This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3SSJakwa_7ZIQt6eCMfWiQwpWFk.roa File: 3SSJakwa_7ZIQt6eCMfWiQwpWFk.roa (raw, json) Hash identifier: FuaANuDy2ZFRM9AL8QyGbsTaPky54VUZ2Cfu+PB+hD0= Subject key identifier: DD:24:89:6A:4C:1A:FF:B6:48:42:DE:9E:08:C7:D6:89:0C:29:58:59 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EC79675B657A7A72A44726C6996C Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3SSJakwa_7ZIQt6eCMfWiQwpWFk.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204875 IP address blocks: 185.200.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ec:79:67:5b:65:7a:7a:72:a4:47:26:c6:99:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd24896a4c1affb64842de9e08c7d6890c295859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:7c:18:0d:af:f2:eb:78:62:44:9e:e2:c5: 51:c1:d1:7a:5a:d7:da:22:cc:4a:2c:4e:b1:f4:8e: c8:dc:22:75:9d:3e:4e:b2:10:53:74:cd:75:f8:51: 4c:2f:5e:46:96:7a:a7:00:8a:7e:68:68:33:34:72: d6:24:0c:b4:69:b4:9d:18:30:d4:d1:38:cb:71:dd: 6a:2b:03:31:4f:b9:81:2d:7d:10:2a:11:ea:d0:bf: b6:02:5e:98:66:bf:7e:3b:72:76:ea:3d:ec:3e:57: bf:0d:5c:8e:c4:b1:48:db:bc:bb:82:48:9d:81:38: 56:10:2c:b7:c2:8e:fa:0c:bc:40:41:07:5c:45:6f: f8:8c:da:f9:35:ed:21:5b:c8:7f:ec:ac:13:08:72: 13:03:7f:c0:96:e3:d1:84:18:ee:a8:44:94:6f:70: 12:3a:21:57:7a:b4:7e:69:6b:81:63:fd:51:12:36: 1f:2d:60:b9:8c:88:14:1f:ba:bd:29:db:2c:6e:8a: 75:4b:31:dc:04:d8:4d:05:17:b2:ee:ce:ac:2c:b6: 8f:7f:a6:b2:48:a6:4e:64:20:14:4e:11:83:ac:72: e7:78:42:fa:fd:bb:49:30:8c:ef:f9:58:c9:69:0e: 70:17:da:ec:5c:37:2b:ce:6e:ac:96:57:ce:a3:80: 93:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:24:89:6A:4C:1A:FF:B6:48:42:DE:9E:08:C7:D6:89:0C:29:58:59 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3SSJakwa_7ZIQt6eCMfWiQwpWFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.60.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:0b:b5:6b:37:46:56:d7:bb:f8:e8:a3:13:6c:04:4e:2b:67: 62:fc:e2:8a:52:22:30:b1:5f:2c:cd:b8:42:c8:d2:08:16:fb: cc:79:a2:dc:16:9a:14:ae:6e:40:fc:ce:88:d9:dd:55:73:fe: c2:26:6f:54:3c:36:50:92:1f:53:df:d1:04:a5:d0:bd:ff:66: f8:7a:7e:cc:90:40:29:b5:9f:25:7c:f2:83:a4:3e:61:e0:7d: 20:6a:9c:61:5e:ca:52:53:f2:8f:36:82:13:7e:d9:82:86:69: 29:3e:8d:43:d7:e6:75:4f:9c:88:38:ef:14:27:a4:b1:02:e7: 08:12:84:51:b2:f0:86:6f:58:af:19:9d:dd:e8:a6:b8:1f:8b: 66:3f:b8:93:47:2c:44:20:f8:42:ae:e1:7a:02:60:5f:34:12: 62:6f:a2:9d:5c:c6:4d:37:88:2c:1c:9b:7a:70:c7:25:20:88: 6b:1b:f5:fc:3e:c6:66:49:1c:35:de:d3:5c:c0:46:da:f0:fa: 83:ad:e4:24:a2:7a:9a:83:5b:87:11:63:d1:c5:f9:65:4f:8a: 4b:63:b6:6d:50:86:71:81:86:98:e6:00:f1:d9:91:d6:4a:df: c8:0b:31:cf:b0:98:85:24:59:2d:74:af:05:08:52:3c:14:0d: 17:45:c3:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fex5Z1tlenpypEcmxplsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDI0ODk2YTRjMWFmZmI2NDg0MmRlOWUwOGM3ZDY4OTBjMjk1ODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV58GA2v8ut4YkSe4sVRwdF6Wtfa IsxKLE6x9I7I3CJ1nT5OshBTdM11+FFML15GlnqnAIp+aGgzNHLWJAy0abSdGDDU 0TjLcd1qKwMxT7mBLX0QKhHq0L+2Al6YZr9+O3J26j3sPle/DVyOxLFI27y7gkid gThWECy3wo76DLxAQQdcRW/4jNr5Ne0hW8h/7KwTCHITA3/AluPRhBjuqESUb3AS OiFXerR+aWuBY/1REjYfLWC5jIgUH7q9Kdssbop1SzHcBNhNBRey7s6sLLaPf6ay SKZOZCAUThGDrHLneEL6/btJMIzv+VjJaQ5wF9rsXDcrzm6sllfOo4CT4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN0kiWpMGv+2SELengjH1okMKVhZMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvM1NTSmFrd2FfN1pJUXQ2ZUNNZldpUXdwV0ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucg8MA0G CSqGSIb3DQEBCwUAA4IBAQBtC7VrN0ZW17v46KMTbAROK2di/OKKUiIwsV8szbhC yNIIFvvMeaLcFpoUrm5A/M6I2d1Vc/7CJm9UPDZQkh9T39EEpdC9/2b4en7MkEAp tZ8lfPKDpD5h4H0gapxhXspSU/KPNoITftmChmkpPo1D1+Z1T5yIOO8UJ6SxAucI EoRRsvCGb1ivGZ3d6Ka4H4tmP7iTRyxEIPhCruF6AmBfNBJib6KdXMZNN4gsHJt6 cMclIIhrG/X8PsZmSRw13tNcwEba8PqDreQkonqag1uHEWPRxfllT4pLY7ZtUIZx gYaY5gDx2ZHWSt/ICzHPsJiFJFktdK8FCFI8FA0XRcPa -----END CERTIFICATE-----Generated at Tue Jan 6 20:49:55 2026 by rpki-client