This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa File: gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa (raw, json) Hash identifier: yBwTOvwiLlTbqshsC+5AZzg1Ya/CKAPiEghYIW9dRIk= Subject key identifier: 81:00:F7:31:4E:D3:06:91:22:3A:31:7D:4A:A4:C9:91:1D:98:DC:79 Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec Certificate serial: 019B7E3937B539E3D67C6DC3922221501500 Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 212.4.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:37:b5:39:e3:d6:7c:6d:c3:92:22:21:50:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8100f7314ed30691223a317d4aa4c9911d98dc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:20:63:f4:6e:2d:db:41:5a:06:a7:53:af: de:c1:ab:5d:b3:a3:14:a4:d1:42:cc:eb:bf:e9:db: e5:a1:46:83:2a:80:da:58:c2:c3:6e:66:91:b4:9b: 97:9a:51:3d:a3:40:35:05:2a:52:63:d4:34:c1:73: 00:c7:b2:c6:ac:dd:49:95:09:66:65:84:f1:21:86: f6:31:13:ad:e8:35:43:ed:2d:dd:e8:57:7b:b9:2d: 78:88:8f:bc:d4:43:c6:3a:1b:0a:d3:38:20:38:0c: d1:3c:fe:8f:01:ef:71:bb:bf:c5:4f:c9:6a:53:7f: 28:ee:83:15:f6:46:43:cf:7d:bf:d7:86:dc:79:0e: a4:9a:fa:e4:a7:5a:5e:d3:5f:e2:35:db:61:64:9f: 82:e5:4c:b9:3b:bd:7e:59:8f:1f:fc:92:7f:37:59: 7e:b4:e3:09:41:32:30:f1:1b:79:46:fc:65:5f:0f: e7:95:f6:1c:ee:6b:6a:26:bf:52:bf:d8:62:92:1b: 0c:c3:c1:e0:db:3d:21:ef:39:e5:32:85:5f:b7:03: c2:e9:2c:8b:f5:89:33:c3:8c:dc:13:1c:5b:58:a5: e2:5e:9d:3f:0c:50:13:fe:3f:c9:a7:d9:a8:0f:13: e5:dd:6b:9c:5a:40:38:40:32:34:70:c9:8f:4c:54: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:00:F7:31:4E:D3:06:91:22:3A:31:7D:4A:A4:C9:91:1D:98:DC:79 X509v3 Authority Key Identifier: keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.4.240.0/22 Signature Algorithm: sha256WithRSAEncryption 95:47:18:ef:dd:7c:4d:4a:18:f1:84:f0:21:1a:d3:32:6b:fa: 60:08:2c:b7:ca:27:5a:2c:5b:94:22:83:8e:70:cf:8b:d9:b6: f6:47:55:79:0a:18:47:54:fc:c4:d7:dd:bf:88:89:df:34:1d: 11:d2:cf:46:a0:73:78:61:2f:fe:90:44:5d:bb:d5:1e:f0:ad: a8:bd:11:8d:cc:c9:57:cc:96:c3:16:88:58:12:b5:be:93:8a: 82:2d:9e:b1:ca:cb:c2:10:c8:1a:49:18:82:23:53:63:cb:c5: 9d:76:cc:ef:fe:29:2f:a7:eb:1a:bf:05:70:9d:63:9a:c6:38: 62:7a:23:51:a9:42:31:05:c1:86:40:49:63:f2:0f:29:a6:95: 8d:46:d4:ba:e0:d9:e7:bd:d9:59:52:52:cb:9d:20:ed:9c:62: 6c:ef:3e:f7:c4:1c:fd:6c:a1:d9:56:c9:7f:09:95:75:22:58: 6f:41:9e:e6:55:ab:44:da:24:88:95:9f:a3:84:00:d2:d2:18: 5d:0b:e1:7a:0a:e8:2b:8c:62:2d:92:2f:59:0b:28:6d:bb:ac: bf:3f:9a:b3:23:7d:a1:0c:43:58:e4:fb:9c:70:88:59:d6:93: 3b:07:a3:86:ae:64:a6:f7:22:a2:ea:94:35:4d:2a:cf:10:04: 46:d8:40:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTe1OePWfG3DkiIhUBUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZjhhNDBjNmEyYzY5OTNjOWZiZTgxZGYzZWE3ZGQzNzJm OTZkZWMwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTAwZjczMTRlZDMwNjkxMjIzYTMxN2Q0YWE0Yzk5MTFkOThkYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDMgY/RuLdtBWganU6/ewatds6MU pNFCzOu/6dvloUaDKoDaWMLDbmaRtJuXmlE9o0A1BSpSY9Q0wXMAx7LGrN1JlQlm ZYTxIYb2MROt6DVD7S3d6Fd7uS14iI+81EPGOhsK0zggOAzRPP6PAe9xu7/FT8lq U38o7oMV9kZDz32/14bceQ6kmvrkp1pe01/iNdthZJ+C5Uy5O71+WY8f/JJ/N1l+ tOMJQTIw8Rt5RvxlXw/nlfYc7mtqJr9Sv9hikhsMw8Hg2z0h7znlMoVftwPC6SyL 9Ykzw4zcExxbWKXiXp0/DFAT/j/Jp9moDxPl3WucWkA4QDI0cMmPTFSBVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIEA9zFO0waRIjoxfUqkyZEdmNx5MB8GA1UdIwQY MBaAFD34pAxqLGmTyfvoHfPqfdNy+W3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZpa0RHb3NhWlBKLS1nZDgtcDkwM0w1YmV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTY2ODctN2E0NC00MGQ4LTk5M2Yt ODk1YTVhMzkyNDM4LzEvZ1FEM01VN1RCcEVpT2pGOVNxVEprUjJZM0hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8zZTY2ODctN2E0NC00MGQ4LTk5M2YtODk1YTVhMzkyNDM4 LzEvUGZpa0RHb3NhWlBKLS1nZDgtcDkwM0w1YmV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1ATwMA0G CSqGSIb3DQEBCwUAA4IBAQCVRxjv3XxNShjxhPAhGtMya/pgCCy3yidaLFuUIoOO cM+L2bb2R1V5ChhHVPzE192/iInfNB0R0s9GoHN4YS/+kERdu9Ue8K2ovRGNzMlX zJbDFohYErW+k4qCLZ6xysvCEMgaSRiCI1Njy8Wddszv/ikvp+savwVwnWOaxjhi eiNRqUIxBcGGQElj8g8pppWNRtS64NnnvdlZUlLLnSDtnGJs7z73xBz9bKHZVsl/ CZV1IlhvQZ7mVatE2iSIlZ+jhADS0hhdC+F6CugrjGItki9ZCyhtu6y/P5qzI32h DENY5PuccIhZ1pM7B6OGrmSm9yKi6pQ1TSrPEARG2EDE -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:21 2026 by rpki-client