This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/asN3gxb8XZb5KqWRogBq6WRHiqA.roa File: asN3gxb8XZb5KqWRogBq6WRHiqA.roa (raw, json) Hash identifier: Prp8LNadOYmrHAOgpcP5VxtRwnxwbuoePqoVUvrBJuc= Subject key identifier: 6A:C3:77:83:16:FC:5D:96:F9:2A:A5:91:A2:00:6A:E9:64:47:8A:A0 Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Certificate serial: 019B77C6E6988FC1FE8915D5AEB2F35DD99C Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/asN3gxb8XZb5KqWRogBq6WRHiqA.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59518 IP address blocks: 185.131.3.0/24 maxlen: 24 2a02:6f00:ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e6:98:8f:c1:fe:89:15:d5:ae:b2:f3:5d:d9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac3778316fc5d96f92aa591a2006ae964478aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:7a:67:70:4c:f1:dc:02:37:95:00:35:e3: 23:48:98:9a:80:52:19:15:69:13:4a:54:c8:cc:b8: 62:dd:76:13:3b:b6:d1:bc:41:7d:9e:2a:89:55:21: f4:4f:0b:36:87:1d:ea:16:b1:21:0a:18:3e:a2:26: fc:53:52:fb:41:ae:30:88:de:05:3e:2a:e7:a2:d9: 80:91:3e:94:1b:bd:34:34:25:a2:f5:2c:ca:da:fe: ea:7b:6a:30:80:ac:d1:ab:8c:45:a3:15:20:9f:93: 46:b3:04:d5:92:a7:75:ad:68:a9:54:b8:8f:6a:1a: e7:51:ac:34:95:17:04:9c:e3:c3:be:97:9b:20:11: b6:dc:8c:88:54:17:2c:f5:9d:2e:79:99:f9:f3:90: b4:02:de:6c:54:bc:12:b6:d2:49:81:22:f0:cc:6c: 13:53:e3:30:82:68:aa:39:8b:b3:5f:30:52:ff:62: 88:a8:c8:4e:bd:2f:cd:f2:fa:a0:67:79:a1:e9:bf: 06:6b:a5:f4:92:74:3a:f8:33:ab:79:c4:5e:f8:7c: ee:47:c2:0b:4f:4a:37:69:6f:76:45:0e:80:8d:92: 17:07:19:ef:1c:04:32:67:98:79:a8:56:c5:fe:05: e8:02:2d:3b:b0:36:c4:98:f4:e8:25:5f:56:f0:6b: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C3:77:83:16:FC:5D:96:F9:2A:A5:91:A2:00:6A:E9:64:47:8A:A0 X509v3 Authority Key Identifier: keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/asN3gxb8XZb5KqWRogBq6WRHiqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.3.0/24 IPv6: 2a02:6f00:ec0::/48 Signature Algorithm: sha256WithRSAEncryption 43:51:1d:72:58:9a:6b:c1:83:91:da:37:92:02:99:78:9c:67: ae:da:1a:40:80:63:61:e9:30:32:95:49:62:d2:c6:ac:bb:2b: ad:a9:42:16:ba:c1:4e:9f:1f:e6:3f:a0:cc:6f:16:a9:5f:8c: d7:5f:3a:0d:0e:fc:16:4a:b5:b0:cf:2c:b5:47:f7:62:93:70: 89:b6:0e:52:0a:fe:d1:68:48:8f:b0:c1:e3:01:98:ee:18:81: ef:2d:fa:de:af:4e:81:7b:67:d2:a9:b9:de:05:dc:ec:3d:b7: 02:4e:39:be:dc:53:42:a6:d7:6f:e7:4e:96:e4:94:40:f9:42: 17:c7:8c:6c:08:f5:7b:ab:48:de:39:db:80:22:53:a6:e2:33: 70:73:ba:2f:2c:18:4b:7c:dd:09:66:fc:04:82:18:2c:29:21: b6:bf:98:43:48:d2:60:ef:8e:c2:ff:b7:21:04:56:5f:82:d1: 24:1d:3b:23:ca:4a:68:60:92:ec:d1:63:c3:df:66:60:a7:f7: 9d:34:3e:ed:42:26:56:48:08:6a:df:d3:0e:14:23:68:f6:e0: 1c:23:b9:5e:04:57:ee:28:96:43:74:68:d0:c1:42:00:45:d7: 4e:23:19:1f:59:26:87:ae:30:9d:43:16:c7:19:72:0e:88:e8: 57:05:ad:0f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xuaYj8H+iRXVrrLzXdmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWJhMWZkZjZjNGRlMTkyYzFkM2VkZjhhODAwY2E1OTdm OTdkNjgwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWMzNzc4MzE2ZmM1ZDk2ZjkyYWE1OTFhMjAwNmFlOTY0NDc4YWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/J6Z3BM8dwCN5UANeMjSJiagFIZ FWkTSlTIzLhi3XYTO7bRvEF9niqJVSH0Tws2hx3qFrEhChg+oib8U1L7Qa4wiN4F PirnotmAkT6UG700NCWi9SzK2v7qe2owgKzRq4xFoxUgn5NGswTVkqd1rWipVLiP ahrnUaw0lRcEnOPDvpebIBG23IyIVBcs9Z0ueZn585C0At5sVLwSttJJgSLwzGwT U+MwgmiqOYuzXzBS/2KIqMhOvS/N8vqgZ3mh6b8Ga6X0knQ6+DOrecRe+HzuR8IL T0o3aW92RQ6AjZIXBxnvHAQyZ5h5qFbF/gXoAi07sDbEmPToJV9W8GtazQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGrDd4MW/F2W+SqlkaIAaulkR4qgMB8GA1UdIwQY MBaAFMTrof32xN4ZLB0+34qADKWX+X1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYt NTEyODU2MGRiZGZjLzEvYXNOM2d4YjhYWmI1S3FXUm9nQnE2V1JIaXFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYtNTEyODU2MGRiZGZj LzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuYMDMA8E AgACMAkDBwAqAm8ADsAwDQYJKoZIhvcNAQELBQADggEBAENRHXJYmmvBg5HaN5IC mXicZ67aGkCAY2HpMDKVSWLSxqy7K62pQha6wU6fH+Y/oMxvFqlfjNdfOg0O/BZK tbDPLLVH92KTcIm2DlIK/tFoSI+wweMBmO4Yge8t+t6vToF7Z9Kpud4F3Ow9twJO Ob7cU0Km12/nTpbklED5QhfHjGwI9XurSN4524AiU6biM3Bzui8sGEt83Qlm/ASC GCwpIba/mENI0mDvjsL/tyEEVl+C0SQdOyPKSmhgkuzRY8PfZmCn9500Pu1CJlZI CGrf0w4UI2j24BwjuV4EV+4olkN0aNDBQgBF104jGR9ZJoeuMJ1DFscZcg6I6FcF rQ8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:14 2026 by rpki-client