This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/3k8uMArcbuH0UIfZHpHCCKPnq1c.roa File: 3k8uMArcbuH0UIfZHpHCCKPnq1c.roa (raw, json) Hash identifier: a4hOTjhskjL4zmX9D1orSF+CFPWqkttgVH56kvVyr7A= Subject key identifier: DE:4F:2E:30:0A:DC:6E:E1:F4:50:87:D9:1E:91:C2:08:A3:E7:AB:57 Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c Certificate serial: 019B7C80A41B95A0BD5CBE3F16235BF44463 Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/3k8uMArcbuH0UIfZHpHCCKPnq1c.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214239 IP address blocks: 185.210.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a4:1b:95:a0:bd:5c:be:3f:16:23:5b:f4:44:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de4f2e300adc6ee1f45087d91e91c208a3e7ab57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fb:47:47:f1:8f:9d:3f:12:ea:6b:cf:6b:e4: af:00:e5:d4:66:46:d7:30:cf:21:3f:34:53:09:19: bd:b9:fc:94:88:f5:5e:87:4b:9e:38:2c:9d:83:99: 36:b7:f4:1d:38:4d:8e:e2:85:d7:a3:7d:4e:be:85: 3c:81:88:1c:af:6d:b7:67:7a:2d:ef:65:26:ca:2c: d7:c9:75:19:a1:4e:3e:f8:53:34:90:c9:15:2f:c5: db:91:51:2f:f1:51:e0:52:40:3f:c9:4c:05:5d:4b: dc:06:03:e7:18:8e:1a:4f:b6:e4:01:8a:ac:f0:86: f3:9d:a6:15:12:e4:ac:fe:68:c3:1c:27:f4:79:ca: 6d:f8:8f:f7:c8:56:7c:0a:ef:65:5e:90:e0:92:04: 72:62:87:e3:49:19:7b:a0:c2:e2:6f:76:8a:a7:82: 8f:5e:6a:8b:22:d9:aa:0d:11:5c:b4:3b:aa:c8:11: 77:01:ae:c4:71:a1:cb:78:a3:1d:66:d1:fb:79:52: f2:5c:92:fa:63:64:65:1a:2d:e7:13:de:ce:83:36: c1:be:10:94:24:15:df:be:5b:74:e2:93:f1:7b:2b: de:1a:2f:b5:0d:a2:01:26:0c:77:91:30:ba:67:5f: bb:5e:3e:e8:bf:ee:1b:0c:03:f9:8c:9a:c8:dd:53: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4F:2E:30:0A:DC:6E:E1:F4:50:87:D9:1E:91:C2:08:A3:E7:AB:57 X509v3 Authority Key Identifier: keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/3k8uMArcbuH0UIfZHpHCCKPnq1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.54.0/24 Signature Algorithm: sha256WithRSAEncryption c5:13:b2:d9:40:1c:bd:de:1e:e7:61:2b:b3:15:32:a8:7e:ba: da:6f:81:ea:57:2f:01:16:56:5d:b4:42:02:fd:74:16:6a:8a: 89:57:fe:93:8c:07:9e:bc:36:fa:9f:f2:02:c2:01:3e:ce:f8: f8:e4:29:99:ca:19:26:3a:09:10:d9:37:5d:52:19:95:fb:60: 97:1b:cf:c1:d8:1d:cb:07:b5:81:44:6e:25:44:05:5a:48:be: 81:ea:d0:81:3b:c8:5a:8d:b0:b9:a8:29:67:25:4a:38:e5:bc: ef:37:01:77:2e:d3:06:2b:72:2a:91:3f:af:46:e6:6d:7d:e9: d3:5d:20:6d:5a:a6:ac:5f:9a:e0:97:a3:db:44:6e:d0:c5:9e: c2:57:5e:24:7d:bd:b7:b8:43:25:46:87:09:b5:99:24:a6:4a: c6:37:b0:1c:f4:c4:46:5b:43:29:5a:b5:2c:b4:2a:1f:17:5e: ca:9d:5a:72:d4:dd:25:bb:ea:07:12:59:6b:a0:b8:d4:ee:d8: 76:bd:58:75:c7:93:de:ca:1f:97:df:a2:9f:f2:80:14:04:b4: 47:d9:d9:cf:c5:62:eb:88:14:87:aa:52:8f:03:dc:0b:56:c4: c2:87:3b:21:42:65:98:9e:89:02:00:ce:bc:4b:28:ab:5a:e8: e3:ba:46:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKQblaC9XL4/FiNb9ERjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNTdhMWZjYmYyZTc1YTJlMTAzNGNhNzRhMGU5NzI2MjNi YmM0OWMwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTRmMmUzMDBhZGM2ZWUxZjQ1MDg3ZDkxZTkxYzIwOGEzZTdhYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vtHR/GPnT8S6mvPa+SvAOXUZkbX MM8hPzRTCRm9ufyUiPVeh0ueOCydg5k2t/QdOE2O4oXXo31OvoU8gYgcr223Z3ot 72UmyizXyXUZoU4++FM0kMkVL8XbkVEv8VHgUkA/yUwFXUvcBgPnGI4aT7bkAYqs 8IbznaYVEuSs/mjDHCf0ecpt+I/3yFZ8Cu9lXpDgkgRyYofjSRl7oMLib3aKp4KP XmqLItmqDRFctDuqyBF3Aa7EcaHLeKMdZtH7eVLyXJL6Y2RlGi3nE97OgzbBvhCU JBXfvlt04pPxeyveGi+1DaIBJgx3kTC6Z1+7Xj7ov+4bDAP5jJrI3VOlhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5PLjAK3G7h9FCH2R6Rwgij56tXMB8GA1UdIwQY MBaAFAJXofy/LnWi4QNMp0oOlyYju8ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt YzIzZjczMTM2MmNlLzEvM2s4dU1BcmNidUgwVUlmWkhwSENDS1BucTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl LzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudI2MA0G CSqGSIb3DQEBCwUAA4IBAQDFE7LZQBy93h7nYSuzFTKofrrab4HqVy8BFlZdtEIC /XQWaoqJV/6TjAeevDb6n/ICwgE+zvj45CmZyhkmOgkQ2TddUhmV+2CXG8/B2B3L B7WBRG4lRAVaSL6B6tCBO8hajbC5qClnJUo45bzvNwF3LtMGK3IqkT+vRuZtfenT XSBtWqasX5rgl6PbRG7QxZ7CV14kfb23uEMlRocJtZkkpkrGN7Ac9MRGW0MpWrUs tCofF17KnVpy1N0lu+oHEllroLjU7th2vVh1x5Peyh+X36Kf8oAUBLRH2dnPxWLr iBSHqlKPA9wLVsTChzshQmWYnokCAM68SyirWujjukbI -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:44 2026 by rpki-client