This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/3tDgZldpwVKudiZgfUwgKb4zld4.roa File: 3tDgZldpwVKudiZgfUwgKb4zld4.roa (raw, json) Hash identifier: kPvU5pGV0e7Ywu28DoML3GY9UgWxXdJkZJTnwzyFHKc= Subject key identifier: DE:D0:E0:66:57:69:C1:52:AE:76:26:60:7D:4C:20:29:BE:33:95:DE Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Certificate serial: 019B7F850FFDBD303F00A9BB92485A5CF57D Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/3tDgZldpwVKudiZgfUwgKb4zld4.roa Signing time: Fri 02 Jan 2026 16:23:05 +0000 ROA not before: Fri 02 Jan 2026 16:23:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202 IP address blocks: 195.66.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0f:fd:bd:30:3f:00:a9:bb:92:48:5a:5c:f5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Validity Not Before: Jan 2 16:23:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ded0e0665769c152ae7626607d4c2029be3395de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:e4:8c:1c:20:0d:c2:6d:1f:10:4a:7e:20: 58:80:ce:22:58:10:55:30:b2:e6:f5:ac:4a:e3:ce: 08:d4:bb:3b:80:1e:a5:e1:14:69:95:60:e3:c1:ab: 90:42:32:55:9c:8e:7e:c6:a3:03:91:7c:f4:77:c7: af:aa:2f:d6:1c:02:8e:d4:21:9e:83:b6:71:29:ce: d8:b8:a5:d3:b8:f4:4d:84:fe:17:7d:1d:9e:b9:37: 95:22:4c:23:6b:68:9a:7f:42:dc:a8:19:30:d8:94: eb:25:04:69:52:6d:43:86:bd:7a:ae:bf:3c:e1:0d: fb:63:42:72:2b:9a:b2:0d:f2:d1:37:5b:75:22:c1: 2e:7e:ae:bd:ca:c9:6d:86:81:69:38:66:cd:b4:90: 55:8b:60:e7:47:3e:d2:86:cc:d7:79:e5:1d:e7:31: 8d:86:4a:e0:2f:b8:80:2b:2d:21:a5:41:7a:30:79: f9:df:c0:89:c3:56:f6:9f:44:14:01:df:ac:ad:ea: f4:a8:d3:47:22:d9:dc:1f:e4:5b:71:f1:4b:36:c9: bc:1e:31:5d:c8:35:d8:d6:ca:f4:2c:1e:cc:96:81: 23:61:a7:71:3a:4f:43:36:44:e8:cf:c2:13:c3:f7: 6a:89:1e:33:39:98:5e:dd:d4:7c:53:ff:7a:ee:de: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D0:E0:66:57:69:C1:52:AE:76:26:60:7D:4C:20:29:BE:33:95:DE X509v3 Authority Key Identifier: keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/3tDgZldpwVKudiZgfUwgKb4zld4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.107.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:bc:8e:62:50:64:1c:07:62:25:8c:42:7d:ec:38:82:e8:cd: 9c:22:a2:3c:88:4f:7d:21:f3:4d:23:92:72:6d:2f:45:3f:21: 68:45:19:38:6f:ee:34:a0:42:2a:3e:50:3d:93:3c:b5:ed:a4: 8b:24:b9:04:a2:01:5b:50:8c:5e:0b:de:2e:40:d3:20:55:f9: 37:26:bc:08:8e:9d:68:d7:39:7f:ef:bf:b6:1d:94:3a:ac:a8: f9:4a:fa:a3:16:91:a2:98:3c:69:c6:ba:28:d1:08:c5:17:62: 6f:ab:22:be:d0:1e:39:93:d8:65:f7:7c:f2:dc:88:f1:99:7f: ab:4b:30:a8:99:e5:0f:fc:98:ef:d4:ec:70:da:92:a7:0a:4f: be:9a:34:c8:db:70:d5:d7:04:91:24:ce:a9:07:e5:2a:0b:b8: df:65:bd:1b:55:2a:01:d6:cb:a9:8e:fb:db:f7:c4:49:e3:ae: 3d:7d:f0:29:bc:b2:b4:d2:cb:9b:8b:01:fd:45:35:1f:02:24: 33:e2:b6:90:e6:51:aa:37:9c:af:9b:ab:23:e9:e2:eb:ee:a7: f2:dd:84:a7:ce:8f:b1:3a:2c:35:42:17:71:3e:9d:66:46:2a: c1:c3:5a:c6:3b:03:95:f5:cf:74:d8:e2:d9:e2:f2:f5:90:e0: f8:65:46:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQ/9vTA/AKm7kkhaXPV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw YTY4YjgwHhcNMjYwMTAyMTYyMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQwZTA2NjU3NjljMTUyYWU3NjI2NjA3ZDRjMjAyOWJlMzM5NWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHjkjBwgDcJtHxBKfiBYgM4iWBBV MLLm9axK484I1Ls7gB6l4RRplWDjwauQQjJVnI5+xqMDkXz0d8evqi/WHAKO1CGe g7ZxKc7YuKXTuPRNhP4XfR2euTeVIkwja2iaf0LcqBkw2JTrJQRpUm1Dhr16rr88 4Q37Y0JyK5qyDfLRN1t1IsEufq69yslthoFpOGbNtJBVi2DnRz7ShszXeeUd5zGN hkrgL7iAKy0hpUF6MHn538CJw1b2n0QUAd+srer0qNNHItncH+RbcfFLNsm8HjFd yDXY1sr0LB7MloEjYadxOk9DNkToz8ITw/dqiR4zOZhe3dR8U/967t49AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7Q4GZXacFSrnYmYH1MICm+M5XeMB8GA1UdIwQY MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt MzEzZWZlYjBiMTlkLzEvM3REZ1psZHB3Vkt1ZGlaZ2ZVd2dLYjR6bGQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JrMA0G CSqGSIb3DQEBCwUAA4IBAQCOvI5iUGQcB2IljEJ97DiC6M2cIqI8iE99IfNNI5Jy bS9FPyFoRRk4b+40oEIqPlA9kzy17aSLJLkEogFbUIxeC94uQNMgVfk3JrwIjp1o 1zl/77+2HZQ6rKj5SvqjFpGimDxpxroo0QjFF2JvqyK+0B45k9hl93zy3IjxmX+r SzComeUP/Jjv1Oxw2pKnCk++mjTI23DV1wSRJM6pB+UqC7jfZb0bVSoB1supjvvb 98RJ4649ffApvLK00subiwH9RTUfAiQz4raQ5lGqN5yvm6sj6eLr7qfy3YSnzo+x Oiw1QhdxPp1mRirBw1rGOwOV9c902OLZ4vL1kOD4ZUZH -----END CERTIFICATE-----Generated at Tue Jan 20 23:14:23 2026 by rpki-client