This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/3TqJFN82Ou6cnj7WZNmB53ds8d4.roa File: 3TqJFN82Ou6cnj7WZNmB53ds8d4.roa (raw, json) Hash identifier: t6g92VZ+NxfWvf9Aux0ZfBmHd6Qz4U2PHoGnC8Owa3k= Subject key identifier: DD:3A:89:14:DF:36:3A:EE:9C:9E:3E:D6:64:D9:81:E7:77:6C:F1:DE Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7 Certificate serial: 019B7BA4B88F4392DC04814E849F4E9FD8E6 Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/3TqJFN82Ou6cnj7WZNmB53ds8d4.roa Signing time: Thu 01 Jan 2026 22:19:11 +0000 ROA not before: Thu 01 Jan 2026 22:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 195.226.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b8:8f:43:92:dc:04:81:4e:84:9f:4e:9f:d8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7 Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd3a8914df363aee9c9e3ed664d981e7776cf1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:3a:ff:b2:6a:b4:0c:34:d0:d7:dd:a6:66: 2e:11:d0:c1:13:2b:4e:70:49:c8:de:f9:2e:ee:5d: 5b:6b:21:a3:6c:66:72:78:0d:f3:05:98:b5:ef:86: 00:34:17:d5:3d:07:d9:e6:6c:a7:51:d5:26:6f:49: 85:45:24:fb:0d:78:13:11:67:0e:0c:37:ac:38:b2: 56:12:04:cd:95:5c:7a:f9:74:90:12:25:1c:50:4d: 04:e1:b9:ff:96:8c:71:23:6c:2d:85:92:29:aa:48: 9e:2d:9a:ca:f5:5d:f3:a9:bc:33:6f:90:a1:1b:af: 78:5b:84:4f:72:ac:0e:0c:62:c3:36:e0:35:a4:29: c9:c1:12:87:51:11:ad:39:a4:73:30:87:63:18:58: 52:2a:41:27:fb:db:b3:1a:e9:14:c6:c6:22:cc:4c: 1f:92:d3:ef:ae:3c:31:86:74:c9:f6:5d:6e:dd:4b: 4c:34:30:2f:87:5d:12:80:5c:1a:c9:4f:f6:8a:dc: 3b:9a:12:66:52:e2:4a:a6:65:c0:99:1e:d0:da:6b: c1:1a:9f:95:a2:27:cc:ed:15:75:b8:ee:58:2c:11: e5:2a:1c:3d:f4:cb:97:a6:7e:53:13:63:9a:92:9a: 45:ab:bd:53:20:8d:d6:f3:e0:5e:f9:a2:0d:59:f3: 9c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3A:89:14:DF:36:3A:EE:9C:9E:3E:D6:64:D9:81:E7:77:6C:F1:DE X509v3 Authority Key Identifier: keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/3TqJFN82Ou6cnj7WZNmB53ds8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.211.0/24 Signature Algorithm: sha256WithRSAEncryption 89:18:4e:01:43:d8:8b:1f:e7:b6:ae:17:8b:6b:8c:fb:a7:74: 99:b3:17:3b:7e:a9:5c:98:b9:ea:a6:75:62:a4:88:53:e2:54: 75:d4:fe:9f:8d:32:8e:bf:d8:94:03:0f:19:21:50:eb:1d:7d: 89:48:4f:7d:be:69:4d:a3:08:4d:90:c0:57:f3:dc:38:e8:73: ac:a1:dc:7d:bc:c2:22:d8:e2:0e:f3:8c:48:e1:4f:92:3b:7d: d7:81:4e:4f:eb:23:5a:f8:3e:d5:37:b0:f4:7a:8a:95:37:2f: a2:87:9c:e9:5e:69:bc:cb:fd:9c:87:35:25:d8:ad:c3:6e:53: b3:5a:7b:9a:ac:4f:1d:46:23:8d:5b:19:e2:93:e6:d2:b0:c2: d7:43:c4:03:27:97:42:65:92:f9:e6:3c:96:16:f0:ef:b4:46: e4:b7:d6:e2:5b:3f:2d:ef:cc:24:cd:75:fd:c0:bc:01:89:c4: 55:71:59:2c:85:ea:7a:9d:26:7d:73:e7:d7:bb:b3:54:5f:50: c7:83:6b:54:81:60:b2:cb:c8:32:8b:c1:9a:0c:b2:d1:5c:66: 82:62:33:8f:a9:38:95:ce:0c:56:92:4d:cb:3c:1c:5c:0d:86: 35:ed:16:62:40:e3:3f:1e:65:f0:f3:0d:0b:c9:17:57:08:fc: 58:55:29:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pLiPQ5LcBIFOhJ9On9jmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNTE4MjRjMTJiZDNlMmFmN2E5ODc1MjRhN2EzM2E4ZjE5 ZDgxZTcwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDNhODkxNGRmMzYzYWVlOWM5ZTNlZDY2NGQ5ODFlNzc3NmNmMWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp46/7JqtAw00NfdpmYuEdDBEytO cEnI3vku7l1bayGjbGZyeA3zBZi174YANBfVPQfZ5mynUdUmb0mFRST7DXgTEWcO DDesOLJWEgTNlVx6+XSQEiUcUE0E4bn/loxxI2wthZIpqkieLZrK9V3zqbwzb5Ch G694W4RPcqwODGLDNuA1pCnJwRKHURGtOaRzMIdjGFhSKkEn+9uzGukUxsYizEwf ktPvrjwxhnTJ9l1u3UtMNDAvh10SgFwayU/2itw7mhJmUuJKpmXAmR7Q2mvBGp+V oifM7RV1uO5YLBHlKhw99MuXpn5TE2OakppFq71TII3W8+Be+aINWfOc4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN06iRTfNjrunJ4+1mTZged3bPHeMB8GA1UdIwQY MBaAFFFRgkwSvT4q96mHUkp6M6jxnYHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85NGQ0ODUtNWQxOS00NmJjLWIzMzYt ZmFhZmU0NzhiZGNlLzEvM1RxSkZOODJPdTZjbmo3V1pObUI1M2RzOGQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85NGQ0ODUtNWQxOS00NmJjLWIzMzYtZmFhZmU0NzhiZGNl LzEvVVZHQ1RCSzlQaXIzcVlkU1Nub3pxUEdkZ2VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LTMA0G CSqGSIb3DQEBCwUAA4IBAQCJGE4BQ9iLH+e2rheLa4z7p3SZsxc7fqlcmLnqpnVi pIhT4lR11P6fjTKOv9iUAw8ZIVDrHX2JSE99vmlNowhNkMBX89w46HOsodx9vMIi 2OIO84xI4U+SO33XgU5P6yNa+D7VN7D0eoqVNy+ih5zpXmm8y/2chzUl2K3DblOz WnuarE8dRiONWxnik+bSsMLXQ8QDJ5dCZZL55jyWFvDvtEbkt9biWz8t78wkzXX9 wLwBicRVcVkshep6nSZ9c+fXu7NUX1DHg2tUgWCyy8gyi8GaDLLRXGaCYjOPqTiV zgxWkk3LPBxcDYY17RZiQOM/HmXw8w0LyRdXCPxYVSk9 -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:59 2026 by rpki-client