This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/3cJyWq-tBxGFG7u2mJLWK8AgYnM.roa File: 3cJyWq-tBxGFG7u2mJLWK8AgYnM.roa (raw, json) Hash identifier: dC1Jmhk6Q3zkT4ET8SP9YRaPacsXX6m/6++3eHhj2g0= Subject key identifier: DD:C2:72:5A:AF:AD:07:11:85:1B:BB:B6:98:92:D6:2B:C0:20:62:73 Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751 Certificate serial: 019B7C11E5265D8F865C8A6644C47839B592 Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/3cJyWq-tBxGFG7u2mJLWK8AgYnM.roa Signing time: Fri 02 Jan 2026 00:18:26 +0000 ROA not before: Fri 02 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8311 IP address blocks: 80.255.117.0/24 maxlen: 24 80.255.118.0/24 maxlen: 24 185.84.116.0/22 maxlen: 24 185.132.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e5:26:5d:8f:86:5c:8a:66:44:c4:78:39:b5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751 Validity Not Before: Jan 2 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddc2725aafad0711851bbbb69892d62bc0206273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:10:32:6d:0f:43:62:69:82:07:fc:65:1e: 8a:f4:f9:f1:f5:79:db:c7:57:55:7a:ac:64:90:87: de:c0:84:61:d0:25:76:5c:07:56:23:bc:34:bf:e6: 32:4e:88:a2:92:f4:ac:1d:f1:0d:7c:68:a8:05:0b: 95:f2:d8:0b:88:e6:9e:03:7b:82:ec:e8:d2:76:db: 03:c3:56:d5:47:e6:56:e2:99:44:ab:c9:3c:00:d4: 94:f9:2d:05:16:75:9f:31:f4:1e:de:54:6a:43:22: 4a:14:bb:2e:dc:e4:fe:4c:81:be:9c:c7:aa:6f:fc: cc:82:49:67:7d:47:41:d7:87:66:11:52:73:65:1e: 6a:1c:24:90:d4:73:26:3d:c8:c7:be:48:c6:0c:cc: 92:49:c4:90:91:6d:73:5c:a9:cf:6f:cd:46:6d:3c: b7:5a:1e:32:07:e3:22:d9:dd:5d:9e:cd:ea:ec:8d: fe:5a:b4:80:5e:1a:c1:d6:d5:cb:2e:88:ae:2b:ff: 58:2e:ce:ee:ab:44:af:f2:e6:55:76:ee:9a:18:c8: 40:cf:c5:3c:c9:75:39:d8:a6:49:c4:73:06:c8:26: 1e:3b:af:b8:45:79:ef:b6:7f:a3:18:81:22:9d:c1: 13:78:fc:c8:31:6e:33:68:f7:72:51:7f:ea:a9:83: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C2:72:5A:AF:AD:07:11:85:1B:BB:B6:98:92:D6:2B:C0:20:62:73 X509v3 Authority Key Identifier: keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/3cJyWq-tBxGFG7u2mJLWK8AgYnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.255.117.0-80.255.118.255 185.84.116.0/22 185.132.188.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:e7:04:96:39:78:dc:67:42:9e:95:23:61:d9:a3:e1:8e:d8: c6:b6:96:11:d3:35:82:f4:e3:c6:cd:18:fd:1b:bc:f0:e1:cc: d0:1c:b3:16:77:d5:ee:20:9f:7a:97:a6:13:85:5b:74:74:23: b9:60:c1:99:07:ed:d9:af:95:69:c5:41:86:91:f8:17:00:c3: 5a:42:77:75:fc:7a:19:e3:26:f0:1c:41:87:13:b3:94:75:ad: df:b6:27:41:bb:8c:18:b9:e6:48:dd:b9:c3:99:6e:16:36:e5: a4:86:4b:ea:18:63:bf:14:3f:c3:88:5a:85:d7:d6:d9:ef:2f: a2:9d:65:19:ca:9d:98:d8:39:f7:5d:fa:1c:cd:f7:0a:2c:ed: 1a:0d:11:f4:44:f4:12:e2:93:35:4a:cb:06:05:80:e2:b8:27: f5:71:ec:20:25:55:e6:83:13:7e:ed:8a:bc:f5:bc:fa:4f:fa: 0c:d0:a8:94:63:b3:b3:13:65:5a:22:79:34:cf:d6:28:58:8f: 00:6f:44:81:ea:99:34:94:c2:13:74:64:a9:e6:79:d4:79:d3: 07:d8:2f:29:78:3a:ad:50:db:9f:df:d8:c3:c6:ec:7b:78:13: a6:d2:7d:19:83:c1:8d:18:bf:54:2c:db:3c:f2:39:d5:b9:e8: 66:8c:28:a5 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8EeUmXY+GXIpmRMR4ObWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTVlMDUzM2VmYWE1NjI0ZjUzOGI5MmVkMWE5NzNmZWZm ODk3NTEwHhcNMjYwMTAyMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGMyNzI1YWFmYWQwNzExODUxYmJiYjY5ODkyZDYyYmMwMjA2MjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNsQMm0PQ2Jpggf8ZR6K9Pnx9Xnb x1dVeqxkkIfewIRh0CV2XAdWI7w0v+YyToiikvSsHfENfGioBQuV8tgLiOaeA3uC 7OjSdtsDw1bVR+ZW4plEq8k8ANSU+S0FFnWfMfQe3lRqQyJKFLsu3OT+TIG+nMeq b/zMgklnfUdB14dmEVJzZR5qHCSQ1HMmPcjHvkjGDMySScSQkW1zXKnPb81GbTy3 Wh4yB+Mi2d1dns3q7I3+WrSAXhrB1tXLLoiuK/9YLs7uq0Sv8uZVdu6aGMhAz8U8 yXU52KZJxHMGyCYeO6+4RXnvtn+jGIEincETePzIMW4zaPdyUX/qqYMd9wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFN3CclqvrQcRhRu7tpiS1ivAIGJzMB8GA1UdIwQY MBaAFPxV4FM++qViT1OLku0alz/v+JdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODIt YTUyODYyYjQ0NTYzLzEvM2NKeVdxLXRCeEdGRzd1Mm1KTFdLOEFnWW5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODItYTUyODYyYjQ0NTYz LzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABQ/3UD BABQ/3YDBAK5VHQDBAG5hLwwDQYJKoZIhvcNAQELBQADggEBAB3nBJY5eNxnQp6V I2HZo+GO2Ma2lhHTNYL048bNGP0bvPDhzNAcsxZ31e4gn3qXphOFW3R0I7lgwZkH 7dmvlWnFQYaR+BcAw1pCd3X8ehnjJvAcQYcTs5R1rd+2J0G7jBi55kjducOZbhY2 5aSGS+oYY78UP8OIWoXX1tnvL6KdZRnKnZjYOfdd+hzN9wos7RoNEfRE9BLikzVK ywYFgOK4J/Vx7CAlVeaDE37tirz1vPpP+gzQqJRjs7MTZVoieTTP1ihYjwBvRIHq mTSUwhN0ZKnmedR50wfYLyl4Oq1Q25/f2MPG7Ht4E6bSfRmDwY0Yv1Qs2zzyOdW5 6GaMKKU= -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:43 2026 by rpki-client