This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3flxzE6GOve12ab2TPEXB4umlvE.roa File: 3flxzE6GOve12ab2TPEXB4umlvE.roa (raw, json) Hash identifier: ZU9BtYjPHGWEoE8RwqBP7BsiWOmNssrkat5CAA5vzEI= Subject key identifier: DD:F9:71:CC:4E:86:3A:F7:B5:D9:A6:F6:4C:F1:17:07:8B:A6:96:F1 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C47312911C07459BD580D72BC054FD03A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3flxzE6GOve12ab2TPEXB4umlvE.roa Signing time: Tue 10 Feb 2026 10:55:29 +0000 ROA not before: Tue 10 Feb 2026 10:55:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61071 IP address blocks: 85.217.164.0/23 maxlen: 32 85.217.166.0/24 maxlen: 24 85.217.176.0/22 maxlen: 24 85.217.180.0/23 maxlen: 24 87.120.246.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 22:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:47:31:29:11:c0:74:59:bd:58:0d:72:bc:05:4f:d0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Feb 10 10:55:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddf971cc4e863af7b5d9a6f64cf117078ba696f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:4e:8a:32:78:95:cb:73:3b:2d:ea:ff:17: 85:ce:9c:fc:be:6d:01:d1:8e:a4:bf:9f:a9:96:4b: 61:cb:97:27:60:15:d6:1a:7f:52:9d:c3:8a:b6:07: 3a:66:63:57:e5:f7:70:00:3a:87:7b:0c:81:38:14: ff:9f:2f:0d:61:b4:53:2e:f4:ee:5a:4a:c9:bc:db: b0:5b:12:2f:d8:9d:c5:2e:e3:5b:79:85:cd:67:58: 13:72:19:c6:33:9a:c0:ff:cd:a9:b1:9a:23:b9:e1: 99:cf:5a:55:84:c7:7c:e0:e5:ee:4c:17:56:fe:99: dd:47:88:e0:46:1b:c8:5f:25:51:04:70:e6:0a:77: 97:83:93:de:5d:95:74:94:33:bb:96:14:d1:0f:4a: 3e:05:b5:aa:d8:77:de:b7:95:83:d1:a9:a2:e7:e0: 47:32:d9:61:59:34:83:b8:50:9a:47:e3:8b:ca:6d: e5:f1:f2:84:a2:e0:82:ac:79:a2:fd:f5:e1:b3:e8: 4a:12:18:04:08:b2:fd:6a:cf:e3:b0:37:c9:8f:e1: 61:f7:85:29:2f:cb:4e:8b:1e:13:ff:a3:1e:43:21: f6:76:aa:ab:9a:b4:8d:0d:b2:59:02:47:95:44:39: 84:13:38:85:07:3e:18:ff:10:d8:b5:8f:24:c3:48: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F9:71:CC:4E:86:3A:F7:B5:D9:A6:F6:4C:F1:17:07:8B:A6:96:F1 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3flxzE6GOve12ab2TPEXB4umlvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.164.0-85.217.166.255 85.217.176.0-85.217.181.255 87.120.246.0/24 Signature Algorithm: sha256WithRSAEncryption a0:21:de:d0:6d:8b:83:af:aa:97:eb:4c:30:a3:e7:3d:a8:37: db:03:7a:59:54:23:ed:da:7c:17:3d:5a:e3:a7:4f:e9:f5:01: c5:20:71:32:08:e7:10:6f:c5:72:b6:1f:61:be:b0:65:0b:46: 66:11:c6:98:7b:a9:6e:29:24:55:a1:f8:1f:b4:ac:48:7a:2a: e9:fc:48:b4:1c:f0:cf:86:99:67:e8:a4:a0:48:cf:3b:43:f1: 24:f1:ad:dc:74:a4:55:5f:c2:bd:52:f0:d4:62:f1:5a:a4:a0: e7:f4:1e:61:f8:9b:e0:3e:9d:3b:2b:a8:88:33:76:7a:24:19: 04:f0:35:c3:13:78:e5:5b:ed:bf:e9:ad:66:42:38:ac:c4:c4: cb:9e:bd:fc:e3:0d:68:e1:f2:d3:fd:3c:e4:15:4d:27:fd:a6: 34:81:9b:d9:82:75:03:7f:8a:87:ed:99:61:ec:c1:d1:b7:16: eb:51:8f:80:80:a5:1c:7c:f1:f1:03:2f:98:18:45:26:56:e1: 8b:68:69:0e:aa:38:94:b3:4d:35:d5:97:32:95:14:2f:18:a2: e6:4d:0b:93:e1:1d:a5:56:3e:a1:1a:11:e1:6d:95:47:1f:30: f8:9f:2e:31:b1:01:06:75:e2:5f:aa:52:5f:d6:48:4d:f4:e4: 0f:26:88:04 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxHMSkRwHRZvVgNcrwFT9A6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMjEwMTA1NTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGY5NzFjYzRlODYzYWY3YjVkOWE2ZjY0Y2YxMTcwNzhiYTY5NmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdBOijJ4lctzOy3q/xeFzpz8vm0B 0Y6kv5+plkthy5cnYBXWGn9SncOKtgc6ZmNX5fdwADqHewyBOBT/ny8NYbRTLvTu WkrJvNuwWxIv2J3FLuNbeYXNZ1gTchnGM5rA/82psZojueGZz1pVhMd84OXuTBdW /pndR4jgRhvIXyVRBHDmCneXg5PeXZV0lDO7lhTRD0o+BbWq2Hfet5WD0ami5+BH MtlhWTSDuFCaR+OLym3l8fKEouCCrHmi/fXhs+hKEhgECLL9as/jsDfJj+Fh94Up L8tOix4T/6MeQyH2dqqrmrSNDbJZAkeVRDmEEziFBz4Y/xDYtY8kw0jtyQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN35ccxOhjr3tdmm9kzxFweLppbxMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvM2ZseHpFNkdPdmUxMmFiMlRQRVhCNHVtbHZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAJV2aQD BABV2aYwDAMEBFXZsAMEAVXZtAMEAFd49jANBgkqhkiG9w0BAQsFAAOCAQEAoCHe 0G2Lg6+ql+tMMKPnPag32wN6WVQj7dp8Fz1a46dP6fUBxSBxMgjnEG/FcrYfYb6w ZQtGZhHGmHupbikkVaH4H7SsSHoq6fxItBzwz4aZZ+ikoEjPO0PxJPGt3HSkVV/C vVLw1GLxWqSg5/QeYfib4D6dOyuoiDN2eiQZBPA1wxN45Vvtv+mtZkI4rMTEy569 /OMNaOHy0/085BVNJ/2mNIGb2YJ1A3+Kh+2ZYezB0bcW61GPgIClHHzx8QMvmBhF Jlbhi2hpDqo4lLNNNdWXMpUULxii5k0Lk+EdpVY+oRoR4W2VRx8w+J8uMbEBBnXi X6pSX9ZITfTkDyaIBA== -----END CERTIFICATE-----Generated at Wed Feb 11 06:53:22 2026 by rpki-client