This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/3h0tgfEL54uXZSKGRLQARmVw2KA.roa File: 3h0tgfEL54uXZSKGRLQARmVw2KA.roa (raw, json) Hash identifier: f8vTeTyqS6eJf2HQkmlz6eipXPOPlN+oK8oViJ/L4C4= Subject key identifier: DE:1D:2D:81:F1:0B:E7:8B:97:65:22:86:44:B4:00:46:65:70:D8:A0 Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9 Certificate serial: 019B79ECE48DD6EB81C084F795B6EFD469F9 Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/3h0tgfEL54uXZSKGRLQARmVw2KA.roa Signing time: Thu 01 Jan 2026 14:18:46 +0000 ROA not before: Thu 01 Jan 2026 14:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203936 IP address blocks: 185.232.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e4:8d:d6:eb:81:c0:84:f7:95:b6:ef:d4:69:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9 Validity Not Before: Jan 1 14:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de1d2d81f10be78b9765228644b400466570d8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:82:9e:5a:ec:73:78:ae:dd:1d:74:b9:58:1e: 0e:34:ab:82:32:40:45:82:32:fa:c2:cb:f6:4a:b5: 89:68:9f:f6:a3:c6:06:8b:70:e5:ac:24:9f:1f:4f: c7:7a:ef:a4:54:1a:18:63:a3:13:28:6f:fd:95:cb: 85:99:21:28:8b:99:2d:09:70:28:c1:1b:27:b4:3c: 43:e0:f7:18:42:2c:25:d3:5f:cc:48:e0:e1:9e:4a: 81:46:90:62:c1:d7:a7:02:18:ab:4f:60:54:19:92: 9f:3e:f6:37:d1:f4:40:68:69:d5:fe:25:3f:af:f4: c8:62:66:18:bb:22:ca:6e:82:ec:a8:d5:d7:82:73: ee:81:60:4d:fd:49:97:aa:06:c2:bc:22:fc:b9:91: cd:4f:21:a7:6b:cd:ce:e6:3d:59:32:8a:35:dc:12: 01:4b:f4:d4:a1:02:f2:46:1b:ac:9e:29:ae:76:31: b4:29:d3:15:69:6d:cf:dd:47:19:4c:57:b9:f9:3d: 8d:19:fc:96:be:49:7f:44:e2:cc:e8:69:56:c5:70: 31:c3:a8:64:f0:0e:e7:ef:80:c1:5d:2c:ae:0a:2d: 44:93:01:81:78:ef:1c:02:b4:51:42:bf:aa:83:ad: 25:67:3e:c1:da:0f:86:74:f0:6f:5f:a6:70:92:59: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1D:2D:81:F1:0B:E7:8B:97:65:22:86:44:B4:00:46:65:70:D8:A0 X509v3 Authority Key Identifier: keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/3h0tgfEL54uXZSKGRLQARmVw2KA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.36.0/22 Signature Algorithm: sha256WithRSAEncryption a8:68:1b:43:d6:0c:fd:5b:55:5e:f6:d5:37:6f:24:6f:c6:b2: c2:f5:a5:eb:4a:96:b2:ef:a6:37:31:05:21:a6:04:0a:e1:ea: 66:d4:32:d5:81:6d:29:b7:a9:1c:ae:c4:90:e7:42:66:6d:b5: e1:57:17:25:a0:cc:f5:d7:8b:95:b6:e2:76:b7:aa:f6:f0:a4: 04:ee:b8:6a:07:81:98:d1:69:32:92:7d:01:a5:bd:0c:ab:72: 38:9d:27:e1:7d:6d:1f:7a:c6:67:1a:60:55:7b:69:3b:43:db: cc:82:f3:92:41:ff:6e:77:67:b5:5d:60:35:42:70:1a:f3:0a: 1d:71:29:c4:f5:55:b4:cf:fd:f6:92:24:2d:f5:77:06:58:c5: 0f:37:36:52:5f:a9:7e:2a:80:d7:f3:7c:e3:e3:6f:e9:16:f5: 65:ad:e5:8d:3c:e5:9b:dc:87:06:0d:3f:38:cc:d0:19:f2:cb: 94:dd:1d:ab:cd:e9:09:ac:23:db:77:1b:3e:56:9f:a9:e9:60: cd:c0:ab:10:d1:13:40:26:b4:72:6c:08:0e:a2:d2:cf:82:f9: 8e:d4:d1:b6:4e:d0:16:25:ed:4c:62:61:47:a1:70:62:e2:cb: 7a:ab:71:ce:3b:da:87:e4:b8:7c:8a:42:72:ea:f9:6c:13:fc: 2f:9b:f4:04 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt57OSN1uuBwIT3lbbv1Gn5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2JiM2I0YWI2ZmZmNTg4ZGRiNGNmMmFmZTZkNWFjNDY1 NTdiYjkwHhcNMjYwMTAxMTQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTFkMmQ4MWYxMGJlNzhiOTc2NTIyODY0NGI0MDA0NjY1NzBkOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IKeWuxzeK7dHXS5WB4ONKuCMkBF gjL6wsv2SrWJaJ/2o8YGi3DlrCSfH0/Heu+kVBoYY6MTKG/9lcuFmSEoi5ktCXAo wRsntDxD4PcYQiwl01/MSODhnkqBRpBiwdenAhirT2BUGZKfPvY30fRAaGnV/iU/ r/TIYmYYuyLKboLsqNXXgnPugWBN/UmXqgbCvCL8uZHNTyGna83O5j1ZMoo13BIB S/TUoQLyRhusnimudjG0KdMVaW3P3UcZTFe5+T2NGfyWvkl/ROLM6GlWxXAxw6hk 8A7n74DBXSyuCi1EkwGBeO8cArRRQr+qg60lZz7B2g+GdPBvX6Zwkln8sQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFN4dLYHxC+eLl2UihkS0AEZlcNigMB8GA1UdIwQY MBaAFPs7s7Srb/9YjdtM8q/m1axGVXu5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16dXp0S3R2XzFpTjIwenlyLWJWckVaVmU3ay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNjhmYmFmLTQ1ZjEtNDk0Ni1hMzQ2 LTY4NmEwMTg4OGQyOS8xLzNoMHRnZkVMNTR1WFpTS0dSTFFBUm1WdzJLQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTYvNjhmYmFmLTQ1ZjEtNDk0Ni1hMzQ2LTY4NmEwMTg4OGQy OS8xLzEtenV6dEt0dl8xaU4yMHp5ci1iVnJFWlZlN2suY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK56CQw DQYJKoZIhvcNAQELBQADggEBAKhoG0PWDP1bVV721TdvJG/GssL1petKlrLvpjcx BSGmBArh6mbUMtWBbSm3qRyuxJDnQmZtteFXFyWgzPXXi5W24na3qvbwpATuuGoH gZjRaTKSfQGlvQyrcjidJ+F9bR96xmcaYFV7aTtD28yC85JB/253Z7VdYDVCcBrz Ch1xKcT1VbTP/faSJC31dwZYxQ83NlJfqX4qgNfzfOPjb+kW9WWt5Y085ZvchwYN PzjM0Bnyy5TdHavN6QmsI9t3Gz5Wn6npYM3AqxDRE0AmtHJsCA6i0s+C+Y7U0bZO 0BYl7UxiYUehcGLiy3qrcc472ofkuHyKQnLq+WwT/C+b9AQ= -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:44 2026 by rpki-client