This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/B3wonFQq_huZTMz-8wuSey9Fs1I.roa File: B3wonFQq_huZTMz-8wuSey9Fs1I.roa (raw, json) Hash identifier: JnpdkfXYgXXAYDW/V89kghjchKm1vbi2ArxR3XgZ6B0= Subject key identifier: 07:7C:28:9C:54:2A:FE:1B:99:4C:CC:FE:F3:0B:92:7B:2F:45:B3:52 Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d Certificate serial: 019B7E38BF69556F1F748CF7A96253B88DE6 Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/B3wonFQq_huZTMz-8wuSey9Fs1I.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42473 IP address blocks: 185.94.28.0/24 maxlen: 24 202.61.208.0/24 maxlen: 24 202.61.209.0/24 maxlen: 24 202.61.210.0/24 maxlen: 24 202.61.211.0/24 maxlen: 24 202.61.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bf:69:55:6f:1f:74:8c:f7:a9:62:53:b8:8d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d59659636089e32324697629c218da38a2b673d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=077c289c542afe1b994cccfef30b927b2f45b352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:93:b3:f5:f8:be:a3:e4:f7:fb:af:c9:af: a6:e7:90:bb:36:76:81:88:46:7b:88:02:8c:67:64: 61:61:b9:73:92:bf:ba:e3:aa:6e:b7:f3:d4:9e:c5: c7:19:1f:8c:b3:7e:77:b5:90:f9:34:3e:8f:ac:8e: 2e:d3:9e:d4:b2:9f:ac:29:b5:0e:17:4d:92:82:35: b3:10:9a:82:11:4e:72:80:a8:7f:8d:8b:8a:5d:9f: cc:79:59:88:67:a2:af:5b:9a:7f:5a:6d:09:02:9a: f9:71:a0:70:73:11:f1:2a:e0:bf:af:f8:47:04:c6: 9c:cf:c3:b1:5b:bd:13:f6:42:6c:09:88:1d:0e:d7: a1:46:1e:9f:9f:3c:a2:4d:62:35:26:1d:f8:be:fa: 3f:df:18:97:04:db:0b:af:e0:46:5b:09:d2:0d:97: e0:4d:af:c4:c9:c0:97:7b:06:99:65:83:89:50:a3: 17:40:13:9b:1a:f3:86:55:8d:7b:f3:8e:26:55:64: 13:86:17:e1:df:82:0a:2f:19:9b:a9:1b:60:3f:1d: 4b:a6:6f:73:3e:1b:93:9e:36:01:f7:95:8b:f3:b7: fc:4a:8e:ec:12:41:65:63:46:a6:36:ca:13:83:fd: a1:be:4e:44:da:de:9f:48:f7:cf:89:fa:5b:62:45: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7C:28:9C:54:2A:FE:1B:99:4C:CC:FE:F3:0B:92:7B:2F:45:B3:52 X509v3 Authority Key Identifier: keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/B3wonFQq_huZTMz-8wuSey9Fs1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.28.0/24 202.61.208.0-202.61.213.255 Signature Algorithm: sha256WithRSAEncryption ce:ae:42:95:77:36:db:9d:d2:d2:7e:37:39:e1:10:89:71:84: 4c:f4:8b:df:04:4e:7c:1d:c6:32:26:54:d4:5e:a6:d6:d9:9e: 54:83:32:19:06:45:c9:2d:93:fb:5c:66:38:c0:5c:e8:d6:29: 0b:9a:91:2d:6a:33:bc:f4:fc:93:47:41:d1:d0:98:f0:cf:9f: c0:1f:b4:fb:9b:fe:91:cf:ec:06:fd:5b:0e:c2:dc:87:4d:53: 2a:df:84:52:81:75:20:e0:a5:d8:ba:3a:c3:d2:57:ef:bd:45: d4:3d:7b:fb:34:12:b6:c4:8b:fe:7c:3f:6f:10:8c:3d:17:42: 56:83:25:2b:ba:e5:bd:8c:a7:8f:7c:b0:ab:a1:bd:c9:3a:4b: a1:00:fa:92:d2:0d:c2:1d:64:db:e4:d0:1d:59:30:31:8f:5f: 99:e1:dd:b8:0a:e6:1e:be:3b:c0:5c:e5:d7:20:a6:25:2f:e4: 16:69:5b:20:b3:9f:7f:97:2d:80:52:8f:aa:ce:8c:be:0a:ab: 59:f4:ec:e9:51:2b:30:e5:76:e2:8f:bb:dc:94:94:8b:72:24: cf:cc:bc:83:4c:ee:4d:ba:06:71:e5:14:b1:07:f2:d7:0f:d9: bc:54:ac:8a:8b:b9:67:83:71:89:e6:9c:15:1d:26:d4:f0:5b: a1:9c:07:2c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+OL9pVW8fdIz3qWJTuI3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTk2NTk2MzYwODllMzIzMjQ2OTc2MjljMjE4ZGEzOGEy YjY3M2QwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzdjMjg5YzU0MmFmZTFiOTk0Y2NjZmVmMzBiOTI3YjJmNDViMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspiTs/X4vqPk9/uvya+m55C7NnaB iEZ7iAKMZ2RhYblzkr+646put/PUnsXHGR+Ms353tZD5ND6PrI4u057Usp+sKbUO F02SgjWzEJqCEU5ygKh/jYuKXZ/MeVmIZ6KvW5p/Wm0JApr5caBwcxHxKuC/r/hH BMacz8OxW70T9kJsCYgdDtehRh6fnzyiTWI1Jh34vvo/3xiXBNsLr+BGWwnSDZfg Ta/EycCXewaZZYOJUKMXQBObGvOGVY17844mVWQThhfh34IKLxmbqRtgPx1Lpm9z PhuTnjYB95WL87f8So7sEkFlY0amNsoTg/2hvk5E2t6fSPfPifpbYkWY1QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAd8KJxUKv4bmUzM/vMLknsvRbNSMB8GA1UdIwQY MBaAFH1ZZZY2CJ4yMkaXYpwhjaOKK2c9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAt NmMxY2Y3MjVkOGY3LzEvQjN3b25GUXFfaHVaVE16LTh3dVNleTlGczFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAtNmMxY2Y3MjVkOGY3 LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuV4cMAwD BATKPdADBAHKPdQwDQYJKoZIhvcNAQELBQADggEBAM6uQpV3Ntud0tJ+NznhEIlx hEz0i98ETnwdxjImVNReptbZnlSDMhkGRcktk/tcZjjAXOjWKQuakS1qM7z0/JNH QdHQmPDPn8AftPub/pHP7Ab9Ww7C3IdNUyrfhFKBdSDgpdi6OsPSV++9RdQ9e/s0 ErbEi/58P28QjD0XQlaDJSu65b2Mp498sKuhvck6S6EA+pLSDcIdZNvk0B1ZMDGP X5nh3bgK5h6+O8Bc5dcgpiUv5BZpWyCzn3+XLYBSj6rOjL4Kq1n07OlRKzDlduKP u9yUlItyJM/MvINM7k26BnHlFLEH8tcP2bxUrIqLuWeDcYnmnBUdJtTwW6GcByw= -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:07 2026 by rpki-client