This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/RB3MCZgDbeMI6s-D2_JUTZ_rqbY.roa File: RB3MCZgDbeMI6s-D2_JUTZ_rqbY.roa (raw, json) Hash identifier: JrGHevSUwFCGVeEzLDEb8HtCJMbEOdcnxPcVOLqyOAc= Subject key identifier: 44:1D:CC:09:98:03:6D:E3:08:EA:CF:83:DB:F2:54:4D:9F:EB:A9:B6 Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94 Certificate serial: 019B77C6E8B60E6F2CA67BC76E91DDF2973F Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/RB3MCZgDbeMI6s-D2_JUTZ_rqbY.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199669 IP address blocks: 46.29.118.0/23 maxlen: 24 91.109.200.0/21 maxlen: 24 93.183.112.0/24 maxlen: 24 185.10.44.0/22 maxlen: 24 185.10.44.0/24 maxlen: 24 185.195.170.0/23 maxlen: 24 2a03:ec0::/48 maxlen: 64 2a03:ec0:1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e8:b6:0e:6f:2c:a6:7b:c7:6e:91:dd:f2:97:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=441dcc0998036de308eacf83dbf2544d9feba9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:73:2e:c3:fd:de:e6:8e:a2:f1:33:e0:a4: 73:97:bd:d6:c3:e6:81:db:90:93:59:e2:dc:eb:74: c8:e6:1e:03:a3:21:ab:56:5c:75:f1:75:d9:b9:76: 01:82:49:d0:2d:44:e0:1f:ed:ea:b3:b8:a6:2c:08: 1c:8f:98:54:c9:31:b0:c3:ba:a3:31:37:94:12:e3: a1:e6:3a:e9:4c:20:36:2a:93:56:28:88:42:ce:a7: 57:e5:ec:68:6a:50:55:f0:d1:1e:ae:a8:b1:18:3d: 9e:ed:fa:ee:79:51:94:df:8b:de:59:5c:f4:91:95: 8b:71:87:6e:37:a0:87:0f:9a:93:1f:ba:91:dd:a1: b1:6b:ac:bf:48:6d:86:96:d4:af:b1:bf:d6:22:80: 25:e9:35:55:47:7f:5d:ce:8c:f1:42:6a:b7:39:bb: d2:20:ea:f6:b8:1b:f6:46:7f:0a:31:cf:ec:af:67: a1:30:4c:53:e4:18:9d:79:5b:d9:4a:8e:b9:a8:d7: 23:e6:fa:e7:b8:f8:6e:69:d9:7f:49:8c:69:8e:86: 0f:13:db:81:14:9b:49:84:0b:75:03:20:73:22:8e: 71:98:94:1e:c2:5d:75:37:f2:96:cb:4c:16:d2:d8: 6a:72:2d:4d:63:11:84:ce:62:be:19:93:ba:a7:3a: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1D:CC:09:98:03:6D:E3:08:EA:CF:83:DB:F2:54:4D:9F:EB:A9:B6 X509v3 Authority Key Identifier: keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/RB3MCZgDbeMI6s-D2_JUTZ_rqbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.118.0/23 91.109.200.0/21 93.183.112.0/24 185.10.44.0/22 185.195.170.0/23 IPv6: 2a03:ec0::/47 Signature Algorithm: sha256WithRSAEncryption 68:b2:74:7c:63:6f:07:1e:c5:33:e4:e1:b6:d1:56:bc:d6:c5: c2:1c:40:05:79:c6:f7:46:1f:ad:5d:b3:55:4f:d3:e3:90:ab: 44:a5:29:20:3b:aa:99:a0:32:dc:0c:b7:6c:49:7c:d1:d4:64: 7e:5b:68:f6:bf:9e:3c:ba:f3:30:8e:f3:67:50:0a:c9:4e:e9: 02:ea:72:ea:9d:7d:87:40:c9:82:ce:ef:96:25:c2:13:20:8b: 7d:d0:c8:5d:9b:a8:66:5b:c1:9b:38:8c:0f:a5:a4:2b:2e:39: ee:37:4f:e2:5f:b7:b3:58:34:b0:db:12:24:bd:a3:2a:66:c3: 84:ec:d5:c4:77:dc:26:c7:40:c7:18:0e:fd:05:2e:77:88:0b: 4b:99:f3:e8:e4:16:32:13:7f:b9:67:a2:67:43:be:cf:4e:63: 6e:4f:8d:d4:56:03:3c:73:08:f7:4e:ad:5f:5a:95:72:5f:97: 24:9e:b8:bd:4a:85:49:97:77:39:5f:b7:08:ca:21:66:37:76: 56:34:61:86:91:30:2f:bb:6e:44:de:ef:8b:e4:0a:e6:ce:71: fd:53:91:98:f1:48:a4:3f:c8:bd:a3:48:ff:9b:01:72:aa:8a: eb:e9:24:0b:29:13:42:a2:d3:d6:d8:c1:7a:04:6c:07:44:e3: 64:59:72:3a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt3xui2Dm8spnvHbpHd8pc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2 ZWFjOTQwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDFkY2MwOTk4MDM2ZGUzMDhlYWNmODNkYmYyNTQ0ZDlmZWJhOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLpzLsP93uaOovEz4KRzl73Ww+aB 25CTWeLc63TI5h4DoyGrVlx18XXZuXYBgknQLUTgH+3qs7imLAgcj5hUyTGww7qj MTeUEuOh5jrpTCA2KpNWKIhCzqdX5exoalBV8NEerqixGD2e7frueVGU34veWVz0 kZWLcYduN6CHD5qTH7qR3aGxa6y/SG2GltSvsb/WIoAl6TVVR39dzozxQmq3ObvS IOr2uBv2Rn8KMc/sr2ehMExT5BideVvZSo65qNcj5vrnuPhuadl/SYxpjoYPE9uB FJtJhAt1AyBzIo5xmJQewl11N/KWy0wW0thqci1NYxGEzmK+GZO6pzrONwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFEQdzAmYA23jCOrPg9vyVE2f66m2MB8GA1UdIwQY MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt ZjhlNWIyZDg2ODBjLzEvUkIzTUNaZ0RiZU1JNnMtRDJfSlVUWl9ycWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQBLh12AwQD W23IAwQAXbdwAwQCuQosAwQBucOqMA8EAgACMAkDBwEqAw7AAAAwDQYJKoZIhvcN AQELBQADggEBAGiydHxjbwcexTPk4bbRVrzWxcIcQAV5xvdGH61ds1VP0+OQq0Sl KSA7qpmgMtwMt2xJfNHUZH5baPa/njy68zCO82dQCslO6QLqcuqdfYdAyYLO75Yl whMgi33QyF2bqGZbwZs4jA+lpCsuOe43T+Jft7NYNLDbEiS9oypmw4Ts1cR33CbH QMcYDv0FLneIC0uZ8+jkFjITf7lnomdDvs9OY25PjdRWAzxzCPdOrV9alXJflySe uL1KhUmXdzlftwjKIWY3dlY0YYaRMC+7bkTe74vkCubOcf1TkZjxSKQ/yL2jSP+b AXKqiuvpJAspE0Ki09bYwXoEbAdE42RZcjo= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:34 2026 by rpki-client