This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/fn3HOo_U6W-uyb_sVDaw80g9NWw.roa File: fn3HOo_U6W-uyb_sVDaw80g9NWw.roa (raw, json) Hash identifier: KohlmxQcnzVQ7W+fN1Bvmm7TWy0M44hbYWotd1ZSBtg= Subject key identifier: 7E:7D:C7:3A:8F:D4:E9:6F:AE:C9:BF:EC:54:36:B0:F3:48:3D:35:6C Certificate issuer: /CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81 Certificate serial: 019B7759344428637076CCCAD59CF0746CFC Authority key identifier: C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/fn3HOo_U6W-uyb_sVDaw80g9NWw.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198525 IP address blocks: 91.236.4.0/22 maxlen: 24 185.235.206.0/24 maxlen: 24 195.34.92.0/24 maxlen: 24 2a10:8640::/32 maxlen: 32 2a10:8641::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:34:44:28:63:70:76:cc:ca:d5:9c:f0:74:6c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e7dc73a8fd4e96faec9bfec5436b0f3483d356c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:97:3b:b1:91:40:89:18:63:8f:15:d6:a4: 97:db:02:25:37:f4:ae:d3:f9:19:96:23:ae:25:a6: 26:2b:6a:bd:6a:a8:e6:ac:e4:49:1c:63:87:ca:4a: e5:7b:33:f7:a7:58:52:08:4b:97:f2:b5:e4:6e:98: b5:5b:54:b6:cf:c4:44:17:6b:96:70:07:24:45:e5: f3:74:47:d9:e2:7e:f0:18:f9:ac:44:3c:cc:d5:66: 61:32:db:db:42:9c:f1:7f:2e:40:9a:fc:8a:72:61: f8:bd:2c:6d:72:b1:cb:91:8b:29:cc:b2:aa:5b:0a: 67:94:59:f5:ab:84:b5:40:55:3c:d5:d6:0f:dd:6f: f9:a2:70:37:30:69:d1:e0:61:0e:49:96:87:74:2d: 9a:6a:00:e0:59:38:12:ce:35:18:9f:19:ed:fc:38: 20:d3:ac:18:f3:c4:ca:af:d6:dc:b1:2f:e5:a8:8a: d3:25:58:45:be:05:66:04:2f:e2:90:9d:e0:2d:d8: bf:f3:72:79:c9:a2:66:94:12:84:53:01:95:d6:c7: 1c:cd:1b:1a:44:94:89:77:4c:a7:1d:00:e2:6a:a7: b2:35:4d:8f:f7:26:0a:4e:d1:f5:75:16:78:72:ab: 25:c4:43:5b:93:e4:fd:24:0f:49:67:2b:8a:88:a6: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7D:C7:3A:8F:D4:E9:6F:AE:C9:BF:EC:54:36:B0:F3:48:3D:35:6C X509v3 Authority Key Identifier: keyid:C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/fn3HOo_U6W-uyb_sVDaw80g9NWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.4.0/22 185.235.206.0/24 195.34.92.0/24 IPv6: 2a10:8640::/31 Signature Algorithm: sha256WithRSAEncryption 34:23:b6:36:b1:06:ee:d4:ad:62:5d:2c:46:ac:5d:62:83:0b: e5:3a:51:e9:0f:0f:80:fb:56:43:a4:b4:64:53:18:01:08:06: 46:a3:f6:5d:1c:ff:09:58:20:40:5e:18:79:29:a0:57:95:9d: 54:dd:27:6d:6f:0b:6d:fd:dc:9e:a8:b9:a0:47:c2:bc:86:92: 8c:7e:93:10:3c:2d:46:a6:dc:b1:7e:b4:15:1c:e1:b9:77:e3: be:1c:20:87:2d:dd:1d:81:bf:31:06:fb:37:ca:49:fd:55:31: 17:a9:8c:e3:1d:21:31:1b:5f:7d:d3:1f:09:ba:bc:ce:f4:22: bb:59:88:06:fa:77:d0:9e:a3:d0:5f:28:4c:2f:96:52:0e:2d: a6:84:ac:8d:a3:71:90:ca:71:9c:7e:28:18:33:63:d8:14:a2: 65:ca:1a:32:3b:56:51:de:d1:f6:50:2c:78:89:59:ee:32:69: 9f:77:0f:f2:66:f0:42:20:fa:e0:44:d1:9b:50:d3:5f:1e:7d: eb:2e:1f:08:9b:c0:fc:8a:a1:87:11:34:e6:73:73:f2:d9:ea: 5c:44:cd:dd:4e:e7:22:8e:26:fc:5b:e4:3b:4b:28:7b:a6:93: 21:81:21:3b:fa:be:55:01:29:77:fa:00:e9:d4:85:9f:23:9d: d4:32:53:97 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3WTREKGNwdszK1ZzwdGz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYTllNWY1MzU2NjIzZTFjMjhmMmRiNjkzZTA1ZmM2ZDYw NGNjODEwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTdkYzczYThmZDRlOTZmYWVjOWJmZWM1NDM2YjBmMzQ4M2QzNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4iXO7GRQIkYY48V1qSX2wIlN/Su 0/kZliOuJaYmK2q9aqjmrORJHGOHykrlezP3p1hSCEuX8rXkbpi1W1S2z8REF2uW cAckReXzdEfZ4n7wGPmsRDzM1WZhMtvbQpzxfy5AmvyKcmH4vSxtcrHLkYspzLKq WwpnlFn1q4S1QFU81dYP3W/5onA3MGnR4GEOSZaHdC2aagDgWTgSzjUYnxnt/Dgg 06wY88TKr9bcsS/lqIrTJVhFvgVmBC/ikJ3gLdi/83J5yaJmlBKEUwGV1scczRsa RJSJd0ynHQDiaqeyNU2P9yYKTtH1dRZ4cqslxENbk+T9JA9JZyuKiKbTzwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFH59xzqP1Olvrsm/7FQ2sPNIPTVsMB8GA1UdIwQY MBaAFMOp5fU1ZiPhwo8ttpPgX8bWBMyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgt N2NlZjEwYWRlOGRmLzEvZm4zSE9vX1U2Vy11eWJfc1ZEYXc4MGc5Tld3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgtN2NlZjEwYWRlOGRm LzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCW+wEAwQA uevOAwQAwyJcMA0EAgACMAcDBQEqEIZAMA0GCSqGSIb3DQEBCwUAA4IBAQA0I7Y2 sQbu1K1iXSxGrF1igwvlOlHpDw+A+1ZDpLRkUxgBCAZGo/ZdHP8JWCBAXhh5KaBX lZ1U3Sdtbwtt/dyeqLmgR8K8hpKMfpMQPC1GptyxfrQVHOG5d+O+HCCHLd0dgb8x Bvs3ykn9VTEXqYzjHSExG1990x8JurzO9CK7WYgG+nfQnqPQXyhML5ZSDi2mhKyN o3GQynGcfigYM2PYFKJlyhoyO1ZR3tH2UCx4iVnuMmmfdw/yZvBCIPrgRNGbUNNf Hn3rLh8Im8D8iqGHETTmc3Py2epcRM3dTucijib8W+Q7Syh7ppMhgSE7+r5VASl3 +gDp1IWfI53UMlOX -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:07 2026 by rpki-client