This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/a3Lzw_FUmbYwiAPLTEPryzUOYTE.roa File: a3Lzw_FUmbYwiAPLTEPryzUOYTE.roa (raw, json) Hash identifier: UT3xazFEWgxD4QE0HTQ3reWyQqUTm3ksXZVs3NOwPPg= Subject key identifier: 6B:72:F3:C3:F1:54:99:B6:30:88:03:CB:4C:43:EB:CB:35:0E:61:31 Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d Certificate serial: 019B7AC7DDC945402C0561CC60006F710798 Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/a3Lzw_FUmbYwiAPLTEPryzUOYTE.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39730 IP address blocks: 178.250.176.0/21 maxlen: 21 185.195.132.0/22 maxlen: 22 2a0a:23c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dd:c9:45:40:2c:05:61:cc:60:00:6f:71:07:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1a31909780e81734af6607272d18525db7657d Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b72f3c3f15499b6308803cb4c43ebcb350e6131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:6e:35:ad:f5:e1:37:1c:9c:48:c6:cb:fd: 1a:36:66:78:d0:c0:74:35:59:1f:d4:40:4f:b6:25: 17:52:b1:58:ee:c2:c4:c3:b1:f1:10:e0:24:5e:3f: 3f:df:53:4c:a6:2b:cb:f9:48:77:2e:95:df:57:b4: 98:ac:67:03:66:65:53:a7:9f:ef:b0:0e:dd:e6:d7: af:20:09:d2:62:36:8c:91:fb:79:cb:8a:89:93:a4: d6:4c:01:90:8c:e1:a2:03:9a:5d:5d:c9:09:9d:1d: 3f:bf:f2:62:fe:0f:e4:aa:d0:32:f0:c6:05:90:a9: b4:04:df:c6:5d:eb:4c:30:af:c0:69:9f:d3:1c:40: 35:7c:ce:5a:ef:35:82:73:ce:7b:4b:78:15:64:ec: c9:09:cd:ef:57:23:a3:83:2b:07:90:f6:4e:4d:af: fc:e1:f3:9f:7f:a0:47:4c:97:e2:d3:85:75:38:a6: 45:37:6f:73:8e:12:ac:98:9e:c7:75:ab:c7:99:72: 44:74:db:60:ac:21:ea:a4:67:b6:87:2f:1a:c3:53: 7d:7d:84:df:39:f9:a9:9b:9f:a1:98:d3:93:86:76: 28:44:0d:88:d8:48:ea:69:f7:62:47:41:ce:56:9f: ca:1e:f8:be:4d:da:69:f4:73:9c:df:97:37:b6:38: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:F3:C3:F1:54:99:B6:30:88:03:CB:4C:43:EB:CB:35:0E:61:31 X509v3 Authority Key Identifier: keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/a3Lzw_FUmbYwiAPLTEPryzUOYTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.176.0/21 185.195.132.0/22 IPv6: 2a0a:23c0::/29 Signature Algorithm: sha256WithRSAEncryption 88:58:51:42:68:a6:10:d1:c3:0c:9a:93:78:72:ee:13:9e:cc: e2:3c:6f:b3:0a:2d:61:a6:e9:57:af:b3:a2:7d:06:f5:3f:32: 5a:1a:2f:56:5c:d7:06:ef:cf:b3:44:6f:07:7d:69:db:3e:59: 2c:c5:e1:dc:9f:3e:bc:fb:8e:01:0e:80:a1:c7:01:3c:4f:6c: 43:32:4e:45:be:0f:99:1b:35:d1:66:de:b7:86:71:57:e9:c6: ed:e7:a9:d1:3d:5f:b9:73:8b:c9:37:38:97:45:51:a5:30:22: 7e:e0:48:68:9d:78:99:eb:ce:e5:3d:56:37:0e:3e:0e:8c:e1: 8e:0d:8f:1e:4c:9d:01:b4:01:01:af:2c:d3:0a:f5:80:46:d5: 05:2d:b0:fb:aa:8b:91:43:a4:b7:a7:4b:d3:1a:3c:7b:03:18: 03:15:3f:39:a1:0b:ff:bb:ac:07:7e:03:67:53:d6:0e:1b:c5: fb:74:61:4f:b8:c4:35:c2:81:1d:0f:df:7c:11:47:54:3b:8c: 20:10:09:f3:92:55:66:a8:e1:5d:e7:d8:9b:40:d0:a1:7d:2e: a9:5f:7a:86:93:a6:66:e0:fb:e1:fe:d4:19:e3:19:7a:c5:17: 90:fb:7f:76:cd:a9:ae:38:70:a3:0c:e7:9f:b0:69:27:ef:38: da:d0:cf:94 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x93JRUAsBWHMYABvcQeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWEzMTkwOTc4MGU4MTczNGFmNjYwNzI3MmQxODUyNWRi NzY1N2QwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjcyZjNjM2YxNTQ5OWI2MzA4ODAzY2I0YzQzZWJjYjM1MGU2MTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIhuNa314TccnEjGy/0aNmZ40MB0 NVkf1EBPtiUXUrFY7sLEw7HxEOAkXj8/31NMpivL+Uh3LpXfV7SYrGcDZmVTp5/v sA7d5tevIAnSYjaMkft5y4qJk6TWTAGQjOGiA5pdXckJnR0/v/Ji/g/kqtAy8MYF kKm0BN/GXetMMK/AaZ/THEA1fM5a7zWCc857S3gVZOzJCc3vVyOjgysHkPZOTa/8 4fOff6BHTJfi04V1OKZFN29zjhKsmJ7HdavHmXJEdNtgrCHqpGe2hy8aw1N9fYTf Ofmpm5+hmNOThnYoRA2I2EjqafdiR0HOVp/KHvi+Tdpp9HOc35c3tjhRvwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGty88PxVJm2MIgDy0xD68s1DmExMB8GA1UdIwQY MBaAFFoaMZCXgOgXNK9mByctGFJdt2V9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQt Mjc1MmIzNzU5MDY2LzEvYTNMendfRlVtYll3aUFQTFRFUHJ5elVPWVRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQtMjc1MmIzNzU5MDY2 LzEvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsvqwAwQC ucOEMA0EAgACMAcDBQMqCiPAMA0GCSqGSIb3DQEBCwUAA4IBAQCIWFFCaKYQ0cMM mpN4cu4TnsziPG+zCi1hpulXr7OifQb1PzJaGi9WXNcG78+zRG8HfWnbPlksxeHc nz68+44BDoChxwE8T2xDMk5Fvg+ZGzXRZt63hnFX6cbt56nRPV+5c4vJNziXRVGl MCJ+4EhonXiZ687lPVY3Dj4OjOGODY8eTJ0BtAEBryzTCvWARtUFLbD7qouRQ6S3 p0vTGjx7AxgDFT85oQv/u6wHfgNnU9YOG8X7dGFPuMQ1woEdD998EUdUO4wgEAnz klVmqOFd59ibQNChfS6pX3qGk6Zm4Pvh/tQZ4xl6xReQ+392zamuOHCjDOefsGkn 7zja0M+U -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:09 2026 by rpki-client