This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/3vVZXpDUCirehXY4MO0zGH2vBO4.roa File: 3vVZXpDUCirehXY4MO0zGH2vBO4.roa (raw, json) Hash identifier: qpzysLhmvuGRqt7jkyatEEtyL/ESSTNsTcF+6pkg6kI= Subject key identifier: DE:F5:59:5E:90:D4:0A:2A:DE:85:76:38:30:ED:33:18:7D:AF:04:EE Certificate issuer: /CN=c9633fa6fc66b43639c056d02174f80c2426614b Certificate serial: 019B7F1568235B49C21A959AD57E60309408 Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/3vVZXpDUCirehXY4MO0zGH2vBO4.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.166.140.0/23 maxlen: 24 185.166.142.0/24 maxlen: 24 185.166.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:68:23:5b:49:c2:1a:95:9a:d5:7e:60:30:94:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=def5595e90d40a2ade85763830ed33187daf04ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:89:4e:b0:55:a1:3e:f2:f7:8c:9d:3e:aa:83: d8:4b:e8:b5:39:3f:80:25:03:67:2d:cf:73:31:3d: 92:ae:d8:ca:51:10:5a:8b:e0:0a:00:02:0e:2f:cf: 9d:1e:23:c3:03:37:d3:6e:33:d2:88:67:64:ac:09: 53:77:6c:e3:57:71:27:0c:dc:a7:b9:1d:d4:b5:9c: 50:47:53:3c:09:2e:36:12:89:5b:12:ca:10:b6:3a: 43:ac:7e:7d:7a:75:5d:73:4a:6f:2f:79:2e:2b:46: b3:25:d6:71:87:65:41:db:88:48:83:c5:87:4b:81: fb:a5:6c:5a:cf:aa:95:05:47:bd:b8:57:00:a5:da: a3:48:84:98:e5:bd:99:68:1a:8e:04:b8:b6:d1:73: 84:1c:c5:86:a7:25:6f:c9:ca:86:8a:a8:c3:3f:ef: 42:df:95:2d:06:ba:d4:f1:bf:45:c6:81:7c:1e:3a: 05:fa:e6:7a:36:cc:61:e5:93:c9:3b:97:f2:c7:8d: f2:97:02:ab:bd:0c:da:14:18:a6:cd:79:f6:7e:48: ce:ab:05:a8:df:98:d9:db:c6:b5:cc:d0:38:df:4c: eb:de:08:b2:7f:40:f1:ae:67:fb:1f:78:a1:2e:00: 01:ff:4e:14:7a:62:6a:1f:5b:9a:b4:68:ae:1a:52: 11:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F5:59:5E:90:D4:0A:2A:DE:85:76:38:30:ED:33:18:7D:AF:04:EE X509v3 Authority Key Identifier: keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/3vVZXpDUCirehXY4MO0zGH2vBO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.140.0/22 Signature Algorithm: sha256WithRSAEncryption 52:e9:50:d2:e6:8a:9b:4c:bf:5f:8c:0b:da:05:c1:d2:98:a1: c0:a3:6c:c5:91:47:52:2b:62:6f:98:69:81:47:1e:1a:63:c3: 40:f1:31:36:bc:58:c3:9e:78:3b:5c:a4:cb:23:ad:84:da:0b: f4:85:a9:13:6e:a4:9a:0e:3c:1d:31:65:20:20:91:d2:7f:37: 5b:1a:3c:ff:35:d0:fc:cc:56:11:0a:7c:98:3a:6a:22:50:f1: e3:46:56:84:ba:d4:0e:2b:42:1a:ea:63:83:6c:1f:db:8e:64: db:f1:d5:a4:d9:76:d2:63:df:ce:83:fa:af:33:db:8a:67:80: 8b:b7:b8:27:84:c9:ef:bd:40:7a:b9:c1:6d:90:90:3e:60:71: 28:77:ac:91:bc:12:6a:bd:a9:d9:d5:36:85:15:89:0e:85:0d: 7b:a0:88:5e:c3:c5:1b:c0:b4:be:ae:85:b3:15:54:72:09:f7: 8b:c5:80:29:27:16:b5:e6:d3:67:51:e3:bb:48:6f:40:82:e6: 55:a8:ab:5c:62:8e:4c:ed:7e:5b:7f:33:0a:c7:21:3e:1a:7b: 58:5f:27:bf:53:75:ee:db:26:23:86:05:55:b6:ad:0a:6b:09: e9:ae:50:bf:68:d3:b9:53:b6:c6:bc:d4:53:c7:07:e5:e0:94: 85:9d:3d:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FWgjW0nCGpWa1X5gMJQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NjMzZmE2ZmM2NmI0MzYzOWMwNTZkMDIxNzRmODBjMjQy NjYxNGIwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWY1NTk1ZTkwZDQwYTJhZGU4NTc2MzgzMGVkMzMxODdkYWYwNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0olOsFWhPvL3jJ0+qoPYS+i1OT+A JQNnLc9zMT2SrtjKURBai+AKAAIOL8+dHiPDAzfTbjPSiGdkrAlTd2zjV3EnDNyn uR3UtZxQR1M8CS42EolbEsoQtjpDrH59enVdc0pvL3kuK0azJdZxh2VB24hIg8WH S4H7pWxaz6qVBUe9uFcApdqjSISY5b2ZaBqOBLi20XOEHMWGpyVvycqGiqjDP+9C 35UtBrrU8b9FxoF8HjoF+uZ6Nsxh5ZPJO5fyx43ylwKrvQzaFBimzXn2fkjOqwWo 35jZ28a1zNA430zr3giyf0Dxrmf7H3ihLgAB/04UemJqH1uatGiuGlIR3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN71WV6Q1Aoq3oV2ODDtMxh9rwTuMB8GA1UdIwQY MBaAFMljP6b8ZrQ2OcBW0CF0+AwkJmFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVdNX3B2eG10RFk1d0ZiUUlYVDREQ1FtWVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85Y2IzMjktMGZlOS00ZmZlLWJlNWYt MDM4YTU0ZTM5MTJmLzEvM3ZWWlhwRFVDaXJlaFhZNE1PMHpHSDJ2Qk80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi85Y2IzMjktMGZlOS00ZmZlLWJlNWYtMDM4YTU0ZTM5MTJm LzEveVdNX3B2eG10RFk1d0ZiUUlYVDREQ1FtWVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaaMMA0G CSqGSIb3DQEBCwUAA4IBAQBS6VDS5oqbTL9fjAvaBcHSmKHAo2zFkUdSK2JvmGmB Rx4aY8NA8TE2vFjDnng7XKTLI62E2gv0hakTbqSaDjwdMWUgIJHSfzdbGjz/NdD8 zFYRCnyYOmoiUPHjRlaEutQOK0Ia6mODbB/bjmTb8dWk2XbSY9/Og/qvM9uKZ4CL t7gnhMnvvUB6ucFtkJA+YHEod6yRvBJqvanZ1TaFFYkOhQ17oIhew8UbwLS+roWz FVRyCfeLxYApJxa15tNnUeO7SG9AguZVqKtcYo5M7X5bfzMKxyE+GntYXye/U3Xu 2yYjhgVVtq0KawnprlC/aNO5U7bGvNRTxwfl4JSFnT30 -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:25 2026 by rpki-client