This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3PfYSD7qDZwyyLMhgUesagYvKSg.roa File: 3PfYSD7qDZwyyLMhgUesagYvKSg.roa (raw, json) Hash identifier: BTfpcNVgNtHbcskJ4FOhTnsPeUu5qaRvV6+ktQSaBhE= Subject key identifier: DC:F7:D8:48:3E:EA:0D:9C:32:C8:B3:21:81:47:AC:6A:06:2F:29:28 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2388209D3643A6B6223C58F88F86F Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3PfYSD7qDZwyyLMhgUesagYvKSg.roa Signing time: Thu 01 Jan 2026 08:17:35 +0000 ROA not before: Thu 01 Jan 2026 08:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 812 IP address blocks: 195.40.110.0/23 maxlen: 24 195.172.114.0/23 maxlen: 24 195.172.116.0/23 maxlen: 24 195.172.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:38:82:09:d3:64:3a:6b:62:23:c5:8f:88:f8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcf7d8483eea0d9c32c8b3218147ac6a062f2928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:c3:02:1b:33:1b:f3:a5:b1:31:a2:5a:33: a5:ca:1d:60:0d:66:44:5c:54:b3:db:5a:9c:5f:b4: 9d:0a:5a:3b:1b:a8:94:95:6d:8a:83:80:31:14:48: 93:d0:d1:6e:70:9c:2f:37:34:19:eb:d2:5f:4e:e1: 1e:58:42:cc:c9:a9:0c:56:97:8a:61:0a:8e:1b:e5: ed:52:88:86:3f:7f:2e:2f:b4:79:b3:40:5c:88:3e: 76:99:ef:6e:68:18:36:cf:6d:02:30:8f:29:38:cc: 64:02:27:34:2e:b8:11:17:f9:a7:15:71:a1:2a:9b: b4:23:07:c9:c3:21:d5:05:20:6c:cf:87:3c:0e:a3: ba:66:52:c1:77:ec:3f:40:c0:61:ad:e1:8b:f6:96: 5e:3c:0c:2d:ea:ba:80:c0:f5:fe:12:48:19:35:32: 74:ed:9a:93:52:a6:c1:85:16:a6:5e:8e:c0:d4:6a: 21:ab:e3:23:89:66:f8:8f:ed:03:bd:b9:cb:55:83: 40:f4:9d:8c:ec:89:91:d4:f4:2c:d2:74:91:52:31: 18:f1:f7:70:dd:d4:98:ac:43:6f:1e:2e:cc:21:3d: 73:97:1b:80:86:cc:1f:72:28:3a:69:fe:bd:d3:b3: 13:53:72:fc:35:80:66:8e:f8:0a:c6:4a:d7:a3:42: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F7:D8:48:3E:EA:0D:9C:32:C8:B3:21:81:47:AC:6A:06:2F:29:28 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3PfYSD7qDZwyyLMhgUesagYvKSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.110.0/23 195.172.114.0-195.172.117.255 195.172.196.0/23 Signature Algorithm: sha256WithRSAEncryption 80:8b:bc:f5:6c:50:6e:eb:b6:ef:ce:ab:9d:e1:32:a2:a6:f4: a5:92:c6:28:56:02:70:e6:67:6a:39:16:f3:4d:6c:10:06:16: 91:06:d0:fa:90:93:a0:fc:65:95:ca:28:9e:49:b7:32:b3:eb: cb:30:e3:f9:87:21:57:26:48:41:fe:25:7c:48:2e:f8:da:eb: ff:27:f6:39:0e:f1:0e:3b:08:b9:7a:59:e1:d6:80:9f:6e:64: 41:47:21:0c:07:e0:c7:a7:5d:54:bf:5c:01:c4:b9:23:e4:67: 71:13:0d:a2:56:27:ca:35:4b:d5:f6:59:90:e5:a6:90:62:1e: 08:58:29:ed:91:77:ae:2d:c7:a7:6f:ed:53:f3:78:2f:32:bb: cd:92:56:41:82:f2:a1:07:b5:5c:6f:60:89:79:c0:3e:25:dd: 1e:72:81:8c:e5:74:93:aa:36:fc:d3:08:ca:84:35:92:0b:76: ec:24:a2:18:d8:60:f4:57:76:99:d8:3a:96:aa:f7:a0:48:3a: 33:05:27:ce:54:42:e8:7f:2e:00:cc:68:b0:48:ad:52:f9:88: 94:31:fb:b2:23:ff:cc:b0:e7:d7:66:a0:96:fc:b4:35:47:46: d0:ba:b8:f6:a2:9a:06:f6:f9:ea:71:ba:97:32:e1:d1:95:70: 1c:4e:c8:98 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4ojiCCdNkOmtiI8WPiPhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2Y3ZDg0ODNlZWEwZDljMzJjOGIzMjE4MTQ3YWM2YTA2MmYyOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUvDAhszG/OlsTGiWjOlyh1gDWZE XFSz21qcX7SdClo7G6iUlW2Kg4AxFEiT0NFucJwvNzQZ69JfTuEeWELMyakMVpeK YQqOG+XtUoiGP38uL7R5s0BciD52me9uaBg2z20CMI8pOMxkAic0LrgRF/mnFXGh Kpu0IwfJwyHVBSBsz4c8DqO6ZlLBd+w/QMBhreGL9pZePAwt6rqAwPX+EkgZNTJ0 7ZqTUqbBhRamXo7A1Gohq+MjiWb4j+0DvbnLVYNA9J2M7ImR1PQs0nSRUjEY8fdw 3dSYrENvHi7MIT1zlxuAhswfcig6af6907MTU3L8NYBmjvgKxkrXo0KGTQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNz32Eg+6g2cMsizIYFHrGoGLykoMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvM1BmWVNEN3FEWnd5eUxNaGdVZXNhZ1l2S1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBwyhuMAwD BAHDrHIDBAHDrHQDBAHDrMQwDQYJKoZIhvcNAQELBQADggEBAICLvPVsUG7rtu/O q53hMqKm9KWSxihWAnDmZ2o5FvNNbBAGFpEG0PqQk6D8ZZXKKJ5JtzKz68sw4/mH IVcmSEH+JXxILvja6/8n9jkO8Q47CLl6WeHWgJ9uZEFHIQwH4MenXVS/XAHEuSPk Z3ETDaJWJ8o1S9X2WZDlppBiHghYKe2Rd64tx6dv7VPzeC8yu82SVkGC8qEHtVxv YIl5wD4l3R5ygYzldJOqNvzTCMqENZILduwkohjYYPRXdpnYOpaq96BIOjMFJ85U Quh/LgDMaLBIrVL5iJQx+7Ij/8yw59dmoJb8tDVHRtC6uPaimgb2+epxupcy4dGV cBxOyJg= -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:38 2026 by rpki-client