This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/606c03-4bf5-4f1b-adbc-e2fc355b5781/1/3Ct6TkUE2gBFPtDFBHYIYOTGlpw.roa File: 3Ct6TkUE2gBFPtDFBHYIYOTGlpw.roa (raw, json) Hash identifier: hacarGD+istChd7yJvqpW0vSFQX9AY4Tmu/s0YEY6RE= Subject key identifier: DC:2B:7A:4E:45:04:DA:00:45:3E:D0:C5:04:76:08:60:E4:C6:96:9C Certificate issuer: /CN=1eb657a0d63497039176251014f6a15fe23cb75c Certificate serial: 019B76EAF5AD4AD953082F996810FDD8A7D7 Authority key identifier: 1E:B6:57:A0:D6:34:97:03:91:76:25:10:14:F6:A1:5F:E2:3C:B7:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrZXoNY0lwORdiUQFPahX-I8t1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/606c03-4bf5-4f1b-adbc-e2fc355b5781/1/3Ct6TkUE2gBFPtDFBHYIYOTGlpw.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50016 IP address blocks: 185.119.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/606c03-4bf5-4f1b-adbc-e2fc355b5781/1/HrZXoNY0lwORdiUQFPahX-I8t1w.crl rsync://rpki.ripe.net/repository/DEFAULT/63/606c03-4bf5-4f1b-adbc-e2fc355b5781/1/HrZXoNY0lwORdiUQFPahX-I8t1w.mft rsync://rpki.ripe.net/repository/DEFAULT/HrZXoNY0lwORdiUQFPahX-I8t1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f5:ad:4a:d9:53:08:2f:99:68:10:fd:d8:a7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eb657a0d63497039176251014f6a15fe23cb75c Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc2b7a4e4504da00453ed0c504760860e4c6969c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:4b:38:f9:c0:42:fd:d0:3e:75:9b:c7:d6: d6:a1:2c:43:23:f0:40:c0:8c:5c:8a:6c:58:ac:eb: 57:c5:28:08:d6:4c:26:18:50:17:7a:b4:ff:9c:51: 55:96:a5:e8:72:aa:15:44:12:b1:82:86:a4:d5:7f: dd:1c:2a:e7:26:7c:c7:90:02:63:24:4e:7e:01:c1: e3:aa:74:b1:c8:90:c8:7e:fd:8d:5d:38:72:f1:40: 7a:6a:c0:27:a1:dc:fa:f5:94:c3:33:ec:84:a2:a5: 8e:70:af:69:83:8a:02:d4:6c:d2:98:62:9f:1f:cc: 71:12:36:a5:38:b8:2a:b7:1a:a8:3b:d4:ab:68:b0: 9b:aa:55:19:4d:4a:01:97:3b:1f:18:09:bb:31:1e: e3:7b:30:7a:16:2d:d8:e3:90:b9:ed:9f:ab:94:f6: fd:b8:d2:d6:54:8c:94:ff:09:08:e6:dd:5a:b2:b9: 8b:ee:96:bf:5a:d1:ec:0c:97:c2:14:65:71:74:01: e4:98:e4:02:e6:ba:56:4f:0d:23:05:47:0b:82:b5: d7:a0:10:1a:a7:1a:c2:81:87:21:99:6a:a6:3a:38: 12:05:08:8b:7d:ce:21:b3:d7:d8:6e:c2:01:9d:e5: 69:9e:1f:34:a8:d7:25:99:31:71:ca:e0:11:95:83: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2B:7A:4E:45:04:DA:00:45:3E:D0:C5:04:76:08:60:E4:C6:96:9C X509v3 Authority Key Identifier: keyid:1E:B6:57:A0:D6:34:97:03:91:76:25:10:14:F6:A1:5F:E2:3C:B7:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrZXoNY0lwORdiUQFPahX-I8t1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/606c03-4bf5-4f1b-adbc-e2fc355b5781/1/3Ct6TkUE2gBFPtDFBHYIYOTGlpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/606c03-4bf5-4f1b-adbc-e2fc355b5781/1/HrZXoNY0lwORdiUQFPahX-I8t1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.208.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:29:14:ff:d7:01:00:83:e5:c2:f2:f4:53:af:07:26:c1:54: 26:81:80:8d:36:c0:f3:77:c6:6c:57:41:4d:e9:5f:53:93:d9: da:54:03:b8:0b:08:55:42:72:34:10:fa:1d:0a:4f:54:9c:e9: 9e:ba:10:1e:df:9c:60:5d:c9:34:4d:49:a5:9b:02:30:8c:73: 2b:e5:7a:c0:18:8c:92:9d:6f:7e:64:70:34:b6:30:ad:2b:53: 8f:d0:32:08:e4:39:8c:b7:e7:e4:46:95:17:a5:11:0a:ce:05: ae:92:92:b6:2c:76:eb:c4:a7:54:bc:b3:83:66:54:fd:c5:13: 68:2b:54:cf:ba:df:bc:51:35:e8:49:2c:c5:b7:79:d1:ed:5a: ed:1d:56:2a:4a:d3:c0:0d:aa:e0:82:5d:e5:88:ef:bb:82:1d: 65:55:70:f3:60:e1:08:d6:5c:fb:ef:8f:b7:e0:cc:0b:43:97: c8:a0:4f:39:02:60:64:cb:ac:fd:c4:82:27:74:52:87:f3:40: 52:6f:fe:cb:01:bb:90:a5:0e:00:2f:97:43:27:d9:f0:fa:db: 6e:17:aa:6f:b2:2b:fb:6f:ac:13:c6:36:42:c5:30:1e:a7:05: 9d:9a:07:49:c8:74:41:a6:ae:2b:be:d7:4a:9f:fe:a8:d6:2a: 7b:f2:62:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vWtStlTCC+ZaBD92KfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYjY1N2EwZDYzNDk3MDM5MTc2MjUxMDE0ZjZhMTVmZTIz Y2I3NWMwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzJiN2E0ZTQ1MDRkYTAwNDUzZWQwYzUwNDc2MDg2MGU0YzY5NjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+1LOPnAQv3QPnWbx9bWoSxDI/BA wIxcimxYrOtXxSgI1kwmGFAXerT/nFFVlqXocqoVRBKxgoak1X/dHCrnJnzHkAJj JE5+AcHjqnSxyJDIfv2NXThy8UB6asAnodz69ZTDM+yEoqWOcK9pg4oC1GzSmGKf H8xxEjalOLgqtxqoO9SraLCbqlUZTUoBlzsfGAm7MR7jezB6Fi3Y45C57Z+rlPb9 uNLWVIyU/wkI5t1asrmL7pa/WtHsDJfCFGVxdAHkmOQC5rpWTw0jBUcLgrXXoBAa pxrCgYchmWqmOjgSBQiLfc4hs9fYbsIBneVpnh80qNclmTFxyuARlYN+0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwrek5FBNoART7QxQR2CGDkxpacMB8GA1UdIwQY MBaAFB62V6DWNJcDkXYlEBT2oV/iPLdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHJaWG9OWTBsd09SZGlVUUZQYWhYLUk4dDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82MDZjMDMtNGJmNS00ZjFiLWFkYmMt ZTJmYzM1NWI1NzgxLzEvM0N0NlRrVUUyZ0JGUHRERkJIWUlZT1RHbHB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My82MDZjMDMtNGJmNS00ZjFiLWFkYmMtZTJmYzM1NWI1Nzgx LzEvSHJaWG9OWTBsd09SZGlVUUZQYWhYLUk4dDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXfQMA0G CSqGSIb3DQEBCwUAA4IBAQAPKRT/1wEAg+XC8vRTrwcmwVQmgYCNNsDzd8ZsV0FN 6V9Tk9naVAO4CwhVQnI0EPodCk9UnOmeuhAe35xgXck0TUmlmwIwjHMr5XrAGIyS nW9+ZHA0tjCtK1OP0DII5DmMt+fkRpUXpREKzgWukpK2LHbrxKdUvLODZlT9xRNo K1TPut+8UTXoSSzFt3nR7VrtHVYqStPADarggl3liO+7gh1lVXDzYOEI1lz774+3 4MwLQ5fIoE85AmBky6z9xIIndFKH80BSb/7LAbuQpQ4AL5dDJ9nw+ttuF6pvsiv7 b6wTxjZCxTAepwWdmgdJyHRBpq4rvtdKn/6o1ip78mJZ -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:28 2026 by rpki-client