This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/3-1F2kVkoseR_5w-95YHnzmMm1A.roa File: 3-1F2kVkoseR_5w-95YHnzmMm1A.roa (raw, json) Hash identifier: 2LWAEHkn8TYKZPBM9UP55dUPc4eSMHsFy3CLAfSR1xk= Subject key identifier: DF:ED:45:DA:45:64:A2:C7:91:FF:9C:3E:F7:96:07:9F:39:8C:9B:50 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019B7E38E7682454AFD1A4248BF7A2B957D6 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/3-1F2kVkoseR_5w-95YHnzmMm1A.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29066 IP address blocks: 109.122.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e7:68:24:54:af:d1:a4:24:8b:f7:a2:b9:57:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfed45da4564a2c791ff9c3ef796079f398c9b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:bc:da:94:ac:78:69:a7:ed:73:51:92:11: 94:ff:68:fb:cb:c4:56:e0:2c:84:39:90:3a:5d:4b: 6e:17:74:50:9d:b2:34:69:75:69:cb:b4:24:0a:a0: b9:4a:a2:93:3b:17:95:8f:0e:67:7a:53:e7:a8:6f: 22:3a:30:c0:f5:fc:87:25:60:3a:d1:99:d3:b6:c5: b1:c5:4d:61:54:bf:d2:3b:3e:65:e0:10:e0:f6:c3: 89:44:33:e0:ff:d7:1a:bc:48:d9:79:42:2f:8b:9e: 1d:f6:9c:0a:ec:61:71:39:7c:77:52:ba:d3:37:6a: 1f:9d:2b:9f:c2:19:ca:96:19:7d:39:28:b2:34:cf: 87:dd:c1:fa:00:ba:5e:4c:e7:52:b9:07:b1:88:64: f7:37:6b:bb:6f:e3:31:c2:7d:75:d4:a5:09:03:ce: 77:8a:9c:a2:e6:6b:90:e5:b1:7d:0c:34:67:1f:ce: 06:6a:f2:7a:71:4d:7c:af:64:05:04:ea:ac:bd:90: c1:eb:54:58:56:fc:bb:20:22:58:83:8b:34:eb:dc: fb:e3:6e:2a:d2:6e:4b:92:69:e6:ae:0f:09:d9:ec: 4b:30:69:b1:09:a2:85:4a:e2:af:6f:3e:09:d3:5c: 85:1e:18:44:a0:d6:03:24:2c:5c:b6:21:8f:17:28: c7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:ED:45:DA:45:64:A2:C7:91:FF:9C:3E:F7:96:07:9F:39:8C:9B:50 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/3-1F2kVkoseR_5w-95YHnzmMm1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.7.0/24 Signature Algorithm: sha256WithRSAEncryption 42:43:22:59:2b:47:9b:32:ec:10:47:cf:66:de:a8:9d:c2:09: 34:38:d0:9f:d9:51:87:52:32:3e:4f:39:36:f7:a2:35:33:a2: b4:26:8f:4a:8c:6b:0e:a8:d6:78:d2:11:2d:c2:31:79:8f:49: 46:7c:dc:ca:9d:52:3a:04:68:2c:b0:8a:92:c3:fd:85:26:61: 88:ce:ec:4c:39:e4:51:5d:b6:1a:80:8b:38:57:33:30:0d:1c: 40:40:42:d0:9f:3e:3c:f5:de:2b:11:6f:b2:29:f5:d5:8a:a1: 4d:e3:30:7c:34:c8:45:50:3a:cb:62:5e:04:10:7a:bc:7e:aa: 35:f5:0e:57:23:7f:ce:de:c2:f3:e1:43:ad:cd:62:34:22:99: 09:40:f1:bf:3e:ef:1d:9e:a1:52:28:fb:e7:b5:b7:90:c3:2f: 44:9a:a0:d3:71:2b:9f:61:56:b5:4c:44:3c:3c:61:ab:1b:75: 30:fb:9e:0e:53:b3:87:b2:17:42:27:bf:3d:e4:28:a8:7b:da: 2c:28:5b:c7:29:f9:b4:4f:b5:b2:dd:15:31:31:ff:9f:bc:5e: b4:9c:48:dd:cc:ca:25:71:75:a5:cf:5b:35:d0:38:09:4f:13: a8:4f:df:8b:dc:9b:48:34:c7:70:ed:1d:e9:69:96:c3:8a:47: 8e:06:ae:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOdoJFSv0aQki/eiuVfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmVkNDVkYTQ1NjRhMmM3OTFmZjljM2VmNzk2MDc5ZjM5OGM5YjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0va82pSseGmn7XNRkhGU/2j7y8RW 4CyEOZA6XUtuF3RQnbI0aXVpy7QkCqC5SqKTOxeVjw5nelPnqG8iOjDA9fyHJWA6 0ZnTtsWxxU1hVL/SOz5l4BDg9sOJRDPg/9cavEjZeUIvi54d9pwK7GFxOXx3UrrT N2ofnSufwhnKlhl9OSiyNM+H3cH6ALpeTOdSuQexiGT3N2u7b+Mxwn111KUJA853 ipyi5muQ5bF9DDRnH84GavJ6cU18r2QFBOqsvZDB61RYVvy7ICJYg4s069z7424q 0m5Lkmnmrg8J2exLMGmxCaKFSuKvbz4J01yFHhhEoNYDJCxctiGPFyjHAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/tRdpFZKLHkf+cPveWB585jJtQMB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvMy0xRjJrVmtvc2VSXzV3LTk1WUhuem1NbTFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoHMA0G CSqGSIb3DQEBCwUAA4IBAQBCQyJZK0ebMuwQR89m3qidwgk0ONCf2VGHUjI+Tzk2 96I1M6K0Jo9KjGsOqNZ40hEtwjF5j0lGfNzKnVI6BGgssIqSw/2FJmGIzuxMOeRR XbYagIs4VzMwDRxAQELQnz489d4rEW+yKfXViqFN4zB8NMhFUDrLYl4EEHq8fqo1 9Q5XI3/O3sLz4UOtzWI0IpkJQPG/Pu8dnqFSKPvntbeQwy9EmqDTcSufYVa1TEQ8 PGGrG3Uw+54OU7OHshdCJ7895Cioe9osKFvHKfm0T7Wy3RUxMf+fvF60nEjdzMol cXWlz1s10DgJTxOoT9+L3JtINMdw7R3paZbDikeOBq6m -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:14 2026 by rpki-client