This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/3Ahjdp__ozJo5M-VgaAWwmrVaPM.roa File: 3Ahjdp__ozJo5M-VgaAWwmrVaPM.roa (raw, json) Hash identifier: giC1iif4sPjQDIVLnsnSJ6c2IhGqS5e5kDwDkf1ROlk= Subject key identifier: DC:08:63:76:9F:FF:A3:32:68:E4:CF:95:81:A0:16:C2:6A:D5:68:F3 Certificate issuer: /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a Certificate serial: 019B79108CA3D4EAAF5905875D61F1ECE78A Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/3Ahjdp__ozJo5M-VgaAWwmrVaPM.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51172 IP address blocks: 185.150.40.0/24 maxlen: 24 185.150.41.0/24 maxlen: 24 185.150.43.0/24 maxlen: 24 195.8.218.0/23 maxlen: 23 2001:67c:218::/48 maxlen: 48 2a07:ab40::/48 maxlen: 48 2a07:ab41::/48 maxlen: 48 2a07:ab43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8c:a3:d4:ea:af:59:05:87:5d:61:f1:ec:e7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc0863769fffa33268e4cf9581a016c26ad568f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:ec:2d:45:e1:ed:c8:6d:ef:65:b4:c6:c3: 87:ac:d9:22:ef:ef:63:36:d8:55:da:57:98:1c:83: cc:64:f4:cf:6e:2a:e8:3a:98:67:c5:ed:57:1a:6b: cd:7a:2e:0a:16:50:c5:ce:0d:6c:74:dd:a2:04:c4: 40:23:9d:35:83:60:39:c3:4b:1b:67:72:15:a6:43: 0b:dd:61:ca:9e:34:56:42:5d:bd:b4:99:b7:83:7f: 18:10:ba:83:01:f5:56:c8:96:cf:4a:c4:a7:38:8b: ca:27:8d:22:c8:59:1e:9d:75:f0:25:2d:89:b4:4a: 27:85:9d:70:6b:e7:2b:86:1f:5e:ee:f1:f6:aa:4b: 6b:1d:4e:9e:7a:fd:a3:28:36:12:14:24:e8:66:02: ba:0f:26:b2:e3:d8:a9:0a:8a:ed:d7:ce:ae:de:6a: 9f:cb:12:fd:b7:ec:52:4d:a5:f2:06:81:85:bb:60: 20:99:6b:47:7b:e4:2d:6d:7f:a0:c9:32:aa:2a:52: e4:b5:1b:13:a8:85:b3:a6:f0:68:bc:23:30:a3:2d: e3:3b:60:de:d6:76:f6:bc:fb:e0:49:83:8a:80:5b: 83:11:80:da:18:71:51:1d:94:a7:75:23:b1:a4:b9: 00:7f:ba:6d:5b:d5:22:f1:49:c6:b5:54:32:c9:4a: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:08:63:76:9F:FF:A3:32:68:E4:CF:95:81:A0:16:C2:6A:D5:68:F3 X509v3 Authority Key Identifier: keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/3Ahjdp__ozJo5M-VgaAWwmrVaPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.40.0/23 185.150.43.0/24 195.8.218.0/23 IPv6: 2001:67c:218::/48 2a07:ab40::/48 2a07:ab41::/48 2a07:ab43::/48 Signature Algorithm: sha256WithRSAEncryption 4f:4f:01:bc:78:93:01:30:c7:20:1a:08:ae:ae:4f:59:0e:46: 32:73:fc:d1:5a:4a:44:ca:5c:41:3e:42:13:bf:29:18:bc:df: c3:e0:0d:1a:0c:29:d9:f4:e3:6f:2a:f1:4d:be:38:33:25:fc: 60:f6:ec:50:94:42:8e:84:a2:a4:98:52:47:72:c2:ce:ec:72: 13:88:bc:20:0c:d6:5a:94:17:30:6a:89:41:3d:16:e6:ec:73: c9:ac:b9:28:ce:27:8d:aa:16:99:8b:55:64:1c:c9:3c:7d:21: d6:4f:fa:c3:50:d2:93:86:31:35:6d:5c:b9:78:03:bd:04:cf: 2b:f2:09:8b:ed:ce:65:36:0f:df:71:f0:1e:e2:b2:26:d5:6c: 47:27:98:b2:f5:de:f1:0f:6c:88:7c:1d:da:6a:f4:47:19:e9: f1:f2:99:76:bc:e6:19:05:ef:9c:54:4e:b7:c0:ac:d2:c4:1e: 83:24:9e:5a:68:44:3d:38:08:10:c6:6c:fd:4d:f9:a5:b6:6e: 99:8d:42:a1:d2:9b:a4:7b:4c:3e:25:df:af:84:2d:78:00:94: a5:df:47:b9:38:a3:fa:96:2c:f4:80:a4:4c:c4:2b:ec:93:38: 85:5a:d0:d3:2c:2f:dc:dd:1c:af:e0:f9:56:64:8f:a5:5f:a5: d8:b8:aa:ff -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt5EIyj1OqvWQWHXWHx7OeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MDNjNDBmNzdiYzg4ZmFmMjA5ZjMxZDM2MWViYmFiNWNh ZWFjNGEwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzA4NjM3NjlmZmZhMzMyNjhlNGNmOTU4MWEwMTZjMjZhZDU2OGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWPsLUXh7cht72W0xsOHrNki7+9j NthV2leYHIPMZPTPbiroOphnxe1XGmvNei4KFlDFzg1sdN2iBMRAI501g2A5w0sb Z3IVpkML3WHKnjRWQl29tJm3g38YELqDAfVWyJbPSsSnOIvKJ40iyFkenXXwJS2J tEonhZ1wa+crhh9e7vH2qktrHU6eev2jKDYSFCToZgK6Dyay49ipCort186u3mqf yxL9t+xSTaXyBoGFu2AgmWtHe+QtbX+gyTKqKlLktRsTqIWzpvBovCMwoy3jO2De 1nb2vPvgSYOKgFuDEYDaGHFRHZSndSOxpLkAf7ptW9Ui8UnGtVQyyUpRDwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFNwIY3af/6MyaOTPlYGgFsJq1WjzMB8GA1UdIwQY MBaAFJgDxA93vIj68gnzHTYeu6tcrqxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYWQ0YTAtM2U5Yi00NzY0LThhMjQt ZjNhMjZmMDU1ZjRlLzEvM0FoamRwX19vekpvNU0tVmdhQVd3bXJWYVBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iYWQ0YTAtM2U5Yi00NzY0LThhMjQtZjNhMjZmMDU1ZjRl LzEvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAYBAIAATASAwQBuZYoAwQA uZYrAwQBwwjaMCoEAgACMCQDBwAgAQZ8AhgDBwAqB6tAAAADBwAqB6tBAAADBwAq B6tDAAAwDQYJKoZIhvcNAQELBQADggEBAE9PAbx4kwEwxyAaCK6uT1kORjJz/NFa SkTKXEE+QhO/KRi838PgDRoMKdn0428q8U2+ODMl/GD27FCUQo6EoqSYUkdyws7s chOIvCAM1lqUFzBqiUE9Fubsc8msuSjOJ42qFpmLVWQcyTx9IdZP+sNQ0pOGMTVt XLl4A70EzyvyCYvtzmU2D99x8B7isibVbEcnmLL13vEPbIh8Hdpq9EcZ6fHymXa8 5hkF75xUTrfArNLEHoMknlpoRD04CBDGbP1N+aW2bpmNQqHSm6R7TD4l36+ELXgA lKXfR7k4o/qWLPSApEzEK+yTOIVa0NMsL9zdHK/g+VZkj6Vfpdi4qv8= -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:17 2026 by rpki-client