This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/K3l-f-R4fzp0JNI40Ow_kAwQElE.roa File: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (raw, json) Hash identifier: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA= Subject key identifier: 2B:79:7E:7F:E4:78:7F:3A:74:24:D2:38:D0:EC:3F:90:0C:10:12:51 Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Certificate serial: 019B7F14C7ABD3F3BD31B55D8F6C55193E66 Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/K3l-f-R4fzp0JNI40Ow_kAwQElE.roa Signing time: Fri 02 Jan 2026 14:20:26 +0000 ROA not before: Fri 02 Jan 2026 14:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201031 IP address blocks: 185.217.90.0/24 maxlen: 24 194.113.196.0/22 maxlen: 22 194.113.196.0/23 maxlen: 23 194.113.196.0/24 maxlen: 24 194.113.197.0/24 maxlen: 24 194.113.198.0/23 maxlen: 23 194.113.198.0/24 maxlen: 24 194.113.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c7:ab:d3:f3:bd:31:b5:5d:8f:6c:55:19:3e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Validity Not Before: Jan 2 14:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b797e7fe4787f3a7424d238d0ec3f900c101251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:75:04:4c:0d:5e:a8:53:ae:aa:88:36:6e: fd:8b:3d:fa:81:00:a9:6f:a7:c2:4c:22:e4:b4:44: 72:cd:7f:c0:42:cd:1c:1a:88:ad:9e:5e:d6:4e:ea: 3a:58:2f:ca:5c:5a:02:43:7f:7b:44:2c:0c:c6:f0: 92:78:60:16:29:57:07:01:83:9b:54:e2:2d:1d:c7: de:cb:19:8d:47:6b:a9:ee:23:e5:7c:bb:fa:5f:32: a9:2d:51:c9:5f:50:82:fb:c4:c9:c8:97:b5:72:70: 46:65:1f:98:c6:92:2d:94:7b:e7:22:a2:18:90:e1: 5d:04:d1:bd:80:84:f4:8f:d9:77:44:e1:05:2c:9e: a3:f7:d5:26:f2:02:9e:36:8f:d3:86:2a:74:e9:16: 76:f2:96:8a:a4:85:6d:ed:f5:90:10:4f:ec:06:b1: 08:f6:22:2b:67:76:d9:fd:2e:29:04:3f:2a:18:fe: 48:f7:ca:71:72:59:ab:3d:58:2b:56:0a:4b:07:83: 1f:c6:38:97:14:94:74:7b:06:a9:00:60:cd:17:55: e3:2e:9b:c7:69:27:46:d1:b5:57:d0:4a:30:ea:93: 1e:98:2c:40:7a:9e:44:f8:82:7b:5a:ca:b3:83:03: a8:d4:ea:b9:f7:06:d8:c2:76:95:46:4a:64:51:a7: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:79:7E:7F:E4:78:7F:3A:74:24:D2:38:D0:EC:3F:90:0C:10:12:51 X509v3 Authority Key Identifier: keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/K3l-f-R4fzp0JNI40Ow_kAwQElE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.90.0/24 194.113.196.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:ad:c4:8e:5a:42:7d:3a:f6:11:18:d2:06:92:f4:cd:2a:5f: 9a:60:42:63:d7:a6:39:e3:d6:df:18:b2:20:e5:c9:3b:ac:0f: 99:0b:06:f6:a8:84:e5:6a:cb:fe:f9:d6:a5:95:b9:6d:a9:e5: 40:26:2c:d8:37:42:68:ef:80:32:b2:4c:33:1a:ad:92:1e:62: 64:b2:7a:98:6a:07:55:68:c0:23:5b:a1:6b:17:08:a4:61:6d: 23:2d:65:b0:96:01:18:5f:b6:70:c6:ab:51:65:6e:98:ad:93: 3a:14:00:f8:9c:02:03:e4:15:c1:fc:50:6a:00:31:2c:74:e5: bf:6a:78:3a:ad:fb:26:2b:a3:cf:88:42:cc:33:84:ff:10:ed: 29:06:ca:c2:a6:db:10:cf:df:1b:5a:82:72:1d:f1:c4:63:cf: b0:9b:d1:bb:a9:a3:dc:65:fb:50:f7:54:a7:21:23:6b:e6:c7: 51:f3:52:2b:a1:ef:a1:b7:ef:fd:c6:6a:59:e7:1e:91:b3:9f: 2e:81:5b:ac:b9:42:e1:6f:75:ec:46:46:71:63:41:d3:f1:5b: cb:50:7c:70:fa:7d:29:fc:6c:db:cc:90:83:b5:0e:ad:ab:ad: 1b:73:8c:58:22:06:3d:14:3c:89:64:4c:35:2c:78:ab:6f:c3: 7c:72:74:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FMer0/O9MbVdj2xVGT5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2 ZGNmMTAwHhcNMjYwMTAyMTQyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjc5N2U3ZmU0Nzg3ZjNhNzQyNGQyMzhkMGVjM2Y5MDBjMTAxMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB11BEwNXqhTrqqINm79iz36gQCp b6fCTCLktERyzX/AQs0cGoitnl7WTuo6WC/KXFoCQ397RCwMxvCSeGAWKVcHAYOb VOItHcfeyxmNR2up7iPlfLv6XzKpLVHJX1CC+8TJyJe1cnBGZR+YxpItlHvnIqIY kOFdBNG9gIT0j9l3ROEFLJ6j99Um8gKeNo/Thip06RZ28paKpIVt7fWQEE/sBrEI 9iIrZ3bZ/S4pBD8qGP5I98pxclmrPVgrVgpLB4MfxjiXFJR0ewapAGDNF1XjLpvH aSdG0bVX0Eow6pMemCxAep5E+IJ7WsqzgwOo1Oq59wbYwnaVRkpkUaez8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCt5fn/keH86dCTSONDsP5AMEBJRMB8GA1UdIwQY MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt ODVhOTU1ZjIxNjNiLzEvSzNsLWYtUjRmenAwSk5JNDBPd19rQXdRRWxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudlaAwQC wnHEMA0GCSqGSIb3DQEBCwUAA4IBAQAOrcSOWkJ9OvYRGNIGkvTNKl+aYEJj16Y5 49bfGLIg5ck7rA+ZCwb2qITlasv++dallbltqeVAJizYN0Jo74AyskwzGq2SHmJk snqYagdVaMAjW6FrFwikYW0jLWWwlgEYX7ZwxqtRZW6YrZM6FAD4nAID5BXB/FBq ADEsdOW/ang6rfsmK6PPiELMM4T/EO0pBsrCptsQz98bWoJyHfHEY8+wm9G7qaPc ZftQ91SnISNr5sdR81Iroe+ht+/9xmpZ5x6Rs58ugVusuULhb3XsRkZxY0HT8VvL UHxw+n0p/GzbzJCDtQ6tq60bc4xYIgY9FDyJZEw1LHirb8N8cnRI -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:53 2026 by rpki-client