This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/3IZRCOACUcLiARW2HP7kjbxOWuA.roa File: 3IZRCOACUcLiARW2HP7kjbxOWuA.roa (raw, json) Hash identifier: cLVZUJw1rLqnRks0o5eNFloDi9vUVRxfI1Y00+CjpX8= Subject key identifier: DC:86:51:08:E0:02:51:C2:E2:01:15:B6:1C:FE:E4:8D:BC:4E:5A:E0 Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f Certificate serial: 019B7C126D333C0231123F6E93DA52D7211B Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/3IZRCOACUcLiARW2HP7kjbxOWuA.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9017 IP address blocks: 176.117.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6d:33:3c:02:31:12:3f:6e:93:da:52:d7:21:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc865108e00251c2e20115b61cfee48dbc4e5ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:3d:75:16:01:dc:39:03:36:2e:3c:ec:9b: a5:72:8e:0e:19:59:34:e6:79:ab:c9:8c:5c:6b:7a: d0:09:04:88:e9:e0:5e:a2:8c:53:7d:46:3a:01:30: 92:82:25:0c:f2:cf:2d:5d:ab:74:d5:11:91:d3:41: be:06:ab:f4:a0:73:fd:93:7f:0e:cd:86:5f:65:49: ae:95:6e:65:05:f6:16:5f:60:b4:0c:db:79:d2:da: c1:89:f9:ca:0b:32:c4:3d:76:c7:75:a9:a5:31:b8: d3:e7:fb:17:f6:d3:84:1a:9c:57:f9:7c:58:3a:af: d3:0e:79:d9:7c:fb:f4:3e:9d:13:fc:43:dc:7d:ff: 27:60:67:79:0a:a5:89:e2:6b:8c:b6:31:a4:6f:b8: 05:07:11:b7:19:54:a0:84:85:41:4e:92:17:b1:90: 60:56:15:cd:f3:cc:7f:84:f2:33:96:ca:e1:78:7f: 64:be:79:a7:c6:e9:d3:70:28:ab:56:5d:03:8d:b1: 98:56:24:b2:ad:a2:f4:ce:f1:93:3e:84:17:fc:6e: c3:7c:69:8a:c6:da:78:68:be:45:8f:75:ba:2f:d4: 0a:cc:67:ce:ef:73:b4:52:c1:d0:50:1c:b5:20:9e: ea:97:1f:c6:15:f3:21:40:98:d2:5e:d1:ab:b5:ce: 86:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:86:51:08:E0:02:51:C2:E2:01:15:B6:1C:FE:E4:8D:BC:4E:5A:E0 X509v3 Authority Key Identifier: keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/3IZRCOACUcLiARW2HP7kjbxOWuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.63.0/24 Signature Algorithm: sha256WithRSAEncryption 20:20:12:bb:57:cf:d4:b6:81:bb:ff:45:af:35:9c:a0:b4:c7: 66:88:19:6e:6c:f0:7b:53:d9:da:95:b1:f5:9c:2f:a4:b9:5b: 49:60:36:97:3f:e9:aa:70:c0:69:80:89:c5:d3:b2:04:5f:a5: 4c:7e:49:32:38:1f:fe:e6:58:8b:c0:22:c0:b6:1e:74:d0:f6: 7e:9c:4a:33:5e:05:9a:ab:5d:4c:ef:b0:d3:3c:2f:cc:1c:39: 1c:40:ae:be:e4:d1:ba:e3:64:3d:46:aa:20:23:c5:fd:85:f5: a4:07:a2:23:2f:ee:c8:64:65:41:24:c5:7d:44:8c:cf:cd:80: ba:77:29:01:df:f4:5d:30:40:74:80:4f:37:f9:a0:29:d1:3b: 69:38:6a:40:d0:56:eb:ab:89:1b:a6:57:24:90:d1:ce:a6:41: 88:bf:04:ca:aa:90:f9:b0:d6:04:bd:a5:55:1e:19:cb:08:c7: cc:49:81:a7:86:57:63:20:5a:c5:38:d2:44:25:db:b7:2d:80: cb:c7:1a:20:08:b5:33:15:e5:cc:df:20:46:c8:88:a2:ae:01: 90:f7:3a:55:03:73:64:15:d0:04:33:4d:25:4f:fc:c4:55:df: bf:91:bf:e1:60:51:cd:e0:7c:fb:39:d9:d6:b4:ca:56:b3:25: 31:4a:e8:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Em0zPAIxEj9uk9pS1yEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzQxZTdjNzU4ZDQ4MDQxM2I1ZjFiMDA2MDYxMTI5N2U0 NDAzNmYwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzg2NTEwOGUwMDI1MWMyZTIwMTE1YjYxY2ZlZTQ4ZGJjNGU1YWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyks9dRYB3DkDNi487Julco4OGVk0 5nmryYxca3rQCQSI6eBeooxTfUY6ATCSgiUM8s8tXat01RGR00G+Bqv0oHP9k38O zYZfZUmulW5lBfYWX2C0DNt50trBifnKCzLEPXbHdamlMbjT5/sX9tOEGpxX+XxY Oq/TDnnZfPv0Pp0T/EPcff8nYGd5CqWJ4muMtjGkb7gFBxG3GVSghIVBTpIXsZBg VhXN88x/hPIzlsrheH9kvnmnxunTcCirVl0DjbGYViSyraL0zvGTPoQX/G7DfGmK xtp4aL5Fj3W6L9QKzGfO73O0UsHQUBy1IJ7qlx/GFfMhQJjSXtGrtc6G1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyGUQjgAlHC4gEVthz+5I28TlrgMB8GA1UdIwQY MBaAFEd0Hnx1jUgEE7XxsAYGESl+RANvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTIt NzI3YjFiNTgzZWI2LzEvM0laUkNPQUNVY0xpQVJXMkhQN2tqYnhPV3VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTItNzI3YjFiNTgzZWI2 LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHU/MA0G CSqGSIb3DQEBCwUAA4IBAQAgIBK7V8/UtoG7/0WvNZygtMdmiBlubPB7U9nalbH1 nC+kuVtJYDaXP+mqcMBpgInF07IEX6VMfkkyOB/+5liLwCLAth500PZ+nEozXgWa q11M77DTPC/MHDkcQK6+5NG642Q9RqogI8X9hfWkB6IjL+7IZGVBJMV9RIzPzYC6 dykB3/RdMEB0gE83+aAp0TtpOGpA0Fbrq4kbplckkNHOpkGIvwTKqpD5sNYEvaVV HhnLCMfMSYGnhldjIFrFONJEJdu3LYDLxxogCLUzFeXM3yBGyIiirgGQ9zpVA3Nk FdAEM00lT/zEVd+/kb/hYFHN4Hz7OdnWtMpWsyUxSuj9 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:32 2026 by rpki-client