This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa File: 3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa (raw, json) Hash identifier: Sh3IYzZ1zQ9r12wJte75WaIR+93O150+ToROD8zLC3s= Subject key identifier: DD:DF:1C:44:2B:D9:82:4D:A3:64:9C:33:46:AC:23:27:B9:0E:1B:D4 Certificate issuer: /CN=8a552dd8695d483d47ce4cf845b906b175276a5c Certificate serial: 019B7A5A57B431168BAC39DA0B1F1ADCF407 Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa Signing time: Thu 01 Jan 2026 16:18:19 +0000 ROA not before: Thu 01 Jan 2026 16:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215804 IP address blocks: 94.156.67.0/24 maxlen: 24 2a0d:2b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:57:b4:31:16:8b:ac:39:da:0b:1f:1a:dc:f4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c Validity Not Before: Jan 1 16:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dddf1c442bd9824da3649c3346ac2327b90e1bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:1a:2b:cd:1d:93:fc:6e:c3:15:bf:91:93: ec:cb:39:3a:e1:42:ae:40:d7:59:2e:25:1a:57:93: 50:32:a6:07:21:5a:68:42:77:5b:6d:0f:88:7c:bc: a9:1a:53:56:a9:4d:83:75:8e:ad:08:68:1e:c1:54: 1c:da:70:e5:c9:7c:bd:e0:8b:2f:8e:55:82:6c:9d: e4:8e:74:cd:c0:0b:55:4f:4c:ec:23:60:b8:2b:f7: ee:68:63:ed:90:29:b2:5e:8f:b3:af:5e:a8:47:1e: 32:51:a0:a7:06:c0:3f:c8:4c:d4:fb:73:74:ef:2f: 02:cc:44:21:dc:89:ce:e4:91:e1:d3:c4:70:b6:2c: 5b:77:6d:55:62:e1:ac:a4:aa:4e:29:b7:11:f4:fc: 28:16:d2:e8:bd:32:12:f5:de:ac:e6:3b:34:2a:e2: 25:25:bb:ff:6c:d6:13:6a:53:16:2e:15:33:87:ef: bc:66:bc:98:4d:a4:df:e0:a8:6f:56:70:d2:20:66: 39:b9:06:13:18:16:21:8d:1f:1a:d9:ed:4b:6a:cc: 75:b0:6b:b5:6b:71:15:e6:51:c0:79:b5:de:de:6a: 70:0f:f8:0d:70:49:c9:1c:dd:de:e0:92:14:50:38: e9:93:f4:99:b3:a7:23:65:73:f6:15:44:9b:ba:78: c2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DF:1C:44:2B:D9:82:4D:A3:64:9C:33:46:AC:23:27:B9:0E:1B:D4 X509v3 Authority Key Identifier: keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/3d8cRCvZgk2jZJwzRqwjJ7kOG9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.67.0/24 IPv6: 2a0d:2b00::/29 Signature Algorithm: sha256WithRSAEncryption bd:26:22:20:d1:b7:62:86:ab:01:ec:f1:af:13:d6:c5:0e:b0: 94:fd:fb:6e:cd:c1:ec:0b:8b:ab:12:e5:fe:d2:81:21:1b:af: e6:6e:97:80:71:d5:45:81:c1:5d:2f:7f:a9:07:43:a8:84:87: ff:b4:d6:4a:47:c8:bf:f4:cc:02:51:2d:aa:a4:e1:b1:75:bf: 83:d4:d0:10:88:54:ab:1d:f0:18:fc:cb:d7:03:66:eb:7a:a1: f3:8a:4a:02:b9:51:f6:7f:a9:88:f8:0a:bb:b7:b3:db:e0:1b: 46:85:f5:ba:90:4b:7b:7e:d9:13:fe:50:79:e2:51:56:f0:fe: 40:f7:bb:81:47:9f:21:6a:33:fd:8e:d0:4a:ef:73:6c:2c:bb: 12:f4:97:92:65:8d:2c:83:50:62:0d:90:65:0a:e4:96:aa:c8: 21:b4:4b:96:f2:52:04:5c:04:59:c3:17:14:49:a0:b8:13:4f: 14:98:0a:0c:af:18:09:61:e0:47:7c:18:44:a3:22:6d:02:26: 16:86:d4:12:b3:db:74:4e:6d:36:33:d9:ff:ed:b3:8f:f4:00: f8:f5:92:d8:4e:f5:40:1e:5c:75:53:3c:fd:f0:e5:63:2a:45: d2:53:19:6c:de:b9:61:df:29:48:8c:d9:32:b4:4d:aa:33:41: 5b:0f:24:ec -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wle0MRaLrDnaCx8a3PQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTUyZGQ4Njk1ZDQ4M2Q0N2NlNGNmODQ1YjkwNmIxNzUy NzZhNWMwHhcNMjYwMTAxMTYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGRmMWM0NDJiZDk4MjRkYTM2NDljMzM0NmFjMjMyN2I5MGUxYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU0aK80dk/xuwxW/kZPsyzk64UKu QNdZLiUaV5NQMqYHIVpoQndbbQ+IfLypGlNWqU2DdY6tCGgewVQc2nDlyXy94Isv jlWCbJ3kjnTNwAtVT0zsI2C4K/fuaGPtkCmyXo+zr16oRx4yUaCnBsA/yEzU+3N0 7y8CzEQh3InO5JHh08Rwtixbd21VYuGspKpOKbcR9PwoFtLovTIS9d6s5js0KuIl Jbv/bNYTalMWLhUzh++8ZryYTaTf4KhvVnDSIGY5uQYTGBYhjR8a2e1Lasx1sGu1 a3EV5lHAebXe3mpwD/gNcEnJHN3e4JIUUDjpk/SZs6cjZXP2FUSbunjC3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN3fHEQr2YJNo2ScM0asIye5DhvUMB8GA1UdIwQY MBaAFIpVLdhpXUg9R85M+EW5BrF1J2pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MjA2MjEtOThiOS00OTYxLWEyMzAt MjliM2YwMjcyYjlmLzEvM2Q4Y1JDdlpnazJqWkp3elJxd2pKN2tPRzlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MjA2MjEtOThiOS00OTYxLWEyMzAtMjliM2YwMjcyYjlm LzEvaWxVdDJHbGRTRDFIemt6NFJia0dzWFVuYWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXpxDMA0E AgACMAcDBQMqDSsAMA0GCSqGSIb3DQEBCwUAA4IBAQC9JiIg0bdihqsB7PGvE9bF DrCU/ftuzcHsC4urEuX+0oEhG6/mbpeAcdVFgcFdL3+pB0OohIf/tNZKR8i/9MwC US2qpOGxdb+D1NAQiFSrHfAY/MvXA2breqHzikoCuVH2f6mI+Aq7t7Pb4BtGhfW6 kEt7ftkT/lB54lFW8P5A97uBR58hajP9jtBK73NsLLsS9JeSZY0sg1BiDZBlCuSW qsghtEuW8lIEXARZwxcUSaC4E08UmAoMrxgJYeBHfBhEoyJtAiYWhtQSs9t0Tm02 M9n/7bOP9AD49ZLYTvVAHlx1Uzz98OVjKkXSUxls3rlh3ylIjNkytE2qM0FbDyTs -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:29 2026 by rpki-client