This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/3JE5IBF1RwXaYJqMFwkfaoIstzQ.roa File: 3JE5IBF1RwXaYJqMFwkfaoIstzQ.roa (raw, json) Hash identifier: SxvSdI16VeKPXacLE+lgRC3BQtd0Jz4a4re/IdaqZNE= Subject key identifier: DC:91:39:20:11:75:47:05:DA:60:9A:8C:17:09:1F:6A:82:2C:B7:34 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7653A79023C31E7AE8C809CB2CF0C Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/3JE5IBF1RwXaYJqMFwkfaoIstzQ.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213151 IP address blocks: 185.197.135.0/24 maxlen: 24 2a06:e881:7300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:65:3a:79:02:3c:31:e7:ae:8c:80:9c:b2:cf:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc91392011754705da609a8c17091f6a822cb734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:cf:6a:3e:99:b7:b4:37:91:fa:57:3b:29: a8:ad:67:ce:5e:3c:4b:65:c5:35:00:ed:8d:96:85: 8a:ab:a2:3e:a3:93:2c:d2:48:a8:3a:92:cc:fb:00: c0:6e:17:46:85:83:e7:c6:31:0b:ed:fd:89:f2:0a: 10:bf:be:82:da:b5:36:35:40:a2:3f:26:b0:0e:14: a1:27:66:b7:6d:59:d1:91:84:a5:70:30:6d:13:74: 4a:74:01:aa:1c:36:c1:d3:85:6d:72:99:48:af:eb: 5c:c1:bb:11:51:a5:ad:67:52:ef:da:47:00:02:99: 69:bc:4c:ba:c2:f9:f0:62:57:69:85:cc:50:c6:db: 11:34:a7:87:3e:39:75:ef:f4:50:48:de:a0:e6:02: ce:63:02:2f:39:35:1f:e3:e6:c1:c4:ff:27:54:68: 8e:52:78:e4:bb:de:91:94:7b:ca:7d:ab:09:73:bb: 57:a6:38:2d:8d:79:31:05:a6:2c:42:18:7a:c7:70: 98:a3:a5:6b:41:18:b6:2f:c2:26:e7:5e:44:43:d0: e9:cd:c6:74:30:44:17:da:06:01:f2:08:c4:d2:21: 21:1d:36:95:37:41:06:ed:b2:98:57:2e:4b:7f:82: 2b:c4:60:b2:0b:35:c7:d4:f8:f3:e3:98:93:de:88: de:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:91:39:20:11:75:47:05:DA:60:9A:8C:17:09:1F:6A:82:2C:B7:34 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/3JE5IBF1RwXaYJqMFwkfaoIstzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.135.0/24 IPv6: 2a06:e881:7300::/40 Signature Algorithm: sha256WithRSAEncryption 48:61:30:e8:52:74:fb:22:88:b8:92:ae:bc:2b:52:f8:63:e8: 71:39:2c:03:c6:52:bf:6a:dd:c5:c6:02:ef:91:b8:fe:da:75: 27:d7:8c:1f:33:54:1f:9f:a4:98:d5:32:55:f9:58:bc:50:1f: 3a:f1:71:be:33:2e:71:c2:46:78:7e:4c:3f:ac:88:56:f5:2c: 00:5f:ad:7d:04:6f:a5:66:69:e2:3d:50:69:48:7c:7b:67:b1: aa:cb:46:cc:59:c0:48:7c:d0:dd:54:9c:31:1a:b2:1a:ab:a2: ee:6c:96:7f:46:cf:90:08:69:f3:00:02:38:a1:b5:39:c3:8c: 51:65:38:87:da:de:07:8c:9a:4c:aa:ef:74:45:50:4f:22:08: 4b:68:5a:22:be:9c:31:c5:e8:5b:f8:32:02:06:99:6e:ed:c9: 8b:4f:8f:b7:5c:06:20:c1:9b:9f:d2:8d:ca:d0:dc:62:cf:b4: 6a:d3:dd:d3:75:61:26:88:03:af:bd:be:2b:59:98:57:3b:fd: 8c:66:f9:14:92:5a:6b:2f:6f:12:05:a2:d4:06:e1:75:e9:bd: d4:96:6c:21:e6:1a:46:dc:ac:5f:59:be:87:29:68:26:04:be: 7a:b5:e2:b9:4b:41:88:45:5b:5c:38:53:e3:62:ad:f3:2a:5b: 37:d3:ed:e2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+p2U6eQI8MeeujICcss8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzkxMzkyMDExNzU0NzA1ZGE2MDlhOGMxNzA5MWY2YTgyMmNiNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7HPaj6Zt7Q3kfpXOymorWfOXjxL ZcU1AO2NloWKq6I+o5Ms0kioOpLM+wDAbhdGhYPnxjEL7f2J8goQv76C2rU2NUCi PyawDhShJ2a3bVnRkYSlcDBtE3RKdAGqHDbB04VtcplIr+tcwbsRUaWtZ1Lv2kcA AplpvEy6wvnwYldphcxQxtsRNKeHPjl17/RQSN6g5gLOYwIvOTUf4+bBxP8nVGiO Unjku96RlHvKfasJc7tXpjgtjXkxBaYsQhh6x3CYo6VrQRi2L8Im515EQ9DpzcZ0 MEQX2gYB8gjE0iEhHTaVN0EG7bKYVy5Lf4IrxGCyCzXH1Pjz45iT3ojeRQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFNyROSARdUcF2mCajBcJH2qCLLc0MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvM0pFNUlCRjFSd1hhWUpxTUZ3a2Zhb0lzdHpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAucWHMA4E AgACMAgDBgAqBuiBczANBgkqhkiG9w0BAQsFAAOCAQEASGEw6FJ0+yKIuJKuvCtS +GPocTksA8ZSv2rdxcYC75G4/tp1J9eMHzNUH5+kmNUyVflYvFAfOvFxvjMuccJG eH5MP6yIVvUsAF+tfQRvpWZp4j1QaUh8e2exqstGzFnASHzQ3VScMRqyGqui7myW f0bPkAhp8wACOKG1OcOMUWU4h9reB4yaTKrvdEVQTyIIS2haIr6cMcXoW/gyAgaZ bu3Ji0+Pt1wGIMGbn9KNytDcYs+0atPd03VhJogDr72+K1mYVzv9jGb5FJJaay9v EgWi1Abhdem91JZsIeYaRtysX1m+hyloJgS+erXiuUtBiEVbXDhT42Kt8ypbN9Pt 4g== -----END CERTIFICATE-----Generated at Tue Jan 13 02:11:59 2026 by rpki-client