This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/3x92TrF8N94ZpyZCm4fts9AHkrI.roa File: 3x92TrF8N94ZpyZCm4fts9AHkrI.roa (raw, json) Hash identifier: sNwt0zp1LxcJpyDYVc0cP5yyw+nZAgDz5XkvLtfBLcY= Subject key identifier: DF:1F:76:4E:B1:7C:37:DE:19:A7:26:42:9B:87:ED:B3:D0:07:92:B2 Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22 Certificate serial: 019B7C12D1F27ED6739EB84466A02FD2101F Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/3x92TrF8N94ZpyZCm4fts9AHkrI.roa Signing time: Fri 02 Jan 2026 00:19:26 +0000 ROA not before: Fri 02 Jan 2026 00:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214151 IP address blocks: 91.108.140.0/24 maxlen: 24 91.108.141.0/24 maxlen: 24 91.108.142.0/24 maxlen: 24 91.108.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d1:f2:7e:d6:73:9e:b8:44:66:a0:2f:d2:10:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22 Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df1f764eb17c37de19a726429b87edb3d00792b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:88:3c:03:38:5b:c2:7a:ed:60:7c:ef:d7: 95:7d:82:fe:0d:dd:8e:c9:f0:5a:72:a4:0c:62:72: 5b:bc:52:ad:35:81:09:53:bc:5b:73:7c:93:dd:71: dc:4a:c0:c1:11:ab:36:81:12:50:50:75:47:fd:6f: 9a:e6:66:35:7c:3f:6d:7d:10:5f:66:22:22:ba:56: d4:a0:62:95:49:0d:70:fc:fa:03:e4:0a:08:e3:96: ff:c8:19:e8:d5:49:ce:25:4d:18:36:76:9e:ff:fe: c4:03:81:af:dc:14:06:9a:e2:0f:b6:89:46:67:31: 2b:0a:06:3a:d3:a1:bb:35:ac:19:ab:16:ab:71:dc: 0e:6f:42:83:47:1a:51:3d:81:00:60:8d:d9:c8:c6: c4:1c:13:3d:7f:94:02:ae:93:c2:f0:b1:f7:4c:9b: 2b:21:a2:d6:e8:7e:77:27:b6:fc:f0:32:14:2c:1e: 9b:d7:f5:38:b2:47:9e:d3:98:74:eb:18:9f:62:7f: 80:9c:65:44:02:8d:42:ff:d1:05:c6:8a:69:46:84: d0:a7:33:a0:e5:c3:a8:74:63:5b:fc:c4:f9:47:03: a4:41:d6:f0:65:58:86:ca:61:0d:36:83:ff:fb:40: 08:b8:74:74:fc:d1:f6:14:f3:39:50:0f:35:12:b8: 01:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:76:4E:B1:7C:37:DE:19:A7:26:42:9B:87:ED:B3:D0:07:92:B2 X509v3 Authority Key Identifier: keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/3x92TrF8N94ZpyZCm4fts9AHkrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.140.0/22 Signature Algorithm: sha256WithRSAEncryption 55:69:e3:8a:db:de:b5:db:43:97:b0:08:84:e4:d0:37:a8:b7: 6f:62:34:7f:8a:c7:be:a7:73:1d:cd:02:39:67:57:fe:df:ca: 9b:11:48:f2:e6:99:76:c9:4c:0b:3e:4c:14:63:ec:a3:fd:eb: c7:3e:90:e3:b5:36:5f:f0:cd:cd:fd:68:d4:90:b4:9c:9d:94: 14:04:b9:77:65:42:00:b9:70:d6:64:35:f4:3d:a3:01:65:aa: a6:02:93:bc:5e:f4:27:31:d4:0e:17:49:fa:d3:6f:ae:29:83: c0:8a:90:0c:58:f9:d1:63:60:82:ed:c8:74:64:18:6f:2e:55: 9a:a8:d0:de:c9:7b:61:46:81:f2:1c:3c:d6:ce:52:b5:7d:b9: 57:dd:91:95:f6:eb:94:a1:82:a0:60:d0:11:49:3e:6e:9a:47: 67:ee:d3:74:42:6b:00:f9:80:09:05:94:6f:c7:2c:54:45:91: 6c:c4:10:a2:0d:61:e9:62:3d:0f:32:81:6b:7c:a8:a6:20:c8: ea:af:1f:de:48:39:ba:37:93:d9:0b:fa:50:3b:51:6a:78:03: 00:d3:1d:e5:01:c3:07:aa:f4:19:98:ca:29:1f:dc:97:46:10: 80:b7:38:04:b5:e8:03:c9:22:fe:08:a5:a0:6e:87:9e:aa:6d: 5e:93:4d:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EtHyftZznrhEZqAv0hAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2Y2JjZjJlOTU3Y2E4ZDk0MjQ3MmE3YjAwNDQyODViMjZk YjZiMjIwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjFmNzY0ZWIxN2MzN2RlMTlhNzI2NDI5Yjg3ZWRiM2QwMDc5MmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4+IPAM4W8J67WB879eVfYL+Dd2O yfBacqQMYnJbvFKtNYEJU7xbc3yT3XHcSsDBEas2gRJQUHVH/W+a5mY1fD9tfRBf ZiIiulbUoGKVSQ1w/PoD5AoI45b/yBno1UnOJU0YNnae//7EA4Gv3BQGmuIPtolG ZzErCgY606G7NawZqxarcdwOb0KDRxpRPYEAYI3ZyMbEHBM9f5QCrpPC8LH3TJsr IaLW6H53J7b88DIULB6b1/U4skee05h06xifYn+AnGVEAo1C/9EFxoppRoTQpzOg 5cOodGNb/MT5RwOkQdbwZViGymENNoP/+0AIuHR0/NH2FPM5UA81ErgBrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8fdk6xfDfeGacmQpuH7bPQB5KyMB8GA1UdIwQY MBaAFJbLzy6VfKjZQkcqewBEKFsm22siMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHN2UExwVjhxTmxDUnlwN0FFUW9XeWJiYXlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYjYwZTktYjZlMC00ODkwLTlkZTEt MTNiNDMxMzQyYWI4LzEvM3g5MlRyRjhOOTRacHlaQ200ZnRzOUFIa3JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYjYwZTktYjZlMC00ODkwLTlkZTEtMTNiNDMxMzQyYWI4 LzEvbHN2UExwVjhxTmxDUnlwN0FFUW9XeWJiYXlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW2yMMA0G CSqGSIb3DQEBCwUAA4IBAQBVaeOK296120OXsAiE5NA3qLdvYjR/ise+p3MdzQI5 Z1f+38qbEUjy5pl2yUwLPkwUY+yj/evHPpDjtTZf8M3N/WjUkLScnZQUBLl3ZUIA uXDWZDX0PaMBZaqmApO8XvQnMdQOF0n602+uKYPAipAMWPnRY2CC7ch0ZBhvLlWa qNDeyXthRoHyHDzWzlK1fblX3ZGV9uuUoYKgYNARST5umkdn7tN0QmsA+YAJBZRv xyxURZFsxBCiDWHpYj0PMoFrfKimIMjqrx/eSDm6N5PZC/pQO1FqeAMA0x3lAcMH qvQZmMopH9yXRhCAtzgEtegDySL+CKWgboeeqm1ek00W -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:59 2026 by rpki-client