This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/prR3St_T-JCudPoZgk4y2vYURI8.roa File: prR3St_T-JCudPoZgk4y2vYURI8.roa (raw, json) Hash identifier: 1HOWJUzi0cuRKIHRjrvVgn5q7O99JRjdWW0TYvqs9a4= Subject key identifier: A6:B4:77:4A:DF:D3:F8:90:AE:74:FA:19:82:4E:32:DA:F6:14:44:8F Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace Certificate serial: 019B7EA4DE2C36D25D3E8BD28E66FDDF19EE Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/prR3St_T-JCudPoZgk4y2vYURI8.roa Signing time: Fri 02 Jan 2026 12:18:12 +0000 ROA not before: Fri 02 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59701 IP address blocks: 79.171.144.0/21 maxlen: 24 185.147.72.0/22 maxlen: 22 195.5.160.0/24 maxlen: 24 2a06:d480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:de:2c:36:d2:5d:3e:8b:d2:8e:66:fd:df:19:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace Validity Not Before: Jan 2 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6b4774adfd3f890ae74fa19824e32daf614448f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:c5:73:3b:93:c4:0d:44:b7:8a:16:56:9b: 3c:da:69:ad:9a:48:91:45:9d:3c:f4:3a:c3:d6:89: 05:90:7c:aa:5a:9b:fc:2b:aa:c9:02:cf:8a:75:3a: 4e:5b:2b:e3:84:a3:8c:da:d8:5c:23:63:19:30:fd: 90:fb:6c:56:c8:bb:4c:a5:dc:86:51:5b:2c:11:4d: 9e:d7:3d:a4:ad:10:f3:bc:d7:ea:2b:8d:00:19:61: 1d:a9:eb:69:98:24:ab:00:e5:b7:1d:ee:4e:12:a5: a4:5f:d2:01:51:9e:90:27:f6:49:80:62:11:34:60: 37:e0:45:fd:81:47:02:bf:c9:a0:2a:01:81:4a:02: 1a:a9:ed:ae:84:48:da:00:37:73:55:c8:8c:ae:32: 03:bf:0f:05:50:a5:b3:c7:dd:e0:88:80:65:38:47: bc:a9:71:d6:6b:3a:e3:1f:3a:32:5a:ed:a3:b0:5b: ee:b7:bb:b9:ea:f6:b9:90:26:8a:b5:09:46:7b:7c: 10:14:45:b6:a8:9f:c5:9f:e9:ca:70:6c:82:78:2d: 8f:e1:6d:f6:f6:de:4b:2f:9e:c1:6b:d0:03:57:3a: ea:f2:4d:03:18:bf:62:91:38:f5:ac:3c:ba:f7:54: 1d:e9:b6:60:b1:df:04:7e:b5:bc:06:0f:5c:41:bc: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B4:77:4A:DF:D3:F8:90:AE:74:FA:19:82:4E:32:DA:F6:14:44:8F X509v3 Authority Key Identifier: keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/prR3St_T-JCudPoZgk4y2vYURI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.144.0/21 185.147.72.0/22 195.5.160.0/24 IPv6: 2a06:d480::/29 Signature Algorithm: sha256WithRSAEncryption 52:94:db:ae:6c:af:3f:ed:81:23:43:b0:c9:e6:b5:23:a6:4d: 50:4d:dc:fe:a1:4f:63:e4:c8:b8:09:dd:8f:e0:90:87:98:ee: 6a:c8:69:5c:29:aa:f9:a1:6f:7c:2c:0b:b3:7e:e0:9c:d1:76: 7d:06:7a:09:62:61:79:27:3f:35:ff:3f:93:39:2c:a9:72:45: f8:73:1b:c9:2f:c4:52:fe:da:5b:97:61:e4:3b:1a:f4:a9:7e: 50:78:84:1c:de:bc:b5:f7:37:03:52:79:fa:41:23:98:2a:e2: 88:65:4f:a5:01:21:3e:1a:0a:58:ca:e1:57:a3:a0:43:df:93: 96:87:8b:24:1d:a3:bd:19:5a:65:23:a7:3d:e8:e5:02:d8:7e: 95:ee:c9:f5:1b:c6:ca:cc:14:e6:26:6a:8a:a8:4a:29:08:92: fa:ae:09:eb:eb:81:ad:99:da:9c:52:bd:a2:53:03:c8:92:14: 1b:ef:7d:a1:d2:23:6a:10:6b:28:a4:5b:c0:62:b6:7b:26:a2: 0a:56:be:42:ff:1e:b7:2e:3c:bb:f7:17:ed:47:79:87:af:d3: ff:55:74:f2:23:50:f7:1a:0d:06:f1:67:34:25:51:1c:00:d8: c2:6b:8c:40:2f:7e:af:00:0d:a6:7d:5b:1e:3d:c5:36:b8:ad: cb:cc:57:02 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+pN4sNtJdPovSjmb93xnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjhkZTdjNDcwMmZlNTA5MzJkN2VjZGEyZjI3ODM5MWY0 YjlhY2UwHhcNMjYwMTAyMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmI0Nzc0YWRmZDNmODkwYWU3NGZhMTk4MjRlMzJkYWY2MTQ0NDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ/FczuTxA1Et4oWVps82mmtmkiR RZ089DrD1okFkHyqWpv8K6rJAs+KdTpOWyvjhKOM2thcI2MZMP2Q+2xWyLtMpdyG UVssEU2e1z2krRDzvNfqK40AGWEdqetpmCSrAOW3He5OEqWkX9IBUZ6QJ/ZJgGIR NGA34EX9gUcCv8mgKgGBSgIaqe2uhEjaADdzVciMrjIDvw8FUKWzx93giIBlOEe8 qXHWazrjHzoyWu2jsFvut7u56va5kCaKtQlGe3wQFEW2qJ/Fn+nKcGyCeC2P4W32 9t5LL57Ba9ADVzrq8k0DGL9ikTj1rDy691Qd6bZgsd8EfrW8Bg9cQbxJgQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKa0d0rf0/iQrnT6GYJOMtr2FESPMB8GA1UdIwQY MBaAFH1o3nxHAv5Qky1+zaLyeDkfS5rOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQt MGMwMjQ2YzZmNjIzLzEvcHJSM1N0X1QtSkN1ZFBvWmdrNHkydllVUkk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQtMGMwMjQ2YzZmNjIz LzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDT6uQAwQC uZNIAwQAwwWgMA0EAgACMAcDBQMqBtSAMA0GCSqGSIb3DQEBCwUAA4IBAQBSlNuu bK8/7YEjQ7DJ5rUjpk1QTdz+oU9j5Mi4Cd2P4JCHmO5qyGlcKar5oW98LAuzfuCc 0XZ9BnoJYmF5Jz81/z+TOSypckX4cxvJL8RS/tpbl2HkOxr0qX5QeIQc3ry19zcD Unn6QSOYKuKIZU+lASE+GgpYyuFXo6BD35OWh4skHaO9GVplI6c96OUC2H6V7sn1 G8bKzBTmJmqKqEopCJL6rgnr64GtmdqcUr2iUwPIkhQb732h0iNqEGsopFvAYrZ7 JqIKVr5C/x63Ljy79xftR3mHr9P/VXTyI1D3Gg0G8Wc0JVEcANjCa4xAL36vAA2m fVsePcU2uK3LzFcC -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:12 2026 by rpki-client