This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/3fB2Cb_YDCoTxRPopF6ntUsOYvM.roa File: 3fB2Cb_YDCoTxRPopF6ntUsOYvM.roa (raw, json) Hash identifier: Yh+GwDYWTXqILjrQtSW4WDz1SsYDHWVx42txs/Q/i+I= Subject key identifier: DD:F0:76:09:BF:D8:0C:2A:13:C5:13:E8:A4:5E:A7:B5:4B:0E:62:F3 Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5 Certificate serial: 019B7EA6B8C1D936F3471E159C91E91FD59D Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/3fB2Cb_YDCoTxRPopF6ntUsOYvM.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272809 IP address blocks: 82.86.64.0/22 maxlen: 22 82.86.64.0/24 maxlen: 24 82.86.65.0/24 maxlen: 24 82.86.66.0/24 maxlen: 24 82.86.67.0/24 maxlen: 24 82.86.68.0/22 maxlen: 22 82.86.68.0/24 maxlen: 24 82.86.69.0/24 maxlen: 24 82.86.70.0/24 maxlen: 24 82.86.71.0/24 maxlen: 24 82.86.72.0/22 maxlen: 22 82.86.72.0/24 maxlen: 24 82.86.73.0/24 maxlen: 24 82.86.74.0/24 maxlen: 24 82.86.75.0/24 maxlen: 24 82.86.76.0/22 maxlen: 22 82.86.76.0/24 maxlen: 24 82.86.77.0/24 maxlen: 24 82.86.78.0/24 maxlen: 24 82.86.79.0/24 maxlen: 24 82.86.80.0/22 maxlen: 22 82.86.80.0/24 maxlen: 24 82.86.81.0/24 maxlen: 24 82.86.82.0/24 maxlen: 24 82.86.83.0/24 maxlen: 24 82.86.84.0/22 maxlen: 22 82.86.84.0/24 maxlen: 24 82.86.85.0/24 maxlen: 24 82.86.86.0/24 maxlen: 24 82.86.87.0/24 maxlen: 24 82.86.88.0/22 maxlen: 22 82.86.88.0/24 maxlen: 24 82.86.89.0/24 maxlen: 24 82.86.90.0/24 maxlen: 24 82.86.91.0/24 maxlen: 24 82.86.92.0/22 maxlen: 22 82.86.92.0/24 maxlen: 24 82.86.93.0/24 maxlen: 24 82.86.94.0/24 maxlen: 24 82.86.95.0/24 maxlen: 24 82.86.96.0/22 maxlen: 22 82.86.96.0/24 maxlen: 24 82.86.97.0/24 maxlen: 24 82.86.98.0/24 maxlen: 24 82.86.99.0/24 maxlen: 24 82.86.100.0/22 maxlen: 22 82.86.100.0/24 maxlen: 24 82.86.101.0/24 maxlen: 24 82.86.102.0/24 maxlen: 24 82.86.103.0/24 maxlen: 24 82.86.128.0/22 maxlen: 22 82.86.128.0/24 maxlen: 24 82.86.129.0/24 maxlen: 24 82.86.130.0/24 maxlen: 24 82.86.131.0/24 maxlen: 24 82.86.132.0/22 maxlen: 22 82.86.132.0/24 maxlen: 24 82.86.133.0/24 maxlen: 24 82.86.134.0/24 maxlen: 24 82.86.135.0/24 maxlen: 24 82.86.136.0/22 maxlen: 22 82.86.136.0/24 maxlen: 24 82.86.137.0/24 maxlen: 24 82.86.138.0/24 maxlen: 24 82.86.139.0/24 maxlen: 24 82.86.140.0/22 maxlen: 22 82.86.140.0/24 maxlen: 24 82.86.141.0/24 maxlen: 24 82.86.142.0/24 maxlen: 24 82.86.143.0/24 maxlen: 24 82.86.144.0/22 maxlen: 22 82.86.144.0/24 maxlen: 24 82.86.145.0/24 maxlen: 24 82.86.146.0/24 maxlen: 24 82.86.147.0/24 maxlen: 24 82.86.148.0/22 maxlen: 22 82.86.148.0/24 maxlen: 24 82.86.149.0/24 maxlen: 24 82.86.150.0/24 maxlen: 24 82.86.151.0/24 maxlen: 24 82.86.152.0/22 maxlen: 22 82.86.152.0/24 maxlen: 24 82.86.153.0/24 maxlen: 24 82.86.154.0/24 maxlen: 24 82.86.155.0/24 maxlen: 24 82.86.156.0/22 maxlen: 22 82.86.156.0/24 maxlen: 24 82.86.157.0/24 maxlen: 24 82.86.158.0/24 maxlen: 24 82.86.159.0/24 maxlen: 24 82.86.160.0/22 maxlen: 22 82.86.160.0/24 maxlen: 24 82.86.161.0/24 maxlen: 24 82.86.162.0/24 maxlen: 24 82.86.163.0/24 maxlen: 24 82.86.164.0/22 maxlen: 22 82.86.164.0/24 maxlen: 24 82.86.165.0/24 maxlen: 24 82.86.166.0/24 maxlen: 24 82.86.167.0/24 maxlen: 24 82.86.224.0/19 maxlen: 19 82.86.224.0/20 maxlen: 20 82.86.224.0/21 maxlen: 21 82.86.224.0/22 maxlen: 22 82.86.224.0/23 maxlen: 23 82.86.224.0/24 maxlen: 24 82.86.225.0/24 maxlen: 24 82.86.226.0/23 maxlen: 23 82.86.226.0/24 maxlen: 24 82.86.227.0/24 maxlen: 24 82.86.228.0/22 maxlen: 22 82.86.228.0/23 maxlen: 23 82.86.228.0/24 maxlen: 24 82.86.229.0/24 maxlen: 24 82.86.230.0/23 maxlen: 23 82.86.230.0/24 maxlen: 24 82.86.231.0/24 maxlen: 24 82.86.232.0/21 maxlen: 21 82.86.232.0/22 maxlen: 22 82.86.232.0/23 maxlen: 23 82.86.232.0/24 maxlen: 24 82.86.233.0/24 maxlen: 24 82.86.234.0/23 maxlen: 23 82.86.234.0/24 maxlen: 24 82.86.235.0/24 maxlen: 24 82.86.236.0/22 maxlen: 22 82.86.236.0/23 maxlen: 23 82.86.236.0/24 maxlen: 24 82.86.237.0/24 maxlen: 24 82.86.238.0/24 maxlen: 24 82.86.239.0/24 maxlen: 24 82.86.240.0/20 maxlen: 20 82.86.240.0/21 maxlen: 21 82.86.240.0/22 maxlen: 22 82.86.240.0/23 maxlen: 23 82.86.240.0/24 maxlen: 24 82.86.241.0/24 maxlen: 24 82.86.242.0/23 maxlen: 23 82.86.242.0/24 maxlen: 24 82.86.243.0/24 maxlen: 24 82.86.244.0/22 maxlen: 22 82.86.244.0/23 maxlen: 23 82.86.244.0/24 maxlen: 24 82.86.245.0/24 maxlen: 24 82.86.246.0/23 maxlen: 23 82.86.246.0/24 maxlen: 24 82.86.247.0/24 maxlen: 24 82.86.248.0/21 maxlen: 21 82.86.248.0/22 maxlen: 22 82.86.248.0/23 maxlen: 23 82.86.248.0/24 maxlen: 24 82.86.249.0/24 maxlen: 24 82.86.250.0/23 maxlen: 23 82.86.250.0/24 maxlen: 24 82.86.251.0/24 maxlen: 24 82.86.252.0/22 maxlen: 22 82.86.252.0/23 maxlen: 23 82.86.252.0/24 maxlen: 24 82.86.253.0/24 maxlen: 24 82.86.254.0/23 maxlen: 23 82.86.254.0/24 maxlen: 24 82.86.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b8:c1:d9:36:f3:47:1e:15:9c:91:e9:1f:d5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5 Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddf07609bfd80c2a13c513e8a45ea7b54b0e62f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:db:71:4b:cc:41:c8:25:a1:e9:ef:53:46: 75:61:6d:58:49:b4:20:b2:a7:42:8d:8d:94:74:0b: fc:8c:ce:43:30:c3:02:4d:e4:e0:e5:40:c5:8d:54: f9:5f:02:74:51:05:e2:29:3f:8a:06:6b:9c:56:2a: 87:3a:0f:01:3f:62:ff:93:18:8f:66:68:9d:4a:4d: 51:7d:f9:b4:fc:b6:7e:74:c8:77:ab:6f:a2:a1:04: aa:7e:e6:24:64:d3:27:66:b7:30:12:f6:76:01:d3: 75:7c:4c:90:a2:d4:4c:58:4c:55:28:2c:f5:74:2e: a3:1b:f8:a0:e9:6c:2a:17:8a:fa:7f:1c:7d:2e:66: a0:3e:61:d6:1a:e8:0d:78:a0:52:27:05:a4:8e:37: fb:fb:11:fd:2c:f0:68:fd:d3:e8:2b:99:d8:d4:d9: 4f:80:46:a0:49:53:67:5d:fb:7e:8f:20:e8:e2:69: 3a:26:09:ea:32:d8:e6:87:31:32:95:70:e6:0d:96: c5:b3:7b:a7:9b:a3:17:b1:ce:89:e3:f0:e6:42:40: a7:e3:52:1e:d1:83:89:70:6c:42:9e:e9:4c:5a:89: 26:aa:2c:8c:ca:20:3f:95:b2:0e:12:f4:8e:ac:a9: b7:c9:66:7f:df:c5:98:a1:ec:f8:f8:9f:98:69:93: 14:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F0:76:09:BF:D8:0C:2A:13:C5:13:E8:A4:5E:A7:B5:4B:0E:62:F3 X509v3 Authority Key Identifier: keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/3fB2Cb_YDCoTxRPopF6ntUsOYvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.86.64.0-82.86.103.255 82.86.128.0-82.86.167.255 82.86.224.0/19 Signature Algorithm: sha256WithRSAEncryption 63:30:51:68:55:44:af:6c:00:f3:04:6a:18:93:86:3a:18:a6: 70:9c:19:b6:de:dc:95:1d:ed:76:13:28:ee:d6:53:5a:a8:39: b1:51:bb:d2:38:a3:2e:75:35:ac:3a:62:df:9c:5c:e4:e6:b9: b1:fc:cf:40:2e:d5:b6:5a:bf:ca:19:11:08:55:71:37:8f:a2: 22:cb:cd:f6:3b:b5:28:1b:5d:fb:0b:8e:6e:81:78:b9:5d:94: f2:20:41:2a:b5:5f:66:ee:4b:83:51:40:27:10:fe:16:85:87: 93:4e:4d:fe:65:b1:16:0b:ea:ae:54:75:60:f6:29:af:37:dd: 6c:3f:fa:29:d4:f6:77:52:d4:29:5d:ef:c3:ce:9b:eb:1b:75: 08:7c:fb:c2:4f:bd:8f:f1:10:45:ce:95:e9:e5:14:10:fd:8f: c5:cd:c7:d8:25:a1:8d:0a:1a:14:fc:de:e1:6e:04:1d:2f:f2: e9:cf:ab:5c:8f:b5:39:4d:a0:be:bd:52:ee:54:3a:0d:72:35: 87:93:84:32:8e:9e:ca:e2:83:b6:0a:4b:ef:c9:0a:d5:b9:46: 5c:32:ee:b8:ca:2e:09:dc:18:d1:58:9f:10:d7:04:f7:c1:08: 28:55:44:c0:0c:98:21:40:97:e3:7f:29:59:4d:9a:48:5f:0b: 09:05:db:93 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+prjB2TbzRx4VnJHpH9WdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4 NzQzZTUwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGYwNzYwOWJmZDgwYzJhMTNjNTEzZThhNDVlYTdiNTRiMGU2MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O/bcUvMQcgloenvU0Z1YW1YSbQg sqdCjY2UdAv8jM5DMMMCTeTg5UDFjVT5XwJ0UQXiKT+KBmucViqHOg8BP2L/kxiP ZmidSk1Rffm0/LZ+dMh3q2+ioQSqfuYkZNMnZrcwEvZ2AdN1fEyQotRMWExVKCz1 dC6jG/ig6WwqF4r6fxx9LmagPmHWGugNeKBSJwWkjjf7+xH9LPBo/dPoK5nY1NlP gEagSVNnXft+jyDo4mk6JgnqMtjmhzEylXDmDZbFs3unm6MXsc6J4/DmQkCn41Ie 0YOJcGxCnulMWokmqiyMyiA/lbIOEvSOrKm3yWZ/38WYoez4+J+YaZMUXQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN3wdgm/2AwqE8UT6KRep7VLDmLzMB8GA1UdIwQY MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut ODIyZWE0M2RjMThkLzEvM2ZCMkNiX1lEQ29UeFJQb3BGNm50VXNPWXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAZSVkAD BANSVmAwDAMEB1JWgAMEA1JWoAMEBVJW4DANBgkqhkiG9w0BAQsFAAOCAQEAYzBR aFVEr2wA8wRqGJOGOhimcJwZtt7clR3tdhMo7tZTWqg5sVG70jijLnU1rDpi35xc 5Oa5sfzPQC7Vtlq/yhkRCFVxN4+iIsvN9ju1KBtd+wuOboF4uV2U8iBBKrVfZu5L g1FAJxD+FoWHk05N/mWxFgvqrlR1YPYprzfdbD/6KdT2d1LUKV3vw86b6xt1CHz7 wk+9j/EQRc6V6eUUEP2Pxc3H2CWhjQoaFPze4W4EHS/y6c+rXI+1OU2gvr1S7lQ6 DXI1h5OEMo6eyuKDtgpL78kK1blGXDLuuMouCdwY0VifENcE98EIKFVEwAyYIUCX 438pWU2aSF8LCQXbkw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:11 2026 by rpki-client