This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3n-xD3CYNcIUWeIf2v_pDYBM6AQ.roa File: 3n-xD3CYNcIUWeIf2v_pDYBM6AQ.roa (raw, json) Hash identifier: /1STMbp0v9GxQWxgILuLCsZLf4HSafTYyl07GNKaPKg= Subject key identifier: DE:7F:B1:0F:70:98:35:C2:14:59:E2:1F:DA:FF:E9:0D:80:4C:E8:04 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2FE66734A90F1E4C2873DE15917E1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3n-xD3CYNcIUWeIf2v_pDYBM6AQ.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44901 IP address blocks: 93.123.10.0/24 maxlen: 24 94.156.104.0/24 maxlen: 24 94.156.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fe:66:73:4a:90:f1:e4:c2:87:3d:e1:59:17:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de7fb10f709835c21459e21fdaffe90d804ce804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:64:0c:4b:e1:2e:db:a3:e9:cb:f2:c6:e8: c2:df:66:bd:4a:bd:79:e6:9b:81:07:77:c8:0e:a3: 4e:45:c3:e5:19:4f:c5:ba:6a:ed:4b:93:5e:4d:30: cd:ec:1e:0f:b2:5f:c9:96:d2:8f:86:0e:41:0e:32: 4b:3e:aa:77:e0:5f:b2:66:2c:c7:a3:c1:0b:84:52: 3a:9c:a3:73:e1:3c:03:cf:8e:06:62:78:57:d0:9e: 28:b8:a8:28:fc:c3:5c:a2:bf:11:64:b7:e4:14:6b: 5f:9e:2e:ac:ae:b2:8f:2a:9a:51:f8:9f:2c:e3:fc: 13:17:c8:af:ac:4f:53:d7:dd:07:51:97:5a:60:16: 4c:b7:2e:4e:34:d5:de:af:23:e9:ef:5f:03:30:ea: 79:70:3f:11:c4:32:3a:bb:f0:20:df:13:a7:68:aa: a0:31:49:07:9a:63:c5:c3:f4:f6:7f:38:3f:e2:50: 69:cc:1a:43:78:69:b6:61:f2:9d:a5:87:43:6c:7f: 24:54:ed:2f:9c:83:1a:2b:6a:ab:49:a1:8c:fa:cd: a6:87:ec:e1:d5:6c:7d:3e:be:e4:04:e0:e4:3b:5e: b9:fc:6f:39:18:e2:5d:df:c6:33:2a:84:1e:8f:36: b2:2f:d2:ec:e3:23:40:8d:70:c0:33:77:a8:6d:78: 8c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7F:B1:0F:70:98:35:C2:14:59:E2:1F:DA:FF:E9:0D:80:4C:E8:04 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3n-xD3CYNcIUWeIf2v_pDYBM6AQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.123.10.0/24 94.156.104.0/24 94.156.174.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:e1:72:48:f4:a2:ff:95:a9:6d:24:86:44:5f:17:08:1d:ba: 62:00:89:0e:ae:44:b6:5c:56:95:c5:ff:bd:32:a0:c8:26:5b: d8:a4:d4:15:b1:47:7f:cb:ae:77:57:ed:fe:1d:2e:6a:e0:11: 12:f2:0a:2a:ff:d0:82:fd:d3:1e:b6:af:ef:b6:a1:2a:0b:b3: ba:21:90:3b:a1:e5:66:dc:d7:e7:69:a6:77:09:14:8f:cb:99: fe:dc:dd:bb:e7:52:2e:3b:91:63:c2:d7:79:b8:46:63:de:6f: 05:2d:30:32:61:2f:32:8e:a2:06:f5:c7:b8:00:f6:7b:f1:5c: 8a:21:e9:7d:d6:36:f1:60:61:e7:5f:ad:9d:1d:a6:eb:ce:72: 3b:b3:c4:2c:c1:79:22:87:d1:9b:70:fb:c7:02:0f:1a:4c:75: 13:37:dc:d5:a4:87:02:b1:3a:4d:23:4e:48:63:f5:a7:c9:db: 9b:9d:fb:35:15:39:9a:f7:64:d3:4c:b2:c5:7a:be:bd:7a:5d: e8:ba:5e:d3:c0:bb:a9:93:9d:19:e2:b2:d3:f8:bf:c2:83:02: 6a:04:1e:24:9d:7d:48:c7:dc:3c:df:11:bd:e4:ea:e8:a0:cb: d4:fb:cf:8c:1e:56:f6:fc:f3:52:02:3b:2d:88:20:f1:4e:07: 4b:a8:bf:c5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4ov5mc0qQ8eTChz3hWRfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTdmYjEwZjcwOTgzNWMyMTQ1OWUyMWZkYWZmZTkwZDgwNGNlODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfZkDEvhLtuj6cvyxujC32a9Sr15 5puBB3fIDqNORcPlGU/FumrtS5NeTTDN7B4Psl/JltKPhg5BDjJLPqp34F+yZizH o8ELhFI6nKNz4TwDz44GYnhX0J4ouKgo/MNcor8RZLfkFGtfni6srrKPKppR+J8s 4/wTF8ivrE9T190HUZdaYBZMty5ONNXeryPp718DMOp5cD8RxDI6u/Ag3xOnaKqg MUkHmmPFw/T2fzg/4lBpzBpDeGm2YfKdpYdDbH8kVO0vnIMaK2qrSaGM+s2mh+zh 1Wx9Pr7kBODkO165/G85GOJd38YzKoQejzayL9Ls4yNAjXDAM3eobXiMHQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN5/sQ9wmDXCFFniH9r/6Q2ATOgEMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvM24teEQzQ1lOY0lVV2VJZjJ2X3BEWUJNNkFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXXsKAwQA XpxoAwQAXpyuMA0GCSqGSIb3DQEBCwUAA4IBAQAt4XJI9KL/laltJIZEXxcIHbpi AIkOrkS2XFaVxf+9MqDIJlvYpNQVsUd/y653V+3+HS5q4BES8goq/9CC/dMetq/v tqEqC7O6IZA7oeVm3NfnaaZ3CRSPy5n+3N2751IuO5Fjwtd5uEZj3m8FLTAyYS8y jqIG9ce4APZ78VyKIel91jbxYGHnX62dHabrznI7s8QswXkih9GbcPvHAg8aTHUT N9zVpIcCsTpNI05IY/Wnydubnfs1FTma92TTTLLFer69el3oul7TwLupk50Z4rLT +L/CgwJqBB4knX1Ix9w83xG95OrooMvU+8+MHlb2/PNSAjstiCDxTgdLqL/F -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:43 2026 by rpki-client