This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/3d74s89tkzzncXSffISWbS6hXVw.roa File: 3d74s89tkzzncXSffISWbS6hXVw.roa (raw, json) Hash identifier: +U2y6IfTYHbMQN2g75zDUMWWHtH4QEWgJBNirsLxjxY= Subject key identifier: DD:DE:F8:B3:CF:6D:93:3C:E7:71:74:9F:7C:84:96:6D:2E:A1:5D:5C Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Certificate serial: 019B7D5B901072AB5BB2A2F3FB9481B74A95 Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/3d74s89tkzzncXSffISWbS6hXVw.roa Signing time: Fri 02 Jan 2026 06:18:31 +0000 ROA not before: Fri 02 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31368 IP address blocks: 89.107.128.0/24 maxlen: 24 89.107.130.0/23 maxlen: 23 89.107.132.0/23 maxlen: 23 185.173.156.0/24 maxlen: 24 185.173.158.0/24 maxlen: 24 185.173.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:90:10:72:ab:5b:b2:a2:f3:fb:94:81:b7:4a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d Validity Not Before: Jan 2 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dddef8b3cf6d933ce771749f7c84966d2ea15d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8d:f9:bc:f2:bd:7a:84:cb:82:8e:1f:f8:9e: 95:70:3c:5f:a9:ad:9c:ea:8a:17:7f:94:46:4d:97: 0f:1c:6d:e3:81:17:eb:38:0b:22:aa:89:fb:72:52: 91:60:4e:64:4a:83:c3:c0:77:5c:9d:fb:be:33:f2: 6e:42:a3:0d:71:36:1f:a7:06:cf:e9:df:b4:ef:79: 3f:00:a9:0b:b2:13:2b:d6:e0:44:1d:f0:87:13:5e: 44:f4:e9:2d:05:d8:ea:b1:f0:74:06:a9:39:87:83: 39:a4:29:ea:36:f8:8a:75:c3:92:05:eb:45:f4:d6: dd:78:27:b8:10:e4:40:0d:62:d5:b9:d2:c7:a8:da: 44:d4:20:80:6a:49:bc:71:5e:93:3b:c2:6d:5a:43: f3:4d:f6:8e:5d:b1:3c:1e:6a:37:40:c4:28:ad:ff: 46:4e:ec:b8:57:5f:22:d4:db:6b:c0:62:16:df:ba: c4:1d:e7:85:83:05:c1:f5:ec:8d:3b:5a:c0:d0:38: 79:53:e2:2e:0a:9d:d2:ea:08:57:cb:d7:cc:08:0f: 83:25:a6:06:d4:22:58:32:dc:91:e3:c7:8f:25:04: 71:e2:e2:02:e4:32:96:2c:3a:3f:15:14:8d:c5:12: fb:83:b0:91:eb:ed:34:fc:05:97:cc:8d:e5:00:29: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DE:F8:B3:CF:6D:93:3C:E7:71:74:9F:7C:84:96:6D:2E:A1:5D:5C X509v3 Authority Key Identifier: keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/3d74s89tkzzncXSffISWbS6hXVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.128.0/24 89.107.130.0-89.107.133.255 185.173.156.0/24 185.173.158.0/23 Signature Algorithm: sha256WithRSAEncryption 27:c4:3f:f1:50:0c:fe:6d:7b:e5:3d:25:fd:6e:e0:a3:36:f9: 98:20:72:55:ab:a6:12:04:c5:e2:04:16:40:86:97:9c:76:57: c8:2c:30:d0:73:22:46:3e:4a:24:9c:91:33:9c:d5:be:e6:0b: d0:22:a3:a0:72:40:23:14:b4:ee:cd:20:67:52:7b:e8:7c:e5: fb:b2:8b:14:24:e3:df:5e:e0:49:d0:fc:c6:f7:0f:d2:11:ef: e5:e5:a1:4e:71:e9:f4:74:b0:4f:ba:69:38:ff:5d:fe:ab:38: 30:ee:9f:f6:fe:b2:98:2b:c0:40:df:20:d2:ca:15:00:f1:11: a1:ed:52:d3:fa:ff:63:78:71:9b:21:f3:4a:51:0e:ac:7c:f3: 44:02:77:cb:97:ea:fd:74:44:1d:64:05:09:ac:0a:06:72:34: 3c:f5:ab:16:81:30:d7:01:06:ff:77:c4:e7:8e:64:c0:21:11: d0:dd:db:78:d2:af:7a:f5:85:eb:d1:c3:bc:23:5f:30:0e:c3: 8b:e0:98:4a:da:f4:b1:26:58:2c:90:f0:21:c0:15:6d:e8:22: 72:6a:41:48:5a:ac:f6:dc:34:8f:c0:bd:0e:61:5f:82:d1:4c: f5:fe:e6:1c:db:78:f7:d8:08:d8:97:20:c7:ae:9b:8a:1d:4a: 39:37:52:1a -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9W5AQcqtbsqLz+5SBt0qVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw OWU1MGQwHhcNMjYwMTAyMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGRlZjhiM2NmNmQ5MzNjZTc3MTc0OWY3Yzg0OTY2ZDJlYTE1ZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y35vPK9eoTLgo4f+J6VcDxfqa2c 6ooXf5RGTZcPHG3jgRfrOAsiqon7clKRYE5kSoPDwHdcnfu+M/JuQqMNcTYfpwbP 6d+073k/AKkLshMr1uBEHfCHE15E9OktBdjqsfB0Bqk5h4M5pCnqNviKdcOSBetF 9NbdeCe4EORADWLVudLHqNpE1CCAakm8cV6TO8JtWkPzTfaOXbE8Hmo3QMQorf9G Tuy4V18i1NtrwGIW37rEHeeFgwXB9eyNO1rA0Dh5U+IuCp3S6ghXy9fMCA+DJaYG 1CJYMtyR48ePJQRx4uIC5DKWLDo/FRSNxRL7g7CR6+00/AWXzI3lACn4swIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFN3e+LPPbZM853F0n3yElm0uoV1cMB8GA1UdIwQY MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt MmIxMDUwNTFiYTU5LzEvM2Q3NHM4OXRrenpuY1hTZmZJU1diUzZoWFZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5 LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAWWuAMAwD BAFZa4IDBAFZa4QDBAC5rZwDBAG5rZ4wDQYJKoZIhvcNAQELBQADggEBACfEP/FQ DP5te+U9Jf1u4KM2+ZggclWrphIExeIEFkCGl5x2V8gsMNBzIkY+SiSckTOc1b7m C9Aio6ByQCMUtO7NIGdSe+h85fuyixQk499e4EnQ/Mb3D9IR7+XloU5x6fR0sE+6 aTj/Xf6rODDun/b+spgrwEDfINLKFQDxEaHtUtP6/2N4cZsh80pRDqx880QCd8uX 6v10RB1kBQmsCgZyNDz1qxaBMNcBBv93xOeOZMAhEdDd23jSr3r1hevRw7wjXzAO w4vgmEra9LEmWCyQ8CHAFW3oInJqQUharPbcNI/AvQ5hX4LRTPX+5hzbePfYCNiX IMeum4odSjk3Uho= -----END CERTIFICATE-----Generated at Wed Jan 21 20:24:08 2026 by rpki-client