This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/3crDSEyG7ySob_hijxcTMyYUys4.roa File: 3crDSEyG7ySob_hijxcTMyYUys4.roa (raw, json) Hash identifier: kLSowjdlSNlo/Kmz1F6vDoMD6uNefpXjhMVjlDyIcNM= Subject key identifier: DD:CA:C3:48:4C:86:EF:24:A8:6F:F8:62:8F:17:13:33:26:14:CA:CE Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45 Certificate serial: 019B7A5AEE59841DE9275D4E66111B2AE69E Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/3crDSEyG7ySob_hijxcTMyYUys4.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.236.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ee:59:84:1d:e9:27:5d:4e:66:11:1b:2a:e6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45 Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddcac3484c86ef24a86ff8628f1713332614cace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:92:7c:a0:4f:a1:43:53:f7:36:20:c8:7b: 85:2e:9b:93:f7:a8:df:0b:86:a9:d9:76:1f:7c:66: dd:4f:56:2a:e8:04:17:2a:44:db:2d:00:bd:54:5f: eb:70:9b:45:12:96:bb:49:66:00:7d:ad:ab:53:bc: b9:5a:c7:f0:79:be:9a:71:c6:47:71:77:b1:a8:2f: 7f:bb:4f:24:91:5f:b4:d7:01:8c:45:51:bf:64:53: 77:58:91:05:09:db:12:d3:d4:3b:d6:ab:66:d4:a5: da:1a:ce:09:97:6e:70:fc:34:fd:92:b0:67:79:9d: 4e:d5:6b:55:13:3a:2f:ff:e1:50:55:1b:1c:59:b0: 67:4b:be:43:98:88:19:a7:6b:1f:ae:71:eb:ff:62: 33:ce:44:38:67:bb:03:de:5c:0c:0e:ce:93:d1:26: cb:51:57:a3:f9:a4:c3:62:31:f3:fd:53:1f:bb:ef: 14:f5:39:fa:1b:83:14:57:3e:54:f5:e1:86:17:5f: ff:27:9c:aa:3b:97:a7:e9:28:58:8b:cb:79:4e:2a: 7e:8d:37:91:9d:74:04:a0:e8:b2:69:01:35:ac:94: 4d:0d:d2:a0:d3:42:1d:80:02:4d:e9:66:e7:23:51: de:ec:77:c6:d6:0e:26:4d:5f:82:20:e0:dc:dc:17: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CA:C3:48:4C:86:EF:24:A8:6F:F8:62:8F:17:13:33:26:14:CA:CE X509v3 Authority Key Identifier: keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/3crDSEyG7ySob_hijxcTMyYUys4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.18.0/24 Signature Algorithm: sha256WithRSAEncryption 88:38:c1:c8:ef:60:6d:f1:e6:d4:63:4c:e6:53:da:27:a3:a9: 07:15:3d:40:95:4c:cb:11:a8:71:60:5f:9a:5a:c9:99:fa:e6: 9e:19:6c:f0:13:b9:23:d8:a6:c1:87:78:71:2b:31:2d:94:64: 2c:4d:df:bc:3f:9d:80:32:d9:73:e7:4c:78:21:3f:50:18:88: 65:db:fa:61:22:30:15:79:6d:31:bb:35:b1:ef:c2:9d:0c:c4: c8:7b:9f:a3:2d:70:f5:2f:6e:a7:91:60:c7:60:c7:74:4d:6b: 6b:0e:33:6a:8b:a6:2b:78:bc:39:58:71:01:3f:bc:6e:7c:f3: 22:fc:1a:ec:30:3c:b7:44:c8:1b:95:db:71:d8:27:ea:0b:97: cc:0d:69:35:9d:66:3d:c3:44:1a:bf:0d:12:3d:9a:69:57:61: db:09:c9:01:f7:07:af:07:1c:34:b2:5f:71:31:8e:bd:75:7d: 80:80:d4:04:90:6a:a2:13:57:0c:9b:dc:4e:cc:f7:fd:51:d4: 89:11:77:11:fc:cd:58:98:d8:fd:84:c3:ff:98:a9:a0:06:d6: 4c:28:56:dc:fe:46:f0:a3:6e:75:3f:5c:be:fe:78:bb:d0:68: 25:ee:e2:61:a7:e9:9a:e2:43:ce:7e:cc:de:79:bb:f2:5e:e7: e4:4d:b5:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wu5ZhB3pJ11OZhEbKuaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzA0NWZjNDkxZDM5ZjUyZTcxNDViMTAwMGIzYjg2YzM3 ZGVkNDUwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGNhYzM0ODRjODZlZjI0YTg2ZmY4NjI4ZjE3MTMzMzI2MTRjYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHySfKBPoUNT9zYgyHuFLpuT96jf C4ap2XYffGbdT1Yq6AQXKkTbLQC9VF/rcJtFEpa7SWYAfa2rU7y5Wsfweb6accZH cXexqC9/u08kkV+01wGMRVG/ZFN3WJEFCdsS09Q71qtm1KXaGs4Jl25w/DT9krBn eZ1O1WtVEzov/+FQVRscWbBnS75DmIgZp2sfrnHr/2IzzkQ4Z7sD3lwMDs6T0SbL UVej+aTDYjHz/VMfu+8U9Tn6G4MUVz5U9eGGF1//J5yqO5en6ShYi8t5Tip+jTeR nXQEoOiyaQE1rJRNDdKg00IdgAJN6WbnI1He7HfG1g4mTV+CIODc3BdIVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN3Kw0hMhu8kqG/4Yo8XEzMmFMrOMB8GA1UdIwQY MBaAFH0wRfxJHTn1LnFFsQALO4bDfe1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRCRl9Fa2RPZlV1Y1VXeEFBczdoc045N1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xZjYzZGItYzk2My00NGJjLWEwMzkt OGFhYTZhOTBmZjk1LzEvM2NyRFNFeUc3eVNvYl9oaWp4Y1RNeVlVeXM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xZjYzZGItYzk2My00NGJjLWEwMzktOGFhYTZhOTBmZjk1 LzEvZlRCRl9Fa2RPZlV1Y1VXeEFBczdoc045N1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+wSMA0G CSqGSIb3DQEBCwUAA4IBAQCIOMHI72Bt8ebUY0zmU9ono6kHFT1AlUzLEahxYF+a WsmZ+uaeGWzwE7kj2KbBh3hxKzEtlGQsTd+8P52AMtlz50x4IT9QGIhl2/phIjAV eW0xuzWx78KdDMTIe5+jLXD1L26nkWDHYMd0TWtrDjNqi6YreLw5WHEBP7xufPMi /BrsMDy3RMgbldtx2CfqC5fMDWk1nWY9w0Qavw0SPZppV2HbCckB9wevBxw0sl9x MY69dX2AgNQEkGqiE1cMm9xOzPf9UdSJEXcR/M1YmNj9hMP/mKmgBtZMKFbc/kbw o251P1y+/ni70Ggl7uJhp+ma4kPOfszeebvyXufkTbWg -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:44 2026 by rpki-client