This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/3GgVbsdNTqu2-B0T8Y_NIhcstT0.roa File: 3GgVbsdNTqu2-B0T8Y_NIhcstT0.roa (raw, json) Hash identifier: Cfn/SPWXrVuwuM1Ty4dMpe8+JSfhaIfbzq40+DUYybI= Subject key identifier: DC:68:15:6E:C7:4D:4E:AB:B6:F8:1D:13:F1:8F:CD:22:17:2C:B5:3D Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6 Certificate serial: 019B76EACFE5E94B512C161747D37D3971CE Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/3GgVbsdNTqu2-B0T8Y_NIhcstT0.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31673 IP address blocks: 185.185.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cf:e5:e9:4b:51:2c:16:17:47:d3:7d:39:71:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc68156ec74d4eabb6f81d13f18fcd22172cb53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:90:55:65:fa:f1:01:1e:8b:6e:ec:53:15: c6:a3:90:94:0d:19:11:3a:ca:44:cd:60:61:7d:68: 60:9d:a7:88:c3:d7:9b:90:dd:8e:c9:b0:0e:6f:f0: d5:51:3b:aa:d3:78:59:f8:f6:fa:46:20:5c:22:e8: b4:c9:09:8e:13:75:4c:35:d8:01:53:61:11:3e:7c: a3:cf:38:d2:4d:0f:46:5a:2c:cd:5c:55:bd:1f:89: 2a:a8:c9:f9:98:bf:82:ec:63:d7:0d:59:a3:6f:cd: d2:bf:4e:0b:1f:78:0f:43:37:16:07:d0:99:b3:35: 8b:d5:79:4c:2c:32:50:9c:b7:14:c7:c3:d2:3e:1b: 58:cc:f6:fb:ac:5d:2d:46:67:79:e3:77:1f:15:20: b2:67:c1:77:c7:77:44:ff:a6:27:d1:41:44:8b:37: d8:e7:f1:ed:7e:16:f4:93:a3:a2:72:b3:30:47:e7: de:67:cf:2d:cc:7d:e8:96:9a:b7:3b:49:81:be:bc: 70:aa:84:67:44:bf:ea:22:98:40:2d:fd:31:01:79: c4:0a:73:5a:42:7d:72:8b:31:b1:65:c2:44:18:7c: 54:bb:4d:0c:fe:0a:29:4e:bc:14:92:11:c8:20:92: f0:0c:2f:9b:0e:41:76:7b:79:3b:f1:0f:7a:ef:77: 39:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:68:15:6E:C7:4D:4E:AB:B6:F8:1D:13:F1:8F:CD:22:17:2C:B5:3D X509v3 Authority Key Identifier: keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/3GgVbsdNTqu2-B0T8Y_NIhcstT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.164.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:5c:00:f2:28:27:06:14:c1:50:40:2d:b5:82:73:54:99:2f: 1e:b0:42:5e:6a:af:dd:18:5b:1b:36:8b:57:97:1d:de:ad:fe: 96:49:ae:c5:15:fa:bc:c3:f7:bf:e2:ce:fa:0b:14:63:82:b3: 83:72:90:a8:a8:40:84:e2:36:98:25:eb:e6:39:e5:da:c8:9c: 1b:4d:d2:20:fd:f4:74:ee:9a:1a:3a:96:15:8e:4c:70:3c:35: 1a:63:e2:12:ce:0d:b3:38:7e:ba:6d:b2:2a:af:03:e1:9a:f8: 97:a7:8f:4d:4f:fe:18:0a:bd:94:1b:04:78:87:05:6c:97:34: 94:8f:2e:b3:3f:e5:0b:6d:74:76:96:b5:21:08:29:42:36:d3: 5d:3f:b3:56:86:64:38:a0:5c:52:5e:e5:84:2f:45:f1:bf:96: 67:21:93:0c:98:c5:b2:21:1a:52:00:27:8f:33:a8:dc:0a:82: 43:3d:6d:01:79:37:32:b8:73:c7:18:27:16:bb:c3:3e:fd:76: e7:0e:09:8d:99:23:ca:c1:1f:99:06:c3:a4:99:0c:09:59:f3: e3:30:10:96:f2:b4:e6:a3:80:bf:1b:2a:25:99:e2:c4:55:7c: 46:bb:3b:5a:ea:45:20:89:7f:5d:3a:d7:27:c6:1e:fa:eb:ac: 19:21:89:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26s/l6UtRLBYXR9N9OXHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTFhYjMyNDVmZjg5NWE3MmRkNmZmMDc0M2MzNzdiNmYw Zjg5YTYwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzY4MTU2ZWM3NGQ0ZWFiYjZmODFkMTNmMThmY2QyMjE3MmNiNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRqQVWX68QEei27sUxXGo5CUDRkR OspEzWBhfWhgnaeIw9ebkN2OybAOb/DVUTuq03hZ+Pb6RiBcIui0yQmOE3VMNdgB U2ERPnyjzzjSTQ9GWizNXFW9H4kqqMn5mL+C7GPXDVmjb83Sv04LH3gPQzcWB9CZ szWL1XlMLDJQnLcUx8PSPhtYzPb7rF0tRmd543cfFSCyZ8F3x3dE/6Yn0UFEizfY 5/Htfhb0k6OicrMwR+feZ88tzH3olpq3O0mBvrxwqoRnRL/qIphALf0xAXnECnNa Qn1yizGxZcJEGHxUu00M/gopTrwUkhHIIJLwDC+bDkF2e3k78Q9673c5wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxoFW7HTU6rtvgdE/GPzSIXLLU9MB8GA1UdIwQY MBaAFPaRqzJF/4lact1v8HQ8N3tvD4mmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBHck1rWF9pVnB5M1dfd2REdzNlMjhQaWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yNDRhNzEtZTZhZi00OTA1LWJmNjUt ZGZlM2M0YzUyODhjLzEvM0dnVmJzZE5UcXUyLUIwVDhZX05JaGNzdFQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yNDRhNzEtZTZhZi00OTA1LWJmNjUtZGZlM2M0YzUyODhj LzEvOXBHck1rWF9pVnB5M1dfd2REdzNlMjhQaWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubmkMA0G CSqGSIb3DQEBCwUAA4IBAQB+XADyKCcGFMFQQC21gnNUmS8esEJeaq/dGFsbNotX lx3erf6WSa7FFfq8w/e/4s76CxRjgrODcpCoqECE4jaYJevmOeXayJwbTdIg/fR0 7poaOpYVjkxwPDUaY+ISzg2zOH66bbIqrwPhmviXp49NT/4YCr2UGwR4hwVslzSU jy6zP+ULbXR2lrUhCClCNtNdP7NWhmQ4oFxSXuWEL0Xxv5ZnIZMMmMWyIRpSACeP M6jcCoJDPW0BeTcyuHPHGCcWu8M+/XbnDgmNmSPKwR+ZBsOkmQwJWfPjMBCW8rTm o4C/GyolmeLEVXxGuzta6kUgiX9dOtcnxh7666wZIYkK -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:36 2026 by rpki-client