This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3wDa7tSAq-q3hIo0IlcC2AqlPOg.roa File: 3wDa7tSAq-q3hIo0IlcC2AqlPOg.roa (raw, json) Hash identifier: 17ywutlanVmhisu9syXvFbe0jdqi6p/IJtNFRWFs7S8= Subject key identifier: DF:00:DA:EE:D4:80:AB:EA:B7:84:8A:34:22:57:02:D8:0A:A5:3C:E8 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C680C5CD4E105D7E14B61CAE9B9029 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3wDa7tSAq-q3hIo0IlcC2AqlPOg.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 95.178.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:80:c5:cd:4e:10:5d:7e:14:b6:1c:ae:9b:90:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df00daeed480abeab7848a34225702d80aa53ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:75:c6:60:fa:aa:08:4a:31:d4:13:00:c8:7f: 41:33:94:bf:46:17:fd:91:58:44:9d:2f:1d:58:30: c5:2c:eb:1d:f1:19:a6:25:fe:62:b1:a6:ed:a4:cb: 81:e1:f0:56:62:31:a5:5e:20:3b:ca:9c:f1:96:45: 7b:16:de:39:0e:a4:d8:ef:db:6f:0a:e0:64:e1:2b: d5:19:18:d5:4a:87:38:df:88:e1:35:7b:1e:f7:3a: 07:e9:c9:ac:90:7d:6a:95:8e:f8:f3:1f:df:7b:50: ec:3f:ca:e4:01:71:a7:c0:7c:6d:28:78:84:7a:d3: 25:4f:f2:c0:4f:09:9c:7a:6d:af:ec:24:a8:38:74: 7e:26:7f:00:9c:5a:8b:2b:af:69:b8:1e:d5:0d:ea: 12:cf:11:f9:01:fb:6b:c7:c0:18:bc:38:8c:76:56: ed:08:15:b1:59:4c:c5:3d:0c:55:dc:b6:71:6f:85: df:e2:d1:4b:46:8d:45:1f:7e:ae:d3:f4:f9:1f:8d: 3a:c1:83:99:b1:7d:b0:59:22:5d:69:a7:2b:07:15: 1e:17:77:ea:cc:c4:20:7a:a6:e7:96:df:8c:23:cb: 60:95:21:d4:b9:64:46:2d:cf:41:b1:fc:88:27:76: 83:26:79:31:02:64:33:de:9d:2b:3b:12:c2:8d:99: b3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:00:DA:EE:D4:80:AB:EA:B7:84:8A:34:22:57:02:D8:0A:A5:3C:E8 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3wDa7tSAq-q3hIo0IlcC2AqlPOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.178.32.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:3f:88:b5:52:99:f9:a0:11:97:a8:04:20:f1:95:65:97:21: 12:87:ea:fe:03:50:eb:81:44:c6:61:20:f4:cf:1c:e9:3c:dc: 77:ab:ca:e9:bc:44:2f:0e:9f:5d:ed:c9:3d:42:10:1d:17:30: c1:57:e5:42:43:1d:50:75:8e:5f:b4:ef:cd:f8:63:ad:d4:7f: 34:06:1b:8b:fe:df:d1:9f:34:25:03:fe:5f:b1:61:2c:77:24: b1:3e:3d:c5:ef:71:33:4f:e4:80:96:ba:d2:9b:e6:f2:ea:84: e5:1b:4c:44:ba:55:69:64:52:66:16:ee:30:87:3e:04:84:3a: 0d:2a:c6:08:1b:4f:ec:73:7d:84:a2:ee:0a:c2:36:b5:dc:44: 54:ee:bb:4b:a4:4a:a9:13:1f:87:d6:d4:fe:7f:1f:a6:fd:d2: 10:d8:c0:55:c0:80:fd:e1:4e:e2:16:47:f4:e6:73:5a:a2:1a: 14:c5:4f:44:01:1f:f4:d9:7d:4f:ad:53:ff:36:84:9d:75:07: 42:9d:83:a6:91:a8:21:50:50:69:a4:1c:f8:70:09:e8:7f:99: 23:b7:35:db:69:30:7e:2e:59:23:28:27:bd:ae:19:41:f9:9e: d1:83:11:18:7b:6e:7f:04:45:84:44:0b:19:9f:52:63:2f:3d: de:7b:96:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xoDFzU4QXX4Uthyum5ApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjAwZGFlZWQ0ODBhYmVhYjc4NDhhMzQyMjU3MDJkODBhYTUzY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93XGYPqqCEox1BMAyH9BM5S/Rhf9 kVhEnS8dWDDFLOsd8RmmJf5isabtpMuB4fBWYjGlXiA7ypzxlkV7Ft45DqTY79tv CuBk4SvVGRjVSoc434jhNXse9zoH6cmskH1qlY748x/fe1DsP8rkAXGnwHxtKHiE etMlT/LATwmcem2v7CSoOHR+Jn8AnFqLK69puB7VDeoSzxH5Aftrx8AYvDiMdlbt CBWxWUzFPQxV3LZxb4Xf4tFLRo1FH36u0/T5H406wYOZsX2wWSJdaacrBxUeF3fq zMQgeqbnlt+MI8tglSHUuWRGLc9BsfyIJ3aDJnkxAmQz3p0rOxLCjZmziwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8A2u7UgKvqt4SKNCJXAtgKpTzoMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvM3dEYTd0U0FxLXEzaElvMElsY0MyQXFsUE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7IgMA0G CSqGSIb3DQEBCwUAA4IBAQAfP4i1Upn5oBGXqAQg8ZVllyESh+r+A1DrgUTGYSD0 zxzpPNx3q8rpvEQvDp9d7ck9QhAdFzDBV+VCQx1QdY5ftO/N+GOt1H80BhuL/t/R nzQlA/5fsWEsdySxPj3F73EzT+SAlrrSm+by6oTlG0xEulVpZFJmFu4whz4EhDoN KsYIG0/sc32Eou4Kwja13ERU7rtLpEqpEx+H1tT+fx+m/dIQ2MBVwID94U7iFkf0 5nNaohoUxU9EAR/02X1PrVP/NoSddQdCnYOmkaghUFBppBz4cAnof5kjtzXbaTB+ LlkjKCe9rhlB+Z7RgxEYe25/BEWERAsZn1JjLz3ee5aT -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:23 2026 by rpki-client