This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa File: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (raw, json) Hash identifier: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI= Subject key identifier: 07:7B:C4:9A:77:69:FF:1E:98:00:CB:CB:B6:04:3B:D0:89:3A:53:42 Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd Certificate serial: 019B7F8289FC41A0BF4C2DC3FFEF9945B306 Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa Signing time: Fri 02 Jan 2026 16:20:19 +0000 ROA not before: Fri 02 Jan 2026 16:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209255 IP address blocks: 92.119.52.0/22 maxlen: 22 2a09:b640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:89:fc:41:a0:bf:4c:2d:c3:ff:ef:99:45:b3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd Validity Not Before: Jan 2 16:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=077bc49a7769ff1e9800cbcbb6043bd0893a5342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:f3:e0:97:03:15:50:c4:7d:e7:d3:49:91: 83:bc:96:55:fb:4b:ec:52:da:24:96:a9:2d:d9:7f: 7f:21:4c:2d:a5:66:27:0e:00:8c:41:44:98:22:cf: ee:00:9a:19:48:3d:47:87:51:11:58:4e:0d:5a:8d: 4c:c5:64:ad:ab:61:76:84:b4:2e:12:05:73:b1:2b: f7:86:2f:fb:73:58:a9:c7:be:81:d2:3d:75:42:e1: b3:51:5a:98:3c:27:00:76:c7:fe:87:f5:14:9d:88: c3:fb:7b:4e:15:74:8d:4d:6a:40:f4:79:28:85:d3: f6:6e:c2:4a:fe:8a:69:cf:20:36:2b:1c:eb:bc:a8: a4:c5:03:ff:24:5c:71:8a:19:b9:e7:83:a3:68:b8: fb:9d:7f:0a:23:55:d6:40:6f:2c:6e:c3:b9:8a:12: 25:8a:f1:7d:ab:ce:24:f7:09:25:b7:94:a4:59:74: ec:a2:3f:30:d5:69:21:b8:88:99:89:1c:ee:e5:c4: a3:10:6e:24:3a:8f:79:9f:ec:b2:f4:17:af:1b:98: 3e:3c:7e:5d:78:ff:aa:05:55:bc:d1:97:67:89:d4: a4:48:00:24:48:c7:ed:96:3c:c2:99:0e:90:91:ea: 02:6b:cf:93:15:5d:44:95:63:93:c2:bc:9e:13:94: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7B:C4:9A:77:69:FF:1E:98:00:CB:CB:B6:04:3B:D0:89:3A:53:42 X509v3 Authority Key Identifier: keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.52.0/22 IPv6: 2a09:b640::/29 Signature Algorithm: sha256WithRSAEncryption 14:8c:ed:97:b2:52:dd:07:87:f4:76:66:a9:ba:6c:3d:1f:ed: f7:d9:6f:17:1d:9f:f6:1f:49:b9:ff:21:70:cd:93:31:3b:4b: 04:d1:e8:f2:4c:f1:0d:3e:28:57:58:72:5e:0f:04:a5:1d:36: 5d:b0:4e:41:d6:76:71:80:00:1e:48:ee:b9:1d:20:11:6d:31: 93:3b:e7:96:e8:f9:32:5e:0f:56:4c:ce:bb:6f:c0:83:e2:41: 4d:c4:17:c8:70:ee:65:5c:52:28:ba:33:ec:91:fe:88:c6:84: 38:90:07:ec:9d:05:28:21:cc:9e:c5:ad:bb:19:ed:b7:cf:9b: 24:89:0e:59:04:c4:85:46:96:b8:a4:62:59:49:6d:38:26:02: 06:e4:7a:33:67:4e:87:b8:f7:e9:28:e5:43:04:de:22:ac:2e: 7d:39:45:b2:22:d0:12:4c:0d:35:e5:d1:36:32:41:5d:ea:94: 52:24:66:87:f8:70:ee:df:a1:f9:da:32:1e:00:66:12:f8:07: 7c:2d:0d:93:71:2f:26:89:4c:76:b1:97:a3:f8:e0:4f:ae:b9: 7d:d8:cf:cd:eb:4a:b8:85:35:4d:27:a8:2b:c2:2f:74:63:3c: eb:dd:4e:86:16:e2:6f:f2:fd:ca:5e:aa:ca:8f:8c:07:80:6e: f8:f5:46:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gon8QaC/TC3D/++ZRbMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MzVkYWE4Y2ZlMjVkZDEyYTJjMjZlMGZmY2NlOTc2MzY3 NDhlYmQwHhcNMjYwMTAyMTYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzdiYzQ5YTc3NjlmZjFlOTgwMGNiY2JiNjA0M2JkMDg5M2E1MzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtufz4JcDFVDEfefTSZGDvJZV+0vs Utoklqkt2X9/IUwtpWYnDgCMQUSYIs/uAJoZSD1Hh1ERWE4NWo1MxWStq2F2hLQu EgVzsSv3hi/7c1ipx76B0j11QuGzUVqYPCcAdsf+h/UUnYjD+3tOFXSNTWpA9Hko hdP2bsJK/oppzyA2KxzrvKikxQP/JFxxihm554OjaLj7nX8KI1XWQG8sbsO5ihIl ivF9q84k9wklt5SkWXTsoj8w1WkhuIiZiRzu5cSjEG4kOo95n+yy9BevG5g+PH5d eP+qBVW80ZdnidSkSAAkSMftljzCmQ6QkeoCa8+TFV1ElWOTwryeE5ToWQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAd7xJp3af8emADLy7YEO9CJOlNCMB8GA1UdIwQY MBaAFAc12qjP4l3RKiwm4P/M6XY2dI69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAt Njc5Y2YwMjEwZDQ5LzEvQjN2RW1uZHBfeDZZQU12THRnUTcwSWs2VTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAtNjc5Y2YwMjEwZDQ5 LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXHc0MA0E AgACMAcDBQMqCbZAMA0GCSqGSIb3DQEBCwUAA4IBAQAUjO2XslLdB4f0dmapumw9 H+332W8XHZ/2H0m5/yFwzZMxO0sE0ejyTPENPihXWHJeDwSlHTZdsE5B1nZxgAAe SO65HSARbTGTO+eW6PkyXg9WTM67b8CD4kFNxBfIcO5lXFIoujPskf6IxoQ4kAfs nQUoIcyexa27Ge23z5skiQ5ZBMSFRpa4pGJZSW04JgIG5HozZ06HuPfpKOVDBN4i rC59OUWyItASTA015dE2MkFd6pRSJGaH+HDu36H52jIeAGYS+Ad8LQ2TcS8miUx2 sZej+OBPrrl92M/N60q4hTVNJ6grwi90Yzzr3U6GFuJv8v3KXqrKj4wHgG749Uax -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:23 2026 by rpki-client