This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/3a5087TQuXLtLU0TnPpjZJvqS9I.roa File: 3a5087TQuXLtLU0TnPpjZJvqS9I.roa (raw, json) Hash identifier: W7pc5bNM5UrrA2Z/n6YN/oGLynRBVLV+c4/437P3dag= Subject key identifier: DD:AE:74:F3:B4:D0:B9:72:ED:2D:4D:13:9C:FA:63:64:9B:EA:4B:D2 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B12EADF0456F8C16980DAFF662C8D Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/3a5087TQuXLtLU0TnPpjZJvqS9I.roa Signing time: Fri 02 Jan 2026 06:17:59 +0000 ROA not before: Fri 02 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59763 IP address blocks: 79.124.88.0/23 maxlen: 24 79.124.91.0/24 maxlen: 24 79.124.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:12:ea:df:04:56:f8:c1:69:80:da:ff:66:2c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddae74f3b4d0b972ed2d4d139cfa63649bea4bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c2:40:db:0c:40:00:cc:9e:56:91:70:92:5a: 15:83:f8:fd:28:8c:9e:0a:7c:f7:70:4c:8e:1e:85: 9d:59:d2:bc:9d:66:2a:86:13:e9:f3:a9:03:b2:9d: 56:82:fb:d9:ac:9d:61:a3:19:e4:39:44:9a:d2:e8: dc:56:81:39:42:98:99:98:32:40:57:1e:95:fd:ce: 82:15:52:f7:c4:65:f4:3d:31:5d:c7:87:7f:59:8e: 72:92:e2:39:a9:90:45:89:fb:d7:39:e8:78:ce:f6: 4d:b1:4c:a4:6b:cd:4d:0c:d6:09:e6:c1:af:33:3c: 39:46:04:19:e9:f2:d5:89:46:2e:91:e8:e1:02:81: 03:7a:04:69:be:fe:1d:17:98:ee:38:d2:53:16:a6: 0c:34:63:a6:48:f5:bf:02:6a:e1:76:6a:a1:4e:d5: 4b:3e:6b:8a:c1:4e:1f:69:86:75:9d:d1:1f:a4:a2: f5:81:93:f2:f6:3b:be:ce:a7:f0:84:78:f2:b2:ba: 33:dc:3e:7b:d8:a0:86:c2:83:21:8f:65:e5:9f:ff: 16:89:bb:f7:ac:62:84:d3:07:79:e2:c6:34:1d:a4: 35:30:4e:6c:7a:19:10:88:c0:5c:bd:68:81:a3:f7: 26:4b:09:12:79:d5:bc:f8:63:4a:fd:58:d2:d7:ff: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AE:74:F3:B4:D0:B9:72:ED:2D:4D:13:9C:FA:63:64:9B:EA:4B:D2 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/3a5087TQuXLtLU0TnPpjZJvqS9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.124.88.0/23 79.124.91.0-79.124.95.255 Signature Algorithm: sha256WithRSAEncryption 9c:6a:f1:34:05:ef:a4:0f:89:bc:7a:ef:96:e3:ad:63:f1:1c: b1:10:31:c1:a7:bd:41:23:5b:fa:a0:51:96:fd:13:b8:b3:fb: 23:23:ca:ff:9c:35:69:d8:e4:5d:bd:a1:86:73:53:cf:8e:bd: 28:d3:65:fb:5f:3b:fc:f4:19:16:da:56:bd:81:c4:83:c0:ec: 37:6b:52:cf:1b:a9:ad:ea:52:b6:c3:b5:72:67:91:54:ec:ec: cd:40:46:bc:1d:e6:bb:09:01:b3:a9:1d:8a:45:59:a6:f6:e9: 33:ac:1b:2c:34:70:88:53:fd:a5:1b:98:31:8b:be:62:3f:08: af:ee:f7:73:e6:78:36:66:ff:05:c1:7a:88:73:ed:f8:69:3e: 7b:e4:08:a7:4f:27:eb:59:c3:94:29:5a:3b:e5:ee:d8:e7:f9: 16:9a:03:b7:65:5b:0b:1c:7a:50:8e:da:d9:c1:a7:16:e5:08: 99:66:15:c7:72:a8:85:36:ea:06:66:a0:85:63:ff:5f:e3:7c: 37:0f:26:d6:13:07:79:27:9a:42:ed:fb:28:da:3e:5d:30:d3: 25:41:1f:63:87:20:a7:6e:0c:f7:92:9a:85:a1:1f:b5:32:74: 48:f4:d4:97:2e:ee:4e:d2:08:3c:3e:ad:70:01:0d:8e:c9:b6: ed:8e:94:11 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9WxLq3wRW+MFpgNr/ZiyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGFlNzRmM2I0ZDBiOTcyZWQyZDRkMTM5Y2ZhNjM2NDliZWE0YmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisJA2wxAAMyeVpFwkloVg/j9KIye Cnz3cEyOHoWdWdK8nWYqhhPp86kDsp1WgvvZrJ1hoxnkOUSa0ujcVoE5QpiZmDJA Vx6V/c6CFVL3xGX0PTFdx4d/WY5ykuI5qZBFifvXOeh4zvZNsUyka81NDNYJ5sGv Mzw5RgQZ6fLViUYukejhAoEDegRpvv4dF5juONJTFqYMNGOmSPW/AmrhdmqhTtVL PmuKwU4faYZ1ndEfpKL1gZPy9ju+zqfwhHjysroz3D572KCGwoMhj2Xln/8Wibv3 rGKE0wd54sY0HaQ1ME5sehkQiMBcvWiBo/cmSwkSedW8+GNK/VjS1/86uQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFN2udPO00Lly7S1NE5z6Y2Sb6kvSMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvM2E1MDg3VFF1WEx0TFUwVG5QcGpaSnZxUzlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBT3xYMAwD BABPfFsDBAVPfEAwDQYJKoZIhvcNAQELBQADggEBAJxq8TQF76QPibx675bjrWPx HLEQMcGnvUEjW/qgUZb9E7iz+yMjyv+cNWnY5F29oYZzU8+OvSjTZftfO/z0GRba Vr2BxIPA7DdrUs8bqa3qUrbDtXJnkVTs7M1ARrwd5rsJAbOpHYpFWab26TOsGyw0 cIhT/aUbmDGLvmI/CK/u93PmeDZm/wXBeohz7fhpPnvkCKdPJ+tZw5QpWjvl7tjn +RaaA7dlWwscelCO2tnBpxblCJlmFcdyqIU26gZmoIVj/1/jfDcPJtYTB3knmkLt +yjaPl0w0yVBH2OHIKduDPeSmoWhH7UydEj01Jcu7k7SCDw+rXABDY7Jtu2OlBE= -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:09 2026 by rpki-client