This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/f3c-Bx8EM1DQdQw259Ys4FfCp1o.roa File: f3c-Bx8EM1DQdQw259Ys4FfCp1o.roa (raw, json) Hash identifier: QWEHUEuCQFEx3Ifs/5uJ3ysgwmoEufGpwhglHF6YQdo= Subject key identifier: 7F:77:3E:07:1F:04:33:50:D0:75:0C:36:E7:D6:2C:E0:57:C2:A7:5A Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Certificate serial: 019B791147A40BC151561D23B8864DC8B72A Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/f3c-Bx8EM1DQdQw259Ys4FfCp1o.roa Signing time: Thu 01 Jan 2026 10:18:54 +0000 ROA not before: Thu 01 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39558 IP address blocks: 91.221.132.0/24 maxlen: 24 91.221.133.0/24 maxlen: 24 195.244.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:47:a4:0b:c1:51:56:1d:23:b8:86:4d:c8:b7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f773e071f043350d0750c36e7d62ce057c2a75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:4b:65:da:47:a3:47:88:4f:63:cd:c7:7a: 91:a0:6a:de:f0:dc:2e:12:36:07:dd:60:be:94:a3: bc:72:7c:27:86:e5:36:a3:f0:30:1b:22:bf:6a:88: 39:59:33:05:7b:69:77:34:3e:36:26:26:2d:30:4f: 97:7b:d9:16:57:f9:15:41:c3:c5:c9:ac:19:8a:ba: 86:66:f4:91:15:d5:da:8a:51:96:9c:f0:08:01:b8: 38:e5:fa:4f:22:a5:04:59:2c:42:f6:7b:8b:43:b6: 82:3c:bf:39:dd:c2:0c:3f:4b:60:d9:df:3c:2a:5d: 31:d4:c7:4a:66:bd:5d:1d:b4:5d:a5:e9:6c:8c:ce: 18:69:c5:b5:e8:33:2e:4f:8c:c3:6f:c2:79:d8:1f: a3:2d:48:43:12:e4:b9:24:d0:70:21:ea:1d:19:07: 03:73:a7:63:ce:c6:c6:58:73:85:67:01:58:f5:f5: 88:a5:54:0b:88:0a:53:c9:f8:b2:d4:78:86:8c:3b: 24:8b:96:24:2d:6f:44:0f:8e:d5:4d:5b:ba:ed:22: f3:46:4a:51:a1:aa:0b:32:d5:b8:5b:e1:60:e2:a8: bd:6e:34:81:6b:2c:b4:4e:03:f2:6e:40:26:2b:99: eb:6d:8b:b9:f7:41:83:b5:62:fb:ac:75:32:ab:97: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:3E:07:1F:04:33:50:D0:75:0C:36:E7:D6:2C:E0:57:C2:A7:5A X509v3 Authority Key Identifier: keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/f3c-Bx8EM1DQdQw259Ys4FfCp1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.132.0/23 195.244.4.0/23 Signature Algorithm: sha256WithRSAEncryption 86:40:2c:88:59:b3:d5:99:7c:39:53:b7:57:85:21:f6:0e:6f: a9:da:90:8b:dc:ac:9d:5d:59:b8:21:1f:d5:d8:4a:00:78:62: 27:3c:ed:59:e3:e9:e2:27:eb:6d:86:3f:6f:16:7f:94:83:4a: 8e:d4:2e:d8:7a:6e:69:62:47:94:22:54:fb:4b:41:fc:59:b0: 9f:b1:0a:45:cd:a7:5d:98:b2:53:ae:1d:0a:28:2d:d4:88:8d: 00:3c:d6:3f:1e:ef:f4:5e:16:0d:41:df:72:c3:93:87:7c:dc: 93:a5:7f:fd:a5:37:9b:af:6f:f3:a9:f6:cd:7d:c0:4e:dc:99: 00:41:f1:bd:95:01:ff:f1:37:3a:fe:a4:33:ff:bc:71:bc:d6: 54:9f:6d:48:f5:b9:0a:43:03:21:02:9a:5f:2e:43:a0:8f:d3: 33:84:94:6d:74:ff:5f:16:63:2c:ce:b7:02:67:7e:ac:3f:72: ef:cb:1c:f0:40:45:83:bf:4d:fe:7c:7d:bb:f0:be:a1:10:21: a5:73:86:fd:86:df:c7:a1:f2:4d:be:6a:5b:18:2c:95:0c:e6: 6c:3d:21:6e:20:38:a5:3a:2e:fe:03:fc:86:d9:9c:85:94:ad: 30:1b:e4:29:75:27:ac:4a:40:6a:37:09:8b:b3:35:5f:bb:7d: 25:59:45:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EUekC8FRVh0juIZNyLcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl ZmU2MjIwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjc3M2UwNzFmMDQzMzUwZDA3NTBjMzZlN2Q2MmNlMDU3YzJhNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OFLZdpHo0eIT2PNx3qRoGre8Nwu EjYH3WC+lKO8cnwnhuU2o/AwGyK/aog5WTMFe2l3ND42JiYtME+Xe9kWV/kVQcPF yawZirqGZvSRFdXailGWnPAIAbg45fpPIqUEWSxC9nuLQ7aCPL853cIMP0tg2d88 Kl0x1MdKZr1dHbRdpelsjM4YacW16DMuT4zDb8J52B+jLUhDEuS5JNBwIeodGQcD c6djzsbGWHOFZwFY9fWIpVQLiApTyfiy1HiGjDski5YkLW9ED47VTVu67SLzRkpR oaoLMtW4W+Fg4qi9bjSBayy0TgPybkAmK5nrbYu590GDtWL7rHUyq5cC/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH93PgcfBDNQ0HUMNufWLOBXwqdaMB8GA1UdIwQY MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt OGMyZGY1YTVjNmQ3LzEvZjNjLUJ4OEVNMURRZFF3MjU5WXM0RmZDcDFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3 LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW92EAwQB w/QEMA0GCSqGSIb3DQEBCwUAA4IBAQCGQCyIWbPVmXw5U7dXhSH2Dm+p2pCL3Kyd XVm4IR/V2EoAeGInPO1Z4+niJ+tthj9vFn+Ug0qO1C7Yem5pYkeUIlT7S0H8WbCf sQpFzaddmLJTrh0KKC3UiI0APNY/Hu/0XhYNQd9yw5OHfNyTpX/9pTebr2/zqfbN fcBO3JkAQfG9lQH/8Tc6/qQz/7xxvNZUn21I9bkKQwMhAppfLkOgj9MzhJRtdP9f FmMszrcCZ36sP3LvyxzwQEWDv03+fH278L6hECGlc4b9ht/HofJNvmpbGCyVDOZs PSFuIDilOi7+A/yG2ZyFlK0wG+QpdSesSkBqNwmLszVfu30lWUWo -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:06 2026 by rpki-client