This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/h3ZDg5youB0K7vntlWcD6_hznfg.roa File: h3ZDg5youB0K7vntlWcD6_hznfg.roa (raw, json) Hash identifier: 9Ot/r2EVZQa+csMn0s0+LAGhdTl5GbdXVa69dBPCmRU= Subject key identifier: 87:76:43:83:9C:A8:B8:1D:0A:EE:F9:ED:95:67:03:EB:F8:73:9D:F8 Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed Certificate serial: 019B77C66908DD3E4ACE8639C069391D593C Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/h3ZDg5youB0K7vntlWcD6_hznfg.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60605 IP address blocks: 185.25.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:69:08:dd:3e:4a:ce:86:39:c0:69:39:1d:59:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=877643839ca8b81d0aeef9ed956703ebf8739df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:3a:f1:e7:3c:5e:8a:aa:dd:68:a2:7d:e0: b8:c0:29:e3:55:09:c5:d2:ac:f3:42:d7:15:35:a9: 03:6b:8d:43:00:88:5d:e4:f1:96:c8:2e:8b:41:0d: 2d:9d:86:84:62:bc:3e:af:01:60:ff:8f:9f:13:bc: 98:ef:3d:8e:3a:6e:d9:2c:61:ab:c4:84:9d:8e:d1: 4a:23:e6:f8:e5:c9:d7:57:61:48:06:fa:d8:26:8c: de:ef:17:5d:75:41:bf:35:62:0d:00:50:d3:cf:dd: 79:19:dc:b5:0b:1a:1b:50:03:45:06:f0:72:a2:35: 0d:c4:62:25:31:83:ae:66:22:6f:78:89:d0:81:f0: 6c:02:13:61:44:d0:37:e7:af:76:19:62:3b:07:0b: 07:31:d6:6f:80:98:26:26:5b:4e:36:af:f9:28:ca: d0:2b:f8:b0:f0:25:77:2a:99:b3:ad:8d:a2:42:db: 28:55:54:15:8e:c8:c8:1e:d4:27:42:bd:eb:15:bb: 3c:0a:6d:9d:12:fe:87:b7:54:f0:37:ba:5a:e5:dd: 1a:7a:8a:bb:4c:44:7e:ae:4f:af:1e:0c:74:5c:a7: fb:b2:a4:71:c8:bc:73:ca:eb:23:f6:4f:ec:5f:3b: 08:52:9d:e1:b8:4b:1b:16:f7:f8:1f:6b:17:d4:6d: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:76:43:83:9C:A8:B8:1D:0A:EE:F9:ED:95:67:03:EB:F8:73:9D:F8 X509v3 Authority Key Identifier: keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/h3ZDg5youB0K7vntlWcD6_hznfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.172.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:ec:c1:b1:3a:6b:be:99:90:31:94:bb:6b:01:24:03:7c:d5: e6:69:00:03:2d:fc:57:91:6f:69:56:f0:6c:01:3b:11:07:1d: 3d:21:b1:c3:49:a4:1e:89:68:f6:92:77:07:5a:8e:2e:e8:d0: b4:dc:f9:18:41:35:f2:72:7c:ee:9e:e0:12:9c:7f:c7:0e:51: f5:3b:7c:41:95:ae:45:35:4d:1d:db:c9:46:2f:15:25:a7:1c: 75:9a:2f:27:ad:3f:21:3b:a9:3a:bf:a2:b0:75:78:1a:ed:cc: 58:11:b0:54:b6:04:38:30:0e:0f:ff:9f:bf:1b:6a:a4:f3:03: 43:b4:65:b7:12:5b:63:86:a4:79:4f:ac:c2:91:63:f1:01:3d: 60:b9:26:f4:67:e5:53:da:ad:8a:17:d1:9a:d3:a7:14:78:7f: 90:55:13:62:44:ef:2f:1d:f1:ea:b6:1d:20:d1:e4:16:37:75: ef:b0:e8:9b:aa:9c:91:63:dd:28:b2:18:35:d7:ef:8d:1c:f8: 8a:db:30:22:d0:6d:8e:2e:db:40:f4:cc:55:0d:41:bc:d1:5f: 86:60:46:62:5b:62:39:a2:f6:81:66:93:d9:fc:34:17:1a:58: ed:fb:0f:b0:b0:c5:af:8e:0a:a9:82:62:0e:b3:a0:83:56:83: 50:3e:c3:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmkI3T5KzoY5wGk5HVk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOGE0ZTFkZWU1YmIxZTY1NzliMTE2MWNhOTEyY2E5YzAz YjQ2ZWQwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzc2NDM4MzljYThiODFkMGFlZWY5ZWQ5NTY3MDNlYmY4NzM5ZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwms68ec8Xoqq3WiifeC4wCnjVQnF 0qzzQtcVNakDa41DAIhd5PGWyC6LQQ0tnYaEYrw+rwFg/4+fE7yY7z2OOm7ZLGGr xISdjtFKI+b45cnXV2FIBvrYJoze7xdddUG/NWINAFDTz915Gdy1CxobUANFBvBy ojUNxGIlMYOuZiJveInQgfBsAhNhRNA35692GWI7BwsHMdZvgJgmJltONq/5KMrQ K/iw8CV3KpmzrY2iQtsoVVQVjsjIHtQnQr3rFbs8Cm2dEv6Ht1TwN7pa5d0aeoq7 TER+rk+vHgx0XKf7sqRxyLxzyusj9k/sXzsIUp3huEsbFvf4H2sX1G2nEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFId2Q4OcqLgdCu757ZVnA+v4c534MB8GA1UdIwQY MBaAFN2KTh3uW7HmV5sRYcqRLKnAO0btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAt OTg1YWFjNWJlYjMwLzEvaDNaRGc1eW91QjBLN3ZudGxXY0Q2X2h6bmZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAtOTg1YWFjNWJlYjMw LzEvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRmsMA0G CSqGSIb3DQEBCwUAA4IBAQBM7MGxOmu+mZAxlLtrASQDfNXmaQADLfxXkW9pVvBs ATsRBx09IbHDSaQeiWj2kncHWo4u6NC03PkYQTXycnzunuASnH/HDlH1O3xBla5F NU0d28lGLxUlpxx1mi8nrT8hO6k6v6KwdXga7cxYEbBUtgQ4MA4P/5+/G2qk8wND tGW3EltjhqR5T6zCkWPxAT1guSb0Z+VT2q2KF9Ga06cUeH+QVRNiRO8vHfHqth0g 0eQWN3XvsOibqpyRY90oshg11++NHPiK2zAi0G2OLttA9MxVDUG80V+GYEZiW2I5 ovaBZpPZ/DQXGljt+w+wsMWvjgqpgmIOs6CDVoNQPsPX -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:45 2026 by rpki-client