This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/3-EeXmcZRUpj5DL_Om7bylZsefk.roa File: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (raw, json) Hash identifier: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE= Subject key identifier: DF:E1:1E:5E:67:19:45:4A:63:E4:32:FF:3A:6E:DB:CA:56:6C:79:F9 Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Certificate serial: 019B79EC8B5829F37A3578CE4B46D8AFCC85 Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/3-EeXmcZRUpj5DL_Om7bylZsefk.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29244 IP address blocks: 85.118.192.0/21 maxlen: 21 85.118.192.0/24 maxlen: 24 85.118.194.0/24 maxlen: 24 85.118.196.0/24 maxlen: 24 85.118.197.0/24 maxlen: 24 87.120.79.0/24 maxlen: 24 91.92.8.0/24 maxlen: 24 91.92.9.0/24 maxlen: 24 91.92.10.0/24 maxlen: 24 91.92.11.0/24 maxlen: 24 91.92.12.0/24 maxlen: 24 91.92.13.0/24 maxlen: 24 91.92.14.0/24 maxlen: 24 91.92.15.0/24 maxlen: 24 93.123.88.0/21 maxlen: 24 94.156.136.0/21 maxlen: 24 149.62.192.0/18 maxlen: 18 149.62.204.0/24 maxlen: 24 149.62.205.0/24 maxlen: 24 149.62.206.0/24 maxlen: 24 149.62.207.0/24 maxlen: 24 149.62.208.0/24 maxlen: 24 149.62.209.0/24 maxlen: 24 193.193.171.0/24 maxlen: 24 193.193.182.0/24 maxlen: 24 193.194.147.0/24 maxlen: 24 193.194.155.0/24 maxlen: 24 2a12:4700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8b:58:29:f3:7a:35:78:ce:4b:46:d8:af:cc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfe11e5e6719454a63e432ff3a6edbca566c79f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:6d:38:7d:07:c4:ff:a1:3c:6a:df:95:0d: b8:fd:22:6b:40:64:01:61:e1:29:db:20:35:bb:78: 25:c0:43:58:3b:34:62:03:a6:eb:e5:98:0a:f1:44: da:ae:a1:b3:12:06:1c:68:74:49:08:6d:9a:2c:9f: 44:5e:d3:d5:30:e3:6c:ac:9a:67:8b:ac:6f:9e:46: e7:a5:c0:91:7a:ef:ee:96:a9:ee:57:70:b6:42:c4: 43:c1:59:25:b2:91:42:23:34:6a:65:48:4b:18:ea: 78:d4:35:f4:91:91:fc:ab:fa:12:a5:4d:14:53:9d: 48:3c:9e:25:83:a7:40:23:2b:69:bf:a2:db:cc:4b: 72:0a:8a:1d:ac:e9:ce:62:f6:a1:76:bc:3a:44:44: 42:e5:37:2f:a0:3c:de:9e:17:1b:83:c2:ce:47:5b: 2b:06:71:53:66:f7:f3:fc:8c:56:24:6b:c3:24:1b: d6:fb:6c:13:4b:5e:8c:e2:ea:c3:e3:66:18:36:bd: 0f:2a:2f:bf:04:92:6e:fb:7f:cf:cd:54:57:f0:36: 35:9c:37:9f:0f:37:65:fc:b8:68:0b:4a:f8:d7:a3: 99:35:42:23:e0:0d:a9:d4:cc:42:0b:3b:75:6a:70: f0:5a:09:07:82:f0:1d:71:fd:70:a2:95:59:f9:ad: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E1:1E:5E:67:19:45:4A:63:E4:32:FF:3A:6E:DB:CA:56:6C:79:F9 X509v3 Authority Key Identifier: keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/3-EeXmcZRUpj5DL_Om7bylZsefk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.118.192.0/21 87.120.79.0/24 91.92.8.0/21 93.123.88.0/21 94.156.136.0/21 149.62.192.0/18 193.193.171.0/24 193.193.182.0/24 193.194.147.0/24 193.194.155.0/24 IPv6: 2a12:4700::/32 Signature Algorithm: sha256WithRSAEncryption 78:9f:9c:20:40:00:b8:2a:ce:46:46:06:f3:e6:98:d5:da:eb: 14:71:bc:30:ba:81:97:f9:96:c9:6b:03:fe:75:96:ba:02:af: 8b:0c:24:0c:71:3f:10:27:a8:56:1d:6b:61:1c:21:32:fe:33: 56:db:12:fa:dc:7a:d4:98:71:3b:24:ba:49:4f:e9:12:e3:7e: 85:84:a5:8a:2c:3d:35:ea:f7:ff:ec:37:3c:ce:25:9a:be:a9: a0:43:4b:55:72:9d:03:8a:7f:5f:73:7e:55:42:e3:62:56:e9: 38:d4:10:7f:44:de:29:59:e8:3a:cb:87:da:56:ab:d8:12:ac: 42:1e:8b:8d:14:22:f0:a4:af:25:c2:fd:09:27:02:eb:96:cf: 4d:e2:5a:9d:be:53:dd:b3:62:6e:01:f9:b3:7c:26:85:1c:9d: 4c:67:09:27:5f:f1:d3:b4:b0:87:72:c1:11:17:c4:27:72:83: d2:9e:d2:83:b3:aa:c0:c1:09:09:1c:ea:4b:c8:b3:d3:d2:c7: d2:cc:f1:89:dd:26:2a:38:fe:5c:44:a3:33:e8:42:47:19:a6: 71:6a:16:d7:3a:db:9e:ba:19:49:71:f1:72:34:bb:47:b0:f0: 15:10:77:53:25:04:c3:73:51:70:94:e4:a1:65:3b:47:27:a5: ab:16:66:81 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt57ItYKfN6NXjOS0bYr8yFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3 NGM2MmIwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmUxMWU1ZTY3MTk0NTRhNjNlNDMyZmYzYTZlZGJjYTU2NmM3OWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh1tOH0HxP+hPGrflQ24/SJrQGQB YeEp2yA1u3glwENYOzRiA6br5ZgK8UTarqGzEgYcaHRJCG2aLJ9EXtPVMONsrJpn i6xvnkbnpcCReu/ulqnuV3C2QsRDwVklspFCIzRqZUhLGOp41DX0kZH8q/oSpU0U U51IPJ4lg6dAIytpv6LbzEtyCoodrOnOYvahdrw6RERC5TcvoDzenhcbg8LOR1sr BnFTZvfz/IxWJGvDJBvW+2wTS16M4urD42YYNr0PKi+/BJJu+3/PzVRX8DY1nDef Dzdl/LhoC0r416OZNUIj4A2p1MxCCzt1anDwWgkHgvAdcf1wopVZ+a2YcQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFN/hHl5nGUVKY+Qy/zpu28pWbHn5MB8GA1UdIwQY MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt ZGQ4MDNjNWI4NWRiLzEvMy1FZVhtY1pSVXBqNURMX09tN2J5bFpzZWZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDVXbAAwQA V3hPAwQDW1wIAwQDXXtYAwQDXpyIAwQGlT7AAwQAwcGrAwQAwcG2AwQAwcKTAwQA wcKbMA0EAgACMAcDBQAqEkcAMA0GCSqGSIb3DQEBCwUAA4IBAQB4n5wgQAC4Ks5G Rgbz5pjV2usUcbwwuoGX+ZbJawP+dZa6Aq+LDCQMcT8QJ6hWHWthHCEy/jNW2xL6 3HrUmHE7JLpJT+kS436FhKWKLD016vf/7Dc8ziWavqmgQ0tVcp0Din9fc35VQuNi Vuk41BB/RN4pWeg6y4faVqvYEqxCHouNFCLwpK8lwv0JJwLrls9N4lqdvlPds2Ju AfmzfCaFHJ1MZwknX/HTtLCHcsERF8QncoPSntKDs6rAwQkJHOpLyLPT0sfSzPGJ 3SYqOP5cRKMz6EJHGaZxahbXOtueuhlJcfFyNLtHsPAVEHdTJQTDc1FwlOShZTtH J6WrFmaB -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:42 2026 by rpki-client