This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa File: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (raw, json) Hash identifier: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8= Subject key identifier: F8:1D:F3:A4:17:A0:99:63:F3:95:8C:6F:8B:E9:47:65:9A:E3:B9:00 Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Certificate serial: 019B797DD979C1E0E8CA88CFA468C05AD5D1 Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa Signing time: Thu 01 Jan 2026 12:17:29 +0000 ROA not before: Thu 01 Jan 2026 12:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39405 IP address blocks: 185.40.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d9:79:c1:e0:e8:ca:88:cf:a4:68:c0:5a:d5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f81df3a417a09963f3958c6f8be947659ae3b900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:2f:92:38:75:2a:37:eb:fb:c4:bc:7d:1a: 1d:41:b6:f0:d0:36:97:4e:22:8b:07:d7:b4:83:55: cd:d8:f6:6f:2d:91:4c:46:91:92:09:b9:d5:cd:1c: 26:47:c4:a6:e6:fd:36:fe:6d:7f:1b:4f:4f:bf:2a: fb:38:96:fb:34:a2:b9:86:2c:c0:86:ed:1f:41:a9: 8f:72:f0:0b:66:7d:78:92:f7:40:b2:b9:60:7b:75: b9:9d:d5:7d:8c:dc:92:3c:c4:8e:4a:7e:b8:f0:ea: cc:71:84:fe:a6:e8:d7:93:1e:b3:44:b8:a4:72:bb: a4:78:bf:e4:3c:8b:3e:ad:52:5f:ec:23:8e:92:01: 89:d9:46:e0:9c:fe:ec:97:22:be:92:29:fc:30:d3: 76:55:af:fa:d9:29:2f:12:84:3b:6c:70:30:e9:a9: 42:60:95:31:2e:b7:7c:0b:d6:1f:ea:1b:1b:c0:6f: 5f:19:0a:16:e1:e6:3a:3e:1a:fc:d9:b3:26:ff:eb: 7b:03:d9:bc:0e:c6:20:3a:80:33:dd:38:e6:ad:c3: 8f:24:41:8a:d9:91:40:43:a2:19:a1:3e:41:e7:13: 2d:04:ab:e8:13:74:a6:eb:76:68:d9:c8:a3:b7:10: a9:a5:61:6f:cc:7e:53:af:28:ab:75:92:de:ea:1f: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1D:F3:A4:17:A0:99:63:F3:95:8C:6F:8B:E9:47:65:9A:E3:B9:00 X509v3 Authority Key Identifier: keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.100.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:2b:3a:2b:4e:af:0c:1a:93:48:07:86:e0:9a:61:44:ab:4c: 9c:d2:b6:1b:11:c8:a7:6c:40:d1:f8:c6:07:17:d3:c8:c9:a7: 17:e2:f1:b2:17:06:3e:56:1b:34:26:49:a6:a6:9e:c3:c5:aa: 0a:4b:15:42:5a:80:62:7b:1c:df:f5:41:84:82:ef:26:11:49: 12:74:2c:2c:18:66:6a:72:65:83:c1:91:54:05:c0:a7:e2:c8: e9:6f:f7:a1:41:5b:ab:13:90:30:83:69:3d:e1:60:87:46:f2: b2:57:c2:27:f0:3f:82:9c:3b:87:82:3c:d4:55:46:a8:60:21: e3:39:cb:e9:0c:da:9b:b1:90:2e:d0:56:c8:ee:c1:3c:fe:d5: 7c:39:82:92:82:ac:35:01:d7:5d:d9:de:e5:e6:99:0d:68:06: f2:91:db:87:55:fa:17:7e:ce:69:99:22:d0:9a:9e:ea:30:01: ed:dc:32:9a:ce:40:17:5c:bd:b8:a6:c2:66:fe:49:79:bb:de: 59:71:fd:ba:ed:00:5c:c7:2a:94:4d:77:ce:1b:cc:75:81:89: 43:c2:9c:72:bc:40:f6:d6:24:cc:8b:2c:4d:50:ab:2b:ce:50: 43:06:d6:8d:38:7d:c9:e2:19:59:6e:02:be:5e:f5:04:7b:93: 35:01:f7:65 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fdl5weDoyojPpGjAWtXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZjkzMDZiYzYxNWMzMjBhZTQxYTRlNzI2NjNlYmJhOThl ZjM1N2MwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODFkZjNhNDE3YTA5OTYzZjM5NThjNmY4YmU5NDc2NTlhZTNiOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP0vkjh1Kjfr+8S8fRodQbbw0DaX TiKLB9e0g1XN2PZvLZFMRpGSCbnVzRwmR8Sm5v02/m1/G09Pvyr7OJb7NKK5hizA hu0fQamPcvALZn14kvdAsrlge3W5ndV9jNySPMSOSn648OrMcYT+pujXkx6zRLik crukeL/kPIs+rVJf7COOkgGJ2UbgnP7slyK+kin8MNN2Va/62SkvEoQ7bHAw6alC YJUxLrd8C9Yf6hsbwG9fGQoW4eY6Phr82bMm/+t7A9m8DsYgOoAz3TjmrcOPJEGK 2ZFAQ6IZoT5B5xMtBKvoE3Sm63Zo2cijtxCppWFvzH5TryirdZLe6h/ojQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPgd86QXoJlj85WMb4vpR2Wa47kAMB8GA1UdIwQY MBaAFOP5MGvGFcMgrkGk5yZj67qY7zV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEt M2NkMzNmZjMyNzQzLzEvMS1CM3pwQmVnbVdQemxZeHZpLWxIWlpyanVRQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTQvNmM0OGYxLTIwMzctNDBhMC1iMmUxLTNjZDMzZmYzMjc0 My8xLzRfa3dhOFlWd3lDdVFhVG5KbVBydXBqdk5Ydy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbkoZDAN BgkqhkiG9w0BAQsFAAOCAQEAjCs6K06vDBqTSAeG4JphRKtMnNK2GxHIp2xA0fjG BxfTyMmnF+LxshcGPlYbNCZJpqaew8WqCksVQlqAYnsc3/VBhILvJhFJEnQsLBhm anJlg8GRVAXAp+LI6W/3oUFbqxOQMINpPeFgh0byslfCJ/A/gpw7h4I81FVGqGAh 4znL6Qzam7GQLtBWyO7BPP7VfDmCkoKsNQHXXdne5eaZDWgG8pHbh1X6F37OaZki 0Jqe6jAB7dwyms5AF1y9uKbCZv5JebveWXH9uu0AXMcqlE13zhvMdYGJQ8KccrxA 9tYkzIssTVCrK85QQwbWjTh9yeIZWW4Cvl71BHuTNQH3ZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:35 2026 by rpki-client