This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/3t7l7f24gteZE6pfOCHDjy6tPXU.roa File: 3t7l7f24gteZE6pfOCHDjy6tPXU.roa (raw, json) Hash identifier: 68JrqaeJqxrTaW25a9hnE6OONLO7WRq5rzCsMPJFtyU= Subject key identifier: DE:DE:E5:ED:FD:B8:82:D7:99:13:AA:5F:38:21:C3:8F:2E:AD:3D:75 Certificate issuer: /CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40 Certificate serial: 019B76EB31B3CC35F4A32D41A4230D669444 Authority key identifier: 21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/3t7l7f24gteZE6pfOCHDjy6tPXU.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209381 IP address blocks: 185.170.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:31:b3:cc:35:f4:a3:2d:41:a4:23:0d:66:94:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40 Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dedee5edfdb882d79913aa5f3821c38f2ead3d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:12:f3:d8:8e:0f:5f:ab:cf:6c:79:07:60: 3e:9e:a4:e0:de:6a:ae:b4:f9:0c:8a:1f:5c:86:59: 3d:71:80:1d:10:2d:23:00:7e:7d:a9:8f:b0:cb:20: b3:bb:22:6f:7c:af:3f:82:59:79:47:b0:08:12:f2: 68:d1:21:4f:e1:5a:6f:04:86:01:0d:95:e7:d2:6f: 08:4f:9f:3e:8d:82:19:c2:a3:06:76:96:ae:ec:fe: af:03:fd:b9:97:0f:f3:e1:c1:c0:a8:8a:9c:56:c4: b4:5b:52:a6:c9:a7:35:71:20:68:c7:c5:48:01:dc: b5:99:ff:6e:20:1e:7f:52:00:77:c7:db:d3:6b:3a: e8:5d:db:83:25:54:43:7c:17:41:f9:b2:5c:59:24: 77:f4:3d:fb:e6:99:84:23:e0:6e:1c:83:ee:d7:42: 90:7c:dd:a0:18:02:b7:a7:15:b8:9a:39:bd:df:0c: ab:14:8c:ab:53:13:5c:87:65:00:41:36:49:c1:33: 04:7c:18:8e:93:67:73:bf:28:cb:21:05:d0:b1:b0: bd:a4:0f:53:fb:31:c7:5e:cf:d7:a2:a4:59:fc:1a: 18:0c:f4:68:13:53:4c:46:01:f9:b4:d8:0e:24:a1: 51:11:d1:a2:01:05:9a:33:42:45:37:cd:29:da:bb: 5d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DE:E5:ED:FD:B8:82:D7:99:13:AA:5F:38:21:C3:8F:2E:AD:3D:75 X509v3 Authority Key Identifier: keyid:21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/3t7l7f24gteZE6pfOCHDjy6tPXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.124.0/24 Signature Algorithm: sha256WithRSAEncryption 84:20:03:03:5e:2c:08:57:4e:43:39:3c:d0:dc:dc:f2:02:9a: d7:37:a9:78:f4:bf:3f:af:f6:e8:d2:0b:19:a7:55:e6:ea:9c: 47:20:b4:db:69:7a:15:42:d4:78:97:62:86:57:c4:db:b6:0e: 8a:af:8b:e6:58:ab:ca:cc:84:51:c7:14:e2:d5:f0:94:4a:db: 4b:ce:1a:b3:8d:4d:7a:4e:9d:ae:25:6c:49:29:12:2f:77:14: a7:d6:a0:6c:43:9d:fd:f6:03:69:21:b1:fb:89:8b:11:05:a5: a9:22:ac:90:05:7e:fa:3b:f8:4d:08:dc:6c:64:c6:78:77:04: 81:d9:e3:fa:23:2b:f6:9d:2e:89:24:bb:7c:73:ad:89:da:92: 42:75:ee:03:b3:9a:2e:05:e2:f7:ae:14:2f:3c:77:2b:69:61: 38:66:32:2b:f9:fa:d0:70:ad:18:2c:0b:c1:6d:47:ee:3f:76: ee:c5:2f:e2:27:08:54:6f:99:f1:09:cb:99:7d:ff:10:82:d5: 1c:fb:bd:cb:01:af:35:4d:f3:5c:b9:47:6b:18:0b:38:a9:6b: 1a:a5:9c:e3:0a:21:62:f8:f8:78:8f:d6:53:0d:74:1d:c9:81: b1:25:88:a6:e2:6c:36:76:66:d8:6f:cd:d1:18:f7:16:fe:a1: 09:65:6b:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zGzzDX0oy1BpCMNZpREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxODNiMjU2YTIxNWI0ZDZmZTI2MTdkMTI2MmI2MzhiZmE3 ZDZkNDAwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWRlZTVlZGZkYjg4MmQ3OTkxM2FhNWYzODIxYzM4ZjJlYWQzZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD4S89iOD1+rz2x5B2A+nqTg3mqu tPkMih9chlk9cYAdEC0jAH59qY+wyyCzuyJvfK8/gll5R7AIEvJo0SFP4VpvBIYB DZXn0m8IT58+jYIZwqMGdpau7P6vA/25lw/z4cHAqIqcVsS0W1Kmyac1cSBox8VI Ady1mf9uIB5/UgB3x9vTazroXduDJVRDfBdB+bJcWSR39D375pmEI+BuHIPu10KQ fN2gGAK3pxW4mjm93wyrFIyrUxNch2UAQTZJwTMEfBiOk2dzvyjLIQXQsbC9pA9T +zHHXs/XoqRZ/BoYDPRoE1NMRgH5tNgOJKFREdGiAQWaM0JFN80p2rtdlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7e5e39uILXmROqXzghw48urT11MB8GA1UdIwQY MBaAFCGDslaiFbTW/iYX0SYrY4v6fW1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVlPeVZxSVZ0TmItSmhmUkppdGppX3A5YlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85MTczYTAtMjg4NC00YTc5LThiM2Ut NjlhMjQ1MDk1YWI0LzEvM3Q3bDdmMjRndGVaRTZwZk9DSERqeTZ0UFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85MTczYTAtMjg4NC00YTc5LThiM2UtNjlhMjQ1MDk1YWI0 LzEvSVlPeVZxSVZ0TmItSmhmUkppdGppX3A5YlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuap8MA0G CSqGSIb3DQEBCwUAA4IBAQCEIAMDXiwIV05DOTzQ3NzyAprXN6l49L8/r/bo0gsZ p1Xm6pxHILTbaXoVQtR4l2KGV8Tbtg6Kr4vmWKvKzIRRxxTi1fCUSttLzhqzjU16 Tp2uJWxJKRIvdxSn1qBsQ5399gNpIbH7iYsRBaWpIqyQBX76O/hNCNxsZMZ4dwSB 2eP6Iyv2nS6JJLt8c62J2pJCde4Ds5ouBeL3rhQvPHcraWE4ZjIr+frQcK0YLAvB bUfuP3buxS/iJwhUb5nxCcuZff8QgtUc+73LAa81TfNcuUdrGAs4qWsapZzjCiFi +Ph4j9ZTDXQdyYGxJYim4mw2dmbYb83RGPcW/qEJZWt8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:43 2026 by rpki-client