This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3QvNaBTxs1PjLqnE1VOIhI45V7c.roa File: 3QvNaBTxs1PjLqnE1VOIhI45V7c.roa (raw, json) Hash identifier: WFmXAUAeTAg/52UhkkFJsciHEc280mGsBIoSVtzTk+c= Subject key identifier: DD:0B:CD:68:14:F1:B3:53:E3:2E:A9:C4:D5:53:88:84:8E:39:57:B7 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C67A945191605816ADBAD156D290FE Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3QvNaBTxs1PjLqnE1VOIhI45V7c.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206105 IP address blocks: 80.95.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7a:94:51:91:60:58:16:ad:ba:d1:56:d2:90:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd0bcd6814f1b353e32ea9c4d55388848e3957b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:1b:e0:4d:09:01:f5:bc:16:cd:1f:3d:e5: 82:4a:9e:32:09:2b:43:5d:1b:cf:1a:46:74:b1:88: 9e:60:22:14:c9:bf:0b:50:d8:e8:d7:37:3d:5b:ce: f8:18:68:0b:ab:49:96:88:3d:36:80:cd:ac:0a:f5: cc:76:5b:c0:f2:5a:d7:91:5f:60:83:29:f3:07:e1: aa:df:1f:00:20:5c:35:a0:de:b9:b6:a7:68:ba:5f: 88:e8:4e:39:b7:ad:4f:4f:91:e4:0d:3c:86:3b:e0: 17:40:c2:41:d4:96:74:a0:bb:3c:06:b9:dc:d9:73: 8e:18:83:92:e1:e4:3c:d0:e5:d2:2f:e9:cf:eb:2c: 65:36:14:ea:3f:7b:c3:16:ff:6f:4a:64:60:44:a4: 59:b8:16:49:88:35:51:73:9b:90:25:60:de:69:c7: 8d:83:ac:e2:40:67:a9:80:d5:ff:6a:27:0b:68:4a: 00:d9:cc:44:56:77:8e:ca:ba:5a:c9:54:00:d8:77: 2c:7c:e5:a0:cd:86:fa:b0:9c:14:fa:db:c8:b3:87: ee:d8:5f:45:a1:03:9b:41:16:df:c6:8e:00:fa:b8: cf:a6:a6:01:2f:32:a0:13:93:20:59:bb:8d:72:10: 67:8c:73:8f:7d:d5:10:7d:b0:32:00:09:fe:76:6b: 79:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0B:CD:68:14:F1:B3:53:E3:2E:A9:C4:D5:53:88:84:8E:39:57:B7 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3QvNaBTxs1PjLqnE1VOIhI45V7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.95.21.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:88:f8:7f:46:89:d4:d1:c4:af:1d:ab:e5:68:23:94:28:71: 46:20:f4:d1:e2:6e:e2:4a:75:96:b8:5b:1d:0d:e3:d0:25:c0: f0:36:52:b9:d3:32:7a:ff:db:8c:89:25:9d:0c:05:d4:f3:69: 31:0c:e6:74:ab:c1:95:66:69:f5:bf:9b:41:bf:49:20:26:59: 84:5e:26:b9:d3:50:18:48:d9:5b:f6:aa:5d:c8:e0:52:82:d8: 65:e9:07:58:bb:ca:cf:88:61:8e:40:89:b4:7b:d2:ea:f5:53: 19:b9:9a:c2:03:a5:d4:0f:92:aa:f8:8e:45:82:8d:dc:3c:4c: 1b:09:ab:00:75:14:89:47:c0:b7:a7:56:62:3e:50:e6:1d:f9: 48:40:56:4f:0f:bb:3d:0d:d6:97:80:09:c3:3a:79:ea:ad:70: e8:3a:5a:84:b4:c8:da:08:3b:5f:db:9b:25:38:89:45:b0:75: 02:ed:c5:91:08:46:c2:6b:29:11:55:46:69:33:63:8f:a6:e2: 68:a9:bd:fb:6e:4f:14:88:37:94:93:a3:22:e3:d3:a7:77:3a: a5:6b:48:24:ce:2c:d1:0f:7a:7c:8d:0f:ba:0f:80:ab:d9:8c: ef:e0:b5:7f:bc:64:03:12:ed:8e:cb:27:ec:e5:3b:c3:67:77: 5f:ab:25:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnqUUZFgWBatutFW0pD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDBiY2Q2ODE0ZjFiMzUzZTMyZWE5YzRkNTUzODg4NDhlMzk1N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lob4E0JAfW8Fs0fPeWCSp4yCStD XRvPGkZ0sYieYCIUyb8LUNjo1zc9W874GGgLq0mWiD02gM2sCvXMdlvA8lrXkV9g gynzB+Gq3x8AIFw1oN65tqdoul+I6E45t61PT5HkDTyGO+AXQMJB1JZ0oLs8Brnc 2XOOGIOS4eQ80OXSL+nP6yxlNhTqP3vDFv9vSmRgRKRZuBZJiDVRc5uQJWDeaceN g6ziQGepgNX/aicLaEoA2cxEVneOyrpayVQA2HcsfOWgzYb6sJwU+tvIs4fu2F9F oQObQRbfxo4A+rjPpqYBLzKgE5MgWbuNchBnjHOPfdUQfbAyAAn+dmt5fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN0LzWgU8bNT4y6pxNVTiISOOVe3MB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvM1F2TmFCVHhzMVBqTHFuRTFWT0loSTQ1VjdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF8VMA0G CSqGSIb3DQEBCwUAA4IBAQB/iPh/RonU0cSvHavlaCOUKHFGIPTR4m7iSnWWuFsd DePQJcDwNlK50zJ6/9uMiSWdDAXU82kxDOZ0q8GVZmn1v5tBv0kgJlmEXia501AY SNlb9qpdyOBSgthl6QdYu8rPiGGOQIm0e9Lq9VMZuZrCA6XUD5Kq+I5Fgo3cPEwb CasAdRSJR8C3p1ZiPlDmHflIQFZPD7s9DdaXgAnDOnnqrXDoOlqEtMjaCDtf25sl OIlFsHUC7cWRCEbCaykRVUZpM2OPpuJoqb37bk8UiDeUk6Mi49Ondzqla0gkzizR D3p8jQ+6D4Cr2Yzv4LV/vGQDEu2Oyyfs5TvDZ3dfqyVn -----END CERTIFICATE-----Generated at Sun Jan 25 15:38:11 2026 by rpki-client