This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/3P0VzD1dKCF2UiQ8qkWCmQrm2Gw.roa
File: 3P0VzD1dKCF2UiQ8qkWCmQrm2Gw.roa (raw, json)
Hash identifier: gjopDXHjONuosWi6hy78AAJGtkv7Tbfx273i024Q360=
Subject key identifier: DC:FD:15:CC:3D:5D:28:21:76:52:24:3C:AA:45:82:99:0A:E6:D8:6C
Certificate issuer: /CN=cb56c6ade1e2a617e7c77557b95f06954d9390ba
Certificate serial: 019C0F73C187DB90A0915FE6DB39DA1696E2
Authority key identifier: CB:56:C6:AD:E1:E2:A6:17:E7:C7:75:57:B9:5F:06:95:4D:93:90:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1bGreHiphfnx3VXuV8GlU2TkLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/3P0VzD1dKCF2UiQ8qkWCmQrm2Gw.roa
Signing time: Fri 30 Jan 2026 15:09:30 +0000
ROA not before: Fri 30 Jan 2026 15:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42473
IP address blocks: 185.145.116.0/24 maxlen: 24
185.145.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1bGreHiphfnx3VXuV8GlU2TkLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0f:73:c1:87:db:90:a0:91:5f:e6:db:39:da:16:96:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb56c6ade1e2a617e7c77557b95f06954d9390ba
Validity
Not Before: Jan 30 15:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcfd15cc3d5d28217652243caa4582990ae6d86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:b0:98:de:13:0b:1e:0e:d0:12:09:4b:9c:
2e:b2:bb:b4:d0:0b:55:1d:b2:26:ae:8e:2b:30:60:
ee:bb:ce:3d:39:6d:e5:a4:99:1c:be:ef:09:bf:19:
f5:35:bc:47:bb:aa:3f:64:58:03:31:6f:6e:20:84:
04:c3:57:04:fc:fa:da:37:72:88:db:66:4b:80:69:
7f:9a:9a:0f:98:d5:93:80:3d:cf:7e:66:7e:d8:9f:
3a:96:ad:98:a1:88:de:77:9b:ac:d5:94:50:fb:13:
64:73:81:30:2a:9f:88:24:59:c7:ab:57:9a:03:88:
d0:03:15:ce:7d:e6:df:1e:20:86:1f:09:c1:81:d0:
68:09:ef:63:d0:57:17:a5:6a:21:e8:df:9c:be:27:
c5:99:06:a7:14:af:cf:8a:72:24:ad:ad:05:b2:1a:
f8:72:e3:40:97:0d:df:02:8a:12:33:95:50:f2:02:
bd:95:e0:e9:fa:90:31:d2:f4:90:02:7e:81:15:82:
8d:8d:53:28:4d:f2:b4:35:2f:2f:7a:3f:93:61:cb:
4d:bd:28:9d:5d:90:31:cd:44:0f:c8:9d:98:e0:e2:
b7:b6:0c:a7:e1:f5:28:68:3e:ad:eb:12:3e:e9:4b:
43:31:06:48:b6:61:ef:8f:33:25:46:23:ce:45:27:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:15:CC:3D:5D:28:21:76:52:24:3C:AA:45:82:99:0A:E6:D8:6C
X509v3 Authority Key Identifier:
keyid:CB:56:C6:AD:E1:E2:A6:17:E7:C7:75:57:B9:5F:06:95:4D:93:90:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1bGreHiphfnx3VXuV8GlU2TkLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/3P0VzD1dKCF2UiQ8qkWCmQrm2Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.116.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:6d:c4:0a:2b:a5:d8:8f:25:8d:3d:32:2d:3b:8a:a0:f9:37:
41:87:4d:2c:19:ce:7f:dd:1c:0e:42:d5:3c:cd:f2:d7:c3:e4:
26:e4:4e:c8:c4:b9:b1:23:c8:1e:e0:5b:ba:5c:a1:23:bb:58:
0e:03:08:1d:fa:a8:4d:bf:5b:2d:9c:6e:bb:33:06:14:f9:c3:
49:bc:d6:7b:c5:bf:4f:db:1e:46:83:71:e1:71:cc:3e:98:3c:
12:d9:9a:44:a7:20:24:93:6d:94:7d:d0:ed:08:31:d6:7b:71:
4c:6f:44:54:a5:8d:7a:5e:0e:44:ab:ff:f4:a1:30:e3:cb:cb:
f3:02:31:78:c9:4d:88:a6:48:66:6a:0e:5a:98:16:8d:b2:0e:
83:ef:ac:25:b0:be:19:b0:41:72:1c:6b:40:8e:c2:35:63:7b:
fa:75:0c:a9:ee:fc:3b:88:19:7b:f4:39:d0:ee:78:bf:2a:eb:
97:e1:eb:ca:23:0f:26:72:d2:03:e4:28:fc:08:d3:3b:25:78:
09:10:5e:a4:66:e1:b1:d5:8e:e1:8d:40:3b:66:b7:95:dd:43:
d3:57:4f:f0:9b:17:0e:54:bf:9c:19:19:13:1d:20:8e:45:bd:
a6:5e:ee:03:87:89:43:0f:76:bb:74:eb:a0:bb:8f:bc:de:5f:
17:74:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:11 2026 by rpki-client