This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/3I6LNJN6PPsiFBXmOu2FHBnIjRw.roa File: 3I6LNJN6PPsiFBXmOu2FHBnIjRw.roa (raw, json) Hash identifier: 7S75Cr0RAlxkkgtmqpz1YNkkzHYPGceCTqlkYTBVOv4= Subject key identifier: DC:8E:8B:34:93:7A:3C:FB:22:14:15:E6:3A:ED:85:1C:19:C8:8D:1C Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203 Certificate serial: 019B76EB94BFC827B792097F9CD8475580D8 Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/3I6LNJN6PPsiFBXmOu2FHBnIjRw.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210860 IP address blocks: 193.20.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:94:bf:c8:27:b7:92:09:7f:9c:d8:47:55:80:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc8e8b34937a3cfb221415e63aed851c19c88d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:07:67:6f:b9:e0:2d:12:94:d6:5d:84:e7: 83:a3:e0:e4:45:79:5d:e7:4f:06:76:26:77:c7:84: 96:c9:92:34:6b:bd:4a:ef:be:9a:c7:c3:30:06:00: 33:a8:db:81:4a:7c:ec:73:a7:ef:8f:65:89:b9:bc: ba:a1:7b:61:47:f0:cc:18:56:cc:f2:c5:67:9e:24: ca:00:84:cf:d9:ec:99:26:a7:11:e3:aa:19:ac:3d: 08:05:b8:ea:94:00:59:07:ff:74:7a:02:7e:3f:b6: 78:95:cd:8d:9c:67:e9:61:9d:05:8b:22:3c:18:80: 6d:d8:fb:3e:d6:6e:65:4d:8d:25:dd:69:e2:21:d7: 3c:2f:40:17:7e:11:6d:1c:5d:12:5b:e3:ca:c4:00: 05:c6:a0:82:ab:ea:06:3d:af:31:bb:fd:b2:7d:ed: db:ce:6c:b5:f2:90:1e:e0:2d:73:ed:74:32:84:5b: 8c:39:b1:12:76:14:f2:2f:09:b8:e4:e3:cd:06:31: a8:9f:b1:b5:09:f4:ab:20:f1:e8:fa:69:ef:69:2b: 63:c8:a8:3c:23:d1:1d:7f:90:4f:bb:f3:4a:33:c9: f2:2d:56:bf:1c:bf:7f:48:4b:f7:b7:0c:89:73:3e: 65:0e:50:67:45:5e:d0:80:68:7c:59:b1:19:64:fb: 5d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8E:8B:34:93:7A:3C:FB:22:14:15:E6:3A:ED:85:1C:19:C8:8D:1C X509v3 Authority Key Identifier: keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/3I6LNJN6PPsiFBXmOu2FHBnIjRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.20.0.0/15 Signature Algorithm: sha256WithRSAEncryption da:6e:33:e9:c4:6d:5f:f7:e2:f6:a8:b9:1f:67:7b:7a:36:e1: 06:60:e0:f4:5f:3c:32:68:6a:50:ab:8f:6c:0a:44:2e:50:4c: bd:54:c4:ec:fc:2d:06:4f:cc:d6:33:e2:06:5a:ec:8a:9f:73: 73:50:f1:42:02:ba:8c:b0:81:70:24:21:bd:10:df:28:2b:3d: 89:d1:19:e1:e3:0d:1e:e0:4b:78:a5:23:59:d8:d2:f3:2e:ee: e9:94:65:30:eb:2e:91:45:ff:70:38:a3:a4:52:b3:2c:a9:23: 72:c2:08:5d:08:16:b4:bc:58:8e:bb:78:8d:33:45:01:98:37: 9a:92:2f:fc:10:c1:7a:b4:3e:37:b6:d6:7a:28:86:17:59:b6: 9e:af:b3:34:c7:c7:a3:ba:44:c6:55:51:31:ee:f5:7f:22:12: ee:97:0e:fd:ba:c5:00:ea:ce:d2:0a:a3:e5:b0:98:e2:d1:c4: c3:69:d9:08:ae:45:ab:32:e4:bb:28:6b:8f:b0:20:ad:98:49: 96:e3:7d:0f:c8:73:77:6a:96:c8:b7:14:01:b5:c6:30:ff:22: d9:91:8f:ef:ab:2a:be:08:8c:72:1d:ef:3b:85:50:ab:ff:07: b5:16:de:74:85:ba:b9:91:c2:5e:4f:9a:76:cc:81:15:28:b3: 51:c4:c3:bf -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt265S/yCe3kgl/nNhHVYDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOThhM2I2MmQ1YWJiMWRjYWY2OGFlMjNmNTMxZWU4MjI0 MGYyMDMwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzhlOGIzNDkzN2EzY2ZiMjIxNDE1ZTYzYWVkODUxYzE5Yzg4ZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqAHZ2+54C0SlNZdhOeDo+DkRXld 508GdiZ3x4SWyZI0a71K776ax8MwBgAzqNuBSnzsc6fvj2WJuby6oXthR/DMGFbM 8sVnniTKAITP2eyZJqcR46oZrD0IBbjqlABZB/90egJ+P7Z4lc2NnGfpYZ0FiyI8 GIBt2Ps+1m5lTY0l3WniIdc8L0AXfhFtHF0SW+PKxAAFxqCCq+oGPa8xu/2yfe3b zmy18pAe4C1z7XQyhFuMObESdhTyLwm45OPNBjGon7G1CfSrIPHo+mnvaStjyKg8 I9Edf5BPu/NKM8nyLVa/HL9/SEv3twyJcz5lDlBnRV7QgGh8WbEZZPtd7wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFNyOizSTejz7IhQV5jrthRwZyI0cMB8GA1UdIwQY MBaAFD2Yo7YtWrsdyvaK4j9THugiQPIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2Et ZjliNzNiM2UzZWVlLzEvM0k2TE5KTjZQUHNpRkJYbU91MkZIQm5JalJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9hYzVmZGYtNWI2Ni00ODUwLTk2M2EtZjliNzNiM2UzZWVl LzEvUFppanRpMWF1eDNLOW9yaVAxTWU2Q0pBOGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBwRQwDQYJ KoZIhvcNAQELBQADggEBANpuM+nEbV/34vaouR9ne3o24QZg4PRfPDJoalCrj2wK RC5QTL1UxOz8LQZPzNYz4gZa7Iqfc3NQ8UICuoywgXAkIb0Q3ygrPYnRGeHjDR7g S3ilI1nY0vMu7umUZTDrLpFF/3A4o6RSsyypI3LCCF0IFrS8WI67eI0zRQGYN5qS L/wQwXq0Pje21noohhdZtp6vszTHx6O6RMZVUTHu9X8iEu6XDv26xQDqztIKo+Ww mOLRxMNp2QiuRasy5Lsoa4+wIK2YSZbjfQ/Ic3dqlsi3FAG1xjD/ItmRj++rKr4I jHId7zuFUKv/B7UW3nSFurmRwl5PmnbMgRUos1HEw78= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:01 2026 by rpki-client