This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/P3pMTXaPEJ3pF-gEwjCXB342FMw.roa File: P3pMTXaPEJ3pF-gEwjCXB342FMw.roa (raw, json) Hash identifier: ctsyJFlW0Oa24uSpietN5XHoRYpf4UiDm+Wb7QP+anM= Subject key identifier: 3F:7A:4C:4D:76:8F:10:9D:E9:17:E8:04:C2:30:97:07:7E:36:14:CC Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8 Certificate serial: 019B7F160454036ADFA1546452545CA39284 Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/P3pMTXaPEJ3pF-gEwjCXB342FMw.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205467 IP address blocks: 85.12.0.0/22 maxlen: 24 85.12.4.0/22 maxlen: 24 193.138.223.0/24 maxlen: 24 2a01:788:213::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:04:54:03:6a:df:a1:54:64:52:54:5c:a3:92:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8 Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f7a4c4d768f109de917e804c23097077e3614cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:d3:d8:f8:2d:93:ee:54:52:e6:cc:e7:74: 1e:a7:e6:90:ed:f4:07:24:ab:f4:94:34:3e:a0:ee: 85:b5:89:0a:55:b2:a0:5a:44:26:20:b4:2f:0d:95: be:f9:71:c0:6f:76:6d:45:ba:21:19:db:46:4e:29: 7f:45:1d:e0:23:61:0b:a3:ab:d1:98:e9:a0:d2:c4: 10:55:21:2a:12:0b:e7:6a:3f:ae:ad:cb:09:b2:ba: d9:54:6b:ed:63:e2:09:00:c6:33:70:4a:20:ef:05: 84:7d:45:46:d4:0a:19:7f:87:d2:60:61:47:04:b9: 78:c2:bb:09:ff:bc:a4:4c:32:e9:fb:28:e0:44:e7: 9c:84:bc:cb:38:97:f1:70:da:f4:17:77:73:09:88: 1a:74:b0:a8:c5:09:3c:78:be:a8:a0:65:bb:f7:19: ca:3b:0c:bc:0f:84:da:f2:c7:93:25:38:54:02:12: 4c:db:eb:8b:ca:d4:52:72:82:ff:c2:60:75:d2:5d: 88:fc:ec:d8:6b:26:e5:b2:3f:bd:da:c6:c6:4b:6a: 9b:fa:89:82:20:1b:e5:c2:64:e2:47:e6:6a:f7:92: 36:81:f9:68:8c:fd:b5:a8:4a:f1:c0:99:dc:c1:10: 34:61:cb:9d:ff:77:dd:0c:6c:2e:7e:b5:08:4c:03: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:4C:4D:76:8F:10:9D:E9:17:E8:04:C2:30:97:07:7E:36:14:CC X509v3 Authority Key Identifier: keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/P3pMTXaPEJ3pF-gEwjCXB342FMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.12.0.0/21 193.138.223.0/24 IPv6: 2a01:788:213::/48 Signature Algorithm: sha256WithRSAEncryption 55:a3:14:34:54:af:94:95:a1:ea:9e:48:17:1e:65:00:70:bd: e1:fe:13:2c:74:1f:23:87:96:e3:d7:bf:37:2f:e8:83:ec:6e: bf:bb:04:d5:5b:94:63:f4:db:09:c2:4b:3c:4c:d4:27:4d:ff: ac:ff:12:6f:fa:9e:27:6f:1a:f4:a3:6a:41:40:5b:57:d4:17: 16:2d:60:4c:1d:66:de:c3:e2:a7:27:68:ba:9b:03:a0:b0:fa: 81:55:87:b1:af:eb:11:14:ba:cf:81:ca:e6:20:3f:83:5f:94: 48:d4:a6:ba:96:f7:de:67:cd:c8:a4:a9:ed:7c:3a:4e:de:20: 4d:80:8d:ca:be:05:88:f8:09:6b:37:6f:a1:30:de:ae:0d:47: 86:01:ad:04:3b:cc:48:60:73:a5:71:ba:f6:61:52:d0:db:ca: 61:1f:85:fc:8e:59:3b:a9:69:ce:e2:1f:42:52:f2:29:2c:5f: 28:c4:83:1c:83:de:cc:39:59:16:93:6b:f3:1d:16:ac:02:d1: ef:a0:07:20:56:e2:99:50:7f:95:8e:73:0e:5d:d5:22:72:1f: f8:04:41:91:12:e1:41:20:63:03:e9:64:63:74:28:55:93:58: 0f:52:3f:45:f5:59:02:bb:82:b4:dc:0e:5a:52:4d:8f:36:70: 61:fc:4c:e6 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/FgRUA2rfoVRkUlRco5KEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5 MzI5ZjgwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjdhNGM0ZDc2OGYxMDlkZTkxN2U4MDRjMjMwOTcwNzdlMzYxNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnTT2Pgtk+5UUubM53Qep+aQ7fQH JKv0lDQ+oO6FtYkKVbKgWkQmILQvDZW++XHAb3ZtRbohGdtGTil/RR3gI2ELo6vR mOmg0sQQVSEqEgvnaj+urcsJsrrZVGvtY+IJAMYzcEog7wWEfUVG1AoZf4fSYGFH BLl4wrsJ/7ykTDLp+yjgROechLzLOJfxcNr0F3dzCYgadLCoxQk8eL6ooGW79xnK Owy8D4Ta8seTJThUAhJM2+uLytRScoL/wmB10l2I/OzYayblsj+92sbGS2qb+omC IBvlwmTiR+Zq95I2gflojP21qErxwJncwRA0Ycud/3fdDGwufrUITANN4wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFD96TE12jxCd6RfoBMIwlwd+NhTMMB8GA1UdIwQY MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt NjRhNmEwNWI5OTA1LzEvUDNwTVRYYVBFSjNwRi1nRXdqQ1hCMzQyRk13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1 LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDVQwAAwQA wYrfMA8EAgACMAkDBwAqAQeIAhMwDQYJKoZIhvcNAQELBQADggEBAFWjFDRUr5SV oeqeSBceZQBwveH+Eyx0HyOHluPXvzcv6IPsbr+7BNVblGP02wnCSzxM1CdN/6z/ Em/6nidvGvSjakFAW1fUFxYtYEwdZt7D4qcnaLqbA6Cw+oFVh7Gv6xEUus+ByuYg P4NflEjUprqW995nzcikqe18Ok7eIE2Ajcq+BYj4CWs3b6Ew3q4NR4YBrQQ7zEhg c6VxuvZhUtDbymEfhfyOWTupac7iH0JS8iksXyjEgxyD3sw5WRaTa/MdFqwC0e+g ByBW4plQf5WOcw5d1SJyH/gEQZES4UEgYwPpZGN0KFWTWA9SP0X1WQK7grTcDlpS TY82cGH8TOY= -----END CERTIFICATE-----Generated at Mon Jan 12 00:37:23 2026 by rpki-client