This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa File: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (raw, json) Hash identifier: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ= Subject key identifier: DE:06:60:1D:B0:FE:86:BA:9C:AB:F3:E3:CB:2D:69:88:C8:DE:46:11 Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Certificate serial: 019B797E9374B972E878B80B9E03D52D8F6F Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa Signing time: Thu 01 Jan 2026 12:18:16 +0000 ROA not before: Thu 01 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215282 IP address blocks: 86.109.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:93:74:b9:72:e8:78:b8:0b:9e:03:d5:2d:8f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Validity Not Before: Jan 1 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de06601db0fe86ba9cabf3e3cb2d6988c8de4611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:e6:f6:67:67:41:d6:63:04:72:98:89:ae: 7a:26:7e:ea:13:24:cc:09:da:62:37:eb:4b:ed:99: 1a:d1:68:b5:e7:ff:33:6d:76:4b:94:52:1f:7f:64: f7:4f:74:82:91:5d:8f:a5:83:c5:bc:be:62:85:2e: 4e:47:ef:f9:86:3e:85:2f:16:9c:5f:4e:ac:f2:f8: 07:ea:6d:cf:b6:4e:73:37:6a:6b:aa:54:72:a3:da: 43:27:db:9e:00:c2:fc:85:28:a9:3d:e0:4f:66:4f: e9:34:31:c8:85:a0:58:99:33:3b:31:e8:9f:c7:69: 01:bb:7c:40:ea:6c:cc:76:cd:e2:d9:af:7d:bd:47: 41:89:38:57:4f:a9:f8:e4:3e:9f:57:b3:69:d6:20: 65:82:25:3c:83:b9:e1:e0:d6:54:25:9a:8e:69:f6: 2b:59:be:29:a9:bb:1a:8b:cb:ed:b9:17:a2:12:69: 6d:42:8d:77:5e:ba:2f:6e:aa:4c:58:19:69:60:0d: 7c:7c:c5:2c:10:34:1f:3d:c8:71:9e:c5:81:ea:ab: 33:94:2d:33:45:66:2f:b6:d1:47:40:b1:a8:10:ed: ec:98:14:bf:9c:5c:3b:01:ea:6f:10:c1:7e:7e:51: e8:3e:05:ad:fb:0c:98:ea:3b:26:64:5a:bf:1e:35: f4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:06:60:1D:B0:FE:86:BA:9C:AB:F3:E3:CB:2D:69:88:C8:DE:46:11 X509v3 Authority Key Identifier: keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.232.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f6:40:1e:0f:af:e7:3e:3b:3b:43:3c:81:84:be:e2:1d:36: 12:d6:57:b4:f7:a2:58:96:12:b8:40:cd:07:cd:cb:c6:57:9a: bd:47:ef:71:5e:3f:c1:be:c6:22:c3:c4:e7:87:b8:ed:e8:d9: 80:0d:73:9f:96:a0:6a:71:d5:fb:dd:7f:bb:60:03:a6:30:d0: 50:69:04:26:ca:3b:33:ef:47:1a:01:1d:49:0c:49:34:22:2f: f8:46:14:56:23:b5:35:91:01:66:92:79:4f:fd:29:d7:65:dd: 30:97:7a:5a:ec:9f:ab:2c:bf:0e:c9:a7:69:c9:48:f9:99:ed: 6c:c7:51:b9:13:25:b1:65:35:10:56:75:bf:67:c9:5e:90:b2: 24:05:82:c2:34:69:58:9b:d9:60:94:f0:17:82:7f:52:77:8e: 97:ad:de:22:82:0d:67:8a:4c:62:87:07:a8:68:66:b4:47:9e: 36:2b:cf:b7:e8:71:54:c7:c3:5c:0b:17:19:67:91:0c:2b:5e: 96:da:cd:25:0f:85:8f:01:a1:a6:e8:ba:77:55:3c:40:c5:74: 4c:e0:dd:ec:44:f5:78:25:05:52:d3:fa:cd:7b:69:2a:9c:9b: bb:5e:ff:e8:5d:5c:f5:88:8c:74:e9:b5:49:20:27:e3:4c:5b: 67:7f:32:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpN0uXLoeLgLngPVLY9vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk NjQ4NGIwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTA2NjAxZGIwZmU4NmJhOWNhYmYzZTNjYjJkNjk4OGM4ZGU0NjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJjm9mdnQdZjBHKYia56Jn7qEyTM CdpiN+tL7Zka0Wi15/8zbXZLlFIff2T3T3SCkV2PpYPFvL5ihS5OR+/5hj6FLxac X06s8vgH6m3Ptk5zN2prqlRyo9pDJ9ueAML8hSipPeBPZk/pNDHIhaBYmTM7Meif x2kBu3xA6mzMds3i2a99vUdBiThXT6n45D6fV7Np1iBlgiU8g7nh4NZUJZqOafYr Wb4pqbsai8vtuReiEmltQo13XrovbqpMWBlpYA18fMUsEDQfPchxnsWB6qszlC0z RWYvttFHQLGoEO3smBS/nFw7AepvEMF+flHoPgWt+wyY6jsmZFq/HjX0uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN4GYB2w/oa6nKvz48staYjI3kYRMB8GA1UdIwQY MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt MTEwOThhYTJlYmMzLzEvM2daZ0hiRC1ocnFjcV9Qanl5MXBpTWplUmhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm3oMA0G CSqGSIb3DQEBCwUAA4IBAQBA9kAeD6/nPjs7QzyBhL7iHTYS1le096JYlhK4QM0H zcvGV5q9R+9xXj/BvsYiw8Tnh7jt6NmADXOflqBqcdX73X+7YAOmMNBQaQQmyjsz 70caAR1JDEk0Ii/4RhRWI7U1kQFmknlP/SnXZd0wl3pa7J+rLL8OyadpyUj5me1s x1G5EyWxZTUQVnW/Z8lekLIkBYLCNGlYm9lglPAXgn9Sd46Xrd4igg1nikxihweo aGa0R542K8+36HFUx8NcCxcZZ5EMK16W2s0lD4WPAaGm6Lp3VTxAxXRM4N3sRPV4 JQVS0/rNe2kqnJu7Xv/oXVz1iIx06bVJICfjTFtnfzIW -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:52 2026 by rpki-client