This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/iPr-3aReS8Bu8jQGyImbje9HCkg.roa File: iPr-3aReS8Bu8jQGyImbje9HCkg.roa (raw, json) Hash identifier: t3TDjx6zAVg15JUtNTbV0PPEzsmUJJtEmJ9z73yjKGk= Subject key identifier: 88:FA:FE:DD:A4:5E:4B:C0:6E:F2:34:06:C8:89:9B:8D:EF:47:0A:48 Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a Certificate serial: 019B7EA5357A73E3D9FD68D3B75CB132C1AA Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/iPr-3aReS8Bu8jQGyImbje9HCkg.roa Signing time: Fri 02 Jan 2026 12:18:34 +0000 ROA not before: Fri 02 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43641 IP address blocks: 185.23.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:35:7a:73:e3:d9:fd:68:d3:b7:5c:b1:32:c1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a Validity Not Before: Jan 2 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88fafedda45e4bc06ef23406c8899b8def470a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:81:7a:62:51:16:9e:c8:01:84:9a:c0:e6: 92:c6:03:2c:26:f9:63:e8:eb:19:a3:72:d4:6c:66: 55:f6:17:67:d4:f0:1a:ae:a8:3d:90:85:17:86:05: 2c:09:4f:36:ab:f6:c3:d7:02:74:38:10:92:50:72: 88:c8:cc:c0:60:4a:dc:51:d1:ca:94:ea:08:c3:6c: a0:e7:2a:80:79:db:1a:54:58:d0:c8:1d:69:ab:67: 9a:26:2d:ba:a3:af:76:65:49:ef:75:5a:bb:0b:42: 67:0f:a8:4f:ce:f7:d7:d8:42:ec:15:5b:05:64:58: 0a:70:14:b5:be:2d:7e:d8:27:74:9e:a9:4b:26:86: f6:c1:84:1b:9b:b9:27:5d:8d:5f:03:99:3d:f6:66: 88:5b:04:9f:4e:0c:4b:82:c0:0b:4e:62:ee:c8:d5: a6:e2:cf:fa:91:19:13:0d:cb:e3:5b:64:27:b8:74: 48:17:a2:dd:d7:78:4e:43:8f:00:e2:f3:6c:fb:74: 6d:d1:00:5a:55:33:17:1e:61:27:e1:fd:9c:2a:9d: d6:63:24:fd:ca:d2:32:77:92:2a:6d:6b:ae:b8:4d: 03:78:46:1d:4d:4f:20:9f:e7:e3:c7:2d:b3:68:2b: fd:e6:41:13:e1:bb:a7:68:bb:21:91:ae:8c:1d:19: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FA:FE:DD:A4:5E:4B:C0:6E:F2:34:06:C8:89:9B:8D:EF:47:0A:48 X509v3 Authority Key Identifier: keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/iPr-3aReS8Bu8jQGyImbje9HCkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.6.0/24 Signature Algorithm: sha256WithRSAEncryption 25:3e:eb:bb:bc:10:79:b1:b1:8f:d0:a5:8a:4f:67:a8:6b:8c: 42:9b:ba:56:03:1e:46:9e:02:b5:b2:65:ce:09:4e:2b:75:21: bd:c2:a0:67:53:12:fb:8c:f0:f6:5c:6c:05:82:7b:cc:ec:fe: 5d:2b:06:18:d7:58:78:ed:88:ed:ed:f2:7e:eb:aa:b2:28:55: 00:94:d3:1c:ae:a3:c5:da:a3:8c:04:74:35:ac:9d:b3:b0:ac: f8:8f:a6:a3:b2:cb:e7:9a:28:48:0d:7a:ad:e5:d4:06:76:55: 60:16:73:b6:32:1c:92:00:54:ee:13:08:f7:ee:ec:24:2f:a3: 11:08:42:e8:ea:b2:c8:2a:50:8e:af:cb:68:e4:d5:b5:4b:3c: 3a:79:b0:34:f5:49:59:79:7a:d9:71:c3:bc:48:78:2d:31:6b: 3f:ae:15:ec:db:d9:c1:06:0b:90:0f:95:b6:8f:4b:31:bd:2c: 0a:05:43:00:5a:27:f1:fb:82:cb:06:d6:c0:ab:31:73:77:fe: 57:fd:d3:dc:67:64:93:2c:e4:28:f1:8e:51:56:27:8e:ae:3b: c3:25:22:06:36:ac:89:9b:c9:50:f9:27:f1:67:26:0a:98:92: ce:3e:a6:ac:d2:7f:f2:83:4c:f7:99:13:00:a3:8d:d1:d9:4c: 36:af:c8:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pTV6c+PZ/WjTt1yxMsGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4 ZTcxNmEwHhcNMjYwMTAyMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGZhZmVkZGE0NWU0YmMwNmVmMjM0MDZjODg5OWI4ZGVmNDcwYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGiBemJRFp7IAYSawOaSxgMsJvlj 6OsZo3LUbGZV9hdn1PAarqg9kIUXhgUsCU82q/bD1wJ0OBCSUHKIyMzAYErcUdHK lOoIw2yg5yqAedsaVFjQyB1pq2eaJi26o692ZUnvdVq7C0JnD6hPzvfX2ELsFVsF ZFgKcBS1vi1+2Cd0nqlLJob2wYQbm7knXY1fA5k99maIWwSfTgxLgsALTmLuyNWm 4s/6kRkTDcvjW2QnuHRIF6Ld13hOQ48A4vNs+3Rt0QBaVTMXHmEn4f2cKp3WYyT9 ytIyd5IqbWuuuE0DeEYdTU8gn+fjxy2zaCv95kET4bunaLshka6MHRnAZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIj6/t2kXkvAbvI0BsiJm43vRwpIMB8GA1UdIwQY MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct YzEzMzFmNDlmYzA5LzEvaVByLTNhUmVTOEJ1OGpRR3lJbWJqZTlIQ2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5 LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRcGMA0G CSqGSIb3DQEBCwUAA4IBAQAlPuu7vBB5sbGP0KWKT2eoa4xCm7pWAx5GngK1smXO CU4rdSG9wqBnUxL7jPD2XGwFgnvM7P5dKwYY11h47Yjt7fJ+66qyKFUAlNMcrqPF 2qOMBHQ1rJ2zsKz4j6ajssvnmihIDXqt5dQGdlVgFnO2MhySAFTuEwj37uwkL6MR CELo6rLIKlCOr8to5NW1Szw6ebA09UlZeXrZccO8SHgtMWs/rhXs29nBBguQD5W2 j0sxvSwKBUMAWifx+4LLBtbAqzFzd/5X/dPcZ2STLOQo8Y5RVieOrjvDJSIGNqyJ m8lQ+SfxZyYKmJLOPqas0n/yg0z3mRMAo43R2Uw2r8jL -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:53 2026 by rpki-client