This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/3g6ILoE9ejngNxt1ax6rYM1LQ60.roa File: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (raw, json) Hash identifier: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso= Subject key identifier: DE:0E:88:2E:81:3D:7A:39:E0:37:1B:75:6B:1E:AB:60:CD:4B:43:AD Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Certificate serial: 019B7DCB637EBD04FA8E00F0DFCFC005754D Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/3g6ILoE9ejngNxt1ax6rYM1LQ60.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50819 IP address blocks: 185.18.226.0/23 maxlen: 23 185.102.88.0/22 maxlen: 22 2a0c:eec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:63:7e:bd:04:fa:8e:00:f0:df:cf:c0:05:75:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de0e882e813d7a39e0371b756b1eab60cd4b43ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:9d:e3:7f:73:9e:ea:18:28:71:93:69:d5: 31:c9:4c:5e:b9:b2:28:0d:7f:26:6c:28:f8:e0:19: 60:67:c3:fd:58:8a:84:76:36:d3:9a:28:50:4e:25: 9d:08:ea:ea:dc:6a:31:ab:90:4a:50:ae:87:b0:ba: e1:3d:37:a7:fd:73:5b:0d:c6:be:d1:13:a6:4f:ec: e7:c3:1e:4d:2d:9b:a8:8d:d5:f1:ba:35:b5:33:25: 2b:73:68:b3:51:61:70:ea:f3:67:d3:bf:d8:6b:c0: 1e:59:d2:dc:1a:e4:3e:34:85:45:28:84:30:1a:65: 62:b5:01:0d:a4:34:29:55:e3:c4:be:5e:14:28:ee: fc:b6:c1:ea:4c:82:a3:41:3d:a5:c7:dd:5f:b7:7c: f0:bf:96:ae:57:98:f3:dc:7c:4a:91:b9:fa:aa:c9: b6:da:15:0a:3e:e5:f3:06:40:1e:67:fd:e4:94:1a: 38:ca:8c:0b:3a:72:ac:44:de:22:da:e0:78:f2:a2: bc:b9:1e:97:6e:91:38:64:a1:e5:5e:04:a9:1f:a9: 41:35:81:aa:36:b5:93:f5:d2:fd:0a:f5:fc:ed:05: 62:6e:7b:7f:22:26:de:0c:55:f7:67:53:cb:0f:02: 1f:de:f6:0c:9e:d5:dd:3a:df:6b:47:98:e3:e6:02: 51:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0E:88:2E:81:3D:7A:39:E0:37:1B:75:6B:1E:AB:60:CD:4B:43:AD X509v3 Authority Key Identifier: keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/3g6ILoE9ejngNxt1ax6rYM1LQ60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.226.0/23 185.102.88.0/22 IPv6: 2a0c:eec0::/29 Signature Algorithm: sha256WithRSAEncryption b2:c3:8a:9b:50:eb:04:6d:c0:d6:cb:d8:e6:4f:5b:51:a1:ad: 51:4d:36:6e:f3:9d:31:ef:b8:ca:c5:96:64:c9:db:4c:2a:73: cc:28:8e:58:c5:e9:b3:82:c2:d6:94:39:e8:30:e5:0e:4b:75: 23:3b:38:ec:f3:6f:51:37:8a:81:f5:e7:63:ea:a0:69:11:63: 74:b0:8d:0b:1c:a5:12:6a:29:cb:e7:1a:f3:bd:b3:53:5c:46: 6a:3c:34:73:57:6d:ec:f2:f8:b0:28:37:b6:84:30:be:d7:91: 7f:1d:16:91:83:59:75:aa:e1:14:94:d1:c8:38:26:23:26:cf: e9:f6:1c:c7:4f:44:76:b2:7b:32:7d:f7:59:99:5f:71:39:91: b3:9c:9f:4f:7e:0b:80:fc:8c:f3:69:87:fc:81:73:83:f1:2b: 58:11:1d:b9:3f:01:8c:aa:6d:7b:e2:ba:5a:68:76:20:fe:a8: be:93:bb:cb:d5:63:52:52:09:0b:c9:7b:a2:d5:41:d2:64:9b: fe:b4:8e:f0:ee:99:96:5b:a7:7c:af:4b:48:72:1f:88:8a:70: 58:26:fc:d7:3a:ec:b2:27:52:62:f8:ca:e4:3b:b4:db:d5:fe: 1f:3c:0c:ec:3b:9e:ce:44:ed:f1:af:c5:ed:6d:8a:0c:96:b7: b7:60:7c:95 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9y2N+vQT6jgDw38/ABXVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj MzYyZGEwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTBlODgyZTgxM2Q3YTM5ZTAzNzFiNzU2YjFlYWI2MGNkNGI0M2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsed439znuoYKHGTadUxyUxeubIo DX8mbCj44BlgZ8P9WIqEdjbTmihQTiWdCOrq3Goxq5BKUK6HsLrhPTen/XNbDca+ 0ROmT+znwx5NLZuojdXxujW1MyUrc2izUWFw6vNn07/Ya8AeWdLcGuQ+NIVFKIQw GmVitQENpDQpVePEvl4UKO78tsHqTIKjQT2lx91ft3zwv5auV5jz3HxKkbn6qsm2 2hUKPuXzBkAeZ/3klBo4yowLOnKsRN4i2uB48qK8uR6XbpE4ZKHlXgSpH6lBNYGq NrWT9dL9CvX87QVibnt/IibeDFX3Z1PLDwIf3vYMntXdOt9rR5jj5gJRsQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN4OiC6BPXo54DcbdWseq2DNS0OtMB8GA1UdIwQY MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt Mzg2NjE3YTY2NGZlLzEvM2c2SUxvRTllam5nTnh0MWF4NnJZTTFMUTYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuRLiAwQC uWZYMA0EAgACMAcDBQMqDO7AMA0GCSqGSIb3DQEBCwUAA4IBAQCyw4qbUOsEbcDW y9jmT1tRoa1RTTZu850x77jKxZZkydtMKnPMKI5YxemzgsLWlDnoMOUOS3UjOzjs 829RN4qB9edj6qBpEWN0sI0LHKUSainL5xrzvbNTXEZqPDRzV23s8viwKDe2hDC+ 15F/HRaRg1l1quEUlNHIOCYjJs/p9hzHT0R2snsyffdZmV9xOZGznJ9PfguA/Izz aYf8gXOD8StYER25PwGMqm174rpaaHYg/qi+k7vL1WNSUgkLyXui1UHSZJv+tI7w 7pmWW6d8r0tIch+IinBYJvzXOuyyJ1Ji+MrkO7Tb1f4fPAzsO57ORO3xr8XtbYoM lre3YHyV -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:39 2026 by rpki-client