This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3ostfnsnfixfxEqrfywy9eGNnT0.roa File: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (raw, json) Hash identifier: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k= Subject key identifier: DE:8B:2D:7E:7B:27:7E:2C:5F:C4:4A:AB:7F:2C:32:F5:E1:8D:9D:3D Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741 Certificate serial: 019B7CED22A4DBACD016C7086F75AF0A7E3F Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3ostfnsnfixfxEqrfywy9eGNnT0.roa Signing time: Fri 02 Jan 2026 04:17:54 +0000 ROA not before: Fri 02 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8540 IP address blocks: 185.211.216.0/22 maxlen: 24 185.228.32.0/22 maxlen: 24 185.228.32.0/23 maxlen: 24 185.228.34.0/24 maxlen: 24 2a0b:6c40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:22:a4:db:ac:d0:16:c7:08:6f:75:af:0a:7e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de63eb6319ba454d397645945ce5439576fac741 Validity Not Before: Jan 2 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de8b2d7e7b277e2c5fc44aab7f2c32f5e18d9d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:2a:c2:56:2b:74:65:90:c0:f9:ef:e6:5c: 94:fa:f0:8d:c8:b9:02:99:de:3d:94:f4:0e:40:c3: a0:57:1e:9d:54:6b:ed:fe:2b:ab:ec:e4:78:9e:ed: 4a:5e:f3:2f:c9:a8:34:dc:1d:13:a8:3a:b6:d2:10: d2:ba:97:fa:12:80:10:fc:fa:2a:fa:a6:9d:1d:74: 52:eb:b1:56:58:7e:b6:52:36:7d:0d:96:bd:d6:29: 5f:15:5a:73:2a:c6:02:09:ba:10:5e:7f:33:25:69: ad:a0:e7:0c:a8:96:79:30:92:d0:63:f1:e5:23:6e: 07:3b:8c:af:86:cb:ae:e6:12:d1:42:ca:04:63:ab: b2:d7:83:0f:e3:e5:e3:8c:1c:04:31:b3:34:ab:ea: 9f:86:ba:44:dc:fe:c1:eb:3e:95:90:8b:bb:ef:a2: 38:62:88:d5:a8:7a:41:4c:9b:8a:70:93:3c:9d:4d: 10:46:99:26:9f:58:18:ae:4d:ad:58:a6:eb:fb:e3: 0b:03:26:2c:76:92:d7:3e:7b:ba:4b:87:f9:ea:82: 33:f9:43:28:dc:79:c4:55:77:2c:7f:b0:b4:f5:f7: 36:b4:c9:fc:20:16:30:c4:09:c7:4b:c7:c0:4e:0b: 57:13:62:78:99:fc:71:1b:80:10:44:8a:c8:56:3d: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8B:2D:7E:7B:27:7E:2C:5F:C4:4A:AB:7F:2C:32:F5:E1:8D:9D:3D X509v3 Authority Key Identifier: keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3ostfnsnfixfxEqrfywy9eGNnT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.216.0/22 185.228.32.0/22 IPv6: 2a0b:6c40::/29 Signature Algorithm: sha256WithRSAEncryption 0d:8b:22:da:73:a8:0c:e5:4f:43:d0:b5:13:6b:3b:22:96:31: 09:50:64:88:34:b7:6c:02:f5:b2:60:fe:aa:99:70:d2:4b:27: aa:5d:f1:05:c9:5b:54:38:03:51:c2:25:05:39:6c:09:8e:91: ec:69:4b:ba:7f:b5:70:3f:a3:1b:ef:35:cf:9c:8d:56:56:41: 28:c2:6a:47:c5:c6:71:1e:b3:b2:f5:69:99:2e:8a:52:f7:0a: d1:25:38:0d:19:c9:25:88:d2:f7:dd:33:6a:3e:fd:57:44:15: 57:4c:98:c9:40:af:c7:fe:4c:5a:74:dc:6b:bb:0c:1e:e3:5f: d3:07:70:be:c3:aa:5a:fa:d1:c9:94:23:8c:55:7f:18:48:da: 44:42:d0:5d:24:e5:b9:93:4c:ee:fa:38:75:45:1e:ae:a1:82: bd:04:8b:66:c7:7e:f7:be:e8:ca:9d:7f:6a:db:63:58:0b:e0: 0b:8e:07:96:07:4e:c6:b1:4e:45:03:a3:e1:89:55:15:48:24: 6d:a0:31:ab:ee:f1:d5:70:e7:98:da:d9:14:d3:6b:20:a1:68: 23:3d:28:8a:61:93:46:0e:af:d2:a5:82:6e:97:2c:80:b2:a5: dc:bf:9e:52:12:14:7c:ce:6e:56:9a:f6:10:08:ea:24:74:0f: 07:e0:a9:a7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87SKk26zQFscIb3WvCn4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm YWM3NDEwHhcNMjYwMTAyMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZThiMmQ3ZTdiMjc3ZTJjNWZjNDRhYWI3ZjJjMzJmNWUxOGQ5ZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zUqwlYrdGWQwPnv5lyU+vCNyLkC md49lPQOQMOgVx6dVGvt/iur7OR4nu1KXvMvyag03B0TqDq20hDSupf6EoAQ/Poq +qadHXRS67FWWH62UjZ9DZa91ilfFVpzKsYCCboQXn8zJWmtoOcMqJZ5MJLQY/Hl I24HO4yvhsuu5hLRQsoEY6uy14MP4+XjjBwEMbM0q+qfhrpE3P7B6z6VkIu776I4 YojVqHpBTJuKcJM8nU0QRpkmn1gYrk2tWKbr++MLAyYsdpLXPnu6S4f56oIz+UMo 3HnEVXcsf7C09fc2tMn8IBYwxAnHS8fATgtXE2J4mfxxG4AQRIrIVj2TNQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN6LLX57J34sX8RKq38sMvXhjZ09MB8GA1UdIwQY MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt MWUxOGY1YjQ5MDVkLzEvM29zdGZuc25maXhmeEVxcmZ5d3k5ZUdOblQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCudPYAwQC ueQgMA0EAgACMAcDBQMqC2xAMA0GCSqGSIb3DQEBCwUAA4IBAQANiyLac6gM5U9D 0LUTazsiljEJUGSINLdsAvWyYP6qmXDSSyeqXfEFyVtUOANRwiUFOWwJjpHsaUu6 f7VwP6Mb7zXPnI1WVkEowmpHxcZxHrOy9WmZLopS9wrRJTgNGckliNL33TNqPv1X RBVXTJjJQK/H/kxadNxruwwe41/TB3C+w6pa+tHJlCOMVX8YSNpEQtBdJOW5k0zu +jh1RR6uoYK9BItmx373vujKnX9q22NYC+ALjgeWB07GsU5FA6PhiVUVSCRtoDGr 7vHVcOeY2tkU02sgoWgjPSiKYZNGDq/SpYJulyyAsqXcv55SEhR8zm5WmvYQCOok dA8H4Kmn -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:11 2026 by rpki-client