This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa File: 3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa (raw, json) Hash identifier: mYQ4ggMgVLrFbz01ZBuOhgHTwYfwTmz0/Kv0k+37TBo= Subject key identifier: DD:96:CF:F0:3E:28:CA:10:9E:E2:EE:66:96:E8:31:92:15:0F:FC:6E Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921 Certificate serial: 019B7D5B9619F8EE0327796F567CA5BDC5D6 Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa Signing time: Fri 02 Jan 2026 06:18:32 +0000 ROA not before: Fri 02 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205241 IP address blocks: 185.219.56.0/22 maxlen: 24 2a0b:e140::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:96:19:f8:ee:03:27:79:6f:56:7c:a5:bd:c5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921 Validity Not Before: Jan 2 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd96cff03e28ca109ee2ee6696e83192150ffc6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:f5:6b:c0:a4:51:e2:84:57:3e:3e:88:b5: ee:f8:52:18:23:d1:99:6f:08:71:01:6c:2e:94:58: 8b:d3:d6:66:77:15:ee:6f:28:11:af:c1:e4:db:84: c8:73:01:02:5a:e1:c5:54:39:1b:dc:02:b2:97:5e: 6f:4e:b5:e1:70:72:f5:10:bb:c8:12:61:9b:84:83: 87:1f:87:81:df:fd:ec:9c:95:ac:cb:13:ac:61:8f: 2d:2f:a4:b7:d5:91:86:94:86:35:b5:dd:93:f9:9a: f4:df:32:f2:eb:b2:a6:b8:56:0d:3f:ae:45:ae:27: 32:dc:a8:19:f6:db:17:5d:3d:2c:42:eb:1c:2f:69: e5:f8:a5:21:18:7b:33:19:ae:b9:ef:68:7e:69:33: 0a:87:7b:b4:a2:04:35:66:f7:94:7b:5f:62:7d:44: 25:10:58:f9:9a:a8:db:5f:d0:fa:db:3e:3b:07:71: 3b:64:eb:55:6a:c9:74:17:6e:af:29:25:93:3e:d6: d1:de:25:ce:fa:06:23:f6:d0:c3:9f:dc:6a:3a:29: 5e:a3:fc:ac:d7:d0:2e:6e:74:96:37:98:10:6f:34: 05:f9:19:5e:7c:31:2b:9a:c3:78:23:a9:c8:4c:4b: fc:fa:46:e5:09:23:f9:5e:19:3a:e8:44:19:a2:b4: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:96:CF:F0:3E:28:CA:10:9E:E2:EE:66:96:E8:31:92:15:0F:FC:6E X509v3 Authority Key Identifier: keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.56.0/22 IPv6: 2a0b:e140::/29 Signature Algorithm: sha256WithRSAEncryption 05:d1:d6:a8:17:cb:ae:df:0d:fb:a5:df:20:45:6d:e2:15:5b: c3:fd:aa:f7:4a:f7:87:6a:93:3b:b8:fe:fc:3f:e3:3d:15:90: 31:ec:2e:d2:a1:01:12:11:2d:75:5b:a4:93:c1:20:19:d5:8a: 70:c1:dd:3e:51:79:1b:82:66:f6:af:dc:81:ba:3f:f9:de:58: c0:fe:da:2f:03:02:99:1c:3c:06:14:c9:ce:f9:fa:19:08:4a: b9:3c:66:32:4c:91:fb:a9:84:fc:bc:fb:05:05:2b:76:7b:bd: 2f:7b:84:0b:3a:03:2a:53:f2:eb:53:92:1d:0f:9b:ae:e3:eb: f0:27:bc:0a:81:e8:a8:ef:8f:02:df:a1:58:01:92:5a:c5:d2: a6:eb:35:fa:4c:2e:12:81:20:1e:02:dd:fc:9e:8a:32:07:ba: 99:cc:6d:53:2a:1b:6b:90:13:10:2e:2f:4b:9c:d0:af:4f:e3: 50:18:b1:9a:b2:26:d5:28:a0:66:11:7d:f8:f3:2c:01:00:d8: 93:35:9f:19:51:1c:4b:d3:52:0c:dd:59:1d:b3:aa:e9:88:71: 7e:bb:34:21:56:f8:51:69:77:7b:06:04:fe:bb:fc:0e:d3:db: 5e:a7:a9:b8:df:4a:ec:a1:76:67:c5:f4:dc:bc:c2:5d:8b:05: 8b:f5:b0:71 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W5YZ+O4DJ3lvVnylvcXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMzkzNDNjYzZkNTFkZGI4ZTM2MzgyOTlhMWJiNDk1ZjQ1 ODA5MjEwHhcNMjYwMTAyMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDk2Y2ZmMDNlMjhjYTEwOWVlMmVlNjY5NmU4MzE5MjE1MGZmYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzL1a8CkUeKEVz4+iLXu+FIYI9GZ bwhxAWwulFiL09ZmdxXubygRr8Hk24TIcwECWuHFVDkb3AKyl15vTrXhcHL1ELvI EmGbhIOHH4eB3/3snJWsyxOsYY8tL6S31ZGGlIY1td2T+Zr03zLy67KmuFYNP65F ricy3KgZ9tsXXT0sQuscL2nl+KUhGHszGa6572h+aTMKh3u0ogQ1ZveUe19ifUQl EFj5mqjbX9D62z47B3E7ZOtVasl0F26vKSWTPtbR3iXO+gYj9tDDn9xqOileo/ys 19AubnSWN5gQbzQF+RlefDErmsN4I6nITEv8+kblCSP5Xhk66EQZorQamwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN2Wz/A+KMoQnuLuZpboMZIVD/xuMB8GA1UdIwQY MBaAFPM5NDzG1R3bjjY4KZobtJX0WAkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHprMFBNYlZIZHVPTmpncG1odTBsZlJZQ1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZGU2ZGYtY2U0Zi00YjA5LTgyZDIt Mzc3ZDI1YmU1OTRkLzEvM1piUDhENG95aENlNHU1bWx1Z3hraFVQX0c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81ZGU2ZGYtY2U0Zi00YjA5LTgyZDItMzc3ZDI1YmU1OTRk LzEvOHprMFBNYlZIZHVPTmpncG1odTBsZlJZQ1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuds4MA0E AgACMAcDBQMqC+FAMA0GCSqGSIb3DQEBCwUAA4IBAQAF0daoF8uu3w37pd8gRW3i FVvD/ar3SveHapM7uP78P+M9FZAx7C7SoQESES11W6STwSAZ1Ypwwd0+UXkbgmb2 r9yBuj/53ljA/tovAwKZHDwGFMnO+foZCEq5PGYyTJH7qYT8vPsFBSt2e70ve4QL OgMqU/LrU5IdD5uu4+vwJ7wKgeio748C36FYAZJaxdKm6zX6TC4SgSAeAt38nooy B7qZzG1TKhtrkBMQLi9LnNCvT+NQGLGasibVKKBmEX348ywBANiTNZ8ZURxL01IM 3Vkds6rpiHF+uzQhVvhRaXd7BgT+u/wO09tep6m430rsoXZnxfTcvMJdiwWL9bBx -----END CERTIFICATE-----Generated at Mon Jan 26 23:42:49 2026 by rpki-client