This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3zL25wzAhLC7TWsBc-EDf1kYS7Y.roa File: 3zL25wzAhLC7TWsBc-EDf1kYS7Y.roa (raw, json) Hash identifier: Eu2iVbPHMWjvlLO2//+mS9bvMte2dVYn8OiB3DO64oE= Subject key identifier: DF:32:F6:E7:0C:C0:84:B0:BB:4D:6B:01:73:E1:03:7F:59:18:4B:B6 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F1BD6681CC8B8FD50AB710F333A3 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3zL25wzAhLC7TWsBc-EDf1kYS7Y.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 85.209.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f1:bd:66:81:cc:8b:8f:d5:0a:b7:10:f3:33:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df32f6e70cc084b0bb4d6b0173e1037f59184bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:6b:ac:09:a6:d1:bf:76:18:37:2a:36:54: 0c:54:49:4c:96:62:05:84:15:f7:47:75:2c:62:9a: fb:1d:01:e3:5a:31:fe:d1:41:30:3a:cb:5e:c6:10: ee:39:b6:b5:ca:95:55:8e:92:5e:dc:3c:e3:1d:d6: 3f:9e:60:79:23:b6:b7:b8:82:12:b6:a1:79:6d:d9: 45:75:88:12:4b:7f:95:8d:a7:07:38:18:b1:6c:8d: b3:d3:49:09:c0:04:4c:2f:ff:ce:9c:1e:56:6e:fa: 5c:68:c0:40:64:93:66:aa:bc:36:42:d5:9c:de:cd: 8e:ad:2d:e9:c7:2e:e5:10:26:97:65:a4:c7:16:25: cc:93:48:4b:09:5a:04:96:a8:47:f7:12:55:f5:31: 15:af:3a:e0:c8:5f:67:28:d7:ba:57:37:29:c5:29: ad:a0:19:0f:e6:79:61:73:30:e9:35:4e:fd:64:d4: 5b:f2:b1:6c:f1:7a:40:1c:82:e0:d8:63:b8:00:1e: b7:03:2d:56:a2:3c:b2:12:cc:3c:02:ee:af:89:4a: 5c:9e:c5:3f:9c:3a:c1:f7:ee:37:ab:50:d1:a9:f8: 97:ec:03:fc:9f:f1:8a:91:26:33:d2:94:f5:cb:70: 9c:00:b5:44:e2:40:9d:de:c4:92:39:44:2c:f2:89: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:32:F6:E7:0C:C0:84:B0:BB:4D:6B:01:73:E1:03:7F:59:18:4B:B6 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3zL25wzAhLC7TWsBc-EDf1kYS7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.123.0/24 Signature Algorithm: sha256WithRSAEncryption 81:95:d2:49:00:cb:89:b1:8b:bf:c0:1e:06:59:b8:93:9f:44: d8:d9:2f:a5:88:5c:a0:c8:42:ab:cb:cd:2c:2c:64:29:40:a9: 7b:cf:53:93:f3:eb:a3:f0:6d:af:ab:15:67:fd:9d:e1:4c:c5: 35:9d:70:15:70:96:b9:fb:9f:80:7e:bb:5b:dc:5a:24:90:b6: e3:8e:66:5a:ac:ae:b9:0c:9a:14:c1:7f:76:b2:0a:a4:73:28: 2b:fa:88:80:a3:2b:4a:bf:58:be:ea:81:18:5b:d0:f5:82:2a: 3d:26:96:76:0f:23:4b:c3:2a:07:d9:68:01:4c:aa:40:5e:45: e1:a9:1e:c1:7d:cd:1b:4d:93:60:1e:ff:00:3f:93:5d:a6:d9: d1:24:f7:83:bb:54:64:90:cd:02:45:b3:01:7c:63:96:7b:0d: b1:81:82:51:18:54:d7:31:62:df:f7:df:35:49:87:d8:17:d3: f9:ec:c2:98:13:26:ef:a2:29:9a:8a:62:5b:87:80:67:49:4d: 3f:57:12:ba:92:9e:78:ca:83:7c:29:3c:7f:ec:d1:24:59:e2: b6:5a:43:bd:68:86:26:51:a7:37:73:23:70:95:b4:87:c8:28: 68:0e:32:31:54:28:c6:2d:3c:7b:ff:8c:ba:c4:69:53:ef:61: c6:5c:4d:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfG9ZoHMi4/VCrcQ8zOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjMyZjZlNzBjYzA4NGIwYmI0ZDZiMDE3M2UxMDM3ZjU5MTg0YmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF1rrAmm0b92GDcqNlQMVElMlmIF hBX3R3UsYpr7HQHjWjH+0UEwOstexhDuOba1ypVVjpJe3DzjHdY/nmB5I7a3uIIS tqF5bdlFdYgSS3+VjacHOBixbI2z00kJwARML//OnB5WbvpcaMBAZJNmqrw2QtWc 3s2OrS3pxy7lECaXZaTHFiXMk0hLCVoElqhH9xJV9TEVrzrgyF9nKNe6VzcpxSmt oBkP5nlhczDpNU79ZNRb8rFs8XpAHILg2GO4AB63Ay1WojyyEsw8Au6viUpcnsU/ nDrB9+43q1DRqfiX7AP8n/GKkSYz0pT1y3CcALVE4kCd3sSSOUQs8om8dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8y9ucMwISwu01rAXPhA39ZGEu2MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvM3pMMjV3ekFoTEM3VFdzQmMtRURmMWtZUzdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdF7MA0G CSqGSIb3DQEBCwUAA4IBAQCBldJJAMuJsYu/wB4GWbiTn0TY2S+liFygyEKry80s LGQpQKl7z1OT8+uj8G2vqxVn/Z3hTMU1nXAVcJa5+5+Afrtb3FokkLbjjmZarK65 DJoUwX92sgqkcygr+oiAoytKv1i+6oEYW9D1gio9JpZ2DyNLwyoH2WgBTKpAXkXh qR7Bfc0bTZNgHv8AP5NdptnRJPeDu1RkkM0CRbMBfGOWew2xgYJRGFTXMWLf9981 SYfYF9P57MKYEybvoimaimJbh4BnSU0/VxK6kp54yoN8KTx/7NEkWeK2WkO9aIYm Uac3cyNwlbSHyChoDjIxVCjGLTx7/4y6xGlT72HGXE0c -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:26 2026 by rpki-client