This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3fDhdfLnDALgYE7YKnjeMZsPKAg.roa File: 3fDhdfLnDALgYE7YKnjeMZsPKAg.roa (raw, json) Hash identifier: xA/Bhco1EpMHfNihxnm9rQ4BCAXp9Sck0qq7bM6Azj8= Subject key identifier: DD:F0:E1:75:F2:E7:0C:02:E0:60:4E:D8:2A:78:DE:31:9B:0F:28:08 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A341CA8D6A113179A68B37E51B5CD2 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3fDhdfLnDALgYE7YKnjeMZsPKAg.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213377 IP address blocks: 93.123.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:41:ca:8d:6a:11:31:79:a6:8b:37:e5:1b:5c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddf0e175f2e70c02e0604ed82a78de319b0f2808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3f:7e:b2:c5:7b:3e:94:2f:0a:65:a9:9c:fa: 3c:77:af:15:80:90:4b:3b:b3:66:58:6a:cf:64:f8: ba:27:bb:b4:be:c3:47:ff:f1:55:0f:62:07:62:0b: dd:bb:69:85:d3:6f:25:00:aa:66:a3:f0:49:72:cd: 3e:ef:e5:2c:82:38:9e:b5:df:9a:74:c5:77:c5:d0: e7:60:a4:b6:c4:03:48:c0:65:84:9b:6e:e5:c2:33: d3:93:5c:77:9e:9d:4f:a7:17:ad:ca:34:8b:14:dd: 30:8d:b6:08:26:63:2a:b9:67:ca:d5:12:1a:d4:1d: 96:c5:b0:1e:cf:57:d0:b2:1a:89:ef:bb:e7:51:80: 0c:87:bc:d5:ee:8c:e1:13:f9:c5:41:cd:b6:13:bc: 02:87:ae:f3:fd:70:1b:94:ea:86:b6:44:1c:a1:29: e7:ca:26:dd:c1:8f:d2:84:e1:ea:0c:f5:63:1e:7a: 25:a2:b3:b9:ba:f3:91:bf:a5:a3:7a:80:11:95:82: 56:b7:eb:96:57:8d:72:57:f6:eb:4c:97:61:84:b6: b1:54:20:82:0c:5f:22:cd:b0:5e:48:7c:7c:f2:2c: c8:f9:4e:1e:a0:47:09:75:92:e4:06:cc:ae:5b:82: 22:ad:01:39:4e:38:be:c7:cf:ac:09:b8:2d:67:92: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F0:E1:75:F2:E7:0C:02:E0:60:4E:D8:2A:78:DE:31:9B:0F:28:08 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3fDhdfLnDALgYE7YKnjeMZsPKAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.123.24.0/24 Signature Algorithm: sha256WithRSAEncryption aa:c8:54:84:ab:16:0f:84:06:5c:91:74:4f:99:e2:57:f1:7e: 74:17:93:e4:e6:81:f3:e3:94:f6:91:e9:87:ff:f3:69:36:7e: 65:85:31:6c:e2:ea:7d:48:3e:40:87:37:a2:d9:45:7b:b6:2a: 37:69:4d:e4:9f:1b:c6:57:3d:89:7f:cf:8f:a4:50:2a:83:07: c8:0c:e5:3a:64:ff:61:c0:c6:02:33:cb:79:70:20:34:35:44: e0:60:ec:55:8e:61:c7:62:b6:2f:1c:38:0f:38:cc:e5:bf:44: bb:84:d1:40:65:59:3a:ca:28:96:91:17:b7:f5:8c:9a:f7:ab: 1b:04:91:90:d8:24:db:d0:56:c0:53:07:b2:d0:c5:10:c8:c8: 3b:a5:e6:7a:ea:c2:ae:f3:c8:aa:be:4f:1a:01:32:00:ca:39: e0:7a:46:89:60:c7:dc:a7:62:91:aa:e7:a8:01:ee:b1:7b:f8: 0f:d6:5b:9f:d0:34:ff:6e:6c:49:99:4b:ae:df:97:38:4b:5d: 9c:19:82:7a:80:5a:bd:7d:1f:d3:e1:36:51:11:76:03:2d:c5: 12:f8:aa:f4:de:c7:ec:b0:d4:37:c3:56:f3:87:80:3d:ec:f0: 7a:db:9c:79:49:c5:5c:7c:85:e0:8c:39:c8:32:dd:00:60:3f: 1a:d5:7d:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0HKjWoRMXmmizflG1zSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGYwZTE3NWYyZTcwYzAyZTA2MDRlZDgyYTc4ZGUzMTliMGYyODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8j9+ssV7PpQvCmWpnPo8d68VgJBL O7NmWGrPZPi6J7u0vsNH//FVD2IHYgvdu2mF028lAKpmo/BJcs0+7+Usgjietd+a dMV3xdDnYKS2xANIwGWEm27lwjPTk1x3np1PpxetyjSLFN0wjbYIJmMquWfK1RIa 1B2WxbAez1fQshqJ77vnUYAMh7zV7ozhE/nFQc22E7wCh67z/XAblOqGtkQcoSnn yibdwY/ShOHqDPVjHnolorO5uvORv6WjeoARlYJWt+uWV41yV/brTJdhhLaxVCCC DF8izbBeSHx88izI+U4eoEcJdZLkBsyuW4IirQE5Tji+x8+sCbgtZ5L+pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN3w4XXy5wwC4GBO2Cp43jGbDygIMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvM2ZEaGRmTG5EQUxnWUU3WUtuamVNWnNQS0FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXsYMA0G CSqGSIb3DQEBCwUAA4IBAQCqyFSEqxYPhAZckXRPmeJX8X50F5Pk5oHz45T2kemH //NpNn5lhTFs4up9SD5Ahzei2UV7tio3aU3knxvGVz2Jf8+PpFAqgwfIDOU6ZP9h wMYCM8t5cCA0NUTgYOxVjmHHYrYvHDgPOMzlv0S7hNFAZVk6yiiWkRe39Yya96sb BJGQ2CTb0FbAUwey0MUQyMg7peZ66sKu88iqvk8aATIAyjngekaJYMfcp2KRqueo Ae6xe/gP1luf0DT/bmxJmUuu35c4S12cGYJ6gFq9fR/T4TZREXYDLcUS+Kr03sfs sNQ3w1bzh4A97PB625x5ScVcfIXgjDnIMt0AYD8a1X1T -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:04 2026 by rpki-client