This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/3P3-QRL_mRQBI4J541PgUW3JkC8.roa File: 3P3-QRL_mRQBI4J541PgUW3JkC8.roa (raw, json) Hash identifier: UXe72QHNvakdgW1FdgY1L4eDueqV3Q9/yGntSIAIixI= Subject key identifier: DC:FD:FE:41:12:FF:99:14:01:23:82:79:E3:53:E0:51:6D:C9:90:2F Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739 Certificate serial: 019B7A5B666AEE27F901A7826932D72034A4 Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/3P3-QRL_mRQBI4J541PgUW3JkC8.roa Signing time: Thu 01 Jan 2026 16:19:28 +0000 ROA not before: Thu 01 Jan 2026 16:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59642 IP address blocks: 89.18.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:66:6a:ee:27:f9:01:a7:82:69:32:d7:20:34:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcfdfe4112ff991401238279e353e0516dc9902f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:6f:38:9e:12:cb:41:e8:7f:0f:72:b0:8e: 94:39:d5:51:25:50:58:bc:e1:ce:73:77:8b:02:ea: 15:da:9f:87:d0:6f:20:7f:35:61:1a:48:a1:e3:ef: cf:3d:53:0e:f9:bc:3d:aa:f4:6e:f1:51:a2:63:60: d3:07:7a:22:3c:88:80:d9:2d:7d:66:a1:4e:94:fe: 7a:da:bf:3b:0a:3c:78:29:f1:60:df:41:64:67:12: 06:03:4d:8e:fd:a9:15:12:49:ce:71:d3:37:6b:23: cf:9c:b8:85:42:dd:da:c3:4c:57:76:f5:99:b8:75: 4d:78:64:97:5e:28:dd:3a:e8:e8:2b:ad:c9:81:72: c4:af:eb:89:74:be:8d:69:88:d0:5c:12:c5:91:67: d7:a2:32:2d:81:41:57:45:ad:68:00:5d:2b:f1:70: ee:e5:5c:f6:18:4f:e0:26:b9:17:0a:77:51:a0:d3: 6d:b3:fd:39:30:dd:a5:d3:bf:13:59:6a:ec:7c:2f: 91:e5:74:ff:0d:4f:c1:4f:0f:36:01:3d:67:23:ce: 5a:be:bd:50:d1:d7:8a:eb:10:d2:1c:c9:5f:f8:97: 4f:17:5e:a8:93:7e:80:05:b8:ea:3a:df:f4:98:9f: 54:59:76:71:5b:59:ab:24:7c:bc:db:b7:ed:fe:0a: 03:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FD:FE:41:12:FF:99:14:01:23:82:79:E3:53:E0:51:6D:C9:90:2F X509v3 Authority Key Identifier: keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/3P3-QRL_mRQBI4J541PgUW3JkC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.18.56.0/22 Signature Algorithm: sha256WithRSAEncryption 98:a2:ec:63:49:ea:40:1a:15:cc:a9:a1:e4:42:d9:93:52:3c: 5a:24:c4:6a:89:91:b4:e3:2f:ee:ba:17:8b:fd:84:2a:fb:6b: af:c3:d5:b1:d4:b3:48:1d:92:c6:43:1d:06:1a:d8:af:38:1e: 4b:c0:5a:7d:87:96:a1:59:6a:99:b6:b4:2c:c5:66:8a:5a:26: bd:89:9d:bf:b1:09:4f:bc:d7:a8:a4:83:e2:f2:6f:c1:b1:1f: 1d:8c:82:ff:53:41:b7:d4:57:04:9a:03:3e:63:2e:28:b7:55: 03:31:3e:0c:cf:9f:ca:43:ce:80:19:84:11:37:42:6b:ad:78: ee:8d:6b:8f:44:4e:93:05:46:cb:04:72:67:b3:10:2b:88:ac: 7b:a0:88:a0:00:26:f0:6a:ef:d7:8d:33:1a:fc:f2:e7:a6:69: b3:fb:78:be:51:7c:76:71:7c:78:2a:f9:ed:b0:5d:2c:3f:01: 70:06:8b:b4:45:42:47:c7:ca:f7:f4:b7:a4:61:a1:4b:6d:1f: e8:fe:8b:af:a1:e4:34:58:41:66:9a:56:61:e5:72:2c:18:da: d2:33:f4:8b:72:5d:8a:88:99:37:68:6d:f1:b6:1b:2c:3f:2d: 81:c2:87:e9:59:e4:ea:6f:90:a7:43:41:67:56:a8:3b:77:42: 2e:2f:53:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2Zq7if5AaeCaTLXIDSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5 MWQ3MzkwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2ZkZmU0MTEyZmY5OTE0MDEyMzgyNzllMzUzZTA1MTZkYzk5MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9lvOJ4Sy0Hofw9ysI6UOdVRJVBY vOHOc3eLAuoV2p+H0G8gfzVhGkih4+/PPVMO+bw9qvRu8VGiY2DTB3oiPIiA2S19 ZqFOlP562r87Cjx4KfFg30FkZxIGA02O/akVEknOcdM3ayPPnLiFQt3aw0xXdvWZ uHVNeGSXXijdOujoK63JgXLEr+uJdL6NaYjQXBLFkWfXojItgUFXRa1oAF0r8XDu 5Vz2GE/gJrkXCndRoNNts/05MN2l078TWWrsfC+R5XT/DU/BTw82AT1nI85avr1Q 0deK6xDSHMlf+JdPF16ok36ABbjqOt/0mJ9UWXZxW1mrJHy827ft/goD3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNz9/kES/5kUASOCeeNT4FFtyZAvMB8GA1UdIwQY MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt MmIzNGI4NDMzYmI1LzEvM1AzLVFSTF9tUlFCSTRKNTQxUGdVVzNKa0M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1 LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWRI4MA0G CSqGSIb3DQEBCwUAA4IBAQCYouxjSepAGhXMqaHkQtmTUjxaJMRqiZG04y/uuheL /YQq+2uvw9Wx1LNIHZLGQx0GGtivOB5LwFp9h5ahWWqZtrQsxWaKWia9iZ2/sQlP vNeopIPi8m/BsR8djIL/U0G31FcEmgM+Yy4ot1UDMT4Mz5/KQ86AGYQRN0JrrXju jWuPRE6TBUbLBHJnsxAriKx7oIigACbwau/XjTMa/PLnpmmz+3i+UXx2cXx4Kvnt sF0sPwFwBou0RUJHx8r39LekYaFLbR/o/ouvoeQ0WEFmmlZh5XIsGNrSM/SLcl2K iJk3aG3xthssPy2BwofpWeTqb5CnQ0FnVqg7d0IuL1MU -----END CERTIFICATE-----Generated at Sun Jan 25 14:59:17 2026 by rpki-client