This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/3J-wyv1f8o7fdt2XdhBrva-Zcak.roa
File: 3J-wyv1f8o7fdt2XdhBrva-Zcak.roa (raw, json)
Hash identifier: 86oH9Lq+HOUCzXcyWvwU28zWZtGugPgDR4jwNJr9aV8=
Subject key identifier: DC:9F:B0:CA:FD:5F:F2:8E:DF:76:DD:97:76:10:6B:BD:AF:99:71:A9
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 019B7E383CE2B63E9FDD3DBF9C4618AB6BB0
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/3J-wyv1f8o7fdt2XdhBrva-Zcak.roa
Signing time: Fri 02 Jan 2026 10:19:33 +0000
ROA not before: Fri 02 Jan 2026 10:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48571
IP address blocks: 185.62.8.0/24 maxlen: 24
185.62.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:3c:e2:b6:3e:9f:dd:3d:bf:9c:46:18:ab:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jan 2 10:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc9fb0cafd5ff28edf76dd9776106bbdaf9971a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:d3:4f:04:be:19:a8:31:ef:09:bd:07:c4:
18:f6:f1:85:98:d3:75:7e:df:1a:8b:27:e7:f0:cd:
59:77:a7:ee:dc:f1:1c:f2:c7:b8:e4:45:e3:79:29:
c4:e2:68:5a:e8:2c:d0:fb:b0:e4:f8:2d:7b:0b:4e:
6a:7c:1f:e3:35:92:d3:9e:a9:5c:98:96:03:9d:47:
29:a7:6e:36:88:82:7a:8b:5c:94:1a:5d:0d:ed:9b:
85:04:7d:53:53:16:eb:d3:87:86:54:cc:2f:d1:b3:
eb:af:f0:4d:08:96:6d:8b:e6:68:08:46:91:f7:79:
2a:6c:41:49:2f:e1:c7:60:94:6e:1a:f2:d5:9e:57:
32:fa:e3:5e:d1:23:1b:39:5f:9c:73:b5:45:ec:b0:
f0:16:b4:17:3b:00:f8:f2:42:b8:c8:1b:be:b7:f1:
99:94:6b:7f:71:c5:c3:e6:73:7a:77:8d:4c:2b:a9:
58:ae:07:32:e5:83:f1:cd:59:64:40:5a:56:8d:17:
6e:11:be:64:ec:a2:b4:9a:41:a0:07:84:db:36:7f:
af:1b:66:d6:da:d9:05:9d:4a:8c:5c:98:cf:6b:c0:
a8:b0:6c:60:04:83:3c:f4:37:f5:0c:65:a9:72:58:
13:27:7a:1e:03:ce:ba:5b:ea:b5:5a:b9:5e:f5:10:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9F:B0:CA:FD:5F:F2:8E:DF:76:DD:97:76:10:6B:BD:AF:99:71:A9
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/3J-wyv1f8o7fdt2XdhBrva-Zcak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.8.0/24
185.62.11.0/24
Signature Algorithm: sha256WithRSAEncryption
25:27:ac:64:29:84:d0:8f:d5:7f:e1:32:14:5f:68:de:6d:fb:
68:e9:6a:43:79:98:60:00:36:9b:1b:a5:b9:70:38:57:69:fc:
64:13:2d:46:74:41:5a:e7:a8:8f:52:70:a3:8a:10:57:43:d9:
c5:e3:2a:6c:3e:80:bd:a9:5c:56:1f:75:19:19:f1:34:0e:14:
7a:9e:a9:51:1a:3d:9b:5f:d0:55:17:73:5e:0c:b9:12:ca:f9:
9c:a6:56:f5:b3:c1:86:08:1d:20:23:e9:83:74:c0:f5:c9:28:
3c:56:02:52:bf:aa:39:96:cb:94:b2:4f:4b:56:79:3b:c2:d8:
a8:9b:99:0a:26:61:72:24:29:b3:48:34:27:86:bd:70:20:60:
20:cc:8c:17:52:10:d0:a0:77:81:e1:33:ce:73:78:41:7b:53:
f6:3a:2d:73:ec:30:2a:6b:41:be:55:db:dc:6f:c5:84:4c:54:
1d:eb:f5:33:2a:b6:0b:49:21:a1:ee:a7:84:39:b7:0c:20:b4:
68:95:53:93:2f:a3:be:49:68:e1:f4:34:a3:31:78:f8:e1:22:
f2:72:99:07:44:9c:17:a6:fe:c3:27:28:d7:c2:ac:55:52:00:
8c:b5:09:89:bb:b7:0b:95:b0:c4:0a:d9:33:47:fd:1c:39:0e:
0f:2e:30:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt+ODzitj6f3T2/nEYYq2uwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmNhN2E1ODNiMjQ5N2MzNjdlOWU4NmRlYjc5Y2I3YTcz
NzVhNDcwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzlmYjBjYWZkNWZmMjhlZGY3NmRkOTc3NjEwNmJiZGFmOTk3MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXTTwS+Gagx7wm9B8QY9vGFmNN1
ft8aiyfn8M1Zd6fu3PEc8se45EXjeSnE4mha6CzQ+7Dk+C17C05qfB/jNZLTnqlc
mJYDnUcpp242iIJ6i1yUGl0N7ZuFBH1TUxbr04eGVMwv0bPrr/BNCJZti+ZoCEaR
93kqbEFJL+HHYJRuGvLVnlcy+uNe0SMbOV+cc7VF7LDwFrQXOwD48kK4yBu+t/GZ
lGt/ccXD5nN6d41MK6lYrgcy5YPxzVlkQFpWjRduEb5k7KK0mkGgB4TbNn+vG2bW
2tkFnUqMXJjPa8CosGxgBIM89Df1DGWpclgTJ3oeA866W+q1Wrle9RDVPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNyfsMr9X/KO33bdl3YQa72vmXGpMB8GA1UdIwQY
MBaAFBosp6WDskl8Nn6eht63nLenN1pHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAt
ODRjNjViMTkzNzU4LzEvM0otd3l2MWY4bzdmZHQyWGRoQnJ2YS1aY2FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jY2M4YzktY2MxMC00ZmY5LWFjYzAtODRjNjViMTkzNzU4
LzEvR2l5bnBZT3lTWHcyZnA2RzNyZWN0NmMzV2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuT4IAwQA
uT4LMA0GCSqGSIb3DQEBCwUAA4IBAQAlJ6xkKYTQj9V/4TIUX2jebfto6WpDeZhg
ADabG6W5cDhXafxkEy1GdEFa56iPUnCjihBXQ9nF4ypsPoC9qVxWH3UZGfE0DhR6
nqlRGj2bX9BVF3NeDLkSyvmcplb1s8GGCB0gI+mDdMD1ySg8VgJSv6o5lsuUsk9L
Vnk7wtiom5kKJmFyJCmzSDQnhr1wIGAgzIwXUhDQoHeB4TPOc3hBe1P2Oi1z7DAq
a0G+Vdvcb8WETFQd6/UzKrYLSSGh7qeEObcMILRolVOTL6O+SWjh9DSjMXj44SLy
cpkHRJwXpv7DJyjXwqxVUgCMtQmJu7cLlbDECtkzR/0cOQ4PLjCn
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:28 2026 by rpki-client