This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/3TlOwei8Ts0VO-H2LiDyoKiq9vA.roa File: 3TlOwei8Ts0VO-H2LiDyoKiq9vA.roa (raw, json) Hash identifier: 8VdpwQw88PXXRSc+QbtpNg1I/zZc3ZUytvt50fl1urA= Subject key identifier: DD:39:4E:C1:E8:BC:4E:CD:15:3B:E1:F6:2E:20:F2:A0:A8:AA:F6:F0 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC79297401B02EFEE6140B126D6542C Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/3TlOwei8Ts0VO-H2LiDyoKiq9vA.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49770 IP address blocks: 185.149.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:92:97:40:1b:02:ef:ee:61:40:b1:26:d6:54:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd394ec1e8bc4ecd153be1f62e20f2a0a8aaf6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:22:a2:7a:60:a9:ea:52:05:0e:bd:82:84: b8:78:29:3e:96:aa:14:aa:96:f2:c3:94:f4:f6:f7: 88:03:d5:d1:71:0c:9d:fe:6e:76:28:19:fa:9e:c5: 82:2c:04:6b:fd:67:ef:c4:e2:4c:68:3f:dd:a0:e2: 36:fd:00:25:fc:60:85:b1:55:64:d9:dc:7e:bc:ad: 8e:ff:26:9c:f1:ee:55:13:16:68:35:ab:2b:c0:d4: dc:f9:9b:4c:cc:4b:5b:7e:b0:92:23:81:44:54:12: de:84:35:56:b7:b5:99:64:a9:7f:70:51:d9:e7:bb: 06:51:e0:eb:a6:84:10:7a:7b:85:cd:58:21:f6:07: db:04:73:92:81:b2:f6:16:4d:0a:88:2e:67:c8:4e: c5:ff:cf:fb:2a:36:41:7b:f2:43:ea:be:15:46:42: f9:de:38:b3:bc:3b:6b:5d:91:33:96:89:77:9d:83: 64:fb:57:28:e2:76:93:42:c4:c5:14:b0:93:ac:2c: 24:0c:d6:c5:09:db:c2:ca:8b:22:34:24:72:e7:33: 55:ed:75:34:34:1a:71:31:57:83:83:0e:5d:1b:5d: 61:a1:9d:e6:81:99:0f:0a:1d:ae:53:9e:63:a7:ad: b4:5b:20:cf:65:f0:d1:b6:ce:0f:47:8d:a4:5c:10: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:39:4E:C1:E8:BC:4E:CD:15:3B:E1:F6:2E:20:F2:A0:A8:AA:F6:F0 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/3TlOwei8Ts0VO-H2LiDyoKiq9vA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.123.0/24 Signature Algorithm: sha256WithRSAEncryption 78:56:88:ee:ed:8b:d5:b1:0b:d0:87:39:04:10:5c:17:c5:27: 4c:fc:e5:e3:d4:5d:03:14:4c:31:92:66:02:2c:f7:ea:7d:9e: b2:c5:d9:3d:45:44:6f:43:70:fd:eb:f5:96:74:9b:60:64:99: 9a:39:35:a4:e4:d7:ae:aa:6b:da:3a:98:ac:02:e1:76:6b:3b: d3:e4:74:cf:09:5b:6e:53:31:61:34:77:6d:b4:ea:cb:f2:91: 87:5b:62:b4:7e:5d:57:76:78:56:2d:51:09:4b:6e:e4:e6:67: 67:10:1c:f8:3b:00:23:d9:81:67:7e:bc:de:d8:da:45:46:f8: 58:16:59:5d:76:da:57:c9:88:54:44:6a:59:35:95:8a:e6:9c: d7:06:56:99:33:36:9c:5a:5a:88:8f:10:07:e4:b7:23:91:42: 0d:45:14:cd:9a:89:5a:b8:12:32:9a:4b:28:1b:26:df:74:6c: 75:ba:b1:0c:5a:83:5b:10:f3:e0:a6:18:78:c0:1c:81:fc:9d: 34:fa:34:d1:78:1c:af:8b:fa:d1:80:a2:16:c2:28:ac:01:40: 7c:0e:26:a8:86:07:2d:91:76:f8:ac:d9:80:07:e0:9a:93:47: 47:33:cd:84:6c:7d:a8:b1:6b:ba:05:15:38:9a:8f:95:fd:d5: 78:8f:84:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5KXQBsC7+5hQLEm1lQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDM5NGVjMWU4YmM0ZWNkMTUzYmUxZjYyZTIwZjJhMGE4YWFmNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB0ionpgqepSBQ69goS4eCk+lqoU qpbyw5T09veIA9XRcQyd/m52KBn6nsWCLARr/WfvxOJMaD/doOI2/QAl/GCFsVVk 2dx+vK2O/yac8e5VExZoNasrwNTc+ZtMzEtbfrCSI4FEVBLehDVWt7WZZKl/cFHZ 57sGUeDrpoQQenuFzVgh9gfbBHOSgbL2Fk0KiC5nyE7F/8/7KjZBe/JD6r4VRkL5 3jizvDtrXZEzlol3nYNk+1co4naTQsTFFLCTrCwkDNbFCdvCyosiNCRy5zNV7XU0 NBpxMVeDgw5dG11hoZ3mgZkPCh2uU55jp620WyDPZfDRts4PR42kXBCduQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN05TsHovE7NFTvh9i4g8qCoqvbwMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvM1RsT3dlaThUczBWTy1IMkxpRHlvS2lxOXZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZV7MA0G CSqGSIb3DQEBCwUAA4IBAQB4Voju7YvVsQvQhzkEEFwXxSdM/OXj1F0DFEwxkmYC LPfqfZ6yxdk9RURvQ3D96/WWdJtgZJmaOTWk5NeuqmvaOpisAuF2azvT5HTPCVtu UzFhNHdttOrL8pGHW2K0fl1XdnhWLVEJS27k5mdnEBz4OwAj2YFnfrze2NpFRvhY FllddtpXyYhURGpZNZWK5pzXBlaZMzacWlqIjxAH5LcjkUINRRTNmolauBIymkso GybfdGx1urEMWoNbEPPgphh4wByB/J00+jTReByvi/rRgKIWwiisAUB8Diaohgct kXb4rNmAB+Cak0dHM82EbH2osWu6BRU4mo+V/dV4j4Qn -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:07 2026 by rpki-client