This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/3thexKCs9mTJ-g3YYgHPDfOYcIc.roa File: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (raw, json) Hash identifier: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A= Subject key identifier: DE:D8:5E:C4:A0:AC:F6:64:C9:FA:0D:D8:62:01:CF:0D:F3:98:70:87 Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBC09EAA7825C54FE536DF176663FE Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/3thexKCs9mTJ-g3YYgHPDfOYcIc.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39016 IP address blocks: 94.154.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c0:9e:aa:78:25:c5:4f:e5:36:df:17:66:63:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ded85ec4a0acf664c9fa0dd86201cf0df3987087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:15:15:66:c7:b0:37:fb:11:3a:2b:13:51: d8:d2:11:54:85:90:40:cc:3d:70:68:8c:bb:15:2b: 8b:7a:bf:43:fd:68:56:a1:7a:1f:53:5e:d5:33:7b: 63:b3:58:e8:59:4e:ae:43:ee:ac:91:e2:45:ab:2d: ca:6a:77:37:50:4b:bd:b2:e4:60:af:91:ed:a3:7d: 3c:09:f8:4d:15:d5:ef:3a:a3:7c:67:cc:fd:6e:b5: 07:6a:b3:8f:20:9b:ae:39:4b:ae:85:43:1e:c4:f7: ad:ac:ab:01:81:ad:60:87:cb:9a:21:ba:6a:9c:d0: 5a:13:c5:9e:8e:d9:4c:8b:f5:26:6e:bf:79:b7:77: 3e:ef:d9:2a:9c:42:55:e3:41:ab:23:cb:6a:0f:73: 52:91:fc:fa:49:b8:73:93:d2:c4:8b:53:a8:4f:96: 7a:28:9d:36:ac:ea:74:46:94:c2:31:df:3d:d8:f6: e5:8b:04:0f:47:46:02:5d:fc:c6:d7:a9:c8:a4:96: ec:4b:64:e3:81:63:0a:d3:0a:c2:8c:f7:9f:4e:0c: 24:11:21:3f:15:2c:1e:f0:4a:83:b0:c2:5d:09:21: 7b:f5:99:eb:60:12:1a:e5:37:c5:d3:fb:03:79:ac: 99:46:b5:e3:31:13:97:ab:f2:38:5a:1b:ca:fb:72: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D8:5E:C4:A0:AC:F6:64:C9:FA:0D:D8:62:01:CF:0D:F3:98:70:87 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/3thexKCs9mTJ-g3YYgHPDfOYcIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.122.0/24 Signature Algorithm: sha256WithRSAEncryption 36:6d:dd:d7:c5:0a:bf:e4:1c:d6:6f:bb:7e:8b:70:aa:24:44: 48:dd:04:82:83:ba:d0:ca:7d:0a:c7:74:fd:9d:fa:f0:e5:6c: 80:98:11:42:ec:77:78:9e:31:70:ca:21:ec:aa:da:01:cf:54: af:45:83:bd:11:30:89:ce:c2:a9:80:fe:2a:85:d5:61:f1:df: 6f:7e:40:14:a5:37:bf:f3:7d:7f:47:bc:6b:b1:a9:42:df:b9: 62:e5:1e:73:58:63:76:70:24:73:c7:1c:4c:16:f1:fe:fb:8f: d2:ea:eb:d9:bf:b5:33:c5:e1:9d:cc:3d:80:2c:c3:27:d9:b5: dd:6e:28:4e:01:0c:e4:9d:18:0e:7c:44:c9:77:65:b3:9e:07: 78:bb:ee:e7:b8:ac:8f:ab:2f:33:6b:06:e4:29:4f:e3:29:e1: 8a:cc:4e:01:ed:40:3e:00:c8:84:84:47:46:0b:ca:08:ef:bc: 93:e1:f1:86:01:44:49:90:65:fb:ca:03:ba:01:84:46:77:c2: 06:c1:d6:7c:ce:13:de:f0:e1:73:a0:69:96:76:eb:4f:83:7a: fb:14:1b:97:6f:3f:f8:13:ad:20:60:af:99:48:0d:b7:d8:61: a1:53:4b:e5:0d:eb:ef:17:5e:0b:dd:a9:70:3c:fd:72:72:5c: 45:b5:a6:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568CeqnglxU/lNt8XZmP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQ4NWVjNGEwYWNmNjY0YzlmYTBkZDg2MjAxY2YwZGYzOTg3MDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE8VFWbHsDf7ETorE1HY0hFUhZBA zD1waIy7FSuLer9D/WhWoXofU17VM3tjs1joWU6uQ+6skeJFqy3Kanc3UEu9suRg r5Hto308CfhNFdXvOqN8Z8z9brUHarOPIJuuOUuuhUMexPetrKsBga1gh8uaIbpq nNBaE8WejtlMi/Umbr95t3c+79kqnEJV40GrI8tqD3NSkfz6Sbhzk9LEi1OoT5Z6 KJ02rOp0RpTCMd892PbliwQPR0YCXfzG16nIpJbsS2TjgWMK0wrCjPefTgwkESE/ FSwe8EqDsMJdCSF79ZnrYBIa5TfF0/sDeayZRrXjMROXq/I4WhvK+3KeqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7YXsSgrPZkyfoN2GIBzw3zmHCHMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvM3RoZXhLQ3M5bVRKLWczWVlnSFBEZk9ZY0ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpp6MA0G CSqGSIb3DQEBCwUAA4IBAQA2bd3XxQq/5BzWb7t+i3CqJERI3QSCg7rQyn0Kx3T9 nfrw5WyAmBFC7Hd4njFwyiHsqtoBz1SvRYO9ETCJzsKpgP4qhdVh8d9vfkAUpTe/ 831/R7xrsalC37li5R5zWGN2cCRzxxxMFvH++4/S6uvZv7UzxeGdzD2ALMMn2bXd bihOAQzknRgOfETJd2Wzngd4u+7nuKyPqy8zawbkKU/jKeGKzE4B7UA+AMiEhEdG C8oI77yT4fGGAURJkGX7ygO6AYRGd8IGwdZ8zhPe8OFzoGmWdutPg3r7FBuXbz/4 E60gYK+ZSA232GGhU0vlDevvF14L3alwPP1yclxFtabh -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:07 2026 by rpki-client