This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/3GeqF2lR4psQ6viBzLvWfiU_DKw.roa File: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (raw, json) Hash identifier: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o= Subject key identifier: DC:67:AA:17:69:51:E2:9B:10:EA:F8:81:CC:BB:D6:7E:25:3F:0C:AC Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E3896D854A9FE6BA45E344523444707 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/3GeqF2lR4psQ6viBzLvWfiU_DKw.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206446 IP address blocks: 188.66.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:96:d8:54:a9:fe:6b:a4:5e:34:45:23:44:47:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc67aa176951e29b10eaf881ccbbd67e253f0cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:fd:1f:b8:1c:36:92:6a:a6:38:8a:cb:6d: de:28:12:17:19:9d:ed:92:07:d4:43:f8:e1:07:be: 8b:25:b7:c7:2e:7f:be:43:c0:21:4c:bd:1d:0e:e6: 9e:be:01:43:6a:fe:70:6c:76:7b:e3:19:d7:ea:9d: a4:48:2d:2e:cf:54:c3:e3:67:b6:b3:73:f1:ad:43: 5b:45:54:64:fa:3d:ae:f1:38:08:c6:9c:4f:07:0b: 54:32:21:63:b6:3c:f0:6e:37:e0:47:66:5c:8f:c7: 45:c2:99:96:a4:c8:bc:33:5e:bd:86:d2:60:76:f9: 47:a9:b6:93:f7:f3:13:ba:a5:b1:da:07:a6:13:b4: 72:d1:8a:c2:e1:d2:2e:14:d2:34:85:9a:bb:2f:bc: 4e:81:f9:41:32:96:c4:12:20:74:15:35:84:03:85: 79:3f:72:40:cd:1d:b8:d3:1f:33:c9:bd:01:2e:96: 32:20:c8:df:03:55:27:ac:19:ca:ef:1b:14:13:cf: 6f:93:60:33:1b:0d:75:7b:46:45:95:69:7a:ee:8d: 19:0c:c1:94:26:78:6c:05:05:d6:86:96:7f:c4:9a: b2:ab:74:30:cb:2c:45:7b:5e:84:97:1a:cf:2d:bf: f1:d4:b7:54:e4:f2:7b:90:6e:07:3c:66:e0:19:d0: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:67:AA:17:69:51:E2:9B:10:EA:F8:81:CC:BB:D6:7E:25:3F:0C:AC X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/3GeqF2lR4psQ6viBzLvWfiU_DKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.66.26.0/24 Signature Algorithm: sha256WithRSAEncryption 31:98:c0:2c:34:1e:08:1b:7a:9e:48:80:36:ed:28:d4:56:79: 0e:c9:bc:3f:77:76:8f:5f:94:a7:de:a5:88:b1:e9:67:6f:61: 85:ac:6d:39:b8:c2:ff:3a:1f:6c:68:72:5b:85:0d:a3:dc:8c: 91:61:8d:ef:4e:7a:2a:bc:16:fd:dd:77:cc:c0:69:69:ef:3f: d8:cb:5d:f9:93:02:02:7f:62:5b:48:b9:bb:d3:9f:d9:6a:81: 79:0d:2e:df:4d:d3:d3:f7:5c:4b:94:d4:83:a9:5d:2d:c9:68: 23:55:d0:f5:c1:9d:34:55:f1:98:80:3e:f8:2e:f1:09:8d:fc: dc:ef:59:87:95:bd:1c:e0:fe:2a:e2:d3:81:f5:e9:06:54:e0: b5:6a:65:57:f8:fe:53:22:0f:9c:31:2a:bd:95:61:80:27:2c: c3:9f:9d:4e:e0:7e:83:d0:87:0e:3c:e1:4b:7f:11:91:d7:4e: 9a:79:ca:ec:6d:2f:5a:70:7d:23:9a:80:57:8d:f5:a3:3a:88: 92:99:83:ea:5b:dd:14:fe:53:d6:2c:c8:c4:40:9e:74:c2:f6: 47:e5:79:66:41:98:c1:26:58:60:cf:56:ea:3f:de:dc:1d:5b: 40:15:27:d2:26:0a:90:90:1f:56:10:d8:4e:ed:e7:91:64:16: 7d:e0:0c:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJbYVKn+a6ReNEUjREcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzY3YWExNzY5NTFlMjliMTBlYWY4ODFjY2JiZDY3ZTI1M2YwY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRH9H7gcNpJqpjiKy23eKBIXGZ3t kgfUQ/jhB76LJbfHLn++Q8AhTL0dDuaevgFDav5wbHZ74xnX6p2kSC0uz1TD42e2 s3PxrUNbRVRk+j2u8TgIxpxPBwtUMiFjtjzwbjfgR2Zcj8dFwpmWpMi8M169htJg dvlHqbaT9/MTuqWx2gemE7Ry0YrC4dIuFNI0hZq7L7xOgflBMpbEEiB0FTWEA4V5 P3JAzR240x8zyb0BLpYyIMjfA1UnrBnK7xsUE89vk2AzGw11e0ZFlWl67o0ZDMGU JnhsBQXWhpZ/xJqyq3QwyyxFe16ElxrPLb/x1LdU5PJ7kG4HPGbgGdDSGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxnqhdpUeKbEOr4gcy71n4lPwysMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvM0dlcUYybFI0cHNRNnZpQnpMdldmaVVfREt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEIaMA0G CSqGSIb3DQEBCwUAA4IBAQAxmMAsNB4IG3qeSIA27SjUVnkOybw/d3aPX5Sn3qWI selnb2GFrG05uML/Oh9saHJbhQ2j3IyRYY3vTnoqvBb93XfMwGlp7z/Yy135kwIC f2JbSLm705/ZaoF5DS7fTdPT91xLlNSDqV0tyWgjVdD1wZ00VfGYgD74LvEJjfzc 71mHlb0c4P4q4tOB9ekGVOC1amVX+P5TIg+cMSq9lWGAJyzDn51O4H6D0IcOPOFL fxGR106aecrsbS9acH0jmoBXjfWjOoiSmYPqW90U/lPWLMjEQJ50wvZH5XlmQZjB Jlhgz1bqP97cHVtAFSfSJgqQkB9WENhO7eeRZBZ94Aw0 -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:52 2026 by rpki-client