This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3Jpz-IXWylJ624PGWiQbIwa7Wm0.roa File: 3Jpz-IXWylJ624PGWiQbIwa7Wm0.roa (raw, json) Hash identifier: MZhvVrPB1QFW3blJoMluf5CGngidoHw4x+/SYaCXCos= Subject key identifier: DC:9A:73:F8:85:D6:CA:52:7A:DB:83:C6:5A:24:1B:23:06:BB:5A:6D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C18A4AEB656F68EACEF78D0254B436F98 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3Jpz-IXWylJ624PGWiQbIwa7Wm0.roa Signing time: Sun 01 Feb 2026 09:59:31 +0000 ROA not before: Sun 01 Feb 2026 09:59:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.216.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:18:a4:ae:b6:56:f6:8e:ac:ef:78:d0:25:4b:43:6f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Feb 1 09:59:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc9a73f885d6ca527adb83c65a241b2306bb5a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:cb:7c:45:2d:9f:65:22:80:b3:65:44:5c: 53:58:7c:e1:b0:b6:67:8d:4e:e1:c5:06:b2:f3:53: 73:2f:fb:41:7c:2b:9a:09:a6:e2:dd:17:2e:ed:cf: 8d:2d:60:dd:8a:02:0f:5f:9f:1c:03:d4:34:1c:9e: b5:e5:99:24:c4:93:f0:6f:f6:ca:3c:92:d9:ee:48: a0:8b:c4:a0:eb:77:63:8f:11:63:7a:94:ec:42:fe: bd:a4:db:a6:af:aa:d7:3a:96:4f:35:39:7a:d6:da: 27:01:ee:91:9d:22:b1:53:f2:5c:2d:30:e9:48:dd: 7c:98:b7:96:2d:9a:25:92:ab:0b:0e:cc:36:61:5c: 67:32:ba:86:7c:45:c5:6b:61:e1:ed:09:d2:af:06: b8:23:78:62:43:b9:c0:e9:94:7a:84:76:1b:4f:c6: 69:b6:67:e4:97:d6:cb:19:27:b2:ac:8c:f7:90:85: c0:ef:3e:f3:a6:f9:b8:fc:49:5b:69:ed:42:33:9f: e2:22:7c:22:6f:d7:81:f7:ba:19:df:35:cf:4d:de: f5:33:b2:ac:52:3f:c8:f9:29:ef:33:67:f8:b4:2c: 1c:05:87:0d:72:c1:7c:c6:d0:8c:52:8b:93:0b:a3: 74:00:33:a7:b3:d9:22:d2:b9:83:2d:bd:34:da:23: 72:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9A:73:F8:85:D6:CA:52:7A:DB:83:C6:5A:24:1B:23:06:BB:5A:6D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3Jpz-IXWylJ624PGWiQbIwa7Wm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.70.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:e0:c5:7e:e1:08:72:40:d7:a1:82:a1:cb:3d:60:8d:e9:77: b5:f4:0c:d3:1d:05:a3:0e:7f:00:b2:44:7f:0d:aa:69:ac:d0: 18:73:8f:bf:a7:67:a7:b5:38:85:36:e5:75:21:17:c7:14:21: 57:2e:51:bf:61:70:0c:c3:16:c0:fe:61:a4:68:06:a2:15:45: 34:48:dd:39:f4:96:aa:e4:80:2e:58:ac:cc:35:d9:0e:68:f2: cc:69:43:74:da:9f:92:ed:b1:b6:9b:00:20:19:bc:58:5b:e3: 67:44:4b:d9:fe:19:87:14:0f:64:ce:cc:27:14:1b:f0:3b:30: 93:4a:c5:6d:2f:92:14:c8:7e:c2:41:01:42:89:ae:ac:7f:41: c1:51:f6:b3:12:70:5c:2b:6e:6a:48:0e:e0:9a:00:bc:a1:92: d2:1a:71:70:5e:b0:a5:84:ad:1d:01:65:38:f4:c0:95:52:15: ea:8d:59:ec:62:4d:87:79:45:91:07:83:c9:30:bd:6a:19:09: 4f:43:a3:eb:86:14:27:98:bb:ce:c4:2f:af:7b:2e:b9:13:89: 74:d6:7e:28:78:7a:fa:0d:49:ee:11:82:38:e4:89:8f:b2:54: 7c:e6:c6:b5:b0:f2:16:08:e9:0b:a3:0e:48:c9:38:06:17:40: 50:5f:23:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwYpK62VvaOrO940CVLQ2+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMjAxMDk1OTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzlhNzNmODg1ZDZjYTUyN2FkYjgzYzY1YTI0MWIyMzA2YmI1YTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7rLfEUtn2UigLNlRFxTWHzhsLZn jU7hxQay81NzL/tBfCuaCabi3Rcu7c+NLWDdigIPX58cA9Q0HJ615ZkkxJPwb/bK PJLZ7kigi8Sg63djjxFjepTsQv69pNumr6rXOpZPNTl61tonAe6RnSKxU/JcLTDp SN18mLeWLZolkqsLDsw2YVxnMrqGfEXFa2Hh7QnSrwa4I3hiQ7nA6ZR6hHYbT8Zp tmfkl9bLGSeyrIz3kIXA7z7zpvm4/Elbae1CM5/iInwib9eB97oZ3zXPTd71M7Ks Uj/I+SnvM2f4tCwcBYcNcsF8xtCMUouTC6N0ADOns9ki0rmDLb002iNyGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyac/iF1spSetuDxlokGyMGu1ptMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvM0pwei1JWFd5bEo2MjRQR1dpUWJJd2E3V20wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudhGMA0G CSqGSIb3DQEBCwUAA4IBAQA+4MV+4QhyQNehgqHLPWCN6Xe19AzTHQWjDn8AskR/ DapprNAYc4+/p2entTiFNuV1IRfHFCFXLlG/YXAMwxbA/mGkaAaiFUU0SN059Jaq 5IAuWKzMNdkOaPLMaUN02p+S7bG2mwAgGbxYW+NnREvZ/hmHFA9kzswnFBvwOzCT SsVtL5IUyH7CQQFCia6sf0HBUfazEnBcK25qSA7gmgC8oZLSGnFwXrClhK0dAWU4 9MCVUhXqjVnsYk2HeUWRB4PJML1qGQlPQ6PrhhQnmLvOxC+vey65E4l01n4oeHr6 DUnuEYI45ImPslR85sa1sPIWCOkLow5IyTgGF0BQXyNn -----END CERTIFICATE-----Generated at Thu Feb 5 15:32:53 2026 by rpki-client