This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/3x_eNlfqr-pzS31r85Kyh1RTzhw.roa File: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (raw, json) Hash identifier: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0= Subject key identifier: DF:1F:DE:36:57:EA:AF:EA:73:4B:7D:6B:F3:92:B2:87:54:53:CE:1C Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c Certificate serial: 019B7834C0B59BD0271A899FC96161E544C1 Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/3x_eNlfqr-pzS31r85Kyh1RTzhw.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18345 IP address blocks: 185.164.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c0:b5:9b:d0:27:1a:89:9f:c9:61:61:e5:44:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df1fde3657eaafea734b7d6bf392b2875453ce1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:94:8e:93:a0:b2:bc:55:aa:63:fa:9f:31: 02:92:0d:23:20:33:76:69:f0:63:33:68:49:fa:8f: 49:fa:9d:9d:4e:7a:8a:70:91:2d:ea:3e:a3:b4:2f: 54:2a:82:d3:ec:38:6f:68:9c:3f:0c:d8:a9:78:d3: 7d:d3:97:7d:02:41:45:b5:5a:f5:e2:5c:7c:ba:6a: 90:82:dc:40:ac:9d:b8:72:b4:c0:c1:a4:80:4c:68: b5:00:1d:c3:5c:80:96:c6:87:63:ed:49:54:f3:ae: df:df:f4:32:b4:01:91:c1:16:b8:34:ff:18:9c:0a: 65:c8:77:14:1f:1f:dc:c5:51:00:55:9d:aa:39:2c: f3:f2:2d:57:ec:7b:f5:5e:39:0a:7f:fc:76:85:01: 55:91:90:b2:1c:57:71:b2:49:d2:7a:3a:ab:3a:9e: 41:81:11:a9:ac:11:d5:f8:30:a1:d0:a9:be:dd:9a: 98:a7:7d:f9:b0:69:91:4e:f3:33:e3:c7:37:97:7a: 3b:81:ae:df:07:d9:9b:51:dc:ff:82:bc:3d:4c:04: cf:c3:ac:88:c4:8d:de:ec:25:2a:a9:54:6c:5e:9a: a4:66:7e:13:b3:56:a2:bc:1d:ef:a0:b9:bb:57:01: da:1e:6c:2e:4b:df:8b:4f:94:c0:72:ee:1d:08:3e: 29:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:DE:36:57:EA:AF:EA:73:4B:7D:6B:F3:92:B2:87:54:53:CE:1C X509v3 Authority Key Identifier: keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/3x_eNlfqr-pzS31r85Kyh1RTzhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.123.0/24 Signature Algorithm: sha256WithRSAEncryption 25:9f:26:4a:f2:0b:f5:90:04:81:be:3d:6f:41:cf:5b:3a:37: fb:af:63:8e:20:4d:57:b0:bb:99:b6:0f:a7:d1:78:03:48:3f: 84:8d:e8:97:25:b9:be:20:21:1e:2b:fb:1c:3f:67:4b:80:fb: 6d:44:77:10:44:ed:fb:95:e9:11:59:62:8c:de:d2:aa:2b:52: 8e:9b:c0:81:c4:c5:53:30:04:44:61:5c:61:24:b7:62:06:d6: dd:d5:b5:6d:fa:86:25:48:d2:bb:c5:4a:2d:5a:91:08:2d:70: 9f:33:76:c4:34:41:4a:e6:40:5d:e2:f1:76:e3:46:fc:55:08: e0:d1:4c:9d:3c:8b:32:45:52:d7:f7:24:9d:00:10:93:ce:de: b7:b3:e0:c7:99:0b:37:44:e5:c7:38:20:a8:cc:ac:d8:3c:42: ea:ba:e9:16:ac:c1:2d:fa:3f:84:8f:a1:54:e6:14:ce:7f:72: 43:ad:91:3b:b5:09:c6:52:44:91:c4:fb:50:f1:65:d2:6b:58: db:15:65:80:9a:88:1d:4d:fe:62:e5:2d:f2:b2:75:d1:9e:2d: ef:72:09:4a:46:32:22:0d:fe:07:2e:62:31:76:a3:0f:c7:a1: cd:77:16:05:5e:3b:67:ed:a7:d2:06:2d:bd:3b:4d:b7:64:70: 8d:87:a9:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NMC1m9AnGomfyWFh5UTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZGRkNGM5ZGMyM2ZhYzM1NTc0ZmNlMmI0Mjk0Mzk4YWRk ODUyMWMwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjFmZGUzNjU3ZWFhZmVhNzM0YjdkNmJmMzkyYjI4NzU0NTNjZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua6UjpOgsrxVqmP6nzECkg0jIDN2 afBjM2hJ+o9J+p2dTnqKcJEt6j6jtC9UKoLT7DhvaJw/DNipeNN905d9AkFFtVr1 4lx8umqQgtxArJ24crTAwaSATGi1AB3DXICWxodj7UlU867f3/QytAGRwRa4NP8Y nAplyHcUHx/cxVEAVZ2qOSzz8i1X7Hv1XjkKf/x2hQFVkZCyHFdxsknSejqrOp5B gRGprBHV+DCh0Km+3ZqYp335sGmRTvMz48c3l3o7ga7fB9mbUdz/grw9TATPw6yI xI3e7CUqqVRsXpqkZn4Ts1aivB3voLm7VwHaHmwuS9+LT5TAcu4dCD4p6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN8f3jZX6q/qc0t9a/OSsodUU84cMB8GA1UdIwQY MBaAFBXd1MncI/rDVXT84rQpQ5it2FIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEt Y2IzY2QwNDA0YWI1LzEvM3hfZU5sZnFyLXB6UzMxcjg1S3loMVJUemh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEtY2IzY2QwNDA0YWI1 LzEvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaR7MA0G CSqGSIb3DQEBCwUAA4IBAQAlnyZK8gv1kASBvj1vQc9bOjf7r2OOIE1XsLuZtg+n 0XgDSD+EjeiXJbm+ICEeK/scP2dLgPttRHcQRO37lekRWWKM3tKqK1KOm8CBxMVT MAREYVxhJLdiBtbd1bVt+oYlSNK7xUotWpEILXCfM3bENEFK5kBd4vF240b8VQjg 0UydPIsyRVLX9ySdABCTzt63s+DHmQs3ROXHOCCozKzYPELquukWrMEt+j+Ej6FU 5hTOf3JDrZE7tQnGUkSRxPtQ8WXSa1jbFWWAmogdTf5i5S3ysnXRni3vcglKRjIi Df4HLmIxdqMPx6HNdxYFXjtn7afSBi29O023ZHCNh6mC -----END CERTIFICATE-----Generated at Tue Jan 20 00:10:53 2026 by rpki-client