This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/3mjUvr0ozA9KcVybdk9dg1L1c6M.roa File: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (raw, json) Hash identifier: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko= Subject key identifier: DE:68:D4:BE:BD:28:CC:0F:4A:71:5C:9B:76:4F:5D:83:52:F5:73:A3 Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7 Certificate serial: 019B7DCB060EB1987EB04FDBCC509C83C96F Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/3mjUvr0ozA9KcVybdk9dg1L1c6M.roa Signing time: Fri 02 Jan 2026 08:20:15 +0000 ROA not before: Fri 02 Jan 2026 08:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59944 IP address blocks: 185.65.96.0/22 maxlen: 24 2a03:1ae0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:06:0e:b1:98:7e:b0:4f:db:cc:50:9c:83:c9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7 Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de68d4bebd28cc0f4a715c9b764f5d8352f573a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c5:2e:d8:ad:0f:16:35:67:d1:87:9f:f4:da: 64:05:65:33:1f:3b:27:ca:60:01:52:33:5f:47:2b: 03:01:2e:4a:ce:e5:77:3e:d9:8f:95:b9:5c:7f:25: 5a:05:dd:dc:b8:6b:e1:3d:65:6a:48:4a:12:b9:5a: ee:4b:d1:65:0e:8e:f7:b4:b9:ba:98:74:bb:13:ef: 6c:58:1c:5e:e5:75:3c:ae:22:1f:55:cd:77:1b:d7: a1:89:93:a6:da:76:cc:85:91:cf:07:3c:39:ba:b0: a2:5b:ff:0e:3b:29:d4:bf:2e:99:bd:19:4b:c1:36: b7:ce:72:9a:14:03:90:6b:02:75:80:81:74:70:d6: e1:12:ab:10:5f:e2:31:cd:55:ff:69:8b:ba:df:25: 8c:bc:de:35:2b:d1:cb:17:4f:e4:1d:67:a8:a8:b5: 4d:3f:c5:d2:08:9d:90:f7:fb:72:06:52:9d:1a:5e: 9a:64:83:e9:56:62:3e:af:7a:28:bf:cd:ca:f3:a3: 71:f6:37:4b:ef:92:65:03:7c:57:d2:b1:4a:3f:a4: ed:fc:64:f4:52:bc:c5:2c:d4:d6:9b:21:91:af:c7: b8:2a:c7:a5:19:62:75:5b:ea:f7:c6:3d:7d:bc:a8: 3f:88:75:56:15:f7:4e:d7:18:c5:2a:7f:87:70:81: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:D4:BE:BD:28:CC:0F:4A:71:5C:9B:76:4F:5D:83:52:F5:73:A3 X509v3 Authority Key Identifier: keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/3mjUvr0ozA9KcVybdk9dg1L1c6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.96.0/22 IPv6: 2a03:1ae0::/32 Signature Algorithm: sha256WithRSAEncryption 58:4e:73:36:ac:a4:14:5e:6e:c3:f8:38:48:c7:77:58:9e:3e: a6:37:cf:76:05:63:6a:62:6e:79:18:8f:4e:15:ad:ff:d9:10: 5a:84:63:36:58:9d:a9:14:20:bb:8e:67:e4:60:62:33:86:c7: fd:17:f6:06:6a:1a:76:10:fe:ed:35:6d:5d:a5:b7:d3:44:cc: 20:04:fb:c5:1e:ad:3d:24:27:21:d6:9b:f6:5a:c2:57:6b:f8: 46:46:0c:b1:4f:20:fa:b2:9b:c4:cc:0f:20:ca:6e:98:7c:d4: d2:61:c1:dd:38:60:35:ea:6d:0c:e5:0d:a0:32:4c:62:34:2c: 1a:f4:68:cb:83:27:e0:18:14:f4:63:93:13:2e:db:97:05:5e: 83:02:20:fd:c8:ea:20:c7:04:51:5d:85:4a:18:ac:c9:4d:16: 3d:fc:35:15:7d:47:27:89:d6:51:4a:35:c9:6b:39:63:06:c8: af:4b:bf:d3:4e:9f:a8:88:38:dd:67:84:f1:20:52:59:98:f9: bc:c5:19:ab:83:5a:fc:1f:9f:a9:2b:77:4b:83:4a:00:63:48: f9:0b:b2:a2:26:20:fa:be:ca:9d:f8:5f:2e:63:f0:c0:9b:84: 77:48:eb:aa:45:20:2d:53:b1:71:76:a0:6d:76:c4:71:7f:1c: 9b:2d:11:1a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ywYOsZh+sE/bzFCcg8lvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NGQwOTIwNDdkYmU5YTk2OGExNjBmMzE1ZmFiOWJiOWM4 MzU2ZDcwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTY4ZDRiZWJkMjhjYzBmNGE3MTVjOWI3NjRmNWQ4MzUyZjU3M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sUu2K0PFjVn0Yef9NpkBWUzHzsn ymABUjNfRysDAS5KzuV3PtmPlblcfyVaBd3cuGvhPWVqSEoSuVruS9FlDo73tLm6 mHS7E+9sWBxe5XU8riIfVc13G9ehiZOm2nbMhZHPBzw5urCiW/8OOynUvy6ZvRlL wTa3znKaFAOQawJ1gIF0cNbhEqsQX+IxzVX/aYu63yWMvN41K9HLF0/kHWeoqLVN P8XSCJ2Q9/tyBlKdGl6aZIPpVmI+r3oov83K86Nx9jdL75JlA3xX0rFKP6Tt/GT0 UrzFLNTWmyGRr8e4KselGWJ1W+r3xj19vKg/iHVWFfdO1xjFKn+HcIFVpwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN5o1L69KMwPSnFcm3ZPXYNS9XOjMB8GA1UdIwQY MBaAFOVNCSBH2+mpaKFg8xX6ubucg1bXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQt YTdmZDJmOWU3NGNmLzEvM21qVXZyMG96QTlLY1Z5YmRrOWRnMUwxYzZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQtYTdmZDJmOWU3NGNm LzEvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUFgMA0E AgACMAcDBQAqAxrgMA0GCSqGSIb3DQEBCwUAA4IBAQBYTnM2rKQUXm7D+DhIx3dY nj6mN892BWNqYm55GI9OFa3/2RBahGM2WJ2pFCC7jmfkYGIzhsf9F/YGahp2EP7t NW1dpbfTRMwgBPvFHq09JCch1pv2WsJXa/hGRgyxTyD6spvEzA8gym6YfNTSYcHd OGA16m0M5Q2gMkxiNCwa9GjLgyfgGBT0Y5MTLtuXBV6DAiD9yOogxwRRXYVKGKzJ TRY9/DUVfUcnidZRSjXJazljBsivS7/TTp+oiDjdZ4TxIFJZmPm8xRmrg1r8H5+p K3dLg0oAY0j5C7KiJiD6vsqd+F8uY/DAm4R3SOuqRSAtU7FxdqBtdsRxfxybLREa -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:43 2026 by rpki-client