This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa File: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (raw, json) Hash identifier: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo= Subject key identifier: DC:7F:EF:B7:ED:EC:CF:75:18:3D:F5:6B:D8:14:30:AF:C5:A2:66:53 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C128E44C2929A772D39888BB8290EA5 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa Signing time: Fri 02 Jan 2026 00:19:09 +0000 ROA not before: Fri 02 Jan 2026 00:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216473 IP address blocks: 80.66.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8e:44:c2:92:9a:77:2d:39:88:8b:b8:29:0e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc7fefb7edeccf75183df56bd81430afc5a26653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:5f:c3:a3:00:30:33:24:07:d6:a8:15:4f: e4:73:a2:38:c4:a4:50:0c:b2:8c:5e:c8:cc:6a:86: f9:11:14:5a:e1:de:c0:b0:5a:1b:c2:1b:05:da:8d: 22:55:af:73:a8:6b:e2:16:e8:04:c2:73:7b:d8:14: 8c:a1:16:49:7e:de:db:05:50:5d:10:2d:7a:ed:94: de:4e:88:f4:21:b7:e0:57:8f:65:83:a1:fe:5d:db: d9:6e:43:0f:d3:20:3d:b6:72:32:49:07:f7:df:36: f6:16:bc:6f:49:1e:ca:33:44:51:b7:d2:51:1f:d7: c3:f8:71:02:6a:66:03:a9:e7:22:2a:39:c4:ff:ed: 5a:09:0a:ce:7b:a2:23:40:4b:0b:bc:f4:62:02:3f: bd:e1:b9:8c:20:63:98:94:b9:70:4f:cd:9b:dd:9c: 25:aa:7e:54:88:ff:ab:e4:c9:b0:5e:f2:cd:db:5e: 0f:94:fc:5d:6d:5b:a0:a1:82:14:1f:41:d6:2a:b3: 50:1a:96:e7:d9:19:56:51:5e:4d:a7:12:84:85:d1: 45:ce:ce:b8:75:62:f9:fe:22:fb:76:39:95:49:ab: 8f:16:24:a7:cb:83:f1:73:65:88:b8:00:f0:48:51: a7:f1:9a:00:24:64:b4:21:57:fd:54:06:36:28:63: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7F:EF:B7:ED:EC:CF:75:18:3D:F5:6B:D8:14:30:AF:C5:A2:66:53 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.83.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:a2:ec:82:a2:84:89:6d:bb:75:55:a0:48:a8:11:b3:b5:ca: 57:cf:c3:dc:98:31:2c:8c:1e:ef:7a:03:19:db:85:b5:ba:92: 09:e1:c6:8a:b5:db:43:c7:61:79:a6:a9:66:44:b9:a9:1b:a3: 1b:ed:3d:78:01:45:34:5c:01:b3:0c:c6:79:f3:31:5b:7d:02: 24:75:18:66:55:eb:86:e1:e3:bc:79:b2:6c:f1:0b:02:11:f0: d3:86:e7:d7:f4:2c:85:6d:81:38:e1:af:dd:c2:a7:e1:60:c8: 21:a7:c5:18:78:3a:87:8e:63:8f:fc:cd:57:33:4f:ff:c9:74: 33:a3:8d:a7:bc:3d:0e:d1:7a:5a:9a:9f:31:e0:3e:35:cf:84: 1e:61:b0:1c:0d:36:5a:c5:08:08:17:c1:76:74:3a:f4:eb:a8: f7:b9:bd:65:8b:0b:84:44:13:a0:4c:94:43:e4:c1:a0:2b:14: 07:ed:b1:b6:88:cd:8d:ec:3b:56:03:d4:81:37:b3:f2:03:89: 55:72:0a:23:fc:b9:c8:53:ff:17:e1:07:e2:4f:74:f6:72:94: 97:ca:14:1b:c8:3c:50:2b:01:55:39:2c:ff:9c:56:4c:ff:67: aa:56:31:22:90:af:c7:f3:61:24:8c:82:b7:42:8d:9a:79:7e: a6:12:c1:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eo5EwpKady05iIu4KQ6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzdmZWZiN2VkZWNjZjc1MTgzZGY1NmJkODE0MzBhZmM1YTI2NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lxfw6MAMDMkB9aoFU/kc6I4xKRQ DLKMXsjMaob5ERRa4d7AsFobwhsF2o0iVa9zqGviFugEwnN72BSMoRZJft7bBVBd EC167ZTeToj0IbfgV49lg6H+XdvZbkMP0yA9tnIySQf33zb2FrxvSR7KM0RRt9JR H9fD+HECamYDqeciKjnE/+1aCQrOe6IjQEsLvPRiAj+94bmMIGOYlLlwT82b3Zwl qn5UiP+r5MmwXvLN214PlPxdbVugoYIUH0HWKrNQGpbn2RlWUV5NpxKEhdFFzs64 dWL5/iL7djmVSauPFiSny4Pxc2WIuADwSFGn8ZoAJGS0IVf9VAY2KGNPfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNx/77ft7M91GD31a9gUMK/FomZTMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvM0hfdnQtM3N6M1VZUGZWcjJCUXdyOFdpWmxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEJTMA0G CSqGSIb3DQEBCwUAA4IBAQB/ouyCooSJbbt1VaBIqBGztcpXz8PcmDEsjB7vegMZ 24W1upIJ4caKtdtDx2F5pqlmRLmpG6Mb7T14AUU0XAGzDMZ58zFbfQIkdRhmVeuG 4eO8ebJs8QsCEfDThufX9CyFbYE44a/dwqfhYMghp8UYeDqHjmOP/M1XM0//yXQz o42nvD0O0Xpamp8x4D41z4QeYbAcDTZaxQgIF8F2dDr066j3ub1liwuERBOgTJRD 5MGgKxQH7bG2iM2N7DtWA9SBN7PyA4lVcgoj/LnIU/8X4QfiT3T2cpSXyhQbyDxQ KwFVOSz/nFZM/2eqVjEikK/H82EkjIK3Qo2aeX6mEsG1 -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:28 2026 by rpki-client