This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/3r078bir07UdtDuJHV1FxgMDSKQ.roa File: 3r078bir07UdtDuJHV1FxgMDSKQ.roa (raw, json) Hash identifier: OqiAJCqUSBU1voAMZmIIFG4MlxPRLpnSY78JVHA9lkw= Subject key identifier: DE:BD:3B:F1:B8:AB:D3:B5:1D:B4:3B:89:1D:5D:45:C6:03:03:48:A4 Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c Certificate serial: 019B7EA72A662BBBC960A2830533AB842D8D Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/3r078bir07UdtDuJHV1FxgMDSKQ.roa Signing time: Fri 02 Jan 2026 12:20:43 +0000 ROA not before: Fri 02 Jan 2026 12:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 91.213.148.0/24 maxlen: 24 185.65.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2a:66:2b:bb:c9:60:a2:83:05:33:ab:84:2d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=debd3bf1b8abd3b51db43b891d5d45c6030348a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:d1:90:d3:69:36:b0:70:26:fe:2e:01:77: 6f:82:96:7d:fd:6b:81:39:89:1a:84:46:45:b8:e7: 30:0e:18:7f:86:c5:b7:b5:f2:32:24:cf:64:d9:1f: 84:d2:90:54:a8:e0:9b:4e:6a:03:94:5d:d7:b3:2f: 6d:1d:2d:57:3f:78:00:bb:6e:9c:4a:18:f2:c0:82: d9:f2:45:04:33:63:99:54:8a:91:85:fe:3d:ae:3f: 0c:d4:2a:39:7a:0b:f9:b7:c7:34:46:e0:be:00:bb: c3:f3:82:87:6b:f0:29:5c:1a:9c:fd:d3:ac:92:13: 2e:fa:6b:5d:c6:f5:44:b6:a8:b6:e3:78:e5:25:f9: 0a:96:e3:04:80:77:11:45:ad:52:a9:ea:45:e1:bf: c5:97:c3:8a:e0:1a:6e:a7:a6:33:0f:88:6f:07:38: 6e:1c:c7:e2:27:2d:05:e4:ed:cb:95:da:60:ab:7b: 98:10:26:e1:6c:83:ff:53:ce:90:20:e7:b3:ea:78: 57:9f:48:c8:8a:fb:20:af:31:32:09:5e:42:46:0a: 70:70:6f:24:80:cd:71:8c:52:4a:ff:0b:ce:77:20: 61:52:a5:e5:52:ae:26:0d:22:e1:64:c5:4b:97:0e: a7:92:aa:4c:4e:25:73:3a:c3:05:d7:1c:11:b1:4b: 4e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BD:3B:F1:B8:AB:D3:B5:1D:B4:3B:89:1D:5D:45:C6:03:03:48:A4 X509v3 Authority Key Identifier: keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/3r078bir07UdtDuJHV1FxgMDSKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.148.0/24 185.65.141.0/24 Signature Algorithm: sha256WithRSAEncryption 22:0f:51:08:b7:86:99:c6:34:14:3a:71:f0:f3:ea:e2:be:60: 59:dc:ef:24:b3:6e:c3:11:e9:01:6b:b0:61:5c:a2:cc:b3:90: 36:cc:91:ad:d3:3a:b7:dd:b8:41:7c:81:8d:d5:62:59:67:2b: 94:ac:e0:7b:ae:62:d4:72:db:c7:1c:10:4b:1a:e4:97:38:1e: 50:95:9c:8a:14:92:9d:42:cd:1a:54:d6:ef:2c:a3:cb:43:a3: a2:49:aa:22:78:2f:18:3f:22:1b:9e:31:45:00:57:a9:c9:48: e5:19:19:37:86:41:dd:2a:e6:f0:4a:1c:d8:3d:66:3c:21:1c: 63:2e:91:38:f7:b0:d8:e8:a6:af:86:16:7e:17:d3:1d:99:47: 50:f9:bc:e1:1d:c6:2c:a2:4e:59:c6:c5:aa:aa:b6:e4:0f:c5: d3:99:32:cd:33:18:6b:14:67:40:b8:6e:50:f7:f8:19:6f:10: 8a:1d:f4:f5:d3:a0:0f:75:07:4a:e8:64:97:e0:27:98:7b:85: e3:61:6f:55:61:d4:da:45:b1:17:fe:da:16:d3:4a:66:9c:26: cf:07:61:32:12:56:50:f5:05:c8:89:15:da:1a:9b:44:0c:75: 39:cc:1c:3d:8d:48:a9:d8:9c:d8:a4:ba:8f:9d:fb:19:46:b9: 8c:44:79:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pypmK7vJYKKDBTOrhC2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2E2ZTA2YzY4MjRiZDFiODExMTgzZTBlMTdmYTE5NDk2 ZDI2MWMwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWJkM2JmMWI4YWJkM2I1MWRiNDNiODkxZDVkNDVjNjAzMDM0OGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsabRkNNpNrBwJv4uAXdvgpZ9/WuB OYkahEZFuOcwDhh/hsW3tfIyJM9k2R+E0pBUqOCbTmoDlF3Xsy9tHS1XP3gAu26c ShjywILZ8kUEM2OZVIqRhf49rj8M1Co5egv5t8c0RuC+ALvD84KHa/ApXBqc/dOs khMu+mtdxvVEtqi243jlJfkKluMEgHcRRa1SqepF4b/Fl8OK4Bpup6YzD4hvBzhu HMfiJy0F5O3Lldpgq3uYECbhbIP/U86QIOez6nhXn0jIivsgrzEyCV5CRgpwcG8k gM1xjFJK/wvOdyBhUqXlUq4mDSLhZMVLlw6nkqpMTiVzOsMF1xwRsUtOGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN69O/G4q9O1HbQ7iR1dRcYDA0ikMB8GA1UdIwQY MBaAFA7KbgbGgkvRuBEYPg4X+hlJbSYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTct Y2ZkM2ZmOWZkZjdiLzEvM3IwNzhiaXIwN1VkdER1SkhWMUZ4Z01EU0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTctY2ZkM2ZmOWZkZjdi LzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9WUAwQA uUGNMA0GCSqGSIb3DQEBCwUAA4IBAQAiD1EIt4aZxjQUOnHw8+rivmBZ3O8ks27D EekBa7BhXKLMs5A2zJGt0zq33bhBfIGN1WJZZyuUrOB7rmLUctvHHBBLGuSXOB5Q lZyKFJKdQs0aVNbvLKPLQ6OiSaoieC8YPyIbnjFFAFepyUjlGRk3hkHdKubwShzY PWY8IRxjLpE497DY6KavhhZ+F9MdmUdQ+bzhHcYsok5ZxsWqqrbkD8XTmTLNMxhr FGdAuG5Q9/gZbxCKHfT106APdQdK6GSX4CeYe4XjYW9VYdTaRbEX/toW00pmnCbP B2EyElZQ9QXIiRXaGptEDHU5zBw9jUip2JzYpLqPnfsZRrmMRHku -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:30 2026 by rpki-client