This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa File: 3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa (raw, json) Hash identifier: KwhZKW2lEh+jd+kB9cN/6tlHTLzCCYETic1USeu5gbw= Subject key identifier: DD:92:DC:F0:FB:55:A3:39:BE:78:D8:06:A0:04:0E:21:AF:E8:54:4F Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c Certificate serial: 019B7BA42E765C86787F35D0871FBFC24EFC Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa Signing time: Thu 01 Jan 2026 22:18:35 +0000 ROA not before: Thu 01 Jan 2026 22:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50180 IP address blocks: 195.189.166.0/23 maxlen: 23 2001:67c:2ff0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:2e:76:5c:86:78:7f:35:d0:87:1f:bf:c2:4e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c Validity Not Before: Jan 1 22:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd92dcf0fb55a339be78d806a0040e21afe8544f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:01:00:41:4c:38:84:8e:4c:6a:2e:80:c4: 9d:a3:df:a7:36:d5:54:41:21:70:ad:6d:44:b3:35: 2b:03:d8:d7:01:85:eb:7e:05:0e:2c:bf:17:01:89: 10:5d:75:c5:3c:2f:bf:3d:8c:03:82:24:c2:be:57: 7f:c7:c9:74:5d:fe:a8:31:1a:4f:36:df:52:ca:d1: 71:2e:33:a5:16:f5:6e:d0:01:a2:2d:60:be:d8:8d: ff:75:19:09:c8:be:78:e9:24:72:fc:de:95:25:a1: d1:a2:7a:f8:4e:0c:e2:09:c2:c1:08:ac:f2:03:17: a5:60:72:2e:d1:e4:89:4b:59:34:5e:05:ea:05:b2: c3:d7:c6:ae:59:f5:55:a0:07:5d:a6:d1:2c:e9:c7: b0:d6:06:b3:b4:a3:d9:b3:77:f2:64:5b:6e:cb:1f: 9c:81:67:82:04:ce:df:34:d2:df:dc:c5:cb:36:51: c0:0c:be:ec:0b:54:d4:c9:66:28:94:30:64:74:74: 6e:04:69:e5:e3:54:61:b7:d5:ef:24:1a:b5:a9:2d: 4e:ff:2c:ba:58:42:95:2e:99:fa:57:e1:f6:6b:c1: 1f:ae:c5:90:03:f8:4b:30:60:60:3c:08:6d:73:e2: c8:66:4a:9e:0b:7b:b1:64:08:9d:42:52:9b:cd:c3: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:92:DC:F0:FB:55:A3:39:BE:78:D8:06:A0:04:0E:21:AF:E8:54:4F X509v3 Authority Key Identifier: keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.166.0/23 IPv6: 2001:67c:2ff0::/48 Signature Algorithm: sha256WithRSAEncryption 82:b1:69:84:98:6c:8d:f8:ef:d5:a4:0c:b2:01:5b:ee:d6:75: 33:95:35:88:04:bc:c7:e0:36:7a:40:2c:c9:a0:68:6a:9d:18: 92:02:db:fd:40:1f:a3:0d:81:1f:3a:38:72:ad:b0:c4:a2:27: de:13:85:80:c8:46:91:4e:4f:d1:68:a2:71:6f:1c:be:81:26: 00:30:04:f4:7f:1d:f3:78:2a:d7:c9:99:f5:cc:ad:80:d3:ea: e9:83:dc:16:97:fe:aa:02:48:9e:f1:ac:15:b9:95:56:d4:e7: 0c:fe:cd:7c:a5:9f:7a:7d:c1:b3:bb:6b:63:03:80:eb:c1:f7: c9:01:e5:6f:ca:5c:71:47:db:30:b9:a8:5a:c6:ad:da:d2:0b: dc:68:6f:14:36:dc:2a:4f:24:5c:dc:87:1c:53:09:b9:10:b3: 9b:85:36:c7:15:83:b1:c0:91:93:e2:1b:cf:3e:8c:b4:b5:3a: 27:76:87:e6:c4:55:68:a2:1a:52:a9:2b:71:d3:e9:ce:87:02: 8f:94:86:f4:11:76:a0:b9:79:d7:89:fe:99:00:f7:51:01:b5: 60:17:4a:74:a4:79:bc:20:10:42:49:9b:19:b1:7f:1b:f5:8d: 40:c2:4b:6c:eb:83:32:a9:1a:9c:cd:5f:72:1a:a5:20:21:8b: 56:9a:d4:7e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pC52XIZ4fzXQhx+/wk78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmUxMzBmNmI2YmRmNmQzOTI4MGUzNzVkZjM0NGU2ZTBh MzRiM2MwHhcNMjYwMTAxMjIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDkyZGNmMGZiNTVhMzM5YmU3OGQ4MDZhMDA0MGUyMWFmZTg1NDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS0BAEFMOISOTGougMSdo9+nNtVU QSFwrW1EszUrA9jXAYXrfgUOLL8XAYkQXXXFPC+/PYwDgiTCvld/x8l0Xf6oMRpP Nt9SytFxLjOlFvVu0AGiLWC+2I3/dRkJyL546SRy/N6VJaHRonr4TgziCcLBCKzy AxelYHIu0eSJS1k0XgXqBbLD18auWfVVoAddptEs6cew1gaztKPZs3fyZFtuyx+c gWeCBM7fNNLf3MXLNlHADL7sC1TUyWYolDBkdHRuBGnl41Rht9XvJBq1qS1O/yy6 WEKVLpn6V+H2a8EfrsWQA/hLMGBgPAhtc+LIZkqeC3uxZAidQlKbzcOAUQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFN2S3PD7VaM5vnjYBqAEDiGv6FRPMB8GA1UdIwQY MBaAFNguEw9ra99tOSgON13zRObgo0s8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAt MjM4ZTBiN2FlMjg0LzEvM1pMYzhQdFZvem0tZU5nR29BUU9JYV9vVkU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yZGFmMDQtNGY3Ni00MzMzLWFiZjAtMjM4ZTBiN2FlMjg0 LzEvMkM0VEQydHIzMjA1S0E0M1hmTkU1dUNqU3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw72mMA8E AgACMAkDBwAgAQZ8L/AwDQYJKoZIhvcNAQELBQADggEBAIKxaYSYbI3479WkDLIB W+7WdTOVNYgEvMfgNnpALMmgaGqdGJIC2/1AH6MNgR86OHKtsMSiJ94ThYDIRpFO T9FoonFvHL6BJgAwBPR/HfN4KtfJmfXMrYDT6umD3BaX/qoCSJ7xrBW5lVbU5wz+ zXyln3p9wbO7a2MDgOvB98kB5W/KXHFH2zC5qFrGrdrSC9xobxQ23CpPJFzchxxT CbkQs5uFNscVg7HAkZPiG88+jLS1Oid2h+bEVWiiGlKpK3HT6c6HAo+UhvQRdqC5 edeJ/pkA91EBtWAXSnSkebwgEEJJmxmxfxv1jUDCS2zrgzKpGpzNX3IapSAhi1aa 1H4= -----END CERTIFICATE-----Generated at Tue Feb 10 04:13:59 2026 by rpki-client