This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa File: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (raw, json) Hash identifier: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8= Subject key identifier: DD:59:1D:EB:45:86:9C:8E:E5:D8:F3:37:1D:91:4B:94:9C:71:8E:B6 Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Certificate serial: 019B79109466048FF258654DD5A35883967E Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa Signing time: Thu 01 Jan 2026 10:18:08 +0000 ROA not before: Thu 01 Jan 2026 10:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213192 IP address blocks: 46.235.40.0/21 maxlen: 21 83.150.232.0/22 maxlen: 22 83.150.235.0/24 maxlen: 24 2a00:d640::/32 maxlen: 32 2a00:d641::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:94:66:04:8f:f2:58:65:4d:d5:a3:58:83:96:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd591deb45869c8ee5d8f3371d914b949c718eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:84:2f:2b:04:19:5b:9a:a3:2c:8c:2a:c9:f0: 87:13:f4:49:6f:cd:2d:62:a8:b8:30:1c:3a:92:19: 9a:ad:ce:fc:6b:38:e8:27:90:e2:17:ac:b6:bf:95: 99:03:1d:d5:bf:4d:89:65:f2:9c:94:cf:6d:a4:92: ce:06:bb:e8:1b:12:fe:30:e7:c7:89:3e:f4:23:f3: 0d:b4:b2:23:51:de:6f:ce:6b:eb:a0:86:b5:c6:cf: 42:c9:04:1a:8b:cd:83:28:4c:90:b3:73:98:9d:6f: e2:25:1d:da:6b:03:82:22:f9:6c:6c:3c:66:3e:4d: 55:b2:2c:09:2c:c1:02:d3:51:d6:08:ea:45:4f:88: e6:4e:5e:87:30:bf:b5:57:b8:54:4b:10:7f:fb:b7: ed:28:09:d4:46:c7:a3:56:3f:0c:26:b9:64:1d:64: 8f:19:41:59:bb:6c:3e:63:2e:54:29:22:5a:c8:c8: 6f:56:3c:52:89:8a:a3:a5:d9:8c:b2:9f:50:77:b7: 91:a7:c7:69:f0:82:e6:57:c6:4d:30:a1:ea:bb:8c: ef:4e:e8:42:d2:4d:ee:f4:2a:b8:63:0c:ac:06:05: 4e:32:1b:54:f6:9f:da:85:ca:c8:7c:89:ce:cb:6f: 87:34:7a:0d:8b:cd:d8:22:2f:67:f4:cb:99:30:54: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:59:1D:EB:45:86:9C:8E:E5:D8:F3:37:1D:91:4B:94:9C:71:8E:B6 X509v3 Authority Key Identifier: keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.40.0/21 83.150.232.0/22 IPv6: 2a00:d640::/31 Signature Algorithm: sha256WithRSAEncryption 51:34:18:f0:75:1e:cb:f5:7c:d4:6d:a1:da:be:81:95:a7:3e: 04:f5:e0:53:01:d4:9d:ad:bd:ce:51:5d:79:c0:3f:1f:30:9d: 52:67:1f:ae:9c:9e:88:2e:0e:9c:57:9d:f7:29:c1:a1:0f:22: 25:c0:ac:85:83:0b:c2:32:29:28:3d:64:b8:be:25:61:cb:0e: c7:38:ea:f1:11:c6:57:04:d5:a4:86:db:89:f9:55:2c:66:93: cc:4d:62:0b:e8:7c:16:2a:4c:08:71:a9:28:74:dc:c0:ec:c5: e9:b3:d1:ef:b4:c3:2e:2e:2d:51:0a:9d:4e:f7:5e:bb:61:85: 14:b8:33:0d:46:a5:53:d7:c4:cf:32:1a:22:6f:dc:7e:b4:ab: 90:61:37:60:24:f0:a2:c6:d9:43:e9:66:cf:8e:d3:09:25:a5: f2:74:40:74:6d:18:bf:99:ec:76:3a:e1:f5:fc:dc:2e:b2:e9: 85:5d:fe:f9:dc:a2:50:30:55:7a:05:d8:24:70:91:c0:eb:a6: 7a:c4:fb:52:5e:af:7f:b3:f7:bb:d5:91:a7:d8:4f:79:1b:47: 35:2d:26:ac:f1:bc:d4:6f:40:57:1f:51:62:a2:ba:f8:72:7a: d3:30:9c:b3:4e:76:6f:50:54:27:be:37:bc:9c:5f:4f:5d:f9: 97:a4:f2:c9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EJRmBI/yWGVN1aNYg5Z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZmEyYTcwMDAzODgwZDc1NjE2MTJhM2MwYTEyNjAyY2Uz NTQxYTQwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDU5MWRlYjQ1ODY5YzhlZTVkOGYzMzcxZDkxNGI5NDljNzE4ZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IQvKwQZW5qjLIwqyfCHE/RJb80t Yqi4MBw6khmarc78azjoJ5DiF6y2v5WZAx3Vv02JZfKclM9tpJLOBrvoGxL+MOfH iT70I/MNtLIjUd5vzmvroIa1xs9CyQQai82DKEyQs3OYnW/iJR3aawOCIvlsbDxm Pk1VsiwJLMEC01HWCOpFT4jmTl6HML+1V7hUSxB/+7ftKAnURsejVj8MJrlkHWSP GUFZu2w+Yy5UKSJayMhvVjxSiYqjpdmMsp9Qd7eRp8dp8ILmV8ZNMKHqu4zvTuhC 0k3u9Cq4YwysBgVOMhtU9p/ahcrIfInOy2+HNHoNi83YIi9n9MuZMFSfFQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN1ZHetFhpyO5djzNx2RS5SccY62MB8GA1UdIwQY MBaAFNL6KnAAOIDXVhYSo8ChJgLONUGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAt YTc5NjUwMWU3N2ExLzEvM1ZrZDYwV0duSTdsMlBNM0haRkxsSnh4anJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAtYTc5NjUwMWU3N2Ex LzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLusoAwQC U5boMA0EAgACMAcDBQEqANZAMA0GCSqGSIb3DQEBCwUAA4IBAQBRNBjwdR7L9XzU baHavoGVpz4E9eBTAdSdrb3OUV15wD8fMJ1SZx+unJ6ILg6cV533KcGhDyIlwKyF gwvCMikoPWS4viVhyw7HOOrxEcZXBNWkhtuJ+VUsZpPMTWIL6HwWKkwIcakodNzA 7MXps9HvtMMuLi1RCp1O9167YYUUuDMNRqVT18TPMhoib9x+tKuQYTdgJPCixtlD 6WbPjtMJJaXydEB0bRi/mex2OuH1/NwusumFXf753KJQMFV6BdgkcJHA66Z6xPtS Xq9/s/e71ZGn2E95G0c1LSas8bzUb0BXH1Fiorr4cnrTMJyzTnZvUFQnvje8nF9P XfmXpPLJ -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:59 2026 by rpki-client