This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/3DWFpw79OcRxHFUgDBKVisWT3bU.roa File: 3DWFpw79OcRxHFUgDBKVisWT3bU.roa (raw, json) Hash identifier: x3h4wbAmV51TlkfTEkHGrNxK/j4eCvpQPxXmB1qILMc= Subject key identifier: DC:35:85:A7:0E:FD:39:C4:71:1C:55:20:0C:12:95:8A:C5:93:DD:B5 Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F15068C24E6CFFFA77E47D9256828D4 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/3DWFpw79OcRxHFUgDBKVisWT3bU.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138997 IP address blocks: 185.179.218.0/23 maxlen: 24 188.64.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:06:8c:24:e6:cf:ff:a7:7e:47:d9:25:68:28:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc3585a70efd39c4711c55200c12958ac593ddb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:1f:80:dc:9d:78:44:8a:48:9f:51:90:9a: 4a:8c:ec:2d:d2:0e:36:df:6c:a0:3a:1e:c0:fa:94: 89:cb:4d:90:a2:87:bd:97:f5:15:52:4b:9f:cb:23: ff:cb:f2:db:0a:1c:5f:d2:fc:c7:90:db:b6:9f:83: b4:85:b6:82:3f:7c:6d:72:4f:8a:ee:5d:f8:8e:46: 89:1b:ab:0d:73:aa:72:1c:fb:7d:10:9c:bf:d9:83: 7b:a1:ea:49:d9:e9:39:45:e3:7f:a2:1e:64:5f:02: 78:7f:ea:1a:33:40:96:eb:4f:2d:6f:86:2f:95:fd: c6:b9:9a:e2:b2:a0:6c:12:88:ff:4a:93:79:ec:58: 60:12:90:de:95:33:04:cd:fc:9f:9a:05:ba:95:90: ec:d9:3d:6c:4e:88:e0:64:f2:41:86:73:c7:df:e5: 40:fd:51:6b:6d:e3:5e:dd:f4:44:b2:76:a1:5d:39: d2:37:ca:28:8f:5c:3b:6b:10:47:ee:65:13:84:bb: 09:aa:0e:e2:9b:e6:5d:89:3d:4a:c4:03:eb:79:35: 5a:c6:88:5c:45:f1:7d:75:64:78:8a:4d:b6:e4:ee: 28:39:19:b1:c5:3d:11:7c:07:a8:d4:b4:ad:d7:ac: 18:e7:4d:a5:4f:e8:7c:f7:d4:df:d5:e5:86:0c:91: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:35:85:A7:0E:FD:39:C4:71:1C:55:20:0C:12:95:8A:C5:93:DD:B5 X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/3DWFpw79OcRxHFUgDBKVisWT3bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.218.0/23 188.64.104.0/22 Signature Algorithm: sha256WithRSAEncryption 75:86:fc:57:9d:e7:34:b6:c4:04:1d:e8:10:56:dd:cc:de:c8: b2:7c:64:31:b4:5b:5a:bf:53:ed:de:02:47:b2:4d:ee:39:a9: eb:59:e2:94:47:ae:e0:e6:98:cd:5f:93:3d:ea:9c:8a:22:7a: 10:15:eb:61:0a:a5:7d:3a:84:47:c3:b5:f3:ef:69:56:01:b2: 9d:56:d5:a2:cd:69:2b:0e:91:55:3c:95:14:26:4b:b1:b6:99: f4:85:56:c8:92:be:5e:59:a9:6b:34:4d:f9:fd:f8:9d:4a:c8: 9c:09:b1:d1:0e:81:04:83:f2:4a:e9:fb:b9:db:eb:e5:16:db: 66:51:e4:fc:4b:73:be:de:33:95:fb:61:10:e9:87:03:a6:96: aa:ee:7b:de:94:60:4a:41:d3:a1:24:73:7c:79:27:69:eb:a2: 9a:1b:d6:02:22:e8:97:54:e4:2e:a6:1b:ce:5e:9d:70:fb:1f: 38:45:40:67:b9:04:fa:a5:55:72:47:83:d0:33:c3:01:30:09: b2:50:fd:fd:ea:38:8f:e0:f6:70:a0:f3:f0:2f:93:d5:cd:19: 63:71:5a:77:76:11:92:41:c4:69:96:cf:53:e2:e0:79:1f:76: b9:04:73:00:21:4d:bb:53:4c:3b:a3:f8:9a:87:5f:dd:32:aa: 2e:44:c0:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FQaMJObP/6d+R9klaCjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzM1ODVhNzBlZmQzOWM0NzExYzU1MjAwYzEyOTU4YWM1OTNkZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6EfgNydeESKSJ9RkJpKjOwt0g42 32ygOh7A+pSJy02Qooe9l/UVUkufyyP/y/LbChxf0vzHkNu2n4O0hbaCP3xtck+K 7l34jkaJG6sNc6pyHPt9EJy/2YN7oepJ2ek5ReN/oh5kXwJ4f+oaM0CW608tb4Yv lf3GuZrisqBsEoj/SpN57FhgEpDelTMEzfyfmgW6lZDs2T1sTojgZPJBhnPH3+VA /VFrbeNe3fREsnahXTnSN8ooj1w7axBH7mUThLsJqg7im+ZdiT1KxAPreTVaxohc RfF9dWR4ik225O4oORmxxT0RfAeo1LSt16wY502lT+h899Tf1eWGDJG1jQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNw1hacO/TnEcRxVIAwSlYrFk921MB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvM0RXRnB3NzlPY1J4SEZVZ0RCS1Zpc1dUM2JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBubPaAwQC vEBoMA0GCSqGSIb3DQEBCwUAA4IBAQB1hvxXnec0tsQEHegQVt3M3siyfGQxtFta v1Pt3gJHsk3uOanrWeKUR67g5pjNX5M96pyKInoQFethCqV9OoRHw7Xz72lWAbKd VtWizWkrDpFVPJUUJkuxtpn0hVbIkr5eWalrNE35/fidSsicCbHRDoEEg/JK6fu5 2+vlFttmUeT8S3O+3jOV+2EQ6YcDppaq7nvelGBKQdOhJHN8eSdp66KaG9YCIuiX VOQuphvOXp1w+x84RUBnuQT6pVVyR4PQM8MBMAmyUP396jiP4PZwoPPwL5PVzRlj cVp3dhGSQcRpls9T4uB5H3a5BHMAIU27U0w7o/iah1/dMqouRMA8 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:59 2026 by rpki-client