This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/3IEzMW9wkvjdW6dqOUxlESavJGw.roa File: 3IEzMW9wkvjdW6dqOUxlESavJGw.roa (raw, json) Hash identifier: 2z0dKbAFS8Y5M9QfS1OwUUX8b4XiNgWAST0EQxAlJ70= Subject key identifier: DC:81:33:31:6F:70:92:F8:DD:5B:A7:6A:39:4C:65:11:26:AF:24:6C Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663 Certificate serial: 019B7D5ADC0E8D89E7494E57D299CAD650E2 Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/3IEzMW9wkvjdW6dqOUxlESavJGw.roa Signing time: Fri 02 Jan 2026 06:17:45 +0000 ROA not before: Fri 02 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35361 IP address blocks: 85.119.88.0/21 maxlen: 21 89.239.0.0/19 maxlen: 19 2a02:4000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:dc:0e:8d:89:e7:49:4e:57:d2:99:ca:d6:50:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663 Validity Not Before: Jan 2 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc8133316f7092f8dd5ba76a394c651126af246c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:c7:f9:e9:82:7f:7d:30:2e:7f:65:89:52: 67:ac:41:31:02:c9:58:12:43:61:7b:6f:2b:c8:21: 63:1f:69:0c:fe:e7:da:82:54:71:df:05:63:7e:a4: 1c:2d:98:6c:3b:16:42:b3:4b:64:5e:e9:04:57:7f: 2f:1c:d4:5b:98:aa:8d:72:51:0f:12:4e:ff:f5:83: a4:68:9c:36:5e:04:b9:0f:ac:5c:5e:2b:c0:49:b9: 78:35:9a:61:0c:76:53:c9:a7:26:84:0b:42:d7:3d: 08:8a:13:a6:74:e1:d2:48:0e:a4:40:77:28:be:5e: b1:d5:26:52:48:51:73:4e:60:26:94:16:72:e4:b6: af:b8:13:3d:a0:87:24:d9:fe:39:43:90:b9:f7:49: a6:4a:8b:a2:e4:e7:f1:40:53:0a:94:9c:39:62:ee: 13:9d:e5:c3:6f:c6:29:ab:59:11:7f:11:45:61:3b: 90:ed:68:dd:5e:9c:75:6f:0c:58:25:a8:55:10:48: 43:1f:e9:55:e6:91:77:2a:ff:15:3f:20:24:2a:56: 10:4e:77:35:de:67:a1:97:18:83:cf:dc:43:89:2f: ed:02:bb:4c:90:c6:b6:a6:3d:8d:5e:b1:7b:13:34: 99:f2:63:83:8b:d6:5f:5e:88:f3:2c:eb:2e:f0:93: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:81:33:31:6F:70:92:F8:DD:5B:A7:6A:39:4C:65:11:26:AF:24:6C X509v3 Authority Key Identifier: keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/3IEzMW9wkvjdW6dqOUxlESavJGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.88.0/21 89.239.0.0/19 IPv6: 2a02:4000::/32 Signature Algorithm: sha256WithRSAEncryption 85:1c:f0:a0:76:03:73:fa:58:e5:89:49:0d:21:2f:e5:03:2a: 40:87:14:9d:e0:65:78:cb:b5:98:3d:f0:0b:e6:02:1d:58:a5: 47:0e:39:8f:50:c4:0e:e8:4a:c3:8a:a9:fc:4e:53:f7:74:c0: d6:36:3d:75:70:8a:24:1e:98:38:93:f0:3c:a1:87:57:54:38: 64:16:7b:ad:fc:71:c7:b5:70:8e:92:4c:83:63:52:fb:63:28: 58:b9:b8:b0:eb:cc:e0:6e:45:76:96:b4:1b:54:18:7d:91:95: f4:aa:0c:b5:2f:92:04:f1:b4:20:d9:5e:1e:56:de:d4:22:cd: 25:68:d5:32:8c:e5:3e:69:7f:51:21:4d:b3:3f:db:f3:ea:62: e2:17:49:db:76:6c:5c:39:09:bf:2f:b7:6f:c9:50:b1:5d:d4: 72:c4:ac:35:98:fa:31:1a:f1:19:63:d4:73:34:67:5c:eb:a7: ce:7e:8a:a9:7e:cd:18:1f:4f:bc:2e:4f:d0:91:a3:3c:5c:26: 5a:66:b2:71:15:79:d4:2d:b3:0b:f3:f6:39:30:47:49:e1:6c: c5:e8:45:cc:18:55:60:66:cf:48:21:b9:70:2d:e5:a7:df:15: fe:74:3c:94:85:ca:c6:78:a8:1b:f2:7c:2e:66:64:58:a9:19: ce:c8:b7:ac -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9WtwOjYnnSU5X0pnK1lDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMTdkZTE4ODdmY2ZhOTI0NGI5MzFkOTZkYTgyNjc4YzAx NDc2NjMwHhcNMjYwMTAyMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzgxMzMzMTZmNzA5MmY4ZGQ1YmE3NmEzOTRjNjUxMTI2YWYyNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqarH+emCf30wLn9liVJnrEExAslY EkNhe28ryCFjH2kM/ufaglRx3wVjfqQcLZhsOxZCs0tkXukEV38vHNRbmKqNclEP Ek7/9YOkaJw2XgS5D6xcXivASbl4NZphDHZTyacmhAtC1z0IihOmdOHSSA6kQHco vl6x1SZSSFFzTmAmlBZy5LavuBM9oIck2f45Q5C590mmSoui5OfxQFMKlJw5Yu4T neXDb8Ypq1kRfxFFYTuQ7WjdXpx1bwxYJahVEEhDH+lV5pF3Kv8VPyAkKlYQTnc1 3mehlxiDz9xDiS/tArtMkMa2pj2NXrF7EzSZ8mODi9ZfXojzLOsu8JPBmQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNyBMzFvcJL43VunajlMZREmryRsMB8GA1UdIwQY MBaAFGoX3hiH/PqSRLkx2W2oJnjAFHZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzIt MDc5OWE1MmE2Mzg3LzEvM0lFek1XOXdrdmpkVzZkcU9VeGxFU2F2Skd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzItMDc5OWE1MmE2Mzg3 LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDVXdYAwQF We8AMA0EAgACMAcDBQAqAkAAMA0GCSqGSIb3DQEBCwUAA4IBAQCFHPCgdgNz+ljl iUkNIS/lAypAhxSd4GV4y7WYPfAL5gIdWKVHDjmPUMQO6ErDiqn8TlP3dMDWNj11 cIokHpg4k/A8oYdXVDhkFnut/HHHtXCOkkyDY1L7YyhYubiw68zgbkV2lrQbVBh9 kZX0qgy1L5IE8bQg2V4eVt7UIs0laNUyjOU+aX9RIU2zP9vz6mLiF0nbdmxcOQm/ L7dvyVCxXdRyxKw1mPoxGvEZY9RzNGdc66fOfoqpfs0YH0+8Lk/QkaM8XCZaZrJx FXnULbML8/Y5MEdJ4WzF6EXMGFVgZs9IIblwLeWn3xX+dDyUhcrGeKgb8nwuZmRY qRnOyLes -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:57 2026 by rpki-client