This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/3yZGQ9sVYnt3QvH4c2styLzLRvg.roa File: 3yZGQ9sVYnt3QvH4c2styLzLRvg.roa (raw, json) Hash identifier: hVBmJZwcWxMro3AxbGdMWv1UTRuzR2YMZqUh1ugo44A= Subject key identifier: DF:26:46:43:DB:15:62:7B:77:42:F1:F8:73:6B:2D:C8:BC:CB:46:F8 Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Certificate serial: 019B7BA31CE94B3B436B098413538473D1C4 Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/3yZGQ9sVYnt3QvH4c2styLzLRvg.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206854 IP address blocks: 94.139.188.0/24 maxlen: 24 94.139.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1c:e9:4b:3b:43:6b:09:84:13:53:84:73:d1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df264643db15627b7742f1f8736b2dc8bccb46f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e2:cc:6f:8a:c3:68:dc:51:38:da:58:77:c3: 07:36:70:34:03:27:d5:b2:0c:00:e5:d9:f1:c6:aa: 78:90:8d:d9:9a:93:32:23:1b:c5:8a:91:eb:65:49: e5:63:0c:f0:ab:87:90:16:12:89:4f:63:ff:c7:07: 86:b6:97:fe:0c:3c:fe:bb:d5:9e:9e:88:a8:e7:88: 9d:59:5d:9f:cc:f5:24:2c:88:84:a6:7c:db:b8:2c: 98:01:63:8e:18:93:a2:7c:bf:9f:c5:12:9a:c9:d8: 39:e1:1d:f5:c7:c3:36:93:63:3c:0e:88:21:1d:35: 9b:a9:00:a0:6c:13:69:0f:19:fd:a2:6a:34:f4:c4: 14:46:d5:44:26:03:d1:d0:9a:d6:30:b3:09:8c:a5: 40:5b:eb:9a:35:52:8c:60:86:ce:57:54:91:b1:bf: ce:72:3d:40:b8:0d:04:3e:fd:50:c0:39:4b:6b:72: e1:45:03:36:28:29:fa:3a:ad:ca:0a:7f:b9:2c:81: 81:c7:96:17:35:e2:37:3c:7f:50:4b:1a:b0:91:f2: e7:0b:17:51:b7:c6:ef:f0:bb:a7:98:68:2e:c8:e5: 12:74:ab:51:5a:d0:61:a5:28:52:1f:82:f5:25:6c: ff:a4:79:14:67:74:0e:b0:55:78:54:8a:2b:fd:87: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:26:46:43:DB:15:62:7B:77:42:F1:F8:73:6B:2D:C8:BC:CB:46:F8 X509v3 Authority Key Identifier: keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/3yZGQ9sVYnt3QvH4c2styLzLRvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.139.188.0/24 94.139.190.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:f7:90:09:18:c9:ea:b5:41:ee:6b:6a:d1:9d:84:4b:c4:c1: f4:85:61:29:e6:3d:b2:3f:a4:88:1f:07:78:3e:4c:f1:90:60: 14:9b:f0:e2:e1:18:90:71:03:49:6c:4c:0c:7e:da:0a:ea:9e: 31:28:55:fa:7b:02:ae:09:6b:be:d4:ef:ad:5d:7d:2f:26:40: b7:c2:71:31:cd:09:45:2f:28:14:c7:45:de:fa:82:88:60:0e: e9:f9:17:30:47:d6:92:0a:a7:28:89:da:00:ce:ff:4f:43:e2: a1:7f:4e:7e:ca:78:ce:ac:6b:8c:11:33:2e:d3:79:f9:1c:88: a5:e8:1b:6e:91:94:f2:3d:a4:d7:48:36:65:61:51:ec:e2:99: f2:c7:2f:b3:c7:17:d0:33:90:0b:ea:61:d1:5c:d9:17:a3:85: 18:3a:9e:45:de:f4:01:41:d8:28:eb:35:2c:c5:bc:a6:1a:99: cf:37:c8:ec:40:58:7f:b8:33:7d:2f:3c:2b:67:29:07:6c:be: 8e:a7:76:16:5c:c9:15:03:01:73:4a:25:ab:28:ee:38:82:4a: 41:8c:73:a5:c7:23:44:83:bf:22:13:96:b1:60:b4:af:ff:3d: 61:fb:09:6b:8b:69:e3:b4:4d:55:93:f2:92:a1:d0:6b:ef:9e: 65:25:7b:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oxzpSztDawmEE1OEc9HEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0 NzdmN2UwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjI2NDY0M2RiMTU2MjdiNzc0MmYxZjg3MzZiMmRjOGJjY2I0NmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eLMb4rDaNxRONpYd8MHNnA0AyfV sgwA5dnxxqp4kI3ZmpMyIxvFipHrZUnlYwzwq4eQFhKJT2P/xweGtpf+DDz+u9We noio54idWV2fzPUkLIiEpnzbuCyYAWOOGJOifL+fxRKaydg54R31x8M2k2M8Dogh HTWbqQCgbBNpDxn9omo09MQURtVEJgPR0JrWMLMJjKVAW+uaNVKMYIbOV1SRsb/O cj1AuA0EPv1QwDlLa3LhRQM2KCn6Oq3KCn+5LIGBx5YXNeI3PH9QSxqwkfLnCxdR t8bv8LunmGguyOUSdKtRWtBhpShSH4L1JWz/pHkUZ3QOsFV4VIor/YcUvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN8mRkPbFWJ7d0Lx+HNrLci8y0b4MB8GA1UdIwQY MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt OGVhYjdmNGZlNzdlLzEvM3laR1E5c1ZZbnQzUXZINGMyc3R5THpMUnZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXou8AwQB Xou+MA0GCSqGSIb3DQEBCwUAA4IBAQBN95AJGMnqtUHua2rRnYRLxMH0hWEp5j2y P6SIHwd4PkzxkGAUm/Di4RiQcQNJbEwMftoK6p4xKFX6ewKuCWu+1O+tXX0vJkC3 wnExzQlFLygUx0Xe+oKIYA7p+RcwR9aSCqcoidoAzv9PQ+Khf05+ynjOrGuMETMu 03n5HIil6BtukZTyPaTXSDZlYVHs4pnyxy+zxxfQM5AL6mHRXNkXo4UYOp5F3vQB Qdgo6zUsxbymGpnPN8jsQFh/uDN9LzwrZykHbL6Op3YWXMkVAwFzSiWrKO44gkpB jHOlxyNEg78iE5axYLSv/z1h+wlri2njtE1Vk/KSodBr755lJXsU -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:12 2026 by rpki-client