This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/3fvhaREkDO3VuOLRA_E1GBh4S-o.roa File: 3fvhaREkDO3VuOLRA_E1GBh4S-o.roa (raw, json) Hash identifier: 6l9NRbgdW7DenxB2SQaQrFd5f9A2yMdFBNA5O54Sj28= Subject key identifier: DD:FB:E1:69:11:24:0C:ED:D5:B8:E2:D1:03:F1:35:18:18:78:4B:EA Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Certificate serial: 019B7FF1862AB6458D6355D9606B4542412A Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/3fvhaREkDO3VuOLRA_E1GBh4S-o.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47541 IP address blocks: 79.137.164.0/24 maxlen: 24 79.137.180.0/24 maxlen: 24 93.186.224.0/21 maxlen: 21 93.186.232.0/21 maxlen: 21 95.142.192.0/20 maxlen: 20 95.142.192.0/21 maxlen: 21 185.32.248.0/22 maxlen: 22 2a00:bdc0::/33 maxlen: 33 2a00:bdc0:8000::/34 maxlen: 34 2a00:bdc0:c000::/35 maxlen: 35 2a00:bdc2::/31 maxlen: 31 2a00:bdc4::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:86:2a:b6:45:8d:63:55:d9:60:6b:45:42:41:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddfbe16911240cedd5b8e2d103f1351818784bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:41:84:56:02:48:a9:01:93:55:14:22:62: c8:71:6b:db:fc:38:e3:31:65:f5:4b:ca:01:c5:9a: 21:75:d0:61:4a:d1:63:e0:97:cc:58:2f:6f:e6:ec: 48:d3:9f:a3:93:7d:ca:41:7a:a8:e8:ea:6f:05:89: 69:08:49:63:a0:77:a6:b6:00:9d:b1:c2:dd:af:ce: 69:b3:64:36:88:6f:24:3d:4f:80:6b:0c:76:54:bd: a0:fe:f4:43:63:3e:02:43:f8:fb:72:96:16:97:7c: 94:e2:a0:67:10:68:da:d0:9c:65:cf:36:6b:17:f4: 8d:f3:4c:c5:f4:f0:59:89:b2:ad:dd:40:21:3e:67: 36:80:9a:d1:f4:4f:dc:9d:48:ae:79:f2:37:55:23: 7b:a7:4e:49:38:e5:d3:13:1e:e5:b5:39:34:91:1f: 0f:ba:15:29:89:8f:8c:24:14:24:af:ee:0e:c6:51: d4:3b:d1:57:4f:42:7e:1f:c4:7c:39:42:aa:22:4a: 8b:f4:16:c9:61:9d:34:52:53:05:73:06:4b:9c:73: 67:e1:e6:da:c1:29:64:b4:dc:0d:46:bd:fd:03:f4: c8:e5:00:4a:07:64:c5:9c:34:54:09:fd:a3:10:13: 4e:42:05:f2:b3:29:80:db:8a:d5:73:1a:17:d9:01: c7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FB:E1:69:11:24:0C:ED:D5:B8:E2:D1:03:F1:35:18:18:78:4B:EA X509v3 Authority Key Identifier: keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/3fvhaREkDO3VuOLRA_E1GBh4S-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.137.164.0/24 79.137.180.0/24 93.186.224.0/20 95.142.192.0/20 185.32.248.0/22 IPv6: 2a00:bdc0::-2a00:bdc0:dfff:ffff:ffff:ffff:ffff:ffff 2a00:bdc2::-2a00:bdc7:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 70:27:80:10:d2:bb:4c:00:73:68:64:ed:bd:c1:c7:48:0a:f9: a0:cf:ad:ef:2f:88:59:c2:94:b6:fa:33:b6:79:fd:a6:e5:ff: 81:a2:48:d6:1b:7f:5c:88:42:ae:52:7d:78:dc:fa:63:91:7f: 82:08:08:f1:2d:74:1c:ef:fa:0c:01:70:f6:5a:3c:e3:bf:c5: ff:ab:0d:e7:10:62:06:79:52:6d:0b:84:56:93:3f:ef:f9:32: f7:9c:fc:84:3c:25:89:b1:bd:7a:6f:b9:89:d9:7d:0b:99:54: fa:b1:28:33:ea:52:18:ed:01:6e:65:4b:68:43:f6:28:81:d3: 1e:7c:6f:0e:c4:46:ff:ce:be:a4:e3:03:03:55:c7:32:92:14: f8:35:dd:be:8c:d7:bd:4d:5f:db:3d:3b:97:65:f5:23:8c:46: 6a:2c:40:d6:b2:e1:59:b9:f2:a5:5b:3e:1a:d9:3d:b7:ea:89: dd:9f:a4:35:b9:0e:c8:db:7c:ed:ab:ee:55:7a:be:9e:6e:8f: 87:a7:7a:73:d8:e3:68:9d:52:60:1c:b5:d9:70:95:24:b8:b6: af:f6:4e:10:74:e1:ec:20:16:04:1d:7b:1b:d5:4b:eb:48:6f: 10:fa:30:4f:6f:62:c3:68:97:af:b4:e7:23:45:a2:00:5b:91: c3:4f:35:a6 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt/8YYqtkWNY1XZYGtFQkEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc5NjVlMjgzNGYxODkzY2ZhODYzMWE0ODQwNzFlNmEy ZDQ1YjcwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGZiZTE2OTExMjQwY2VkZDViOGUyZDEwM2YxMzUxODE4Nzg0YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu25BhFYCSKkBk1UUImLIcWvb/Djj MWX1S8oBxZohddBhStFj4JfMWC9v5uxI05+jk33KQXqo6OpvBYlpCEljoHemtgCd scLdr85ps2Q2iG8kPU+Aawx2VL2g/vRDYz4CQ/j7cpYWl3yU4qBnEGja0JxlzzZr F/SN80zF9PBZibKt3UAhPmc2gJrR9E/cnUiuefI3VSN7p05JOOXTEx7ltTk0kR8P uhUpiY+MJBQkr+4OxlHUO9FXT0J+H8R8OUKqIkqL9BbJYZ00UlMFcwZLnHNn4eba wSlktNwNRr39A/TI5QBKB2TFnDRUCf2jEBNOQgXysymA24rVcxoX2QHHoQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN374WkRJAzt1bji0QPxNRgYeEvqMB8GA1UdIwQY MBaAFJNnll4oNPGJPPqGMaSEBx5qLUW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt ZjA5M2UxN2IyN2VmLzEvM2Z2aGFSRWtETzNWdU9MUkFfRTFHQmg0Uy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm LzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAkBAIAATAeAwQAT4mkAwQA T4m0AwQEXbrgAwQEX47AAwQCuSD4MCcEAgACMCEwDwMFBioAvcADBgUqAL3AwDAO AwUBKgC9wgMFAyoAvcAwDQYJKoZIhvcNAQELBQADggEBAHAngBDSu0wAc2hk7b3B x0gK+aDPre8viFnClLb6M7Z5/abl/4GiSNYbf1yIQq5SfXjc+mORf4IICPEtdBzv +gwBcPZaPOO/xf+rDecQYgZ5Um0LhFaTP+/5Mvec/IQ8JYmxvXpvuYnZfQuZVPqx KDPqUhjtAW5lS2hD9iiB0x58bw7ERv/OvqTjAwNVxzKSFPg13b6M171NX9s9O5dl 9SOMRmosQNay4Vm58qVbPhrZPbfqid2fpDW5DsjbfO2r7lV6vp5uj4enenPY42id UmActdlwlSS4tq/2ThB04ewgFgQdexvVS+tIbxD6ME9vYsNol6+05yNFogBbkcNP NaY= -----END CERTIFICATE-----Generated at Mon Jan 26 15:18:56 2026 by rpki-client