This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa File: sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa (raw, json) Hash identifier: Pc4iJgvyu3odfRJruIllViWmrmTVoSgp0uUpk5XKRjQ= Subject key identifier: B1:DA:77:0B:C0:81:E1:F3:7D:AD:57:F0:AB:77:12:59:76:81:B7:66 Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8 Certificate serial: 019B7AC938C8C2942184E058E7FCA7FA6731 Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa Signing time: Thu 01 Jan 2026 18:19:26 +0000 ROA not before: Thu 01 Jan 2026 18:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60633 IP address blocks: 178.197.0.0/16 maxlen: 24 213.3.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:38:c8:c2:94:21:84:e0:58:e7:fc:a7:fa:67:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8 Validity Not Before: Jan 1 18:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1da770bc081e1f37dad57f0ab7712597681b766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:6a:f4:2f:7d:30:e9:06:d7:00:8b:d3:de: 0f:a7:22:62:e4:ba:51:6a:c5:9f:c5:e8:8a:10:2a: a2:f2:59:2c:0d:f9:90:c1:1e:c4:2e:18:d6:5c:26: 0b:b2:30:50:fc:e3:8b:96:0c:fa:ca:ba:fe:1e:d0: 81:e3:48:09:97:86:99:b0:1d:ab:1b:b3:47:2e:66: 5e:a4:a5:95:2f:37:49:95:f7:f5:04:c1:6f:61:70: c2:14:71:94:4c:25:03:86:36:3a:99:3a:b1:eb:af: 35:1e:c3:ff:90:3c:98:7c:e8:79:4f:a5:f8:79:54: f9:86:80:2b:3f:58:d5:73:c6:44:d8:15:bd:97:a0: 1d:95:76:d3:78:ed:2a:a0:c2:ed:ad:a6:b4:bd:22: db:f7:84:b3:9d:60:d3:b5:c1:d8:e9:f8:df:e6:a4: b7:74:9f:fc:9f:49:67:3e:74:a4:7b:35:cb:3a:19: 26:a9:ed:1e:ab:69:b5:1e:0e:0b:8a:5b:b7:92:d3: 8f:04:02:ca:b5:b7:b7:1b:5e:61:96:75:4c:7a:ca: 4d:3f:f0:60:24:37:59:9d:3e:85:29:ad:47:98:ce: 4e:da:69:72:e0:50:5f:04:3f:c5:82:48:ba:47:ea: c0:d5:7f:e1:81:4b:49:e4:28:ce:c2:e5:1c:c7:df: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DA:77:0B:C0:81:E1:F3:7D:AD:57:F0:AB:77:12:59:76:81:B7:66 X509v3 Authority Key Identifier: keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.197.0.0/16 213.3.80.0/21 Signature Algorithm: sha256WithRSAEncryption 17:8b:72:3e:4a:24:e4:91:19:33:da:58:cb:fa:04:c2:f1:13: 0c:c9:2d:c9:61:b7:2d:ac:aa:70:54:af:78:07:5d:92:7d:95: 29:59:81:c2:b9:0f:7a:30:17:8e:02:7b:98:61:41:88:1a:cc: 5e:e3:5e:db:b8:4b:7e:4a:7c:9a:91:7c:6c:94:5d:bd:66:c5: 76:17:1a:b7:38:91:f8:93:36:4e:b1:6a:39:26:05:22:49:53: ac:21:3e:e7:70:77:2e:c8:1a:a3:94:41:2d:8f:b7:3d:6e:01: 1c:e0:46:9c:6a:4b:aa:61:0f:1c:e0:fe:e4:87:3e:74:33:8f: d0:8b:fd:22:81:90:b0:97:28:cd:c7:21:6e:e1:63:37:1a:91: 41:38:d4:1f:b5:be:28:36:4b:16:f9:09:2f:d5:98:cd:87:44: 70:8d:88:ca:0d:67:29:ef:51:37:ee:56:76:13:ce:c9:9a:ab: d5:af:3d:23:ad:57:8e:5e:e2:23:44:dc:74:f4:90:28:c3:e0: 2b:d9:38:1f:84:83:c8:53:33:5c:63:ec:03:b6:24:c8:08:3e: db:97:b0:b1:79:99:3e:2a:9f:5f:0c:5e:a3:0f:0d:ae:08:1f: de:2a:89:a4:b0:26:84:7c:42:31:a9:8b:a1:ec:6a:7e:fb:84: 9b:ea:79:66 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt6yTjIwpQhhOBY5/yn+mcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2UzZjQ4NTZkYWMyYTAwNWMzYTUyMzQ3MTE0ZGVjNDUz OTM0YjgwHhcNMjYwMTAxMTgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWRhNzcwYmMwODFlMWYzN2RhZDU3ZjBhYjc3MTI1OTc2ODFiNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApitq9C99MOkG1wCL094PpyJi5LpR asWfxeiKECqi8lksDfmQwR7ELhjWXCYLsjBQ/OOLlgz6yrr+HtCB40gJl4aZsB2r G7NHLmZepKWVLzdJlff1BMFvYXDCFHGUTCUDhjY6mTqx6681HsP/kDyYfOh5T6X4 eVT5hoArP1jVc8ZE2BW9l6AdlXbTeO0qoMLtraa0vSLb94SznWDTtcHY6fjf5qS3 dJ/8n0lnPnSkezXLOhkmqe0eq2m1Hg4Lilu3ktOPBALKtbe3G15hlnVMespNP/Bg JDdZnT6FKa1HmM5O2mly4FBfBD/Fgki6R+rA1X/hgUtJ5CjOwuUcx9/ZaQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFLHadwvAgeHzfa1X8Kt3Ell2gbdmMB8GA1UdIwQY MBaAFJQ+P0hW2sKgBcOlI0cRTexFOTS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYt MDI1M2QwNGZiOGZmLzEvc2RwM0M4Q0I0Zk45clZmd3EzY1NXWGFCdDJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYtMDI1M2QwNGZiOGZm LzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAssUDBAPV A1AwDQYJKoZIhvcNAQELBQADggEBABeLcj5KJOSRGTPaWMv6BMLxEwzJLclhty2s qnBUr3gHXZJ9lSlZgcK5D3owF44Ce5hhQYgazF7jXtu4S35KfJqRfGyUXb1mxXYX Grc4kfiTNk6xajkmBSJJU6whPudwdy7IGqOUQS2Ptz1uARzgRpxqS6phDxzg/uSH PnQzj9CL/SKBkLCXKM3HIW7hYzcakUE41B+1vig2Sxb5CS/VmM2HRHCNiMoNZynv UTfuVnYTzsmaq9WvPSOtV45e4iNE3HT0kCjD4CvZOB+Eg8hTM1xj7AO2JMgIPtuX sLF5mT4qn18MXqMPDa4IH94qiaSwJoR8QjGpi6Hsan77hJvqeWY= -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:30 2026 by rpki-client