This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/3Ogv-65T1Kg_Y0PwX3iWSALH4hk.roa File: 3Ogv-65T1Kg_Y0PwX3iWSALH4hk.roa (raw, json) Hash identifier: Zkr3qlEk5NZQXDe7nwoX/wyvk4zh4il5FQTwuh5WfIw= Subject key identifier: DC:E8:2F:FB:AE:53:D4:A8:3F:63:43:F0:5F:78:96:48:02:C7:E2:19 Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9 Certificate serial: 019B7910C75FF90179F6D4709EDCE5486838 Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/3Ogv-65T1Kg_Y0PwX3iWSALH4hk.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62095 IP address blocks: 31.169.73.0/24 maxlen: 24 185.11.248.0/24 maxlen: 24 185.11.249.0/24 maxlen: 24 185.11.250.0/24 maxlen: 24 185.11.251.0/24 maxlen: 24 2a02:ed40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c7:5f:f9:01:79:f6:d4:70:9e:dc:e5:48:68:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9 Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dce82ffbae53d4a83f6343f05f78964802c7e219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:74:e0:73:b0:32:60:52:b9:ca:53:c2:3d:f5: 28:81:41:d3:c8:3c:64:86:b7:e0:12:45:f0:32:aa: 06:a5:a2:34:0c:db:8f:23:20:44:5c:b8:e5:1d:9f: 66:a9:ac:ed:b7:ec:a3:a1:ca:55:f2:06:ea:e0:b4: 0c:aa:33:8d:2d:87:94:b9:85:2e:97:47:ae:8b:bf: 56:fd:83:32:55:2a:42:9b:4f:5d:3b:c8:58:0b:f6: 93:83:d8:36:19:d9:2a:9f:28:96:a9:35:df:e0:19: bc:83:3a:ac:c0:2d:8c:f2:7c:f9:cd:a7:e6:af:7c: ee:4b:bf:0f:9a:5f:fa:ef:ec:d3:84:67:d8:b8:e3: ad:c5:43:6d:c5:23:d6:ef:b7:a8:fb:2f:12:98:8d: 5e:25:d3:22:08:40:f0:2a:4c:20:d6:07:37:2f:6e: 44:91:fa:08:50:aa:df:5f:f5:1a:c1:91:7f:5b:d0: d5:6b:92:db:f5:54:a8:2f:2d:f3:62:56:ee:f4:11: c5:9d:6c:52:55:83:47:ad:9c:42:68:97:09:6e:07: ac:0b:3e:f1:44:b3:f1:c3:2e:65:08:d7:c7:12:e4: 1b:60:d0:b7:40:66:1d:a6:c2:41:a5:a4:35:72:e1: 30:f3:36:77:05:98:5c:a4:a3:ac:94:78:f2:dc:29: f2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E8:2F:FB:AE:53:D4:A8:3F:63:43:F0:5F:78:96:48:02:C7:E2:19 X509v3 Authority Key Identifier: keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/3Ogv-65T1Kg_Y0PwX3iWSALH4hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.73.0/24 185.11.248.0/22 IPv6: 2a02:ed40::/48 Signature Algorithm: sha256WithRSAEncryption 07:5d:51:dd:31:b2:98:6b:9f:ff:af:65:12:43:76:95:19:f4: 56:d4:50:0d:8c:e1:14:a4:16:08:af:76:83:1b:4e:ee:f9:2f: e0:1f:45:af:3f:be:17:6f:99:87:1e:9d:c8:61:37:5a:ac:2e: e5:b2:77:57:62:51:47:1c:03:eb:45:e7:9a:e4:52:7d:3e:d0: a5:6e:4a:e0:4f:2d:f6:90:03:bf:1b:b6:3e:17:03:46:ef:0d: 6a:72:87:39:7e:f4:50:de:0b:44:14:38:53:76:d0:a1:ea:49: c4:4e:15:72:64:8f:2a:64:47:3a:80:69:0a:d7:fe:08:d6:4b: cf:08:7c:43:61:f6:26:02:00:12:1a:54:b3:13:bc:bb:04:cd: 5c:b5:fd:dd:15:b8:9e:c2:a1:40:d0:60:d7:1c:09:a2:57:1c: 77:f6:e4:65:d1:9b:98:f2:f8:da:3e:ce:0d:6f:52:3f:d4:b6: ac:15:f5:66:58:d0:0f:86:6d:51:15:e8:f0:09:ab:b1:43:2e: 39:57:40:75:4d:e7:72:b0:0e:36:40:ce:51:94:48:1b:b2:22: ea:d1:7e:e5:89:bb:7a:c5:ee:c1:59:8e:14:00:92:68:ae:6a: 5a:60:40:d6:74:26:2f:b5:aa:da:b8:11:3f:17:1c:a2:d9:2c: 4b:63:c5:bb -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5EMdf+QF59tRwntzlSGg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhM2I4NmU2NTQ3MGY5OTRkZmE2ZDZmZWU4ZTI2NGRiNjJl MjRhZjkwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2U4MmZmYmFlNTNkNGE4M2Y2MzQzZjA1Zjc4OTY0ODAyYzdlMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinTgc7AyYFK5ylPCPfUogUHTyDxk hrfgEkXwMqoGpaI0DNuPIyBEXLjlHZ9mqaztt+yjocpV8gbq4LQMqjONLYeUuYUu l0eui79W/YMyVSpCm09dO8hYC/aTg9g2GdkqnyiWqTXf4Bm8gzqswC2M8nz5zafm r3zuS78Pml/67+zThGfYuOOtxUNtxSPW77eo+y8SmI1eJdMiCEDwKkwg1gc3L25E kfoIUKrfX/UawZF/W9DVa5Lb9VSoLy3zYlbu9BHFnWxSVYNHrZxCaJcJbgesCz7x RLPxwy5lCNfHEuQbYNC3QGYdpsJBpaQ1cuEw8zZ3BZhcpKOslHjy3CnynQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNzoL/uuU9SoP2ND8F94lkgCx+IZMB8GA1UdIwQY MBaAFMo7huZUcPmU36bW/ujiZNti4kr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgt OTUzMWQyNGUwNjEwLzEvM09ndi02NVQxS2dfWTBQd1gzaVdTQUxINGhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgtOTUzMWQyNGUwNjEw LzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAH6lJAwQC uQv4MA8EAgACMAkDBwAqAu1AAAAwDQYJKoZIhvcNAQELBQADggEBAAddUd0xsphr n/+vZRJDdpUZ9FbUUA2M4RSkFgivdoMbTu75L+AfRa8/vhdvmYcenchhN1qsLuWy d1diUUccA+tF55rkUn0+0KVuSuBPLfaQA78btj4XA0bvDWpyhzl+9FDeC0QUOFN2 0KHqScROFXJkjypkRzqAaQrX/gjWS88IfENh9iYCABIaVLMTvLsEzVy1/d0VuJ7C oUDQYNccCaJXHHf25GXRm5jy+No+zg1vUj/UtqwV9WZY0A+GbVEV6PAJq7FDLjlX QHVN53KwDjZAzlGUSBuyIurRfuWJu3rF7sFZjhQAkmiualpgQNZ0Ji+1qtq4ET8X HKLZLEtjxbs= -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:19 2026 by rpki-client