This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3g6tKnTCqVm7D3wyjEEAztJvVbY.roa File: 3g6tKnTCqVm7D3wyjEEAztJvVbY.roa (raw, json) Hash identifier: LiQ8SyFgz5JGrxXZlKK5xpnH1empp5gw+QQxXttllIg= Subject key identifier: DE:0E:AD:2A:74:C2:A9:59:BB:0F:7C:32:8C:41:00:CE:D2:6F:55:B6 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83AAC8C14AFF66F05C1025E77A24E3 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3g6tKnTCqVm7D3wyjEEAztJvVbY.roa Signing time: Fri 02 Jan 2026 16:21:33 +0000 ROA not before: Fri 02 Jan 2026 16:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198919 IP address blocks: 188.72.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:aa:c8:c1:4a:ff:66:f0:5c:10:25:e7:7a:24:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de0ead2a74c2a959bb0f7c328c4100ced26f55b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2b:ed:5d:ca:25:5a:60:02:24:26:43:69:b5: 33:4e:ea:45:ed:ac:27:db:61:03:ac:0b:ab:64:8a: d6:b9:dc:38:f9:90:66:67:05:63:6f:eb:0d:25:94: 60:59:ad:5c:57:0c:3c:12:bf:d1:59:db:20:b5:a7: 5e:0c:ca:e5:29:ab:eb:13:b3:d6:df:4b:5c:32:05: 7f:f2:b1:79:f5:fe:17:52:9f:d4:66:36:55:16:5d: c9:32:9e:6a:a3:7c:0a:a7:e6:4d:ed:e8:28:c5:05: c6:12:6b:e6:17:95:93:82:90:42:a9:79:09:92:1d: 54:4c:05:aa:0e:2a:4a:73:09:7f:b2:66:bd:39:72: ea:f9:2e:2c:2b:f3:d8:38:68:93:74:a8:d0:40:16: 9a:28:2b:6b:21:7e:8f:7d:d5:a7:c7:39:c6:27:72: 09:b7:67:73:2b:36:75:c4:2f:b3:e3:c3:5a:f5:e9: 27:ea:a8:e0:6b:b6:4d:da:8f:21:bf:35:ee:08:7e: 77:cd:8c:c6:5a:c0:39:36:4f:5c:1a:a9:cf:6e:0a: 45:52:9d:ce:38:1c:5d:37:d9:63:8d:87:9e:e5:b1: 1a:2a:08:17:66:ec:de:8c:0a:61:d1:94:46:6d:f0: ea:01:48:59:19:ad:4a:31:5e:fe:34:86:cb:9a:1c: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0E:AD:2A:74:C2:A9:59:BB:0F:7C:32:8C:41:00:CE:D2:6F:55:B6 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/3g6tKnTCqVm7D3wyjEEAztJvVbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.94.0/24 Signature Algorithm: sha256WithRSAEncryption bf:a7:b8:87:29:7f:b7:11:fd:1e:cb:d3:e1:39:6d:95:0b:97: 1f:3b:8f:17:9b:4f:15:a2:4a:8c:7e:4c:48:95:ff:e5:ed:1e: 3e:81:56:4e:4f:6a:97:f1:da:58:cb:28:d8:e2:0f:82:25:6e: e9:db:ff:0d:8d:8c:ab:25:61:d2:de:c2:db:b8:73:cc:ad:37: bf:1e:60:a6:2d:15:5e:2d:f6:1c:99:a7:39:c0:14:4e:89:2f: 7b:29:22:95:7f:e9:ea:b8:13:41:93:67:07:c8:a8:c2:c0:aa: 8f:09:67:e8:b0:50:0e:1d:f2:71:c2:e4:b7:dd:30:9c:32:53: 9a:2d:a0:f3:47:7d:38:da:21:03:e0:b9:33:15:a6:23:66:5f: 34:5c:c0:5c:f1:ed:b9:7d:c3:ce:d4:15:a3:98:2c:e6:94:1d: f1:93:fc:c4:2a:ae:ba:89:d8:f2:a2:ac:e6:01:1b:70:ca:8b: 8a:f1:9a:91:e1:01:c2:eb:0c:cc:66:9e:ac:47:86:13:96:9f: 15:f5:2e:0a:6e:b9:13:0d:19:f8:22:f9:bb:33:74:78:47:f4: d7:d9:1f:33:db:cb:7a:8c:ba:b5:3c:27:15:5b:10:8b:fb:87: b5:e6:73:58:e8:4f:0c:ac:d5:80:f4:4d:29:b0:8f:e5:74:50: 0e:79:bb:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6rIwUr/ZvBcECXneiTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTBlYWQyYTc0YzJhOTU5YmIwZjdjMzI4YzQxMDBjZWQyNmY1NWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSvtXcolWmACJCZDabUzTupF7awn 22EDrAurZIrWudw4+ZBmZwVjb+sNJZRgWa1cVww8Er/RWdsgtadeDMrlKavrE7PW 30tcMgV/8rF59f4XUp/UZjZVFl3JMp5qo3wKp+ZN7egoxQXGEmvmF5WTgpBCqXkJ kh1UTAWqDipKcwl/sma9OXLq+S4sK/PYOGiTdKjQQBaaKCtrIX6PfdWnxznGJ3IJ t2dzKzZ1xC+z48Na9ekn6qjga7ZN2o8hvzXuCH53zYzGWsA5Nk9cGqnPbgpFUp3O OBxdN9ljjYee5bEaKggXZuzejAph0ZRGbfDqAUhZGa1KMV7+NIbLmhxCMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN4OrSp0wqlZuw98MoxBAM7Sb1W2MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvM2c2dEtuVENxVm03RDN3eWpFRUF6dEp2VmJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEheMA0G CSqGSIb3DQEBCwUAA4IBAQC/p7iHKX+3Ef0ey9PhOW2VC5cfO48Xm08VokqMfkxI lf/l7R4+gVZOT2qX8dpYyyjY4g+CJW7p2/8NjYyrJWHS3sLbuHPMrTe/HmCmLRVe LfYcmac5wBROiS97KSKVf+nquBNBk2cHyKjCwKqPCWfosFAOHfJxwuS33TCcMlOa LaDzR3042iED4LkzFaYjZl80XMBc8e25fcPO1BWjmCzmlB3xk/zEKq66idjyoqzm ARtwyouK8ZqR4QHC6wzMZp6sR4YTlp8V9S4KbrkTDRn4Ivm7M3R4R/TX2R8z28t6 jLq1PCcVWxCL+4e15nNY6E8MrNWA9E0psI/ldFAOebvL -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:14 2026 by rpki-client