This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa File: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (raw, json) Hash identifier: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww= Subject key identifier: DE:1E:11:E9:82:D2:88:43:CD:85:69:8F:35:37:7B:28:B5:F5:5F:75 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019B7AC931990E7C341E2CF2811BDF410310 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa Signing time: Thu 01 Jan 2026 18:19:24 +0000 ROA not before: Thu 01 Jan 2026 18:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26506 IP address blocks: 86.51.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:31:99:0e:7c:34:1e:2c:f2:81:1b:df:41:03:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de1e11e982d28843cd85698f35377b28b5f55f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:4f:9a:b2:76:44:16:34:5f:65:c1:6d:b7: 02:de:1f:8e:af:4a:d8:e6:01:44:e7:16:54:2c:e5: 57:ca:6f:b0:23:b4:3d:e0:ca:07:70:07:fd:7b:fe: 60:b2:e3:18:e4:0b:e7:a7:bf:1c:db:94:6b:96:1c: e8:8c:68:bf:18:85:53:58:46:fd:77:da:67:5a:6f: d5:d3:8c:23:fe:9a:7f:97:59:2d:d0:5c:82:ba:77: 5d:56:62:b9:b9:ca:7c:85:7e:79:f8:45:3c:1f:04: cf:7a:c3:8f:4e:eb:26:47:f7:f2:d3:c7:d0:70:d5: df:59:8b:4f:46:1b:da:11:6c:72:e7:fb:a8:a9:60: 9b:cc:a5:f3:65:1d:3b:90:54:e2:91:4d:bf:b7:cc: ed:c9:e9:d2:5b:cf:0f:ca:3a:40:0f:97:5c:59:c6: 22:c0:a6:b1:fb:86:7f:5c:89:39:2b:fb:25:ab:12: 96:80:17:06:0d:b0:90:e9:9e:73:85:b4:49:0a:f2: b4:d8:f5:8e:d1:d5:a8:28:5f:48:c8:3c:a0:09:ff: 87:14:64:85:40:ec:6f:dd:cb:57:b8:70:03:4a:8c: d4:41:14:e6:33:f3:cf:8d:20:1b:c6:25:b6:74:4d: 09:99:94:04:99:27:11:ef:3d:48:a4:f6:b2:be:de: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1E:11:E9:82:D2:88:43:CD:85:69:8F:35:37:7B:28:B5:F5:5F:75 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.51.91.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:7a:a9:60:64:18:0b:ab:05:03:06:65:9e:2c:38:90:0e:53: dc:44:bd:ff:58:f7:86:e6:1c:21:fe:29:10:05:27:52:f0:fa: e0:f7:e0:94:4a:e2:ba:46:62:3d:b7:77:2e:f5:bc:24:7d:76: b5:3d:f5:fd:c6:d0:00:74:f1:0b:79:44:e9:b0:df:02:b2:0a: 20:e4:1a:c3:e1:ad:73:a0:4d:fb:4a:04:30:6e:02:a2:27:a6: 72:6c:3b:a6:a0:9e:7b:6d:20:79:86:96:c5:b5:08:28:a1:4f: df:73:d8:f8:8e:96:cb:ae:e8:5d:d1:67:5f:b2:be:19:c6:bc: 0a:ff:85:cb:2d:c5:10:7b:9b:26:9d:88:98:4e:11:15:2f:d4: 0f:bb:a5:ae:ea:55:39:a9:ae:28:c2:56:5e:70:7d:d4:64:7f: cc:23:9c:c1:c5:88:46:5e:26:e5:c7:01:70:d7:8b:f1:ab:9f: 62:4f:7c:7f:97:60:53:d7:55:0a:fa:41:51:5c:9f:81:2e:43: 79:bf:a0:fb:e4:2d:a8:50:a4:41:f8:65:08:b9:9f:37:e9:ab: bd:0f:56:30:d4:35:43:f0:42:2b:ce:2c:e5:9e:93:08:4e:9e: be:54:51:de:45:0e:52:ab:c0:a7:96:8f:40:3d:dd:4a:97:2e: 22:6c:24:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTGZDnw0HizygRvfQQMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTFlMTFlOTgyZDI4ODQzY2Q4NTY5OGYzNTM3N2IyOGI1ZjU1Zjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti5PmrJ2RBY0X2XBbbcC3h+Or0rY 5gFE5xZULOVXym+wI7Q94MoHcAf9e/5gsuMY5Avnp78c25RrlhzojGi/GIVTWEb9 d9pnWm/V04wj/pp/l1kt0FyCunddVmK5ucp8hX55+EU8HwTPesOPTusmR/fy08fQ cNXfWYtPRhvaEWxy5/uoqWCbzKXzZR07kFTikU2/t8ztyenSW88PyjpAD5dcWcYi wKax+4Z/XIk5K/slqxKWgBcGDbCQ6Z5zhbRJCvK02PWO0dWoKF9IyDygCf+HFGSF QOxv3ctXuHADSozUQRTmM/PPjSAbxiW2dE0JmZQEmScR7z1IpPayvt4q0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN4eEemC0ohDzYVpjzU3eyi19V91MB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvM2g0UjZZTFNpRVBOaFdtUE5UZDdLTFgxWDNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVjNbMA0G CSqGSIb3DQEBCwUAA4IBAQBKeqlgZBgLqwUDBmWeLDiQDlPcRL3/WPeG5hwh/ikQ BSdS8Prg9+CUSuK6RmI9t3cu9bwkfXa1PfX9xtAAdPELeUTpsN8Csgog5BrD4a1z oE37SgQwbgKiJ6ZybDumoJ57bSB5hpbFtQgooU/fc9j4jpbLruhd0Wdfsr4ZxrwK /4XLLcUQe5smnYiYThEVL9QPu6Wu6lU5qa4owlZecH3UZH/MI5zBxYhGXiblxwFw 14vxq59iT3x/l2BT11UK+kFRXJ+BLkN5v6D75C2oUKRB+GUIuZ836au9D1Yw1DVD 8EIrzizlnpMITp6+VFHeRQ5Sq8Cnlo9APd1Kly4ibCRO -----END CERTIFICATE-----Generated at Wed Jan 21 14:40:56 2026 by rpki-client