This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa File: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (raw, json) Hash identifier: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw= Subject key identifier: DC:5D:04:CA:5F:DF:15:60:59:71:C3:37:8C:8D:64:E1:30:9E:26:F2 Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Certificate serial: 019B7EA6588FA023B51B8026985D3A3463FF Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa Signing time: Fri 02 Jan 2026 12:19:49 +0000 ROA not before: Fri 02 Jan 2026 12:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 91.208.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:58:8f:a0:23:b5:1b:80:26:98:5d:3a:34:63:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9 Validity Not Before: Jan 2 12:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc5d04ca5fdf15605971c3378c8d64e1309e26f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:27:3b:ec:78:08:e4:9f:b6:61:50:9b:de: 06:f4:71:f6:a2:2f:79:91:e4:4c:5c:62:95:ee:db: 45:cf:e6:3a:b9:76:77:a1:95:19:ae:ba:be:05:fa: d6:cb:f1:88:7b:92:d8:ea:69:fc:7f:fb:67:79:79: 58:86:57:76:a7:ad:6c:fd:40:ad:0a:74:68:b5:10: 3e:6d:00:cc:4e:50:c3:d6:87:6b:ee:0c:3b:e9:32: a6:6e:db:88:cf:65:e5:18:19:ce:26:10:56:31:01: ae:49:c7:ae:1d:81:26:7f:65:3c:b1:a7:6b:56:0c: 95:23:7e:87:71:18:b0:b0:b0:0f:56:46:8b:dc:6a: 7a:73:02:2b:0e:2b:94:24:c7:de:ea:dd:7b:95:a8: cc:55:4d:98:97:dc:11:d6:03:59:27:37:42:51:86: 67:d6:01:f3:b3:11:31:b3:4d:40:bc:6d:50:b2:1c: c4:a4:89:1c:c9:6a:d2:1e:2b:29:49:31:10:fa:56: e2:cd:f6:83:4e:fe:27:ad:eb:f9:cc:40:75:a5:14: 32:35:25:cf:20:c2:0e:95:2d:25:7a:b7:0b:21:83: 38:bd:ff:ec:09:fc:d6:ea:28:4e:4f:6e:a3:fa:4a: 28:6d:2d:50:fe:de:2e:b8:aa:4f:65:f4:1d:e8:67: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5D:04:CA:5F:DF:15:60:59:71:C3:37:8C:8D:64:E1:30:9E:26:F2 X509v3 Authority Key Identifier: keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.173.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:b2:94:09:ed:78:fc:d6:0d:1e:f6:65:a4:55:83:6d:85:60: de:21:3d:ae:cf:66:ce:b4:cb:d5:83:3e:a4:72:18:9e:c6:a0: 83:ac:47:56:10:b0:d3:73:9a:19:82:01:8a:e1:ce:f2:67:d3: 43:56:4e:90:20:19:c5:bb:b0:b9:10:f9:c8:c9:c6:8f:1a:60: 62:29:75:1f:ff:fd:95:79:98:b6:a4:25:1e:c1:20:9c:f2:49: e3:11:af:8b:8b:93:3d:10:01:09:49:84:bd:41:b4:fd:69:df: 06:19:0c:e6:a4:a2:08:60:4d:c0:f8:ab:f3:e7:8f:84:30:18: 45:82:b5:bd:ea:c8:bf:49:d3:5b:92:77:68:5d:d3:15:5f:17: 64:e5:c8:03:aa:67:0b:bc:c0:43:e0:72:6b:0c:8e:00:e0:22: 0e:2a:4d:fd:89:32:d8:97:50:64:d1:7b:d4:26:69:b7:3f:0f: 93:a2:c1:5e:e1:9b:a9:0f:60:b6:4b:45:a2:01:7d:e4:90:fe: 2c:40:61:35:32:93:d5:03:a9:58:ce:a8:d9:33:e8:7b:30:6f: 2e:4a:ef:8e:81:2f:95:ba:26:c0:ec:77:29:ce:0b:89:9b:c1: 49:70:23:e3:b1:44:f7:c2:83:95:6e:68:a3:55:f5:96:43:77: 14:af:79:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pliPoCO1G4AmmF06NGP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNDVmOGQ2MmM3NDJlYTA3ZGNiZjhjNTdkNThjY2Y1ZDI4 ZTNlYjkwHhcNMjYwMTAyMTIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzVkMDRjYTVmZGYxNTYwNTk3MWMzMzc4YzhkNjRlMTMwOWUyNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzwnO+x4COSftmFQm94G9HH2oi95 keRMXGKV7ttFz+Y6uXZ3oZUZrrq+BfrWy/GIe5LY6mn8f/tneXlYhld2p61s/UCt CnRotRA+bQDMTlDD1odr7gw76TKmbtuIz2XlGBnOJhBWMQGuSceuHYEmf2U8sadr VgyVI36HcRiwsLAPVkaL3Gp6cwIrDiuUJMfe6t17lajMVU2Yl9wR1gNZJzdCUYZn 1gHzsxExs01AvG1QshzEpIkcyWrSHispSTEQ+lbizfaDTv4nrev5zEB1pRQyNSXP IMIOlS0lercLIYM4vf/sCfzW6ihOT26j+koobS1Q/t4uuKpPZfQd6GdBTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxdBMpf3xVgWXHDN4yNZOEwnibyMB8GA1UdIwQY MBaAFC5F+NYsdC6gfcv4xX1YzPXSjj65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUt MjEyMGZkMDU3NWZmLzEvM0YwRXlsX2ZGV0JaY2NNM2pJMWs0VENlSnZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUtMjEyMGZkMDU3NWZm LzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9CtMA0G CSqGSIb3DQEBCwUAA4IBAQCfspQJ7Xj81g0e9mWkVYNthWDeIT2uz2bOtMvVgz6k chiexqCDrEdWELDTc5oZggGK4c7yZ9NDVk6QIBnFu7C5EPnIycaPGmBiKXUf//2V eZi2pCUewSCc8knjEa+Li5M9EAEJSYS9QbT9ad8GGQzmpKIIYE3A+Kvz54+EMBhF grW96si/SdNbkndoXdMVXxdk5cgDqmcLvMBD4HJrDI4A4CIOKk39iTLYl1Bk0XvU Jmm3Pw+TosFe4ZupD2C2S0WiAX3kkP4sQGE1MpPVA6lYzqjZM+h7MG8uSu+OgS+V uibA7HcpzguJm8FJcCPjsUT3woOVbmijVfWWQ3cUr3mu -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:38 2026 by rpki-client