This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/3vvkYggg9yd7bG-fFHqOzoZIhMI.roa File: 3vvkYggg9yd7bG-fFHqOzoZIhMI.roa (raw, json) Hash identifier: Jrh7+DbyRftfJWMehnZ2UWj84adngEe9IfNQWMntaWY= Subject key identifier: DE:FB:E4:62:08:20:F7:27:7B:6C:6F:9F:14:7A:8E:CE:86:48:84:C2 Certificate issuer: /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b Certificate serial: 019B7C8071317903CF532EA70805DF3B7402 Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/3vvkYggg9yd7bG-fFHqOzoZIhMI.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5610 IP address blocks: 91.191.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:71:31:79:03:cf:53:2e:a7:08:05:df:3b:74:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=defbe4620820f7277b6c6f9f147a8ece864884c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f4:19:a6:89:8d:5b:2f:e5:1b:3d:8c:c6:69: e0:aa:f5:fc:ff:d0:ab:9d:1b:dc:a1:7e:ed:f8:a2: 86:27:af:5a:c9:16:5b:43:66:bf:50:4b:bd:df:6b: 21:ff:89:db:83:d7:ee:c6:9d:b1:29:a7:13:3d:16: 7d:ff:73:06:f6:fa:d0:0e:92:36:30:25:90:3f:0a: 0a:24:76:88:d5:38:6a:63:4c:8a:79:b3:65:29:53: 40:53:29:dd:df:c3:f0:ce:81:fc:01:83:1f:a3:7c: 15:c6:e8:56:7e:48:1d:79:ae:65:9a:6d:7e:fc:a0: 3e:c3:65:b0:65:9d:08:61:c4:ef:d9:a8:9e:3f:98: 3e:fd:5e:6d:5e:ba:9a:8d:d1:6a:08:41:b1:9b:0a: c1:b1:7f:c1:70:73:da:00:76:8b:4c:53:cd:f9:ed: f0:73:24:fd:94:1a:fc:7e:c3:4d:46:3b:a3:c2:7e: 02:f9:bd:3f:9a:e0:33:7d:62:44:43:cc:32:b9:a7: b8:13:b6:37:b7:f3:3e:60:32:b8:ce:49:87:ba:67: 9d:80:3a:c3:2a:ef:60:94:71:08:2d:5e:79:15:da: d1:12:e4:cc:9d:63:2c:24:7a:bd:e6:c4:5a:fa:ff: 0d:c1:0f:4b:69:c7:4d:71:f1:02:a7:d7:72:f1:f7: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FB:E4:62:08:20:F7:27:7B:6C:6F:9F:14:7A:8E:CE:86:48:84:C2 X509v3 Authority Key Identifier: keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/3vvkYggg9yd7bG-fFHqOzoZIhMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.191.64.0/18 Signature Algorithm: sha256WithRSAEncryption 8a:03:21:f5:0a:69:d4:1c:4e:0c:55:f5:35:49:49:7b:52:a0: 6b:a1:2d:37:61:20:c2:cb:91:37:e3:36:ab:8b:17:22:24:35: 44:53:33:5c:15:2f:fc:d9:47:c2:ee:cc:23:ff:f7:75:6b:c2: 9a:ab:ce:b6:e4:48:35:7f:d6:a2:9a:03:29:ee:01:55:8e:98: 1a:25:df:72:23:83:dd:7e:43:08:91:af:7c:9c:11:b6:53:c0: c8:5f:99:99:86:50:fd:29:c8:a8:47:ae:0c:ad:5b:25:61:62: 08:ec:2a:01:9f:ad:61:43:e3:50:7c:28:fe:54:0b:bf:17:dd: 9b:02:67:be:d1:ef:1d:d9:3f:78:b7:ab:d8:73:69:53:c0:da: 70:8b:50:ff:6a:76:df:62:48:a6:99:a0:94:48:2e:89:9c:13: 2d:76:8c:a5:1f:f7:35:aa:b0:24:d7:89:79:44:cf:e2:20:15: 7a:d0:87:be:ba:4f:7e:21:85:61:1f:ff:e9:25:4f:d9:ac:29: 20:d6:c3:d7:0f:7e:0d:ea:0a:97:a2:8f:51:7f:e0:34:ee:15: 33:25:90:0d:c9:4a:b5:2d:11:02:b8:b4:79:89:c6:5e:ce:35: 64:67:58:dc:12:76:c9:4f:c2:11:67:ef:2c:c5:34:41:fb:dd: 6a:7e:e0:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHExeQPPUy6nCAXfO3QCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmFjMzU4OWZjNTM5YWI4NTI2OTBmODVkOWYzZjdmMjM0 ZWMzOWIwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWZiZTQ2MjA4MjBmNzI3N2I2YzZmOWYxNDdhOGVjZTg2NDg4NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPQZpomNWy/lGz2MxmngqvX8/9Cr nRvcoX7t+KKGJ69ayRZbQ2a/UEu932sh/4nbg9fuxp2xKacTPRZ9/3MG9vrQDpI2 MCWQPwoKJHaI1ThqY0yKebNlKVNAUynd38PwzoH8AYMfo3wVxuhWfkgdea5lmm1+ /KA+w2WwZZ0IYcTv2aieP5g+/V5tXrqajdFqCEGxmwrBsX/BcHPaAHaLTFPN+e3w cyT9lBr8fsNNRjujwn4C+b0/muAzfWJEQ8wyuae4E7Y3t/M+YDK4zkmHumedgDrD Ku9glHEILV55FdrREuTMnWMsJHq95sRa+v8NwQ9LacdNcfECp9dy8fcutQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN775GIIIPcne2xvnxR6js6GSITCMB8GA1UdIwQY MBaAFFgqw1ifxTmrhSaQ+F2fP38jTsObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGIt Njc0MzI4ZDUyYmQ3LzEvM3Z2a1lnZ2c5eWQ3YkctZkZIcU96b1pJaE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGItNjc0MzI4ZDUyYmQ3 LzEvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGW79AMA0G CSqGSIb3DQEBCwUAA4IBAQCKAyH1CmnUHE4MVfU1SUl7UqBroS03YSDCy5E34zar ixciJDVEUzNcFS/82UfC7swj//d1a8Kaq8625Eg1f9aimgMp7gFVjpgaJd9yI4Pd fkMIka98nBG2U8DIX5mZhlD9KcioR64MrVslYWII7CoBn61hQ+NQfCj+VAu/F92b Ame+0e8d2T94t6vYc2lTwNpwi1D/anbfYkimmaCUSC6JnBMtdoylH/c1qrAk14l5 RM/iIBV60Ie+uk9+IYVhH//pJU/ZrCkg1sPXD34N6gqXoo9Rf+A07hUzJZANyUq1 LRECuLR5icZezjVkZ1jcEnbJT8IRZ+8sxTRB+91qfuDy -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:13 2026 by rpki-client