This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/3VLDvoZCO7skcLMmoqmsMLtkmQU.roa File: 3VLDvoZCO7skcLMmoqmsMLtkmQU.roa (raw, json) Hash identifier: 54REseVbtlx9mAKpYatYkVRIZlL/47Cw+aylSFwZYDg= Subject key identifier: DD:52:C3:BE:86:42:3B:BB:24:70:B3:26:A2:A9:AC:30:BB:64:99:05 Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627 Certificate serial: 019B783540ECF0BABDE4F8C52D16F1B0A47C Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/3VLDvoZCO7skcLMmoqmsMLtkmQU.roa Signing time: Thu 01 Jan 2026 06:18:34 +0000 ROA not before: Thu 01 Jan 2026 06:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34046 IP address blocks: 195.242.112.0/23 maxlen: 23 195.245.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:40:ec:f0:ba:bd:e4:f8:c5:2d:16:f1:b0:a4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627 Validity Not Before: Jan 1 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd52c3be86423bbb2470b326a2a9ac30bb649905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:7a:0d:cc:bc:59:62:86:10:2c:f2:e7:3f: a9:b6:dc:15:ee:32:a4:e8:4f:77:03:25:a7:68:5c: f0:31:19:b3:5e:9b:1e:86:dc:e1:70:81:26:8e:b5: 46:c8:c1:f8:02:41:57:ab:57:ce:d4:00:42:c6:11: 9c:8e:60:d5:48:cf:23:56:22:db:02:0b:9d:cf:48: f0:df:00:65:34:98:91:b4:c0:d5:22:6a:a7:42:9f: d8:da:a6:e4:04:aa:c5:12:29:d9:ff:9c:0f:bd:7e: c6:e0:44:80:04:c4:c0:f8:65:9e:f7:06:e5:b1:c7: 85:87:a9:7a:b5:fe:d5:9e:aa:00:f1:d4:28:58:1c: 39:86:11:e3:c6:95:d3:e5:90:1a:6e:0b:33:cc:8f: 39:fd:e8:9a:84:be:2e:16:5b:9c:96:75:ae:1a:f0: 58:a4:50:ae:33:4f:57:0d:d5:5c:66:45:55:c1:f2: 19:f7:a0:0b:cb:84:93:02:f2:dc:3d:b1:1e:eb:4a: 19:f8:6e:ba:42:19:c9:87:da:99:c7:e4:9a:ca:46: 53:1f:5a:2f:a1:ac:e8:c0:69:72:fd:4c:fe:dd:1f: 25:0c:17:35:87:6b:1c:43:48:b4:61:ab:a9:68:0c: 7f:04:8d:1c:1a:31:55:22:ce:10:a3:92:84:67:a5: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:52:C3:BE:86:42:3B:BB:24:70:B3:26:A2:A9:AC:30:BB:64:99:05 X509v3 Authority Key Identifier: keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/3VLDvoZCO7skcLMmoqmsMLtkmQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.112.0/23 195.245.80.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:ad:70:5e:f9:de:59:bd:e0:1e:62:51:2d:b8:6d:b9:f2:c7: 6b:9a:e4:81:10:70:aa:d0:6f:04:ea:bb:74:4e:81:87:9e:7d: 5a:9a:1b:c6:84:fc:6c:10:b8:54:05:d3:c3:2c:44:28:a2:f3: a7:1d:3d:18:10:b4:82:1c:aa:b7:ba:94:52:27:ca:f4:11:45: 98:d0:11:85:26:0b:bf:06:fa:f2:10:ff:13:89:28:d3:40:0b: 05:e3:da:de:a5:74:b3:18:fa:2a:ad:4e:19:40:ba:ce:81:0d: 32:2f:bd:2e:62:9c:90:37:a3:cb:c7:da:5f:98:9c:28:a6:8f: 3c:17:ff:f5:bf:4f:97:49:64:82:81:1d:87:fe:a8:13:bd:9c: 10:22:8f:48:0f:09:d1:3b:fa:e7:c6:4d:82:88:25:c1:7b:44: a3:85:24:6d:fb:ad:e5:bc:74:18:6d:27:31:27:07:85:51:c4: 3a:a2:31:3e:05:79:16:66:5c:a2:9e:4c:eb:6d:a3:57:07:11: 93:2c:e4:26:f4:38:33:40:87:bf:e8:d4:c8:ab:42:8e:43:9a: 9f:4a:91:d4:7c:8a:86:80:f0:82:ee:3a:bf:83:c6:ce:d0:0a: 1e:9b:72:39:9c:ac:d6:1b:9e:2c:f0:4f:07:46:01:1d:7f:a9: 72:c4:f7:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NUDs8Lq95PjFLRbxsKR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzdhNjI4NDZkZjRlZGJlNTY2NmI4OWU4NDIwZTkxOWFi MDg2MjcwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDUyYzNiZTg2NDIzYmJiMjQ3MGIzMjZhMmE5YWMzMGJiNjQ5OTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/l6Dcy8WWKGECzy5z+pttwV7jKk 6E93AyWnaFzwMRmzXpsehtzhcIEmjrVGyMH4AkFXq1fO1ABCxhGcjmDVSM8jViLb Agudz0jw3wBlNJiRtMDVImqnQp/Y2qbkBKrFEinZ/5wPvX7G4ESABMTA+GWe9wbl sceFh6l6tf7VnqoA8dQoWBw5hhHjxpXT5ZAabgszzI85/eiahL4uFluclnWuGvBY pFCuM09XDdVcZkVVwfIZ96ALy4STAvLcPbEe60oZ+G66QhnJh9qZx+SaykZTH1ov oazowGly/Uz+3R8lDBc1h2scQ0i0YaupaAx/BI0cGjFVIs4Qo5KEZ6WAqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN1Sw76GQju7JHCzJqKprDC7ZJkFMB8GA1UdIwQY MBaAFGd3pihG307b5WZriehCDpGasIYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNlbUtFYmZUdHZsWm11SjZFSU9rWnF3aGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjM3M2YtNzY0ZC00NTMyLTgzMzMt NjJkOTRhZjgwMWI1LzEvM1ZMRHZvWkNPN3NrY0xNbW9xbXNNTHRrbVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jYjM3M2YtNzY0ZC00NTMyLTgzMzMtNjJkOTRhZjgwMWI1 LzEvWjNlbUtFYmZUdHZsWm11SjZFSU9rWnF3aGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw/JwAwQB w/VQMA0GCSqGSIb3DQEBCwUAA4IBAQB+rXBe+d5ZveAeYlEtuG258sdrmuSBEHCq 0G8E6rt0ToGHnn1amhvGhPxsELhUBdPDLEQoovOnHT0YELSCHKq3upRSJ8r0EUWY 0BGFJgu/BvryEP8TiSjTQAsF49repXSzGPoqrU4ZQLrOgQ0yL70uYpyQN6PLx9pf mJwopo88F//1v0+XSWSCgR2H/qgTvZwQIo9IDwnRO/rnxk2CiCXBe0SjhSRt+63l vHQYbScxJweFUcQ6ojE+BXkWZlyinkzrbaNXBxGTLOQm9DgzQIe/6NTIq0KOQ5qf SpHUfIqGgPCC7jq/g8bO0Aoem3I5nKzWG54s8E8HRgEdf6lyxPdP -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:17 2026 by rpki-client