This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa File: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (raw, json) Hash identifier: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs= Subject key identifier: DE:90:AB:DA:69:CB:DA:90:FF:B9:71:E3:91:05:20:B4:FB:AF:14:FB Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0 Certificate serial: 019B79114ABA60C82327C60A7A8304D23704 Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8966 IP address blocks: 185.120.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4a:ba:60:c8:23:27:c6:0a:7a:83:04:d2:37:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de90abda69cbda90ffb971e3910520b4fbaf14fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:47:61:69:47:7e:a4:7e:2f:b1:be:2c:c2:8d: 47:7c:f5:8a:ce:8c:4b:1b:60:a9:7d:1c:e4:f9:cb: f2:d4:50:73:c9:6e:bd:6f:b6:88:4b:6e:c8:f1:43: 5d:c1:b0:77:58:a4:fe:aa:4b:00:c0:ae:42:88:b1: d1:80:c5:49:32:2f:16:f5:f0:93:d8:d8:c3:08:aa: d1:b3:c4:84:7a:30:e6:72:f4:5d:1d:03:36:b1:da: 63:3d:d0:15:84:03:bf:c9:5e:d2:78:6f:d9:ec:58: 83:dd:45:ae:8c:06:2d:07:b2:7b:b3:b1:73:a6:32: 3e:c0:f4:3e:3e:1d:48:ae:0a:36:cb:be:cb:1e:85: 92:8b:f2:fe:ba:86:35:c8:fa:36:b4:a5:44:7f:c5: 4f:82:38:1e:7e:95:8c:54:e8:de:af:c1:b0:47:2e: 59:84:05:c4:0a:7f:12:ec:7d:3d:ff:4c:5c:41:7d: 2a:11:7b:35:db:73:f0:f2:c8:62:a5:aa:04:d5:9b: 04:e7:dd:a0:d8:be:c8:5e:f2:4a:b9:e2:77:41:5a: 38:89:0b:ad:eb:7f:c6:89:40:7c:dc:d2:60:18:96: 8c:5c:83:6b:58:85:0c:8a:b4:1f:22:2f:7a:c3:4d: a7:5b:39:82:b3:5a:c3:63:ce:c4:3e:3b:93:3b:05: 1c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:90:AB:DA:69:CB:DA:90:FF:B9:71:E3:91:05:20:B4:FB:AF:14:FB X509v3 Authority Key Identifier: keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.31.0/24 Signature Algorithm: sha256WithRSAEncryption 67:2a:c8:98:c3:97:a2:92:6f:14:f6:38:27:04:2d:e2:65:d6: 44:a3:f1:68:b1:6d:37:cc:25:36:72:7f:c7:28:57:80:b2:a2: 1c:a3:ce:f1:99:3a:b0:6e:a4:70:58:e2:cd:66:42:b6:89:d5: 4b:b9:1b:d6:bb:f3:27:57:52:bf:ab:7e:e8:9b:f1:67:30:a4: 92:d8:af:58:14:cf:e5:13:f2:b6:a8:bd:13:92:c2:eb:1b:c7: 68:23:e2:e6:9b:8b:8a:8e:af:50:fc:bb:d5:74:ab:2d:1a:18: ba:00:c6:f0:63:20:ee:d4:07:1c:d5:73:8b:60:66:6c:ca:5f: 63:1e:9d:50:1d:af:0c:81:f0:e7:4b:4e:d3:2d:b5:9d:4e:94: 8a:06:42:45:89:b3:23:67:a4:4c:46:ef:38:ba:f2:b0:2b:f1: b5:35:b6:1d:81:2e:68:76:1f:23:7d:0d:c2:b5:af:6c:9b:6d: ae:90:11:e2:b5:ec:73:6e:73:40:53:c9:4a:c0:76:aa:c4:55: 31:b5:ba:8a:50:b1:b3:54:15:ac:f6:ee:c5:27:80:98:c3:aa: 5d:b3:ba:c5:5a:69:f3:c4:18:b5:72:a3:b3:91:0a:b6:f3:5f: 4f:d9:c9:cc:e9:11:6e:3f:38:42:e7:c9:e3:e8:2e:60:08:1b: 11:31:ce:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUq6YMgjJ8YKeoME0jcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMmUzMzBiNTg3OTU5MGFiYWU4MWJmNDBhOTFhNTEwMWJj MThmYTAwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTkwYWJkYTY5Y2JkYTkwZmZiOTcxZTM5MTA1MjBiNGZiYWYxNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kdhaUd+pH4vsb4swo1HfPWKzoxL G2CpfRzk+cvy1FBzyW69b7aIS27I8UNdwbB3WKT+qksAwK5CiLHRgMVJMi8W9fCT 2NjDCKrRs8SEejDmcvRdHQM2sdpjPdAVhAO/yV7SeG/Z7FiD3UWujAYtB7J7s7Fz pjI+wPQ+Ph1Irgo2y77LHoWSi/L+uoY1yPo2tKVEf8VPgjgefpWMVOjer8GwRy5Z hAXECn8S7H09/0xcQX0qEXs123Pw8shipaoE1ZsE592g2L7IXvJKueJ3QVo4iQut 63/GiUB83NJgGJaMXINrWIUMirQfIi96w02nWzmCs1rDY87EPjuTOwUcUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN6Qq9ppy9qQ/7lx45EFILT7rxT7MB8GA1UdIwQY MBaAFJIuMwtYeVkKuugb9AqRpRAbwY+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgt NTY4NjcyYzI1Y2E4LzEvM3BDcjJtbkwycERfdVhIamtRVWd0UHV2RlBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgtNTY4NjcyYzI1Y2E4 LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXgfMA0G CSqGSIb3DQEBCwUAA4IBAQBnKsiYw5eikm8U9jgnBC3iZdZEo/FosW03zCU2cn/H KFeAsqIco87xmTqwbqRwWOLNZkK2idVLuRvWu/MnV1K/q37om/FnMKSS2K9YFM/l E/K2qL0TksLrG8doI+Lmm4uKjq9Q/LvVdKstGhi6AMbwYyDu1Acc1XOLYGZsyl9j Hp1QHa8MgfDnS07TLbWdTpSKBkJFibMjZ6RMRu84uvKwK/G1NbYdgS5odh8jfQ3C ta9sm22ukBHitexzbnNAU8lKwHaqxFUxtbqKULGzVBWs9u7FJ4CYw6pds7rFWmnz xBi1cqOzkQq2819P2cnM6RFuPzhC58nj6C5gCBsRMc43 -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:11 2026 by rpki-client