This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/3U7B-AnDLcxVr4hQgcRtH3bY-Mc.roa File: 3U7B-AnDLcxVr4hQgcRtH3bY-Mc.roa (raw, json) Hash identifier: 3EM7kaqylIIwfXdPOEw0QjuIVj1MmMgs2rs+igLT96s= Subject key identifier: DD:4E:C1:F8:09:C3:2D:CC:55:AF:88:50:81:C4:6D:1F:76:D8:F8:C7 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019B7CEDE6F81B7D915AFFCDFC8D222CD286 Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/3U7B-AnDLcxVr4hQgcRtH3bY-Mc.roa Signing time: Fri 02 Jan 2026 04:18:44 +0000 ROA not before: Fri 02 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204798 IP address blocks: 185.239.176.0/24 maxlen: 24 185.239.177.0/24 maxlen: 24 185.239.178.0/24 maxlen: 24 185.239.179.0/24 maxlen: 24 2a0f:c9c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e6:f8:1b:7d:91:5a:ff:cd:fc:8d:22:2c:d2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd4ec1f809c32dcc55af885081c46d1f76d8f8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:16:80:4e:23:e9:66:af:7b:77:15:48:8c: 0b:02:46:87:25:78:4e:79:b0:df:70:2b:4f:9b:09: a6:d9:39:67:8e:1b:0c:9e:00:4b:30:0b:b1:40:dc: 65:29:c1:94:dc:bb:df:92:b9:1f:eb:5e:27:26:15: 68:4a:21:24:85:f3:37:e5:43:f6:fa:45:10:da:be: fd:83:d3:dc:c6:3c:9d:5a:41:bd:c1:c8:c5:85:33: 06:b9:64:70:d5:01:ea:31:f4:98:0d:f1:c2:33:cf: 4c:1d:9b:e4:ba:3f:12:b1:98:84:06:c4:cf:3f:9a: d9:c9:99:e5:54:3c:6b:a1:71:1e:14:35:96:d2:a6: e0:02:eb:66:89:0a:46:7c:48:0b:ad:50:2f:3e:e9: 00:28:47:51:7c:86:4b:b4:5f:07:d3:04:48:23:af: d6:a3:7b:42:28:48:34:c7:e3:05:35:69:60:5c:5e: 33:5d:7b:24:16:df:14:fe:59:7d:e3:76:22:38:05: 6e:ae:09:83:d7:1b:fb:a2:89:d6:3f:80:25:7e:f9: bf:e2:ff:4e:b0:3c:97:f2:3a:26:7c:98:e9:5f:ee: ed:0e:cd:96:99:d6:da:bf:4d:74:0d:f1:e9:7c:c0: 1a:44:5f:67:fd:7f:fd:ed:05:37:c0:11:30:a1:00: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4E:C1:F8:09:C3:2D:CC:55:AF:88:50:81:C4:6D:1F:76:D8:F8:C7 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/3U7B-AnDLcxVr4hQgcRtH3bY-Mc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.176.0/22 IPv6: 2a0f:c9c0::/29 Signature Algorithm: sha256WithRSAEncryption 3e:e8:6b:c3:33:fc:ee:9d:1a:d9:82:b9:eb:08:00:0d:d2:c8: 64:6a:77:e0:07:ce:9f:75:5c:58:d2:a3:53:32:2f:a7:cc:be: 12:32:b7:62:41:bd:f0:08:3c:82:38:bf:aa:c7:f6:64:89:68: 5d:5e:67:4b:4a:ca:09:ff:0c:f6:1f:c4:68:3a:b4:06:b6:35: 25:aa:10:31:39:87:05:3d:b6:e6:48:c4:74:8b:50:a5:a2:50: f8:07:59:81:a8:c9:d9:14:45:63:bd:08:cf:33:40:32:85:ac: 41:84:4a:9e:97:79:33:d2:34:46:16:1d:49:bd:fe:36:71:73: 65:1b:fd:19:c4:74:23:85:9c:13:79:21:f7:b3:2a:1c:df:71: df:52:15:d4:04:0c:f4:12:54:d4:84:f1:52:40:b4:a6:b7:9e: b5:77:46:4a:2b:dc:8d:f1:0f:9c:04:d3:9e:98:81:ab:83:57: 87:a5:3e:2d:9e:e6:93:23:be:3e:6b:87:63:f5:3a:bd:b4:3c: 3b:ab:da:99:55:05:5f:53:3f:5c:d2:22:53:b8:63:29:62:da: c0:9c:a7:56:d2:a9:7c:6c:6b:ed:bf:09:44:ae:ef:6e:dd:b4: 4a:76:a6:bd:7b:cd:7f:8e:68:16:ec:0d:50:49:c8:1a:d5:29: e9:59:70:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87eb4G32RWv/N/I0iLNKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDRlYzFmODA5YzMyZGNjNTVhZjg4NTA4MWM0NmQxZjc2ZDhmOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG0WgE4j6Wave3cVSIwLAkaHJXhO ebDfcCtPmwmm2TlnjhsMngBLMAuxQNxlKcGU3Lvfkrkf614nJhVoSiEkhfM35UP2 +kUQ2r79g9PcxjydWkG9wcjFhTMGuWRw1QHqMfSYDfHCM89MHZvkuj8SsZiEBsTP P5rZyZnlVDxroXEeFDWW0qbgAutmiQpGfEgLrVAvPukAKEdRfIZLtF8H0wRII6/W o3tCKEg0x+MFNWlgXF4zXXskFt8U/ll943YiOAVurgmD1xv7oonWP4Alfvm/4v9O sDyX8jomfJjpX+7tDs2Wmdbav010DfHpfMAaRF9n/X/97QU3wBEwoQAMUwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN1OwfgJwy3MVa+IUIHEbR922PjHMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvM1U3Qi1BbkRMY3hWcjRoUWdjUnRIM2JZLU1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCue+wMA0E AgACMAcDBQMqD8nAMA0GCSqGSIb3DQEBCwUAA4IBAQA+6GvDM/zunRrZgrnrCAAN 0shkanfgB86fdVxY0qNTMi+nzL4SMrdiQb3wCDyCOL+qx/ZkiWhdXmdLSsoJ/wz2 H8RoOrQGtjUlqhAxOYcFPbbmSMR0i1ClolD4B1mBqMnZFEVjvQjPM0AyhaxBhEqe l3kz0jRGFh1Jvf42cXNlG/0ZxHQjhZwTeSH3syoc33HfUhXUBAz0ElTUhPFSQLSm t561d0ZKK9yN8Q+cBNOemIGrg1eHpT4tnuaTI74+a4dj9Tq9tDw7q9qZVQVfUz9c 0iJTuGMpYtrAnKdW0ql8bGvtvwlEru9u3bRKdqa9e81/jmgW7A1QScga1SnpWXB8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:22:12 2026 by rpki-client