This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa File: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (raw, json) Hash identifier: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo= Subject key identifier: DE:31:33:69:30:19:19:B5:6C:A0:5C:1D:9A:38:36:85:31:76:FD:69 Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Certificate serial: 019B7B36331DA93A1AD664DD71207E742BC5 Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa Signing time: Thu 01 Jan 2026 20:18:27 +0000 ROA not before: Thu 01 Jan 2026 20:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34762 IP address blocks: 185.135.12.0/23 maxlen: 24 2a06:efc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:33:1d:a9:3a:1a:d6:64:dd:71:20:7e:74:2b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9 Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de313369301919b56ca05c1d9a3836853176fd69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:ad:b3:78:3c:52:34:e6:af:00:11:af:ce: 85:e8:b8:b5:d8:31:90:08:6c:85:f2:38:09:06:b6: e9:69:ae:0e:ef:7e:63:7d:c9:00:a0:46:d7:3d:22: ec:a7:df:75:7c:dd:83:4c:57:8a:c4:27:28:e0:81: 1a:ce:56:ca:68:74:3c:08:4a:8f:09:44:8a:ef:8f: b2:0e:34:77:03:bc:0d:49:61:d9:70:2f:c5:fa:36: b2:e4:25:d1:d4:c1:07:17:ca:d7:5f:e1:a9:58:91: 75:d3:5d:a8:72:cd:aa:b1:60:45:a8:b3:53:ef:76: 03:35:f1:d5:bd:ae:13:2f:76:4b:aa:44:21:d8:ad: 35:24:09:db:d3:1a:58:c6:4b:7d:f7:a1:5a:5f:d0: 88:ef:e0:06:50:8d:0d:b6:9e:bd:d4:c9:fc:72:02: 58:aa:f4:17:d5:b7:97:0c:94:95:9e:d3:99:5c:c5: 60:8a:c1:7e:ea:3a:ab:65:0d:06:15:1e:bd:f1:9f: 23:c2:00:08:8e:26:12:fd:90:91:95:76:fa:ff:9a: e0:6a:84:cc:ed:de:97:a0:87:1c:5f:47:e0:e4:1d: ea:27:18:7b:11:58:00:11:44:33:6c:25:09:ca:ff: 89:76:3f:a5:1a:86:b2:a3:31:1a:5a:18:8d:a6:bf: 8a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:31:33:69:30:19:19:B5:6C:A0:5C:1D:9A:38:36:85:31:76:FD:69 X509v3 Authority Key Identifier: keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.12.0/23 IPv6: 2a06:efc0::/32 Signature Algorithm: sha256WithRSAEncryption a6:5c:ab:b0:ac:ae:48:7d:1d:b6:bb:76:69:03:99:94:62:38: 31:54:d5:63:cb:d1:15:1e:ee:b3:4f:39:4e:44:ba:3a:42:93: 6b:c7:1b:c8:84:e3:3d:7a:b2:8e:ac:62:61:3c:a1:1d:b8:5e: a0:f4:ea:6e:72:bc:ca:ae:6d:b7:ff:8e:3c:27:06:29:f3:53: 19:a7:16:31:f7:09:19:91:2e:b5:7a:db:2f:f3:3b:7f:e5:c7: 23:05:cb:e2:a0:59:0c:96:82:c5:a3:1b:b5:95:4c:df:59:89: 9d:8e:b0:50:57:bd:d1:aa:b3:ab:78:ae:bd:ba:cf:fe:48:22: 24:d2:aa:a4:ae:27:d4:1a:de:0e:95:ef:38:77:19:39:0d:29: d8:38:ec:02:1a:ba:5e:9f:3d:62:ec:4e:fc:14:cd:6b:60:aa: 9b:db:93:e0:7a:b6:6e:96:78:eb:5a:ae:8e:c6:f9:6a:c3:eb: 63:98:9d:78:42:af:b4:33:d9:bb:e3:9a:a3:d0:92:4a:3b:0b: c5:0c:43:f6:4d:5b:17:a6:24:10:6e:1b:b3:5c:cd:fb:f0:72: 0c:13:64:25:d9:b0:66:89:76:e5:01:97:d7:b2:6a:35:ae:b4: e9:a2:43:1d:04:01:b6:6d:88:6a:4c:0c:a4:3e:35:e8:a5:05: cf:0a:23:16 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NjMdqToa1mTdcSB+dCvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm MDliYzkwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTMxMzM2OTMwMTkxOWI1NmNhMDVjMWQ5YTM4MzY4NTMxNzZmZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRuts3g8UjTmrwARr86F6Li12DGQ CGyF8jgJBrbpaa4O735jfckAoEbXPSLsp991fN2DTFeKxCco4IEazlbKaHQ8CEqP CUSK74+yDjR3A7wNSWHZcC/F+jay5CXR1MEHF8rXX+GpWJF1012ocs2qsWBFqLNT 73YDNfHVva4TL3ZLqkQh2K01JAnb0xpYxkt996FaX9CI7+AGUI0Ntp691Mn8cgJY qvQX1beXDJSVntOZXMVgisF+6jqrZQ0GFR698Z8jwgAIjiYS/ZCRlXb6/5rgaoTM 7d6XoIccX0fg5B3qJxh7EVgAEUQzbCUJyv+Jdj+lGoayozEaWhiNpr+KwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN4xM2kwGRm1bKBcHZo4NoUxdv1pMB8GA1UdIwQY MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt YjA2ZmRhMDFmNDZjLzEvM2pFemFUQVpHYlZzb0Z3ZG1qZzJoVEYyX1drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuYcMMA0E AgACMAcDBQAqBu/AMA0GCSqGSIb3DQEBCwUAA4IBAQCmXKuwrK5IfR22u3ZpA5mU YjgxVNVjy9EVHu6zTzlORLo6QpNrxxvIhOM9erKOrGJhPKEduF6g9OpucrzKrm23 /448JwYp81MZpxYx9wkZkS61etsv8zt/5ccjBcvioFkMloLFoxu1lUzfWYmdjrBQ V73RqrOreK69us/+SCIk0qqkrifUGt4Ole84dxk5DSnYOOwCGrpenz1i7E78FM1r YKqb25PgerZulnjrWq6Oxvlqw+tjmJ14Qq+0M9m745qj0JJKOwvFDEP2TVsXpiQQ bhuzXM378HIME2Ql2bBmiXblAZfXsmo1rrTpokMdBAG2bYhqTAykPjXopQXPCiMW -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:31 2026 by rpki-client