This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/3A7selqAvOAe0_qgDt52j-PXoUo.roa File: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (raw, json) Hash identifier: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE= Subject key identifier: DC:0E:EC:7A:5A:80:BC:E0:1E:D3:FA:A0:0E:DE:76:8F:E3:D7:A1:4A Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019B77C6BF09A0C26B51D2F398E4EE7C32D1 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/3A7selqAvOAe0_qgDt52j-PXoUo.roa Signing time: Thu 01 Jan 2026 04:17:52 +0000 ROA not before: Thu 01 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215762 IP address blocks: 92.60.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bf:09:a0:c2:6b:51:d2:f3:98:e4:ee:7c:32:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc0eec7a5a80bce01ed3faa00ede768fe3d7a14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e2:23:b9:41:24:56:7b:de:85:13:5f:32:d0: e4:4d:e1:f5:71:aa:7a:ba:38:d2:9f:78:d6:16:e5: 99:56:e2:d6:2b:3f:4f:f4:93:9a:3c:12:ba:22:87: b3:f5:e1:21:ba:2e:43:70:d4:14:ae:5f:8d:73:0d: 14:d5:26:03:de:40:f2:17:3b:9f:54:a6:4a:f3:04: de:9f:4e:12:54:37:9e:6a:09:19:b9:a1:2b:61:77: 83:18:55:86:5a:ca:25:10:e0:3c:e5:8e:2a:19:f9: 5e:37:55:7b:84:3f:a6:62:b6:40:02:5c:8f:e6:38: f0:2e:e5:52:c7:a9:74:f5:c8:d4:e2:77:4b:b4:22: 68:99:80:59:55:cc:df:dc:70:9b:b6:73:31:aa:33: 32:c9:74:74:88:5d:0f:54:dc:31:9d:33:09:b1:b2: 95:de:0c:ea:d0:d2:31:7e:16:ab:fb:92:d8:6b:23: 20:43:08:08:92:6d:51:56:3d:89:b5:b7:b2:86:7e: 82:86:20:c5:35:da:9c:7a:27:d0:5d:b5:20:e0:78: cc:dc:c3:44:5c:65:be:ce:43:57:4a:5c:99:12:5a: 94:89:7c:e4:18:d1:0d:03:ac:0b:d9:76:3c:0f:e8: 7f:08:88:3f:fc:96:a9:a7:fd:96:a7:f4:13:9e:32: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0E:EC:7A:5A:80:BC:E0:1E:D3:FA:A0:0E:DE:76:8F:E3:D7:A1:4A X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/3A7selqAvOAe0_qgDt52j-PXoUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.60.79.0/24 Signature Algorithm: sha256WithRSAEncryption 85:ef:bb:0f:a7:19:6c:bc:02:a9:f1:1a:6f:08:1e:04:64:42: 45:86:9f:a4:26:17:a6:b0:24:ca:a2:cb:92:49:12:90:1b:c7: 09:f5:77:0c:05:f8:1e:e4:00:d1:09:eb:28:10:5a:9b:86:2f: 1b:8d:c2:d1:19:98:8d:74:a2:1a:94:d1:eb:ba:68:56:54:3b: 9a:65:7f:f6:47:65:ca:25:b5:55:de:38:7d:59:f0:ee:57:5b: e1:79:94:78:a7:1e:af:fc:e6:81:e8:10:a4:3d:b2:4a:3e:a8: 03:37:c2:3e:69:77:9b:7c:e8:a3:46:e6:e3:a9:74:0e:50:6f: 2c:37:b0:a1:1d:c4:fe:c3:bf:a0:a4:38:70:10:20:15:c7:5d: 27:7c:e9:b3:38:75:6e:2e:53:96:fe:2e:7a:09:aa:fc:fe:93: 60:a1:1f:24:bc:a4:6a:2d:18:df:81:3d:a4:ed:9d:46:fc:1d: b5:4e:4e:3d:ed:48:f8:f3:45:db:17:2c:e2:9b:0b:77:5d:1b: e7:85:ab:29:e1:38:0d:07:f1:1b:d5:3b:f5:a0:20:2c:53:a4: 6f:c1:42:68:97:f3:cb:75:8e:15:e2:b6:a9:e4:03:5c:40:4d: 76:26:40:f9:48:8a:42:20:cc:f3:26:a1:c0:c0:95:08:06:0d: 38:01:34:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xr8JoMJrUdLzmOTufDLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzBlZWM3YTVhODBiY2UwMWVkM2ZhYTAwZWRlNzY4ZmUzZDdhMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uIjuUEkVnvehRNfMtDkTeH1cap6 ujjSn3jWFuWZVuLWKz9P9JOaPBK6Ioez9eEhui5DcNQUrl+Ncw0U1SYD3kDyFzuf VKZK8wTen04SVDeeagkZuaErYXeDGFWGWsolEOA85Y4qGfleN1V7hD+mYrZAAlyP 5jjwLuVSx6l09cjU4ndLtCJomYBZVczf3HCbtnMxqjMyyXR0iF0PVNwxnTMJsbKV 3gzq0NIxfhar+5LYayMgQwgIkm1RVj2Jtbeyhn6ChiDFNdqceifQXbUg4HjM3MNE XGW+zkNXSlyZElqUiXzkGNENA6wL2XY8D+h/CIg//Japp/2Wp/QTnjJsYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwO7HpagLzgHtP6oA7edo/j16FKMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvM0E3c2VscUF2T0FlMF9xZ0R0NTJqLVBYb1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDxPMA0G CSqGSIb3DQEBCwUAA4IBAQCF77sPpxlsvAKp8RpvCB4EZEJFhp+kJhemsCTKosuS SRKQG8cJ9XcMBfge5ADRCesoEFqbhi8bjcLRGZiNdKIalNHrumhWVDuaZX/2R2XK JbVV3jh9WfDuV1vheZR4px6v/OaB6BCkPbJKPqgDN8I+aXebfOijRubjqXQOUG8s N7ChHcT+w7+gpDhwECAVx10nfOmzOHVuLlOW/i56Car8/pNgoR8kvKRqLRjfgT2k 7Z1G/B21Tk497Uj480XbFyzimwt3XRvnhasp4TgNB/Eb1Tv1oCAsU6RvwUJol/PL dY4V4rap5ANcQE12JkD5SIpCIMzzJqHAwJUIBg04ATQL -----END CERTIFICATE-----Generated at Fri Jan 23 12:53:51 2026 by rpki-client