This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa File: s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa (raw, json) Hash identifier: nQwJUaWrVg5To0r/HnpgbyQFvZOuiUSeGVW/zjSMAz4= Subject key identifier: B3:79:8A:78:75:4C:E9:27:3F:36:ED:DC:05:AE:42:3B:77:3F:AF:67 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019B7910D4B295BCA3CB5ED2A3FCDD62B0DD Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60509 IP address blocks: 84.247.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d4:b2:95:bc:a3:cb:5e:d2:a3:fc:dd:62:b0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3798a78754ce9273f36eddc05ae423b773faf67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:ff:c5:b1:a1:ad:a5:4d:e5:c5:d5:fe:9b: a8:13:94:c1:f8:f5:03:95:59:57:ef:51:ba:40:fe: 49:c6:34:92:0e:cd:2e:36:40:98:d8:b4:bf:44:fd: b5:b3:b8:29:bc:40:b8:d7:19:e7:60:25:bd:6d:fb: 87:13:80:7a:82:87:dc:ed:94:74:e4:f7:2f:41:60: e9:41:cb:86:c6:5a:00:9d:21:5e:65:cc:1f:06:fe: 2f:cd:f6:b3:e1:8f:44:a6:9e:f2:a0:8f:b0:eb:31: 6c:79:d9:ee:92:e2:59:44:72:71:2b:b7:22:da:71: b4:be:ba:d7:59:2e:66:4f:07:25:e0:7a:80:88:5b: 09:1b:b4:04:87:99:24:e6:4b:ba:fd:33:57:cf:3c: db:c1:1b:35:be:56:ec:69:c9:01:27:c5:f5:49:c5: 16:8c:f8:b4:ac:e8:cf:e6:31:b3:9f:74:d8:19:8e: 28:5b:30:8f:cf:20:3d:e8:20:c2:01:0a:03:a4:47: 8c:3a:a6:40:29:97:42:37:a4:3a:8b:99:a8:c7:5e: 0b:4e:66:de:7d:c6:ff:62:4f:7d:1e:8c:44:ca:09: b2:c5:7b:80:d6:30:9a:9e:36:28:2e:be:78:2c:a4: 45:dd:28:25:03:c9:64:de:d6:ff:10:58:78:9e:13: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:79:8A:78:75:4C:E9:27:3F:36:ED:DC:05:AE:42:3B:77:3F:AF:67 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.123.0/24 Signature Algorithm: sha256WithRSAEncryption 08:18:93:18:0d:d6:80:28:33:23:b3:30:3e:e2:5b:08:5e:4c: 8e:56:ce:e5:6e:72:e0:09:f2:4d:01:a1:5f:ac:60:14:bd:ff: ab:98:cb:ef:03:47:4a:ea:d3:b2:7b:ec:4c:34:34:02:37:0c: 68:2c:c1:8b:22:cf:22:f9:02:0f:e3:77:14:d2:4b:94:4b:68: a1:5a:99:69:d6:99:f4:d5:e9:a5:ff:98:c4:d1:88:d4:a9:3e: d0:04:0a:0f:bd:3d:1c:ce:77:b0:30:df:f8:c1:60:ec:69:c5: 2e:db:1c:5e:ce:2f:6b:3d:95:28:00:d8:f0:49:a8:ad:3c:fd: e4:0c:b3:e1:22:fc:27:c4:27:2d:37:4b:76:83:91:11:02:b8: 40:90:0d:48:3b:14:a4:39:78:61:68:e5:99:38:81:1b:8e:ad: 6a:0b:95:dc:24:9f:c0:a8:33:c3:6b:44:28:41:ce:a5:3a:33: 18:5b:74:b1:b9:9c:d5:66:9b:a7:31:ad:f2:5a:b6:a3:31:d0: 88:2a:cb:72:b5:5f:b8:5c:fd:ae:d8:60:dd:7e:cb:df:7c:8f: ec:d5:34:03:35:87:81:d6:9c:5c:64:47:eb:9c:3f:f6:40:52: d2:8d:72:7f:92:f5:2a:b6:cf:2f:91:c0:cd:58:4b:41:f1:54: e6:b9:29:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ENSylbyjy17So/zdYrDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzc5OGE3ODc1NGNlOTI3M2YzNmVkZGMwNWFlNDIzYjc3M2ZhZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSz/xbGhraVN5cXV/puoE5TB+PUD lVlX71G6QP5JxjSSDs0uNkCY2LS/RP21s7gpvEC41xnnYCW9bfuHE4B6gofc7ZR0 5PcvQWDpQcuGxloAnSFeZcwfBv4vzfaz4Y9Epp7yoI+w6zFsednukuJZRHJxK7ci 2nG0vrrXWS5mTwcl4HqAiFsJG7QEh5kk5ku6/TNXzzzbwRs1vlbsackBJ8X1ScUW jPi0rOjP5jGzn3TYGY4oWzCPzyA96CDCAQoDpEeMOqZAKZdCN6Q6i5mox14LTmbe fcb/Yk99HoxEygmyxXuA1jCanjYoLr54LKRF3SglA8lk3tb/EFh4nhNaUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLN5inh1TOknPzbt3AWuQjt3P69nMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvczNtS2VIVk02U2NfTnUzY0JhNUNPM2NfcjJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPd7MA0G CSqGSIb3DQEBCwUAA4IBAQAIGJMYDdaAKDMjszA+4lsIXkyOVs7lbnLgCfJNAaFf rGAUvf+rmMvvA0dK6tOye+xMNDQCNwxoLMGLIs8i+QIP43cU0kuUS2ihWplp1pn0 1eml/5jE0YjUqT7QBAoPvT0cznewMN/4wWDsacUu2xxezi9rPZUoANjwSaitPP3k DLPhIvwnxCctN0t2g5ERArhAkA1IOxSkOXhhaOWZOIEbjq1qC5XcJJ/AqDPDa0Qo Qc6lOjMYW3SxuZzVZpunMa3yWrajMdCIKstytV+4XP2u2GDdfsvffI/s1TQDNYeB 1pxcZEfrnD/2QFLSjXJ/kvUqts8vkcDNWEtB8VTmuSlB -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:28 2026 by rpki-client