This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/3a7_WjUjHvmaDKMR_0n-V2J4S48.roa File: 3a7_WjUjHvmaDKMR_0n-V2J4S48.roa (raw, json) Hash identifier: HAXb7MwMLIlHkvY0JciFwEcWW+cBxNegwhoL5MEj+Y4= Subject key identifier: DD:AE:FF:5A:35:23:1E:F9:9A:0C:A3:11:FF:49:FE:57:62:78:4B:8F Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA30C0B76DA558B0D024E695A2D4C1 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/3a7_WjUjHvmaDKMR_0n-V2J4S48.roa Signing time: Fri 02 Jan 2026 08:19:21 +0000 ROA not before: Fri 02 Jan 2026 08:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48123 IP address blocks: 85.140.56.0/24 maxlen: 24 85.140.57.0/24 maxlen: 24 85.140.58.0/24 maxlen: 24 85.140.59.0/24 maxlen: 24 85.140.72.0/24 maxlen: 24 85.140.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:30:c0:b7:6d:a5:58:b0:d0:24:e6:95:a2:d4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddaeff5a35231ef99a0ca311ff49fe5762784b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:aa:df:08:35:b9:2c:e8:00:01:d5:6e:75: a2:18:94:db:f3:34:75:ec:61:8d:eb:d5:01:be:58: d9:a8:c9:f9:53:04:fe:0a:c7:a2:c6:19:e5:14:19: 6c:a2:07:bf:44:c0:1c:68:75:a7:61:b1:8c:ac:a6: 12:a7:9e:9e:dd:4c:40:bf:6f:5b:db:02:94:dc:6f: 39:16:d8:2d:30:cf:9f:ec:93:a4:94:c5:39:5f:d5: 56:40:a3:2f:2a:5e:53:54:87:ae:90:f3:a2:3e:1d: c1:9f:70:e9:8b:f4:13:c0:03:8c:d6:9e:a8:95:7a: 94:cb:60:50:d0:e2:30:66:32:1e:a1:85:96:1a:07: 3c:53:cb:fb:84:23:6a:d5:6d:1b:f2:95:32:6c:be: 48:5f:80:97:28:8b:06:24:01:39:9b:e3:b9:fb:5f: ac:e8:4a:be:f3:1b:fa:6b:57:73:f7:8c:3c:23:40: 73:ee:66:1b:0c:ca:99:74:a3:65:98:4c:bb:01:3b: d9:e7:de:71:8b:75:21:91:8d:ac:05:9f:9f:5a:72: 05:06:a0:62:cb:e9:c4:c3:cf:4e:c9:58:84:06:b6: 2d:bb:49:d5:0f:43:b9:ed:4f:4f:9d:9d:7c:0d:d2: c8:47:7b:9a:97:d9:ad:70:bf:e7:6e:1b:64:15:60: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AE:FF:5A:35:23:1E:F9:9A:0C:A3:11:FF:49:FE:57:62:78:4B:8F X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/3a7_WjUjHvmaDKMR_0n-V2J4S48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.140.56.0/22 85.140.72.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:6c:e0:d4:55:0a:3c:bb:b2:8b:44:fe:0e:c1:a0:13:31:89: af:17:14:24:d3:12:02:0e:ab:9a:5b:c6:3c:b0:0c:95:79:a8: 92:0f:8d:4a:0f:76:0a:cd:21:d3:2f:58:0a:de:00:5e:27:b8: 98:d3:45:a6:96:b6:64:7a:44:e5:39:91:7f:15:6d:97:61:6c: 8f:63:e2:40:91:ed:b8:76:04:77:63:ba:8c:49:1c:8e:94:1d: 8c:66:48:61:b1:3e:48:00:91:b5:16:23:18:b1:be:8f:dd:82: 08:dc:c4:eb:5a:7d:59:e0:7f:0a:38:e4:2e:2f:c5:bb:7a:a7: 76:d0:55:cf:02:41:93:8b:90:f8:c2:c5:d6:95:8b:e2:85:64: 52:10:02:6b:a6:94:ce:0f:ff:45:72:e8:00:5e:ed:b2:e5:a4: 05:67:e0:b0:12:db:96:69:98:51:19:a8:64:4c:0f:20:18:32: e4:e7:a1:c5:40:73:36:bb:93:3c:af:62:2d:06:78:a8:98:71: a0:62:ea:5c:08:e8:10:95:cc:54:53:39:40:b5:aa:87:6a:16: 1a:9d:a1:19:b7:f7:af:43:ed:12:5b:1a:29:e0:62:c1:a6:9d: 12:9e:34:a7:c4:cc:9c:41:07:ce:05:4d:36:33:af:b2:f7:23: 0c:3f:7e:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yjDAt22lWLDQJOaVotTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGFlZmY1YTM1MjMxZWY5OWEwY2EzMTFmZjQ5ZmU1NzYyNzg0YjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKyq3wg1uSzoAAHVbnWiGJTb8zR1 7GGN69UBvljZqMn5UwT+CseixhnlFBlsoge/RMAcaHWnYbGMrKYSp56e3UxAv29b 2wKU3G85FtgtMM+f7JOklMU5X9VWQKMvKl5TVIeukPOiPh3Bn3Dpi/QTwAOM1p6o lXqUy2BQ0OIwZjIeoYWWGgc8U8v7hCNq1W0b8pUybL5IX4CXKIsGJAE5m+O5+1+s 6Eq+8xv6a1dz94w8I0Bz7mYbDMqZdKNlmEy7ATvZ595xi3UhkY2sBZ+fWnIFBqBi y+nEw89OyViEBrYtu0nVD0O57U9PnZ18DdLIR3ual9mtcL/nbhtkFWBMTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN2u/1o1Ix75mgyjEf9J/ldieEuPMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvM2E3X1dqVWpIdm1hREtNUl8wbi1WMko0UzQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVYw4AwQB VYxIMA0GCSqGSIb3DQEBCwUAA4IBAQAebODUVQo8u7KLRP4OwaATMYmvFxQk0xIC DquaW8Y8sAyVeaiSD41KD3YKzSHTL1gK3gBeJ7iY00WmlrZkekTlOZF/FW2XYWyP Y+JAke24dgR3Y7qMSRyOlB2MZkhhsT5IAJG1FiMYsb6P3YII3MTrWn1Z4H8KOOQu L8W7eqd20FXPAkGTi5D4wsXWlYvihWRSEAJrppTOD/9FcugAXu2y5aQFZ+CwEtuW aZhRGahkTA8gGDLk56HFQHM2u5M8r2ItBniomHGgYupcCOgQlcxUUzlAtaqHahYa naEZt/evQ+0SWxop4GLBpp0SnjSnxMycQQfOBU02M6+y9yMMP37m -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:17 2026 by rpki-client