This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/N3w2YmGANLSdSH-pmW22BuKUUBA.roa File: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (raw, json) Hash identifier: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA= Subject key identifier: 37:7C:36:62:61:80:34:B4:9D:48:7F:A9:99:6D:B6:06:E2:94:50:10 Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8 Certificate serial: 019B7BA512786703BFA1C7657D56AFE19844 Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/N3w2YmGANLSdSH-pmW22BuKUUBA.roa Signing time: Thu 01 Jan 2026 22:19:34 +0000 ROA not before: Thu 01 Jan 2026 22:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205739 IP address blocks: 185.208.88.0/22 maxlen: 24 2a0b:32c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:12:78:67:03:bf:a1:c7:65:7d:56:af:e1:98:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8 Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=377c3662618034b49d487fa9996db606e2945010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:b3:4d:05:7d:f6:68:8a:77:05:13:60:df: 44:30:31:d4:26:7f:f4:e5:b8:1a:a5:4c:1e:9d:d6: 43:f9:f5:32:97:55:ea:a8:e6:2b:b8:15:18:a6:1e: 37:38:4d:0a:fa:9f:b7:a8:19:d5:db:78:9c:ef:93: 7e:17:51:ed:15:05:74:68:3b:27:d3:7f:30:1d:dc: 3c:6a:ba:7a:cd:c2:ab:bf:df:59:1a:e6:f5:3a:c8: e8:d0:bb:9f:22:c5:db:b2:4d:cb:18:b0:fa:fd:96: 09:80:a4:3d:19:98:a8:00:53:6a:50:69:81:aa:11: 40:04:e1:a5:6a:69:f8:1a:e2:ec:a1:14:fd:4c:1c: 65:50:2e:3e:10:07:32:11:8b:eb:e1:6d:e7:8d:ed: 3d:84:b1:df:63:77:bf:4e:00:e2:eb:e6:05:d5:a7: 7f:f9:a4:ec:8c:32:50:8f:86:88:1f:be:22:ea:98: ed:fe:f1:8e:32:35:7d:28:25:41:11:4c:38:c0:73: a5:71:33:28:65:17:8e:4d:a4:e7:44:b0:84:cc:76: db:9e:85:df:e9:c2:4e:4b:40:ce:d6:eb:45:7e:44: b0:6c:4c:63:62:ef:79:79:a7:92:bc:e4:23:ce:10: 9b:0e:fa:bc:b5:08:a7:91:8c:f2:bb:97:69:0a:c8: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7C:36:62:61:80:34:B4:9D:48:7F:A9:99:6D:B6:06:E2:94:50:10 X509v3 Authority Key Identifier: keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/N3w2YmGANLSdSH-pmW22BuKUUBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.88.0/22 IPv6: 2a0b:32c0::/29 Signature Algorithm: sha256WithRSAEncryption 2f:5a:7a:f9:bb:90:2f:ec:c4:0e:8e:59:a1:1b:77:fc:bc:bf: 5f:b3:89:fb:14:8f:f7:c9:07:d5:b0:2b:dc:19:c0:70:e0:ab: b8:6f:0c:b2:4b:04:ac:7f:79:55:0c:83:45:80:28:f3:6a:0a: 13:4e:cb:a4:17:05:29:95:29:78:8a:9c:d4:58:b1:85:2e:71: 99:14:b3:27:ff:89:67:67:fd:1c:3f:6f:cb:21:a0:dd:29:ed: 53:c0:d5:51:53:6b:cc:31:76:b6:05:63:83:9c:61:5d:83:84: e0:28:64:29:65:57:ce:9f:45:d6:29:99:0a:4c:f9:b0:fc:b0: b9:f9:fc:94:07:2a:47:5d:a1:e5:1e:b9:c3:f5:d0:f3:f2:dc: 63:52:ab:e6:f7:58:9b:2e:6d:3c:a5:b9:87:cd:c9:35:fe:13: 3d:67:48:4f:d0:da:a7:c5:fd:4d:a6:3a:81:41:50:ef:7d:ea: 1a:3b:60:9b:ea:b3:b8:d2:c5:56:8d:77:7e:06:bc:d9:29:d4: c0:8b:bb:f8:6e:2f:4f:b0:b1:c9:87:35:e6:00:a2:30:d8:f2: 9d:55:04:9d:cc:bd:8b:51:da:31:9c:72:f5:2c:3a:ab:99:c1: a9:5b:8a:d2:e9:7c:b0:c9:9b:f5:67:fb:7c:f5:b6:fb:06:8c: 20:cb:6e:54 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pRJ4ZwO/ocdlfVav4ZhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjM0ZjE0NTg2ZTM5OWNkMzgwMmQ5Yzg4YjFlNjdkOGRk YjAzYTgwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzdjMzY2MjYxODAzNGI0OWQ0ODdmYTk5OTZkYjYwNmUyOTQ1MDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgGzTQV99miKdwUTYN9EMDHUJn/0 5bgapUwendZD+fUyl1XqqOYruBUYph43OE0K+p+3qBnV23ic75N+F1HtFQV0aDsn 038wHdw8arp6zcKrv99ZGub1Osjo0LufIsXbsk3LGLD6/ZYJgKQ9GZioAFNqUGmB qhFABOGlamn4GuLsoRT9TBxlUC4+EAcyEYvr4W3nje09hLHfY3e/TgDi6+YF1ad/ +aTsjDJQj4aIH74i6pjt/vGOMjV9KCVBEUw4wHOlcTMoZReOTaTnRLCEzHbbnoXf 6cJOS0DO1utFfkSwbExjYu95eaeSvOQjzhCbDvq8tQinkYzyu5dpCsi29wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDd8NmJhgDS0nUh/qZlttgbilFAQMB8GA1UdIwQY MBaAFGZjTxRYbjmc04AtnIix5n2N2wOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDct MTcxZGI0NjkwYzBhLzEvTjN3MlltR0FOTFNkU0gtcG1XMjJCdUtVVUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDctMTcxZGI0NjkwYzBh LzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudBYMA0E AgACMAcDBQMqCzLAMA0GCSqGSIb3DQEBCwUAA4IBAQAvWnr5u5Av7MQOjlmhG3f8 vL9fs4n7FI/3yQfVsCvcGcBw4Ku4bwyySwSsf3lVDINFgCjzagoTTsukFwUplSl4 ipzUWLGFLnGZFLMn/4lnZ/0cP2/LIaDdKe1TwNVRU2vMMXa2BWODnGFdg4TgKGQp ZVfOn0XWKZkKTPmw/LC5+fyUBypHXaHlHrnD9dDz8txjUqvm91ibLm08pbmHzck1 /hM9Z0hP0Nqnxf1NpjqBQVDvfeoaO2Cb6rO40sVWjXd+BrzZKdTAi7v4bi9PsLHJ hzXmAKIw2PKdVQSdzL2LUdoxnHL1LDqrmcGpW4rS6XywyZv1Z/t89bb7Bowgy25U -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:27 2026 by rpki-client