759458FB253654807E73D3AF8608609 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3u8K_-aWskMxZ0pffrTyE3lmi_I.roa Signing time: Thu 01 Jan 2026 02:18:17 +0000 ROA not before: Thu 01 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35268 IP address blocks: 85.204.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:45:8f:b2:53:65:48:07:e7:3d:3a:f8:60:86:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deef0affe696b24331674a5f7eb4f21379668bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:97:9b:75:ef:17:19:38:70:9e:50:4d:72: 4f:12:a3:1f:ea:56:a1:f5:13:d2:88:e3:ea:eb:22: ee:75:b3:65:4f:e3:a8:07:82:65:0a:f3:18:0f:56: 10:34:51:25:5f:e7:61:78:b6:ec:7e:9d:ee:8d:33: 9b:4b:44:cd:18:9c:0e:aa:a3:19:3c:8f:bb:c4:ce: fa:be:e5:55:10:6e:b1:22:38:bf:3a:94:bd:31:f6: 13:0d:a0:c8:dc:8d:b2:57:a8:11:09:71:6c:9e:39: e9:bc:ec:79:f6:a1:2e:d6:0c:2d:72:5b:1a:f8:e2: b0:c4:85:27:90:6e:78:33:cd:20:a7:ba:6b:e7:d4: b8:fb:1f:08:36:e3:5d:dd:29:ea:b5:4f:4b:78:48: 80:ee:00:9d:ef:0a:e1:97:ff:72:a5:05:dd:b0:43: 39:49:6c:15:61:70:af:e0:b8:87:0a:5d:4e:8b:39: 33:15:94:2b:47:b3:84:6e:f3:20:02:c9:da:fe:66: 6a:9e:e7:78:0b:91:91:c4:47:1c:e1:0c:31:01:2e: 2a:7b:dd:5a:fc:d2:90:56:91:92:66:5c:70:6d:57: 31:27:17:ad:6b:28:8f:16:b4:0e:c2:cd:72:32:51: cb:a8:e2:02:b4:f1:47:0c:c9:1e:5a:29:44:9d:d7: cf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EF:0A:FF:E6:96:B2:43:31:67:4A:5F:7E:B4:F2:13:79:66:8B:F2 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3u8K_-aWskMxZ0pffrTyE3lmi_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.134.0/24 Signature Algorithm: sha256WithRSAEncryption d1:1b:8d:0f:40:99:7e:49:94:14:a2:78:95:5c:79:78:f5:f0: 6d:ad:19:d7:37:0d:62:7f:0e:18:63:00:01:b6:85:28:b9:44: 6a:d5:ce:ec:91:03:33:7e:b4:63:8f:5b:8b:87:61:03:a4:c6: 6a:bf:9d:c0:5d:dc:44:38:3b:6e:27:b1:19:1d:d7:db:ac:62: 7a:31:a9:63:e3:02:37:92:75:ad:78:03:d6:6c:3f:db:23:3d: ba:bc:3c:54:b5:7b:37:4e:91:c5:b3:5e:9c:88:dd:ae:00:75: 93:5d:18:70:c7:c7:57:b8:eb:01:72:6f:91:c7:53:db:00:6f: 7e:d5:d1:71:84:26:c7:44:66:15:65:ab:ca:ff:c6:86:f5:c2: b4:3c:fc:e3:4d:21:e0:55:5c:35:c9:eb:85:2a:e5:12:61:77: 59:d2:7e:5d:99:27:91:66:39:8c:5c:a4:4c:e7:58:56:8c:35: 8a:9a:c6:e1:2d:72:a4:19:f8:19:11:48:08:68:73:59:42:3e: 7a:ba:e4:c9:51:db:e0:d6:93:65:f9:8b:0b:63:98:d6:16:7a: f4:fb:bf:ad:53:67:c8:69:ca:0c:41:de:c5:8e:a8:fc:55:44: 9c:9a:47:b0:e1:12:fc:db:b1:0f:b9:42:54:53:9d:ab:f6:eb: 78:15:df:01 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUWPslNlSAfnPTr4YIYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWVmMGFmZmU2OTZiMjQzMzE2NzRhNWY3ZWI0ZjIxMzc5NjY4YmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwieXm3XvFxk4cJ5QTXJPEqMf6lah 9RPSiOPq6yLudbNlT+OoB4JlCvMYD1YQNFElX+dheLbsfp3ujTObS0TNGJwOqqMZ PI+7xM76vuVVEG6xIji/OpS9MfYTDaDI3I2yV6gRCXFsnjnpvOx59qEu1gwtclsa +OKwxIUnkG54M80gp7pr59S4+x8INuNd3SnqtU9LeEiA7gCd7wrhl/9ypQXdsEM5 SWwVYXCv4LiHCl1OizkzFZQrR7OEbvMgAsna/mZqnud4C5GRxEcc4QwxAS4qe91a /NKQVpGSZlxwbVcxJxetayiPFrQOws1yMlHLqOICtPFHDMkeWilEndfPRQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFN7vCv/mlrJDMWdKX3608hN5ZovyMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzN1OEtfLWFXc2tNeFowcGZmclR5RTNsbWlfSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABVzIYw DQYJKoZIhvcNAQELBQADggEBANEbjQ9AmX5JlBSieJVceXj18G2tGdc3DWJ/Dhhj AAG2hSi5RGrVzuyRAzN+tGOPW4uHYQOkxmq/ncBd3EQ4O24nsRkd19usYnoxqWPj AjeSda14A9ZsP9sjPbq8PFS1ezdOkcWzXpyI3a4AdZNdGHDHx1e46wFyb5HHU9sA b37V0XGEJsdEZhVlq8r/xob1wrQ8/ONNIeBVXDXJ64Uq5RJhd1nSfl2ZJ5FmOYxc pEznWFaMNYqaxuEtcqQZ+BkRSAhoc1lCPnq65MlR2+DWk2X5iwtjmNYWevT7v61T Z8hpygxB3sWOqPxVRJyaR7DhEvzbsQ+5QlRTnav263gV3wE= -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:44 2026 by rpki-client