This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3fxfGM8By2FOp39Mn-UL61qmEeo.roa File: 3fxfGM8By2FOp39Mn-UL61qmEeo.roa (raw, json) Hash identifier: BhRDqxo+nLTN691h17SRRo2mhl0HXsH9kxryqjIofz4= Subject key identifier: DD:FC:5F:18:CF:01:CB:61:4E:A7:7F:4C:9F:E5:0B:EB:5A:A6:11:EA Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783491ACD46A084823111E1B65292DAE Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3fxfGM8By2FOp39Mn-UL61qmEeo.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210422 IP address blocks: 192.121.210.0/24 maxlen: 24 194.68.41.0/24 maxlen: 24 194.68.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:91:ac:d4:6a:08:48:23:11:1e:1b:65:29:2d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddfc5f18cf01cb614ea77f4c9fe50beb5aa611ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:91:df:0a:1f:c9:aa:54:3c:31:13:85:3a: 83:f9:66:a8:7d:78:6a:dc:bd:ba:3c:c4:40:14:1d: 71:a5:c3:d9:df:f9:21:e0:96:ab:b3:2e:55:eb:89: ef:fc:b6:0e:b4:f2:cc:19:01:b2:76:ec:8c:cf:d4: af:d7:09:9b:31:76:1c:40:b8:d8:06:03:99:a5:05: 69:08:4a:a7:a0:15:7e:18:a6:7a:14:60:78:09:be: 91:00:24:53:90:1e:35:e3:79:8f:1a:79:2d:28:a7: ac:10:a4:85:c0:59:7a:69:2a:82:2a:dc:4c:56:47: 93:0b:ca:a3:be:ca:9f:de:2e:6d:dc:77:0c:c0:b9: 46:a3:f9:13:64:45:14:4d:3c:3e:d6:e9:ab:26:da: 62:b7:da:09:76:74:6f:f0:a0:ae:c9:ab:15:63:e8: 7a:22:e9:da:da:6e:a2:a3:c4:9e:80:6e:15:22:32: 79:aa:16:f0:35:ab:c0:67:ae:d4:25:a3:6b:b4:4e: 89:51:7c:a4:f9:d7:e7:ea:1e:24:8a:2b:5a:6d:6d: 25:21:ce:8e:9a:b0:0e:f3:01:4c:bf:1b:c7:40:55: 7d:e2:b8:16:78:38:f4:04:cc:32:1b:86:ea:f1:74: 5e:22:c1:e3:2e:89:9e:53:63:9e:2e:e0:ca:46:da: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:5F:18:CF:01:CB:61:4E:A7:7F:4C:9F:E5:0B:EB:5A:A6:11:EA X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3fxfGM8By2FOp39Mn-UL61qmEeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.121.210.0/24 194.68.41.0/24 194.68.63.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ac:b0:93:58:2b:01:ca:a0:17:56:1e:18:d9:57:64:57:0d: 15:41:20:a5:25:fd:17:e6:b3:bb:61:21:42:43:8a:40:7e:fc: 9b:fe:49:fd:dd:55:a2:23:08:2a:23:00:53:0d:1f:72:21:6a: 93:a7:87:b8:2e:ab:37:b0:32:0d:d2:5d:70:51:64:a2:41:8d: b0:04:99:53:89:cb:ad:27:ce:c0:12:ba:ef:3a:0a:d4:f3:99: f6:26:5d:91:3b:ed:a8:11:41:bb:57:77:54:8f:65:a0:27:76: 6e:85:7c:15:7b:60:4c:20:f0:01:2f:e3:98:98:8a:ab:fe:e0: b1:f5:8c:ec:20:ea:f6:de:27:37:44:33:cf:a5:4f:14:97:99: d5:d3:c1:be:3b:ca:d5:ae:ff:a3:7c:56:bd:0d:19:45:10:a3: d2:75:24:c9:46:f1:bd:66:38:8e:f0:f4:d0:10:be:43:90:65: 87:0a:13:b2:30:33:22:f3:b5:7a:06:d5:31:5c:e6:f3:fc:94: ee:2b:02:c8:ad:2d:4f:34:b3:fb:22:c3:5f:3e:db:73:c4:1c: 45:8c:24:02:87:2e:c4:4f:dd:2d:2a:f3:e3:93:72:b5:61:b9: 5d:7a:68:61:26:fe:61:67:f5:52:e7:8d:38:08:71:8e:a1:ea: 19:29:16:c2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NJGs1GoISCMRHhtlKS2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGZjNWYxOGNmMDFjYjYxNGVhNzdmNGM5ZmU1MGJlYjVhYTYxMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonCR3wofyapUPDEThTqD+WaofXhq 3L26PMRAFB1xpcPZ3/kh4Jarsy5V64nv/LYOtPLMGQGyduyMz9Sv1wmbMXYcQLjY BgOZpQVpCEqnoBV+GKZ6FGB4Cb6RACRTkB4143mPGnktKKesEKSFwFl6aSqCKtxM VkeTC8qjvsqf3i5t3HcMwLlGo/kTZEUUTTw+1umrJtpit9oJdnRv8KCuyasVY+h6 Iuna2m6io8SegG4VIjJ5qhbwNavAZ67UJaNrtE6JUXyk+dfn6h4kiitabW0lIc6O mrAO8wFMvxvHQFV94rgWeDj0BMwyG4bq8XReIsHjLomeU2OeLuDKRtp0rwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN38XxjPActhTqd/TJ/lC+taphHqMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvM2Z4ZkdNOEJ5MkZPcDM5TW4tVUw2MXFtRWVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwHnSAwQA wkQpAwQAwkQ/MA0GCSqGSIb3DQEBCwUAA4IBAQB0rLCTWCsByqAXVh4Y2VdkVw0V QSClJf0X5rO7YSFCQ4pAfvyb/kn93VWiIwgqIwBTDR9yIWqTp4e4Lqs3sDIN0l1w UWSiQY2wBJlTicutJ87AErrvOgrU85n2Jl2RO+2oEUG7V3dUj2WgJ3ZuhXwVe2BM IPABL+OYmIqr/uCx9YzsIOr23ic3RDPPpU8Ul5nV08G+O8rVrv+jfFa9DRlFEKPS dSTJRvG9ZjiO8PTQEL5DkGWHChOyMDMi87V6BtUxXObz/JTuKwLIrS1PNLP7IsNf PttzxBxFjCQChy7ET90tKvPjk3K1YbldemhhJv5hZ/VS5404CHGOoeoZKRbC -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:42 2026 by rpki-client