This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/3Kqw9tljPQG5d-js0HaYveBuk-4.roa File: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (raw, json) Hash identifier: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY= Subject key identifier: DC:AA:B0:F6:D9:63:3D:01:B9:77:E8:EC:D0:76:98:BD:E0:6E:93:EE Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43 Certificate serial: 019B7C12B3AACDFC2E22019F08D2EE9955C8 Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/3Kqw9tljPQG5d-js0HaYveBuk-4.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6758 IP address blocks: 80.94.96.0/20 maxlen: 24 82.113.0.0/19 maxlen: 24 87.254.224.0/19 maxlen: 24 88.209.64.0/18 maxlen: 24 185.250.4.0/22 maxlen: 24 195.78.0.0/19 maxlen: 24 2a07:9080::/36 maxlen: 36 2a07:9080:1000::/36 maxlen: 36 2a07:9080:2000::/36 maxlen: 36 2a07:9080:3000::/36 maxlen: 36 2a07:9080:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b3:aa:cd:fc:2e:22:01:9f:08:d2:ee:99:55:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcaab0f6d9633d01b977e8ecd07698bde06e93ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:c2:f1:f9:67:15:6a:76:0f:9a:31:b8:1d: 79:aa:cf:ac:d6:7f:73:0b:fe:29:b1:95:96:32:1e: fa:d7:eb:cd:07:30:3c:b0:8f:ae:01:cd:85:30:d7: 58:7f:78:db:9d:65:5d:94:c3:a2:22:ec:90:c4:ce: 2c:84:8a:51:7f:0b:3f:05:9f:05:e5:b4:cc:82:91: f8:0b:15:19:80:19:a8:8f:14:3e:5b:bc:ea:b4:dc: 61:81:2d:7a:9a:32:ca:23:e1:b0:5b:e4:ec:80:58: ad:0d:a3:16:f6:e9:6b:98:88:cc:86:0b:ef:c1:71: fa:fa:1a:06:f3:3d:0a:84:d6:03:75:03:55:7d:f6: e2:2a:c1:da:ac:85:6f:8e:ff:ea:74:d2:9f:0f:e9: 60:f1:94:0f:12:39:c1:28:03:ac:62:81:9e:43:f7: 85:ce:98:a4:15:6e:10:67:91:7d:9c:92:d3:d3:cb: d6:85:e0:13:e4:7b:7f:fa:d0:91:65:4b:a2:b0:72: 02:bb:97:89:12:00:48:26:f8:f1:fd:83:f2:1a:b6: 80:68:4d:5d:23:2e:79:4a:76:2f:9b:47:e5:cc:ec: 67:f8:67:32:84:10:c8:a5:ef:df:cd:1f:a7:fe:7d: 1a:94:f3:ac:fc:13:21:84:a1:5a:86:c7:60:2e:cd: ad:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AA:B0:F6:D9:63:3D:01:B9:77:E8:EC:D0:76:98:BD:E0:6E:93:EE X509v3 Authority Key Identifier: keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/3Kqw9tljPQG5d-js0HaYveBuk-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.94.96.0/20 82.113.0.0/19 87.254.224.0/19 88.209.64.0/18 185.250.4.0/22 195.78.0.0/19 IPv6: 2a07:9080::-2a07:9080:4fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6d:ca:f9:18:e6:bc:2b:3d:79:e9:e2:5d:73:a4:12:6e:a8:58: 91:40:69:e8:5b:82:0c:23:c5:77:7a:73:bc:6e:d8:47:40:4a: e2:be:bd:9b:e7:78:85:10:f4:3f:5e:f2:86:dd:cc:93:5b:1e: b4:9d:f5:0c:69:3f:00:a7:51:c0:20:7c:77:48:1c:34:f2:28: 2a:4a:26:3b:a4:9c:ab:19:8c:97:44:68:05:80:b0:71:9b:bf: 83:41:a2:f6:8b:09:7c:84:1f:90:f3:ed:72:69:f0:31:6b:2f: 1f:f5:95:c9:b3:67:e8:c9:b8:61:c6:68:00:f8:6f:0c:65:73: 05:02:05:ca:55:0f:eb:8b:94:e7:f8:27:9b:26:45:58:37:75: 95:8c:43:00:40:75:fe:06:aa:f6:2f:b4:69:c1:7b:dd:40:b1: 35:c2:fc:93:f0:48:90:39:10:94:46:69:1d:4a:65:de:c5:a2: 57:45:3c:7e:e8:d4:f4:38:2b:4d:42:33:dc:98:00:8d:32:7e: c3:89:23:55:84:fd:a1:e4:f0:67:e6:1f:86:38:2f:e4:ef:eb: 22:ce:62:19:6b:60:6a:27:b9:02:da:e2:21:98:d5:8c:8f:c1: ba:00:6d:08:bc:a3:73:48:40:64:bf:47:99:ec:ff:5d:c7:40: c5:3e:66:0c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt8ErOqzfwuIgGfCNLumVXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYmQ5Mjc2YTZmNzhkYWMxMDAyYzM3ODNhMThkNDVlYzE0 YjVkNDMwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2FhYjBmNmQ5NjMzZDAxYjk3N2U4ZWNkMDc2OThiZGUwNmU5M2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5zC8flnFWp2D5oxuB15qs+s1n9z C/4psZWWMh761+vNBzA8sI+uAc2FMNdYf3jbnWVdlMOiIuyQxM4shIpRfws/BZ8F 5bTMgpH4CxUZgBmojxQ+W7zqtNxhgS16mjLKI+GwW+TsgFitDaMW9ulrmIjMhgvv wXH6+hoG8z0KhNYDdQNVffbiKsHarIVvjv/qdNKfD+lg8ZQPEjnBKAOsYoGeQ/eF zpikFW4QZ5F9nJLT08vWheAT5Ht/+tCRZUuisHICu5eJEgBIJvjx/YPyGraAaE1d Iy55SnYvm0flzOxn+GcyhBDIpe/fzR+n/n0alPOs/BMhhKFahsdgLs2tKQIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFNyqsPbZYz0BuXfo7NB2mL3gbpPuMB8GA1UdIwQY MBaAFOK9knam942sEALDeDoY1F7BS11DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgt NzFlZWNmODk4ZDQyLzEvM0txdzl0bGpQUUc1ZC1qczBIYVl2ZUJ1ay00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgtNzFlZWNmODk4ZDQy LzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAqBAIAATAkAwQEUF5gAwQF UnEAAwQFV/7gAwQGWNFAAwQCufoEAwQFw04AMBcEAgACMBEwDwMFByoHkIADBgQq B5CAQDANBgkqhkiG9w0BAQsFAAOCAQEAbcr5GOa8Kz156eJdc6QSbqhYkUBp6FuC DCPFd3pzvG7YR0BK4r69m+d4hRD0P17yht3Mk1setJ31DGk/AKdRwCB8d0gcNPIo KkomO6ScqxmMl0RoBYCwcZu/g0Gi9osJfIQfkPPtcmnwMWsvH/WVybNn6Mm4YcZo APhvDGVzBQIFylUP64uU5/gnmyZFWDd1lYxDAEB1/gaq9i+0acF73UCxNcL8k/BI kDkQlEZpHUpl3sWiV0U8fujU9DgrTUIz3JgAjTJ+w4kjVYT9oeTwZ+Yfhjgv5O/r Is5iGWtgaie5AtriIZjVjI/BugBtCLyjc0hAZL9Hmez/XcdAxT5mDA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:40 2026 by rpki-client