This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/3Sd_E0C1oX2RqU6W4LHvfrEc8Pk.roa File: 3Sd_E0C1oX2RqU6W4LHvfrEc8Pk.roa (raw, json) Hash identifier: JOAPphyKGHtaN5RBXbSkEoVhSl4RF7JIChX5DcnMdOU= Subject key identifier: DD:27:7F:13:40:B5:A1:7D:91:A9:4E:96:E0:B1:EF:7E:B1:1C:F0:F9 Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Certificate serial: 019B77C742E45FE77CCC6D32D6281FA0F304 Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/3Sd_E0C1oX2RqU6W4LHvfrEc8Pk.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6939 IP address blocks: 85.116.204.0/22 maxlen: 22 85.116.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:e4:5f:e7:7c:cc:6d:32:d6:28:1f:a0:f3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd277f1340b5a17d91a94e96e0b1ef7eb11cf0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:a6:58:c7:70:cd:d2:d2:82:e4:ec:f0:eb: a5:e9:62:e2:7c:c7:ea:69:4b:ae:65:6a:e0:4a:f3: dd:c8:55:fb:16:36:0d:a4:4d:83:8a:d5:e5:d9:e7: 3b:d2:ab:27:a3:e2:3c:e4:94:5d:24:cb:21:28:c4: 9a:f6:40:44:41:92:27:65:e1:31:46:ff:e9:30:fe: ea:61:d0:fa:46:e2:71:63:a5:34:52:fe:e7:76:46: 46:62:54:2f:73:dd:25:43:22:f5:31:95:0f:7a:a3: 8e:c2:86:11:92:a5:a6:c6:56:7a:4d:3b:93:32:7b: 54:77:53:b3:91:d9:32:5b:f3:5b:a1:c4:4e:94:73: ba:30:83:61:e3:df:80:56:f8:ae:6d:30:e4:26:33: f7:f7:1a:93:0b:f2:ce:b9:87:5f:9d:74:60:13:80: 68:c2:06:8b:be:80:31:0b:2a:99:a4:dc:1e:67:68: f8:50:a5:3f:83:2a:0c:02:10:e2:c7:6b:0a:1f:1f: bd:35:7d:e5:97:fe:56:d3:59:3b:9c:70:05:44:6f: 4d:89:e9:29:f9:73:6f:cb:d4:d4:70:08:61:e0:32: ff:46:d8:b1:94:76:3b:fe:b3:6e:53:bb:43:88:e6: 21:9c:cc:59:d4:18:de:c4:b3:9d:7f:8a:ae:ee:2c: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:27:7F:13:40:B5:A1:7D:91:A9:4E:96:E0:B1:EF:7E:B1:1C:F0:F9 X509v3 Authority Key Identifier: keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/3Sd_E0C1oX2RqU6W4LHvfrEc8Pk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.204.0-85.116.211.255 Signature Algorithm: sha256WithRSAEncryption a3:93:2b:fe:e8:6f:eb:95:d7:56:4a:3c:5e:a9:59:e4:2f:23: 27:92:1b:51:ab:98:49:18:d4:d4:68:1e:42:0e:32:11:1d:27: d0:28:64:eb:e4:cd:a4:f4:36:90:df:b7:63:e1:d5:03:2c:07: 6b:53:dc:8f:9a:da:40:1b:62:00:23:d2:56:f0:35:8e:55:0f: 0b:76:a8:72:cd:ce:d4:ca:a4:d2:ba:b2:d1:43:07:29:71:df: 67:21:a4:ae:87:86:9b:0c:88:59:85:4a:0c:aa:52:22:a9:2e: 99:2e:60:c8:60:d3:44:73:9a:c7:81:81:fb:59:45:1e:93:29: 8b:17:2f:01:a0:f7:4d:eb:70:68:5a:a6:23:d0:2f:1f:b6:65: 60:8a:a9:1e:40:90:3b:65:e7:7a:3d:bc:be:92:a9:86:6f:dd: a8:1f:51:96:00:52:cf:ab:24:52:70:ca:c0:d6:7f:8c:56:9a: f6:a8:01:46:af:0f:15:f9:6f:87:88:6c:8a:15:eb:b1:f8:51: 89:5c:74:8f:40:c5:97:1c:8e:f9:8f:da:e9:1d:cd:20:fd:33: 68:78:7f:7a:7e:57:da:d2:8c:d8:81:61:e5:a9:72:64:d6:a8: e4:eb:56:c6:6f:11:17:55:86:03:00:8e:7d:85:68:7b:23:37: ab:15:ab:87 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3x0LkX+d8zG0y1igfoPMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx Yjk0MTIwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDI3N2YxMzQwYjVhMTdkOTFhOTRlOTZlMGIxZWY3ZWIxMWNmMGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzGmWMdwzdLSguTs8Oul6WLifMfq aUuuZWrgSvPdyFX7FjYNpE2DitXl2ec70qsno+I85JRdJMshKMSa9kBEQZInZeEx Rv/pMP7qYdD6RuJxY6U0Uv7ndkZGYlQvc90lQyL1MZUPeqOOwoYRkqWmxlZ6TTuT MntUd1OzkdkyW/NbocROlHO6MINh49+AVviubTDkJjP39xqTC/LOuYdfnXRgE4Bo wgaLvoAxCyqZpNweZ2j4UKU/gyoMAhDix2sKHx+9NX3ll/5W01k7nHAFRG9Niekp +XNvy9TUcAhh4DL/RtixlHY7/rNuU7tDiOYhnMxZ1BjexLOdf4qu7iz9VQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFN0nfxNAtaF9kalOluCx736xHPD5MB8GA1UdIwQY MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt ZThiYWY5ZmZhZGY4LzEvM1NkX0UwQzFvWDJScVU2VzRMSHZmckVjOFBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4 LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJVdMwD BAJVdNAwDQYJKoZIhvcNAQELBQADggEBAKOTK/7ob+uV11ZKPF6pWeQvIyeSG1Gr mEkY1NRoHkIOMhEdJ9AoZOvkzaT0NpDft2Ph1QMsB2tT3I+a2kAbYgAj0lbwNY5V Dwt2qHLNztTKpNK6stFDBylx32chpK6HhpsMiFmFSgyqUiKpLpkuYMhg00RzmseB gftZRR6TKYsXLwGg903rcGhapiPQLx+2ZWCKqR5AkDtl53o9vL6SqYZv3agfUZYA Us+rJFJwysDWf4xWmvaoAUavDxX5b4eIbIoV67H4UYlcdI9AxZccjvmP2ukdzSD9 M2h4f3p+V9rSjNiBYeWpcmTWqOTrVsZvERdVhgMAjn2FaHsjN6sVq4c= -----END CERTIFICATE-----Generated at Sat Jan 17 08:19:00 2026 by rpki-client