This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/3qA4FQIUtzDs5t_mEHhNZORgMfU.roa File: 3qA4FQIUtzDs5t_mEHhNZORgMfU.roa (raw, json) Hash identifier: GH+TqQvh17FK/3T+3gQp0M00LakHIoZrhZmY+Sn7jQw= Subject key identifier: DE:A0:38:15:02:14:B7:30:EC:E6:DF:E6:10:78:4D:64:E4:60:31:F5 Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7 Certificate serial: 019B7AC84C25A1C907C98ADE39084392A706 Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/3qA4FQIUtzDs5t_mEHhNZORgMfU.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209549 IP address blocks: 185.149.36.0/22 maxlen: 22 185.149.36.0/24 maxlen: 24 185.149.37.0/24 maxlen: 24 185.149.38.0/24 maxlen: 24 2a0d:b780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4c:25:a1:c9:07:c9:8a:de:39:08:43:92:a7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dea038150214b730ece6dfe610784d64e46031f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:58:11:ca:5f:31:c6:45:16:6e:56:cd:c1:8d: 8b:c4:a8:36:4a:56:33:0d:35:6e:bc:4a:f0:a6:4d: b1:9a:18:e5:2a:7c:05:a9:29:3c:64:67:2a:4b:2f: 62:ab:61:99:1c:86:88:8b:18:23:62:29:41:90:f9: 80:65:d9:46:bf:a0:9b:88:40:4c:2d:38:71:25:7c: 82:3d:c1:b3:e7:26:89:95:5d:7c:98:ae:5f:63:49: 7b:6b:6f:8a:8e:1f:35:6d:20:28:fc:1d:75:b0:6e: fe:31:da:35:63:e0:e2:cf:f0:ab:3f:74:dd:3d:db: 65:de:0d:64:e3:03:83:76:ef:75:cd:0f:77:55:77: 2c:3c:24:ad:af:6f:91:17:3b:d0:da:07:67:52:fe: e5:a9:d4:13:df:72:c7:93:87:9a:24:ba:0a:74:1d: ca:f4:5f:3a:28:cc:00:7e:3b:44:12:48:32:8e:f2: 0f:b3:ec:79:9b:49:8f:19:1f:3a:82:23:eb:0f:ec: 2d:73:d7:c3:6e:a8:3f:d2:c5:b1:74:a0:26:34:8b: f0:1f:d2:46:97:06:c9:c2:81:eb:0a:5a:5e:45:f0: 4f:63:f1:fb:23:85:08:93:b1:ca:c6:75:e0:91:e9: 52:31:a4:22:c5:57:99:70:ea:3a:a0:53:8f:ac:75: 70:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A0:38:15:02:14:B7:30:EC:E6:DF:E6:10:78:4D:64:E4:60:31:F5 X509v3 Authority Key Identifier: keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/3qA4FQIUtzDs5t_mEHhNZORgMfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.36.0/22 IPv6: 2a0d:b780::/29 Signature Algorithm: sha256WithRSAEncryption 75:79:68:76:67:8a:d7:63:5f:be:7b:dd:40:2c:79:cc:f5:be: b8:4d:92:95:09:77:db:1d:09:80:1e:aa:d3:8d:e5:50:91:50: 1e:88:52:7d:87:8b:32:90:1c:c9:d6:e5:85:af:2c:a9:cc:0d: 44:04:d6:ca:d8:60:39:78:1e:81:81:1d:79:d4:19:29:75:59: 69:6c:4c:57:00:5b:a7:e6:ac:b8:70:1a:b5:71:44:75:c7:3d: 3d:ff:47:53:4d:da:40:e7:93:68:40:1f:8c:f1:85:58:0b:48: 85:ad:cb:d8:f3:37:af:0a:23:73:c5:7d:10:68:96:04:e9:12: 90:92:35:44:2f:3d:6c:fc:10:64:4e:a4:67:13:12:53:b3:de: 92:d3:b5:ec:d4:27:0b:55:e8:40:d3:b1:2d:20:8e:5f:aa:b2: 77:ce:d3:18:78:cf:1e:1e:53:7a:9a:6f:65:b4:f6:c3:59:d8: 79:14:e7:a8:bb:d0:f4:57:f2:52:73:a9:10:28:ff:56:aa:f3: 65:59:2e:a9:49:84:1c:00:35:be:84:2c:29:57:de:44:b6:33: b6:37:6b:70:7c:41:f2:f8:69:d3:36:17:9b:9f:46:9e:19:17: 3a:fd:0f:94:07:b3:fe:36:a0:82:5b:ab:6a:e6:85:59:1d:4c: 1c:15:db:9c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yEwlockHyYreOQhDkqcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWIzZTcyZjczNDBkYTg1NmU5M2Q2MmVlOGQwMjNmMWQ3 YzhlZTcwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWEwMzgxNTAyMTRiNzMwZWNlNmRmZTYxMDc4NGQ2NGU0NjAzMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lgRyl8xxkUWblbNwY2LxKg2SlYz DTVuvErwpk2xmhjlKnwFqSk8ZGcqSy9iq2GZHIaIixgjYilBkPmAZdlGv6CbiEBM LThxJXyCPcGz5yaJlV18mK5fY0l7a2+Kjh81bSAo/B11sG7+Mdo1Y+Diz/CrP3Td Pdtl3g1k4wODdu91zQ93VXcsPCStr2+RFzvQ2gdnUv7lqdQT33LHk4eaJLoKdB3K 9F86KMwAfjtEEkgyjvIPs+x5m0mPGR86giPrD+wtc9fDbqg/0sWxdKAmNIvwH9JG lwbJwoHrClpeRfBPY/H7I4UIk7HKxnXgkelSMaQixVeZcOo6oFOPrHVwgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN6gOBUCFLcw7Obf5hB4TWTkYDH1MB8GA1UdIwQY MBaAFBWrPnL3NA2oVuk9Yu6NAj8dfI7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmFzLWN2YzBEYWhXNlQxaTdvMENQeDE4anVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85YzEzMGItZTE1ZS00YjZkLWI1ZmIt NzE5YjA0OTdlN2NjLzEvM3FBNEZRSVV0ekRzNXRfbUVIaE5aT1JnTWZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85YzEzMGItZTE1ZS00YjZkLWI1ZmItNzE5YjA0OTdlN2Nj LzEvRmFzLWN2YzBEYWhXNlQxaTdvMENQeDE4anVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZUkMA0E AgACMAcDBQMqDbeAMA0GCSqGSIb3DQEBCwUAA4IBAQB1eWh2Z4rXY1++e91ALHnM 9b64TZKVCXfbHQmAHqrTjeVQkVAeiFJ9h4sykBzJ1uWFryypzA1EBNbK2GA5eB6B gR151BkpdVlpbExXAFun5qy4cBq1cUR1xz09/0dTTdpA55NoQB+M8YVYC0iFrcvY 8zevCiNzxX0QaJYE6RKQkjVELz1s/BBkTqRnExJTs96S07Xs1CcLVehA07EtII5f qrJ3ztMYeM8eHlN6mm9ltPbDWdh5FOeou9D0V/JSc6kQKP9WqvNlWS6pSYQcADW+ hCwpV95EtjO2N2twfEHy+GnTNhebn0aeGRc6/Q+UB7P+NqCCW6tq5oVZHUwcFduc -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:59 2026 by rpki-client