This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/3wE9z3o-LZC9L1Wi744_KuJH-nA.roa File: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (raw, json) Hash identifier: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM= Subject key identifier: DF:01:3D:CF:7A:3E:2D:90:BD:2F:55:A2:EF:8E:3F:2A:E2:47:FA:70 Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea Certificate serial: 019B797F1CFEE2A86358FD98BAD76E6B7E68 Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/3wE9z3o-LZC9L1Wi744_KuJH-nA.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209281 IP address blocks: 185.113.192.0/24 maxlen: 24 185.113.193.0/24 maxlen: 24 185.113.194.0/24 maxlen: 24 185.113.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1c:fe:e2:a8:63:58:fd:98:ba:d7:6e:6b:7e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df013dcf7a3e2d90bd2f55a2ef8e3f2ae247fa70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:ec:bb:b3:a6:03:63:8d:ff:a8:cb:5a:42: 04:59:df:f5:63:d4:24:fd:a1:29:90:a1:b8:57:2e: 56:b0:73:f3:f8:fe:f5:26:97:a9:cf:51:51:6b:83: 94:3c:46:41:a2:e3:3b:f2:41:dc:f8:24:87:17:5b: 9d:92:24:0e:a0:8c:7e:90:24:72:2a:b5:8f:0c:5a: d3:85:95:ad:9c:29:50:f3:58:25:49:53:eb:dc:79: 4a:3a:76:74:16:dc:71:cc:76:df:fb:20:bc:d8:d5: d9:f0:2a:34:80:3d:fe:73:08:f1:87:40:bc:8b:97: 28:76:5b:6b:39:a2:51:7c:7d:05:7a:df:28:33:0d: ca:50:73:50:21:50:fe:d6:38:05:9a:38:b4:23:ba: f5:dc:51:3b:27:af:d6:e3:ff:a3:7c:f8:f8:44:1d: 9e:9e:3a:22:90:76:ff:d2:9d:9f:4d:23:66:80:39: 15:87:e5:9b:9e:e9:2d:74:4c:fe:08:71:53:52:82: 21:6c:32:7b:3e:9e:b1:05:b5:b1:ab:38:48:ab:03: 73:89:cf:ae:a5:ed:26:dd:31:34:5e:5b:e8:3b:6d: 8a:66:ae:3c:18:85:3e:72:88:4d:74:d7:37:c9:0c: 48:1f:79:03:eb:b3:26:63:7c:ea:51:be:cd:17:62: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:01:3D:CF:7A:3E:2D:90:BD:2F:55:A2:EF:8E:3F:2A:E2:47:FA:70 X509v3 Authority Key Identifier: keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/3wE9z3o-LZC9L1Wi744_KuJH-nA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.192.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:b1:15:bf:95:f8:cf:bc:5f:02:eb:f8:88:6b:15:e7:9a:b6: 6e:be:66:92:d2:ee:1d:66:d1:68:c1:e9:32:7e:73:4e:bf:3f: a5:7c:46:31:f4:5f:a3:6c:6a:1f:2d:6c:6b:b3:97:87:69:a7: 1a:62:1a:ce:e1:e5:6b:d0:8b:e4:e5:f6:14:f4:01:79:f6:62: cf:60:7a:9f:28:26:e8:17:d5:94:de:19:d5:ad:1f:ba:dc:39: dc:7c:5e:77:89:74:34:54:78:3f:f3:dc:50:3f:ec:c8:d8:4b: 7f:aa:cc:56:0f:af:8d:91:4c:ab:13:02:f6:1e:42:79:0a:7b: 57:3d:03:d7:df:6e:81:02:5d:3a:76:68:06:b0:e6:ce:de:bd: fd:29:69:28:8b:28:fa:a3:74:7a:d6:e6:13:7d:3e:a2:b0:07: 16:02:8d:85:8a:a8:ca:60:bb:73:b1:86:81:28:45:26:48:98: d5:5b:71:2e:13:7f:c5:c0:40:03:32:43:a0:6a:b8:24:80:e7: df:ae:78:a9:dd:8f:dd:c1:a2:78:6a:67:e6:a4:e9:41:a3:a0: da:73:31:c5:ba:66:68:1e:c7:43:c3:f0:fb:88:f8:eb:18:cf: 98:66:95:be:45:8f:a6:3a:5f:d9:d6:c3:43:04:9b:64:5a:2c: 07:87:0d:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fxz+4qhjWP2Yutdua35oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx NzEzZWEwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjAxM2RjZjdhM2UyZDkwYmQyZjU1YTJlZjhlM2YyYWUyNDdmYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ3su7OmA2ON/6jLWkIEWd/1Y9Qk /aEpkKG4Vy5WsHPz+P71Jpepz1FRa4OUPEZBouM78kHc+CSHF1udkiQOoIx+kCRy KrWPDFrThZWtnClQ81glSVPr3HlKOnZ0FtxxzHbf+yC82NXZ8Co0gD3+cwjxh0C8 i5codltrOaJRfH0Fet8oMw3KUHNQIVD+1jgFmji0I7r13FE7J6/W4/+jfPj4RB2e njoikHb/0p2fTSNmgDkVh+WbnuktdEz+CHFTUoIhbDJ7Pp6xBbWxqzhIqwNzic+u pe0m3TE0XlvoO22KZq48GIU+cohNdNc3yQxIH3kD67MmY3zqUb7NF2KtNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8BPc96Pi2QvS9Vou+OPyriR/pwMB8GA1UdIwQY MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt Y2E0NDQ3MDQ0MTZmLzEvM3dFOXozby1MWkM5TDFXaTc0NF9LdUpILW5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXHAMA0G CSqGSIb3DQEBCwUAA4IBAQAtsRW/lfjPvF8C6/iIaxXnmrZuvmaS0u4dZtFoweky fnNOvz+lfEYx9F+jbGofLWxrs5eHaacaYhrO4eVr0Ivk5fYU9AF59mLPYHqfKCbo F9WU3hnVrR+63DncfF53iXQ0VHg/89xQP+zI2Et/qsxWD6+NkUyrEwL2HkJ5CntX PQPX326BAl06dmgGsObO3r39KWkoiyj6o3R61uYTfT6isAcWAo2FiqjKYLtzsYaB KEUmSJjVW3EuE3/FwEADMkOgargkgOffrnip3Y/dwaJ4amfmpOlBo6DaczHFumZo HsdDw/D7iPjrGM+YZpW+RY+mOl/Z1sNDBJtkWiwHhw3R -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:20 2026 by rpki-client