This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/1-3mY9-R8kRa3wZ6Cj0MIMsh3kgE.roa File: 1-3mY9-R8kRa3wZ6Cj0MIMsh3kgE.roa (raw, json) Hash identifier: gG9S5wKDCCNKZAQDOd8EoEv6jBceHZbkVqDdrowsvjM= Subject key identifier: FB:79:98:F7:E4:7C:91:16:B7:C1:9E:82:8F:43:08:32:C8:77:92:01 Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd Certificate serial: 019B7759674005EF7C098CE181A365B85785 Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/1-3mY9-R8kRa3wZ6Cj0MIMsh3kgE.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25264 IP address blocks: 109.206.252.0/22 maxlen: 22 109.206.252.0/24 maxlen: 24 109.206.253.0/24 maxlen: 24 109.206.254.0/24 maxlen: 24 109.206.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:67:40:05:ef:7c:09:8c:e1:81:a3:65:b8:57:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb7998f7e47c9116b7c19e828f430832c8779201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:15:1a:52:84:b4:0a:d9:e4:30:d0:5c:3d: e7:13:b2:c8:93:b7:29:5f:14:b4:a9:b6:48:7e:9f: f3:9d:a6:91:08:3c:67:85:fe:10:f7:15:36:31:74: 38:6a:d9:fc:84:a5:78:b4:87:d1:8e:80:4c:31:4e: dd:27:c2:ad:b7:7f:70:34:12:1e:db:68:aa:9e:a4: f4:71:4b:89:7a:b0:35:a9:8a:02:da:69:a7:8e:e0: 1e:86:a0:ee:ca:89:1b:e5:d6:5f:f7:ce:8b:38:26: ef:ad:db:1a:e3:e9:47:56:a5:6a:d0:33:77:72:35: 92:39:35:91:17:54:34:fc:d0:30:f8:bd:de:56:d9: 53:d3:60:8d:74:bc:3a:ec:89:51:3a:8e:1a:74:f5: 7c:5f:e8:24:38:4a:a9:be:1b:12:b4:50:2d:9c:4f: 64:00:23:0b:a4:e0:4a:28:34:27:8d:8e:7f:28:45: e0:22:92:3b:fb:a9:ab:72:f6:b4:5b:ac:9e:6f:33: 74:a8:4c:9c:99:06:6c:5b:b2:cc:f8:56:a4:8c:d3: 1e:23:f1:81:47:f2:c3:4e:34:26:4b:84:d9:6c:e8: d4:67:2c:b1:36:fa:c3:05:f4:d7:2c:27:03:30:4a: 63:22:1b:cd:cc:d1:d2:c0:ea:d3:04:d6:d0:36:a8: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:79:98:F7:E4:7C:91:16:B7:C1:9E:82:8F:43:08:32:C8:77:92:01 X509v3 Authority Key Identifier: keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/1-3mY9-R8kRa3wZ6Cj0MIMsh3kgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.206.252.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:46:dc:fb:9e:2a:9f:fc:e1:1a:ef:ed:09:2e:3d:a1:dc:17: 2f:2b:23:3a:93:f7:e4:25:fd:3e:e2:75:0c:f9:b4:50:61:24: 4a:b1:4c:b9:63:34:c7:a9:89:06:71:3b:3b:fe:6a:e7:f7:7a: 02:70:ff:60:fc:59:7f:bc:cc:5a:d2:f8:71:fc:4d:33:a4:26: ab:56:4f:1e:34:3e:f0:a4:a3:a5:4c:a7:63:06:80:f4:f0:cb: e1:a4:d3:94:2d:73:68:2e:88:b5:f5:18:39:4a:3a:0d:6d:c0: fc:d3:b0:ef:8a:cd:d6:96:58:05:53:3a:ed:0d:02:13:54:6a: 20:46:77:a2:bf:c2:10:b1:63:b3:76:3b:9b:96:fb:ea:ca:fa: 1b:cc:3c:57:c0:9b:81:33:0b:db:e5:c1:52:fe:4f:92:20:75: a2:6c:0b:1c:27:ec:8c:54:66:18:fc:f2:e8:20:99:ef:1f:f3: 52:38:70:40:6a:dd:6f:75:bd:3c:6f:40:dc:f1:36:dc:27:7d: 8b:32:a3:51:fd:78:65:f6:f0:ff:01:81:d9:95:72:10:0c:81: 2e:32:29:4b:3b:49:f6:5b:ac:ff:e2:7b:b8:66:1d:c5:65:54: 2d:97:b1:71:39:21:23:91:27:17:e7:47:40:fe:bd:2b:b2:72: af:1b:89:9a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WWdABe98CYzhgaNluFeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2M2M2NiZDkzNDgyNWU1NWJiZTM1OWNiNzMwNjg2OWVk NDUxY2QwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjc5OThmN2U0N2M5MTE2YjdjMTllODI4ZjQzMDgzMmM4Nzc5MjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztoVGlKEtArZ5DDQXD3nE7LIk7cp XxS0qbZIfp/znaaRCDxnhf4Q9xU2MXQ4atn8hKV4tIfRjoBMMU7dJ8Ktt39wNBIe 22iqnqT0cUuJerA1qYoC2mmnjuAehqDuyokb5dZf986LOCbvrdsa4+lHVqVq0DN3 cjWSOTWRF1Q0/NAw+L3eVtlT02CNdLw67IlROo4adPV8X+gkOEqpvhsStFAtnE9k ACMLpOBKKDQnjY5/KEXgIpI7+6mrcva0W6yebzN0qEycmQZsW7LM+FakjNMeI/GB R/LDTjQmS4TZbOjUZyyxNvrDBfTXLCcDMEpjIhvNzNHSwOrTBNbQNqhB5QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPt5mPfkfJEWt8Gego9DCDLId5IBMB8GA1UdIwQY MBaAFDo8Y8vZNIJeVbvjWctzBoae1FHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2p4ank5azBnbDVWdS1OWnkzTUdocDdVVWMwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zNzcwZjgtNjJmZS00MGE1LTk0YjUt NTQ4ZTdlNGIxMDJiLzEvMS0zbVk5LVI4a1JhM3daNkNqME1JTXNoM2tnRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODIvMzc3MGY4LTYyZmUtNDBhNS05NGI1LTU0OGU3ZTRiMTAy Yi8xL09qeGp5OWswZ2w1VnUtTlp5M01HaHA3VVVjMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm3O/DAN BgkqhkiG9w0BAQsFAAOCAQEAakbc+54qn/zhGu/tCS49odwXLysjOpP35CX9PuJ1 DPm0UGEkSrFMuWM0x6mJBnE7O/5q5/d6AnD/YPxZf7zMWtL4cfxNM6Qmq1ZPHjQ+ 8KSjpUynYwaA9PDL4aTTlC1zaC6ItfUYOUo6DW3A/NOw74rN1pZYBVM67Q0CE1Rq IEZ3or/CELFjs3Y7m5b76sr6G8w8V8CbgTML2+XBUv5PkiB1omwLHCfsjFRmGPzy 6CCZ7x/zUjhwQGrdb3W9PG9A3PE23Cd9izKjUf14Zfbw/wGB2ZVyEAyBLjIpSztJ 9lus/+J7uGYdxWVULZexcTkhI5EnF+dHQP69K7JyrxuJmg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:10 2026 by rpki-client