This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3y6BXsnuVyIwM4eDuJUjtlW-LGc.roa File: 3y6BXsnuVyIwM4eDuJUjtlW-LGc.roa (raw, json) Hash identifier: vgkzuNSkmgCTvv/p1KLOCPd26p21NPhFORxWCao9CTc= Subject key identifier: DF:2E:81:5E:C9:EE:57:22:30:33:87:83:B8:95:23:B6:55:BE:2C:67 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C1D74FAB0267D43A5AFC96C5E2AA517C0 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3y6BXsnuVyIwM4eDuJUjtlW-LGc.roa Signing time: Mon 02 Feb 2026 08:25:31 +0000 ROA not before: Mon 02 Feb 2026 08:25:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 45.128.235.0/24 maxlen: 24 85.31.46.0/24 maxlen: 24 85.208.136.0/24 maxlen: 24 87.120.92.0/24 maxlen: 24 87.120.205.0/24 maxlen: 24 87.120.216.0/24 maxlen: 24 91.92.21.0/24 maxlen: 24 109.206.243.0/24 maxlen: 24 178.215.239.0/24 maxlen: 24 185.218.138.0/24 maxlen: 24 194.113.38.0/24 maxlen: 24 194.113.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 16:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:74:fa:b0:26:7d:43:a5:af:c9:6c:5e:2a:a5:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Feb 2 08:25:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df2e815ec9ee572230338783b89523b655be2c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:92:fa:47:82:be:d6:55:56:33:ce:83:09: 95:66:ad:61:b3:03:1e:4b:d4:5c:86:41:d5:af:2b: b2:ab:12:5b:d3:fb:56:40:4f:d6:85:ca:fe:41:68: 63:97:80:61:7b:b1:47:56:39:0a:2a:d6:46:f6:d5: 6e:91:66:c9:14:1d:84:31:15:75:0d:b1:e0:11:e1: c2:33:c7:28:1e:28:14:1d:c0:57:9b:ae:37:a3:65: de:02:fd:25:73:79:05:84:24:a0:8e:ab:f6:dd:d7: d1:fb:f6:5d:55:b2:f6:5c:f0:35:d0:3b:20:53:df: 90:e4:c6:75:af:30:d5:89:3a:30:b7:79:4f:f3:60: 07:c9:b2:1a:db:bf:d5:a5:95:8e:0d:64:d4:b3:a0: b4:ee:41:7c:e8:03:5f:78:94:cf:92:93:fc:b2:fa: 7b:d5:f4:0f:bc:c6:87:71:46:7f:40:70:c7:9c:4a: 61:d3:b9:24:be:e5:9f:bd:1c:e9:50:d3:a6:f6:8b: e4:0d:b8:d8:5a:7f:11:48:a2:46:e5:e2:a9:56:b2: 5d:2f:41:b0:25:86:c4:3a:87:6f:68:3e:9e:ab:0f: 9c:6b:ce:d0:93:49:e9:0e:b5:db:c8:c1:fb:4d:76: 85:a2:bf:25:f5:30:f8:66:36:33:88:59:d8:24:62: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2E:81:5E:C9:EE:57:22:30:33:87:83:B8:95:23:B6:55:BE:2C:67 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3y6BXsnuVyIwM4eDuJUjtlW-LGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.235.0/24 85.31.46.0/24 85.208.136.0/24 87.120.92.0/24 87.120.205.0/24 87.120.216.0/24 91.92.21.0/24 109.206.243.0/24 178.215.239.0/24 185.218.138.0/24 194.113.38.0/23 Signature Algorithm: sha256WithRSAEncryption b5:31:8d:46:67:60:55:0f:41:b6:ce:29:d6:ad:d8:9f:d1:80: 7d:4f:3a:af:0d:b1:22:0c:de:a4:8d:4a:2e:72:02:41:70:88: b0:11:6a:f6:95:4e:e1:85:9a:2d:3e:17:98:6a:24:7b:bd:45: 2a:bf:fe:5d:e8:d9:03:55:9e:a5:17:f4:a0:07:cc:32:b6:d2: df:b5:0a:cd:f2:5a:99:d9:01:ef:a7:20:1e:7e:06:1c:f9:32: a5:3f:89:ed:95:8d:b3:07:cc:d3:60:f2:c6:e7:1b:09:f5:48: 15:2e:ad:f8:7a:08:f8:c0:f1:18:af:36:00:2c:10:e5:0f:97: 1d:c8:7c:be:62:46:9f:f0:bb:3f:af:34:26:d7:b0:eb:2d:bc: 9d:be:9c:24:31:52:f4:ee:6c:c1:e6:9c:b7:b8:94:e6:58:37: 0d:56:a7:84:c5:a7:a2:7b:35:a1:7e:51:4a:65:15:1c:d6:80: 70:6a:a9:05:c5:cf:42:2d:01:76:4b:9a:51:70:29:c9:e9:66: 5e:93:0a:7d:80:e1:8a:a0:f5:6e:ac:6e:6b:dc:5d:04:a7:7a: 7f:de:c8:30:73:49:53:57:2d:c5:95:78:19:e2:a8:ef:0f:f8: 90:11:b7:39:08:06:e3:15:32:2a:cd:6c:5c:02:db:9b:01:12: 05:85:38:1b -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZwddPqwJn1Dpa/JbF4qpRfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMjAyMDgyNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjJlODE1ZWM5ZWU1NzIyMzAzMzg3ODNiODk1MjNiNjU1YmUyYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQWS+keCvtZVVjPOgwmVZq1hswMe S9RchkHVryuyqxJb0/tWQE/Whcr+QWhjl4Bhe7FHVjkKKtZG9tVukWbJFB2EMRV1 DbHgEeHCM8coHigUHcBXm643o2XeAv0lc3kFhCSgjqv23dfR+/ZdVbL2XPA10Dsg U9+Q5MZ1rzDViTowt3lP82AHybIa27/VpZWODWTUs6C07kF86ANfeJTPkpP8svp7 1fQPvMaHcUZ/QHDHnEph07kkvuWfvRzpUNOm9ovkDbjYWn8RSKJG5eKpVrJdL0Gw JYbEOodvaD6eqw+ca87Qk0npDrXbyMH7TXaFor8l9TD4ZjYziFnYJGLWhwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFN8ugV7J7lciMDOHg7iVI7ZVvixnMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvM3k2QlhzbnVWeUl3TTRlRHVKVWp0bFctTEdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALYDrAwQA VR8uAwQAVdCIAwQAV3hcAwQAV3jNAwQAV3jYAwQAW1wVAwQAbc7zAwQAstfvAwQA udqKAwQBwnEmMA0GCSqGSIb3DQEBCwUAA4IBAQC1MY1GZ2BVD0G2zinWrdif0YB9 TzqvDbEiDN6kjUoucgJBcIiwEWr2lU7hhZotPheYaiR7vUUqv/5d6NkDVZ6lF/Sg B8wyttLftQrN8lqZ2QHvpyAefgYc+TKlP4ntlY2zB8zTYPLG5xsJ9UgVLq34egj4 wPEYrzYALBDlD5cdyHy+Ykaf8Ls/rzQm17DrLbydvpwkMVL07mzB5py3uJTmWDcN VqeExaeiezWhflFKZRUc1oBwaqkFxc9CLQF2S5pRcCnJ6WZekwp9gOGKoPVurG5r 3F0Ep3p/3sgwc0lTVy3FlXgZ4qjvD/iQEbc5CAbjFTIqzWxcAtubARIFhTgb -----END CERTIFICATE-----Generated at Wed Feb 4 20:17:05 2026 by rpki-client