This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/3ANDY7yxGJbjBFwAWuOisuNFYxw.roa File: 3ANDY7yxGJbjBFwAWuOisuNFYxw.roa (raw, json) Hash identifier: GkD0xaeh/ce/OG3S4igVKKF/LAob9wyb5Q0QK5Wueb0= Subject key identifier: DC:03:43:63:BC:B1:18:96:E3:04:5C:00:5A:E3:A2:B2:E3:45:63:1C Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63 Certificate serial: 019BDA3A237BCA9F4DCC2EE3499C8FD5C062 Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/3ANDY7yxGJbjBFwAWuOisuNFYxw.roa Signing time: Tue 20 Jan 2026 07:06:41 +0000 ROA not before: Tue 20 Jan 2026 07:06:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 185.11.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:3a:23:7b:ca:9f:4d:cc:2e:e3:49:9c:8f:d5:c0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63 Validity Not Before: Jan 20 07:06:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc034363bcb11896e3045c005ae3a2b2e345631c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:00:24:aa:5b:35:45:6c:e8:91:f3:90:8a: d8:2d:16:0e:2e:73:db:c2:6c:3c:72:f9:a6:0e:d2: 93:b7:e3:60:ca:fa:f4:fb:d7:60:f7:20:6b:f2:b5: df:a9:ae:17:8f:0a:72:e3:32:82:2a:cb:9f:ea:0f: f1:93:24:ce:e4:3e:76:54:ca:a9:83:b2:18:f9:44: 5c:5a:62:3a:ad:8f:78:5b:7c:bb:92:df:f8:98:c3: df:8a:9e:a3:19:a0:2b:fa:e0:86:ed:0a:5b:3c:5e: 7b:8a:29:0a:95:b9:f0:55:67:55:bb:3c:6b:59:15: 83:76:89:a5:e1:2d:90:ff:23:51:31:90:a3:39:43: 15:5a:e2:f4:64:ca:59:bf:58:50:4b:ee:2f:d2:76: 54:74:36:be:ee:89:f7:97:b5:e4:fb:6f:56:cb:ae: 4c:e0:8a:f2:7e:31:af:dc:6b:ed:0d:51:13:43:29: 9a:06:2e:53:d4:fe:8f:a6:6c:ab:ea:04:71:d6:25: c6:bc:ac:14:e2:8c:74:c5:de:be:90:e0:85:b8:af: cd:5c:41:07:54:b3:47:85:1b:2a:f1:7a:e3:ad:0c: 0d:c6:78:7b:87:81:22:64:89:46:ce:f5:08:b1:a0: 04:4e:de:ae:a1:98:cd:ba:c7:ba:86:ce:16:3b:ea: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:03:43:63:BC:B1:18:96:E3:04:5C:00:5A:E3:A2:B2:E3:45:63:1C X509v3 Authority Key Identifier: keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/3ANDY7yxGJbjBFwAWuOisuNFYxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.142.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:ef:93:ce:5a:ab:f0:15:bb:1a:69:d8:71:74:0c:09:8e:10: 2b:e8:28:ed:5d:8f:d1:46:03:21:55:3f:9c:de:8e:03:fe:35: 97:e3:dd:e7:1a:9b:51:1c:bc:94:bd:ef:b7:be:06:cd:0c:45: 9a:c5:dd:90:8d:ef:a2:2e:fb:ce:84:c7:f0:e5:a7:33:a7:dd: ce:b9:fe:c6:f5:a8:35:c1:e0:4f:91:f9:f2:30:81:9b:e1:45: 5d:f4:da:07:7c:13:1d:fe:d5:bf:54:00:fd:9e:46:27:fa:ef: a9:7a:ec:67:be:f2:1e:4c:e9:b7:1b:3c:6d:fb:1f:b8:50:e7: 73:6d:1c:c3:a9:da:92:f9:34:d0:16:f1:51:b0:2e:ef:c7:ff: 50:34:b3:0d:87:d1:36:7a:07:4e:05:14:ae:a6:1c:f0:a8:67: 1a:e9:f2:c7:97:a7:08:c7:2b:d7:6f:fc:4d:b3:47:33:e0:1c: 3b:89:99:fb:46:8a:c0:8f:9c:58:11:6e:82:a4:d9:22:e3:44: e2:e5:64:13:fb:29:ce:13:4d:52:28:e3:08:3d:30:c1:a5:09: 91:bb:b4:70:3c:cb:b7:2b:e4:1b:ec:fb:6c:92:1a:23:d7:5c: a8:06:e5:63:bf:7d:2b:00:de:e8:8d:c6:d6:6c:c9:39:63:4d: 58:8c:ec:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvaOiN7yp9NzC7jSZyP1cBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1 NGRmNjMwHhcNMjYwMTIwMDcwNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzAzNDM2M2JjYjExODk2ZTMwNDVjMDA1YWUzYTJiMmUzNDU2MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHsAJKpbNUVs6JHzkIrYLRYOLnPb wmw8cvmmDtKTt+Ngyvr0+9dg9yBr8rXfqa4Xjwpy4zKCKsuf6g/xkyTO5D52VMqp g7IY+URcWmI6rY94W3y7kt/4mMPfip6jGaAr+uCG7QpbPF57iikKlbnwVWdVuzxr WRWDdoml4S2Q/yNRMZCjOUMVWuL0ZMpZv1hQS+4v0nZUdDa+7on3l7Xk+29Wy65M 4IryfjGv3GvtDVETQymaBi5T1P6Ppmyr6gRx1iXGvKwU4ox0xd6+kOCFuK/NXEEH VLNHhRsq8XrjrQwNxnh7h4EiZIlGzvUIsaAETt6uoZjNuse6hs4WO+oI/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwDQ2O8sRiW4wRcAFrjorLjRWMcMB8GA1UdIwQY MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt OTQ2NDA0ZWMxYWE0LzEvM0FORFk3eXhHSmJqQkZ3QVd1T2lzdU5GWXh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0 LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQuOMA0G CSqGSIb3DQEBCwUAA4IBAQAb75POWqvwFbsaadhxdAwJjhAr6CjtXY/RRgMhVT+c 3o4D/jWX493nGptRHLyUve+3vgbNDEWaxd2Qje+iLvvOhMfw5aczp93Ouf7G9ag1 weBPkfnyMIGb4UVd9NoHfBMd/tW/VAD9nkYn+u+peuxnvvIeTOm3Gzxt+x+4UOdz bRzDqdqS+TTQFvFRsC7vx/9QNLMNh9E2egdOBRSuphzwqGca6fLHl6cIxyvXb/xN s0cz4Bw7iZn7RorAj5xYEW6CpNki40Ti5WQT+ynOE01SKOMIPTDBpQmRu7RwPMu3 K+Qb7Ptskhoj11yoBuVjv30rAN7ojcbWbMk5Y01YjOyb -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:57 2026 by rpki-client