This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/3bXwyJRphHC821s-_1eJDdRcSaQ.roa File: 3bXwyJRphHC821s-_1eJDdRcSaQ.roa (raw, json) Hash identifier: 1C3Vwg+v+ejiWvSqFbwaT9wdnlbnP0w1UGBSQJTnl9w= Subject key identifier: DD:B5:F0:C8:94:69:84:70:BC:DB:5B:3E:FF:57:89:0D:D4:5C:49:A4 Certificate issuer: /CN=b092c2c2350c590a4483fd44f250a77feeaab296 Certificate serial: 019B78A2993E8E476BFC3074E585AD4350C5 Authority key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/3bXwyJRphHC821s-_1eJDdRcSaQ.roa Signing time: Thu 01 Jan 2026 08:18:00 +0000 ROA not before: Thu 01 Jan 2026 08:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44998 IP address blocks: 93.188.136.0/21 maxlen: 24 2a00:c840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:99:3e:8e:47:6b:fc:30:74:e5:85:ad:43:50:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b092c2c2350c590a4483fd44f250a77feeaab296 Validity Not Before: Jan 1 08:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddb5f0c894698470bcdb5b3eff57890dd45c49a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:a5:8d:fa:80:98:11:5c:8a:82:8d:87:91: a4:ca:f1:9e:81:df:04:b8:c8:36:e1:60:0d:77:f0: db:da:94:a7:5d:ee:53:ce:eb:32:d4:59:b6:81:b3: aa:20:22:5a:18:e7:e8:cf:82:a7:ec:b2:be:81:b9: 2c:db:09:8a:25:c8:bf:26:e2:bc:ae:dd:61:26:ad: 7a:68:47:32:00:50:b3:ed:59:ac:d7:69:d5:d6:c7: cb:4b:77:a2:e4:ff:8b:64:ed:5f:01:44:43:ce:e6: 22:6a:83:98:d5:a9:2b:db:97:75:2e:48:45:60:54: e0:10:5c:7d:67:37:98:cd:be:f0:d8:83:b2:51:96: cd:16:5e:d8:a4:d8:fb:7e:7c:e9:1f:80:25:b7:64: 2f:21:6b:aa:f8:07:30:30:3d:01:fb:a8:58:4a:8b: 55:3a:a0:27:5f:fe:63:11:c5:8c:7c:65:33:d2:16: a3:2d:8e:26:18:fa:f0:b4:36:5a:5f:b6:9f:a1:e3: 32:c1:75:1b:bb:f0:99:d9:69:ba:a9:86:58:ef:8d: ae:6e:6e:aa:ea:5c:c2:6a:24:98:af:c3:74:61:0c: 37:54:17:bb:a5:de:af:6f:07:55:31:8d:1d:5d:df: 82:b4:76:ff:79:cc:18:86:d5:2c:cd:d8:ed:0e:15: a6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B5:F0:C8:94:69:84:70:BC:DB:5B:3E:FF:57:89:0D:D4:5C:49:A4 X509v3 Authority Key Identifier: keyid:B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/3bXwyJRphHC821s-_1eJDdRcSaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.188.136.0/21 IPv6: 2a00:c840::/32 Signature Algorithm: sha256WithRSAEncryption 26:a9:69:c7:ad:88:17:bb:60:f7:20:40:27:8f:7b:f8:29:1d: 3e:6e:58:53:af:c0:21:50:74:da:cd:4a:52:72:3c:93:5d:1c: 73:f1:d2:e9:32:c1:ae:30:32:8d:c6:38:60:80:50:9a:54:17: 75:38:48:d2:d0:dd:1d:e5:da:b1:21:3c:32:79:47:f6:61:53: d2:42:77:54:43:5c:04:dc:64:0b:9a:26:58:c3:56:ed:c5:09: 48:9b:40:69:ef:48:8e:f3:6f:c1:e5:d0:a0:97:b0:0a:9d:36: ce:84:1a:71:a8:8a:c1:a4:68:ab:e1:94:cc:2b:6a:3a:65:b5: e6:52:9f:8c:66:39:0d:72:12:ef:d0:70:ab:e9:0d:43:84:dd: c0:fe:73:b2:7b:b4:dc:de:cc:41:ec:52:9e:8d:e0:3a:9e:29: 35:9a:2c:c4:61:79:e6:5f:a3:1d:4e:e2:02:2d:c0:aa:51:2e: 84:01:33:5f:78:01:9b:1d:4a:3c:72:5d:f4:e5:f0:37:2d:b2: c8:c4:8c:f9:a4:51:c5:77:a5:a0:3f:a2:e9:fe:34:ea:be:e4: 6c:e4:5f:54:23:75:47:32:ac:ed:2c:36:fa:7a:35:3b:2d:cd: 70:3c:41:5e:9a:6a:d6:68:3a:86:a4:98:b6:4a:e9:30:9c:07: db:34:48:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4opk+jkdr/DB05YWtQ1DFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOTJjMmMyMzUwYzU5MGE0NDgzZmQ0NGYyNTBhNzdmZWVh YWIyOTYwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGI1ZjBjODk0Njk4NDcwYmNkYjViM2VmZjU3ODkwZGQ0NWM0OWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWyljfqAmBFcioKNh5GkyvGegd8E uMg24WANd/Db2pSnXe5Tzusy1Fm2gbOqICJaGOfoz4Kn7LK+gbks2wmKJci/JuK8 rt1hJq16aEcyAFCz7Vms12nV1sfLS3ei5P+LZO1fAURDzuYiaoOY1akr25d1LkhF YFTgEFx9ZzeYzb7w2IOyUZbNFl7YpNj7fnzpH4Alt2QvIWuq+AcwMD0B+6hYSotV OqAnX/5jEcWMfGUz0hajLY4mGPrwtDZaX7afoeMywXUbu/CZ2Wm6qYZY742ubm6q 6lzCaiSYr8N0YQw3VBe7pd6vbwdVMY0dXd+CtHb/ecwYhtUszdjtDhWmvQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN218MiUaYRwvNtbPv9XiQ3UXEmkMB8GA1UdIwQY MBaAFLCSwsI1DFkKRIP9RPJQp3/uqrKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2Ut NDllYmViM2FmMGVhLzEvM2JYd3lKUnBoSEM4MjFzLV8xZUpEZFJjU2FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS81MmM2YzgtNzE2YS00OTY5LTliM2UtNDllYmViM2FmMGVh LzEvc0pMQ3dqVU1XUXBFZ18xRThsQ25mLTZxc3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXbyIMA0E AgACMAcDBQAqAMhAMA0GCSqGSIb3DQEBCwUAA4IBAQAmqWnHrYgXu2D3IEAnj3v4 KR0+blhTr8AhUHTazUpScjyTXRxz8dLpMsGuMDKNxjhggFCaVBd1OEjS0N0d5dqx ITwyeUf2YVPSQndUQ1wE3GQLmiZYw1btxQlIm0Bp70iO82/B5dCgl7AKnTbOhBpx qIrBpGir4ZTMK2o6ZbXmUp+MZjkNchLv0HCr6Q1DhN3A/nOye7Tc3sxB7FKejeA6 nik1mizEYXnmX6MdTuICLcCqUS6EATNfeAGbHUo8cl305fA3LbLIxIz5pFHFd6Wg P6Lp/jTqvuRs5F9UI3VHMqztLDb6ejU7Lc1wPEFemmrWaDqGpJi2SukwnAfbNEiu -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:30 2026 by rpki-client