This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa File: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (raw, json) Hash identifier: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc= Subject key identifier: DC:93:40:14:F9:AE:46:EB:00:EF:F3:F5:70:75:2B:A4:D7:3C:65:64 Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019B7EA6367D66F7CE6E79188846EBBFA25F Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa Signing time: Fri 02 Jan 2026 12:19:40 +0000 ROA not before: Fri 02 Jan 2026 12:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31708 IP address blocks: 93.113.110.0/23 maxlen: 23 93.114.86.0/23 maxlen: 23 93.114.184.0/23 maxlen: 23 93.114.234.0/23 maxlen: 23 176.56.56.0/21 maxlen: 21 176.56.56.0/24 maxlen: 24 185.17.180.0/22 maxlen: 22 185.65.40.0/22 maxlen: 22 185.164.196.0/22 maxlen: 22 188.212.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:36:7d:66:f7:ce:6e:79:18:88:46:eb:bf:a2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jan 2 12:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc934014f9ae46eb00eff3f570752ba4d73c6564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:5e:e5:dd:98:a4:a2:ea:8b:ef:a5:ee:e4: d6:a5:4d:31:f7:40:36:60:32:22:e8:ee:3c:43:9b: 30:54:64:d6:58:a7:a5:a6:28:60:57:88:e7:62:3d: 22:a6:b6:70:12:2d:2d:2d:51:39:b5:1a:96:38:74: cd:f0:9a:b0:30:91:c2:1d:b5:fb:60:ac:4d:ca:5b: 97:6c:1c:12:c0:b1:92:fd:fa:46:63:75:62:e1:93: e8:66:df:a0:46:1e:0e:fc:1d:2c:86:e8:26:68:63: 70:0b:25:6c:5f:d5:04:3e:e5:a7:0b:ba:4f:96:d4: 10:c6:a2:e1:dd:4c:76:32:0b:03:41:1a:01:f6:15: 59:39:eb:81:e0:89:57:2f:b5:f2:9f:8b:b7:ad:c5: 59:11:42:4a:91:aa:ad:e7:ce:47:e5:f9:05:79:12: c1:95:4c:0d:20:79:11:16:17:a1:7b:ae:08:a2:6e: c1:a1:6c:e9:1f:e3:0c:e2:0a:bd:b7:28:97:70:f5: e9:25:f4:dd:86:c0:98:de:45:af:95:25:6f:e1:6b: b0:22:3c:64:a4:a6:e0:8d:51:fe:6c:ec:2a:5b:f6: f6:e4:b4:af:54:c9:3b:e6:b3:6b:fb:77:78:54:2f: 6c:c1:30:87:2c:d4:9c:91:8e:e3:b1:63:0b:87:af: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:93:40:14:F9:AE:46:EB:00:EF:F3:F5:70:75:2B:A4:D7:3C:65:64 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.110.0/23 93.114.86.0/23 93.114.184.0/23 93.114.234.0/23 176.56.56.0/21 185.17.180.0/22 185.65.40.0/22 185.164.196.0/22 188.212.34.0/23 Signature Algorithm: sha256WithRSAEncryption 63:71:0a:d8:17:73:77:35:ef:57:27:9d:05:f9:98:4e:b8:76: e0:60:2e:a7:3a:2a:72:dd:76:54:f5:7f:1e:bb:de:d6:4f:ee: 98:87:3c:64:2d:28:5d:a2:c8:a2:70:d1:88:0a:f4:d4:9f:ca: 91:18:5d:82:b6:b9:5c:25:05:fa:b9:09:7b:42:f5:33:52:0a: 1d:01:ba:7d:46:20:31:94:3d:24:a0:8b:21:8b:dd:69:18:91: 2f:c8:7b:e9:ce:03:a3:46:6c:b1:9c:58:de:17:91:69:bc:f5: 8d:fa:4f:77:0c:91:78:d6:08:22:62:9b:97:11:f8:53:2b:c6: 32:6b:00:10:00:ac:f0:7f:b2:3b:c0:7a:78:cf:99:c4:89:65: e0:d1:bc:f0:a2:d8:6e:4b:f3:8a:4a:6e:2f:02:0d:39:9e:4f: fd:8b:70:f9:c1:e6:95:d7:7f:65:7a:2d:4f:c7:86:4b:68:63: fd:b3:fa:62:94:6b:1d:fb:71:cf:3c:04:a7:40:87:56:91:b9: cf:66:e2:28:64:64:b0:c7:67:93:d2:d4:46:52:ee:07:cd:c6: c9:2d:dd:f7:fc:51:1c:84:e2:dd:bb:bb:99:c2:74:26:ff:f1: 0c:20:ec:c4:4a:ab:7e:ab:7b:d8:34:85:b0:c7:13:c5:a9:75: ab:19:06:0d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+pjZ9ZvfObnkYiEbrv6JfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwMTAyMTIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzkzNDAxNGY5YWU0NmViMDBlZmYzZjU3MDc1MmJhNGQ3M2M2NTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx9e5d2YpKLqi++l7uTWpU0x90A2 YDIi6O48Q5swVGTWWKelpihgV4jnYj0iprZwEi0tLVE5tRqWOHTN8JqwMJHCHbX7 YKxNyluXbBwSwLGS/fpGY3Vi4ZPoZt+gRh4O/B0shugmaGNwCyVsX9UEPuWnC7pP ltQQxqLh3Ux2MgsDQRoB9hVZOeuB4IlXL7Xyn4u3rcVZEUJKkaqt585H5fkFeRLB lUwNIHkRFhehe64Iom7BoWzpH+MM4gq9tyiXcPXpJfTdhsCY3kWvlSVv4WuwIjxk pKbgjVH+bOwqW/b25LSvVMk75rNr+3d4VC9swTCHLNSckY7jsWMLh6/lCwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFNyTQBT5rkbrAO/z9XB1K6TXPGVkMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvM0pOQUZQbXVSdXNBN19QMWNIVXJwTmM4WldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBXXFuAwQB XXJWAwQBXXK4AwQBXXLqAwQDsDg4AwQCuRG0AwQCuUEoAwQCuaTEAwQBvNQiMA0G CSqGSIb3DQEBCwUAA4IBAQBjcQrYF3N3Ne9XJ50F+ZhOuHbgYC6nOipy3XZU9X8e u97WT+6YhzxkLShdosiicNGICvTUn8qRGF2CtrlcJQX6uQl7QvUzUgodAbp9RiAx lD0koIshi91pGJEvyHvpzgOjRmyxnFjeF5FpvPWN+k93DJF41ggiYpuXEfhTK8Yy awAQAKzwf7I7wHp4z5nEiWXg0bzwothuS/OKSm4vAg05nk/9i3D5weaV139lei1P x4ZLaGP9s/pilGsd+3HPPASnQIdWkbnPZuIoZGSwx2eT0tRGUu4HzcbJLd33/FEc hOLdu7uZwnQm//EMIOzESqt+q3vYNIWwxxPFqXWrGQYN -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:33 2026 by rpki-client