This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/3rjZfOqcfFgp1DYLD9jqNvMWGus.roa File: 3rjZfOqcfFgp1DYLD9jqNvMWGus.roa (raw, json) Hash identifier: fSrCbQZ8+s27wLebGDrZ4ZZ4/1z3UheqrVAoboGJ7Y8= Subject key identifier: DE:B8:D9:7C:EA:9C:7C:58:29:D4:36:0B:0F:D8:EA:36:F3:16:1A:EB Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88 Certificate serial: 019B7CED39ED1F2C8C7E754B5936C5D19495 Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/3rjZfOqcfFgp1DYLD9jqNvMWGus.roa Signing time: Fri 02 Jan 2026 04:18:00 +0000 ROA not before: Fri 02 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200486 IP address blocks: 185.156.204.0/22 maxlen: 24 185.156.205.0/24 maxlen: 24 194.5.100.0/22 maxlen: 24 2a07:a105::/32 maxlen: 32 2a07:a106::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:39:ed:1f:2c:8c:7e:75:4b:59:36:c5:d1:94:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88 Validity Not Before: Jan 2 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deb8d97cea9c7c5829d4360b0fd8ea36f3161aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:7a:06:6c:d3:83:7c:e3:a6:24:44:07:e8:fd: 1d:3f:43:ad:08:d4:7b:ef:23:e2:25:df:f7:a1:37: 0e:b5:68:7c:6c:3d:b5:2c:36:fb:4a:76:62:f9:31: a1:a4:7d:1a:cb:5a:03:63:cb:3d:6a:e8:bd:db:bc: 50:01:e8:c9:f2:0e:60:ca:3c:3a:fb:cd:dc:f7:8e: 7a:58:6c:b9:bf:b0:90:76:81:3a:1b:de:de:f9:39: 3c:60:9f:de:7b:47:29:4a:dd:cb:7a:97:c8:d1:29: 31:0d:0c:3b:4e:26:d4:02:4c:a2:fe:5b:39:24:5c: 66:a7:55:9b:ac:26:0a:ca:af:4e:87:27:20:46:55: 20:8d:58:f1:0c:4a:4c:d4:a8:61:bc:05:f0:78:6b: df:a5:1a:99:c2:17:49:7a:f7:42:5f:87:65:10:b8: 26:22:f8:49:6f:12:c9:cc:97:55:f3:8b:44:03:ef: 7c:c5:ac:e2:6f:60:49:6c:75:66:88:eb:be:3d:de: c2:58:21:66:89:8a:2c:b3:27:8d:34:1b:94:e5:5b: e0:3b:47:ce:e8:53:c4:0b:da:77:31:d2:a3:09:9b: 30:65:dc:a0:0c:63:09:58:79:d6:e9:61:f5:aa:e3: 48:ff:01:3d:8b:3e:ff:97:31:f8:a1:09:f1:29:bf: 72:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B8:D9:7C:EA:9C:7C:58:29:D4:36:0B:0F:D8:EA:36:F3:16:1A:EB X509v3 Authority Key Identifier: keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/3rjZfOqcfFgp1DYLD9jqNvMWGus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.204.0/22 194.5.100.0/22 IPv6: 2a07:a105::-2a07:a106:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 40:52:d9:59:2c:58:24:02:c2:09:b3:4a:b6:ae:cb:ff:ef:f0: f1:36:bf:52:be:82:40:7c:15:89:84:d4:00:df:a5:0b:6b:6d: 9d:27:0b:2b:53:84:d8:80:6d:12:86:70:03:1a:31:a9:60:6e: 09:fd:7a:a9:e6:ca:1f:f0:9c:11:89:36:77:09:48:1c:eb:8d: cd:cc:12:2a:cc:fb:b9:c3:57:a9:4e:b0:3f:cd:f6:48:8f:83: 66:0b:d2:5a:d2:32:d5:fe:2d:19:81:f8:c7:10:2d:55:e7:23: 26:b5:89:5e:d5:3a:de:5c:65:89:e6:09:c8:b0:3f:b5:cc:98: 60:c5:6f:48:2d:f9:67:98:6e:0d:b8:d6:b6:f6:10:9f:29:72: be:21:97:9d:1d:c3:a4:c5:55:e0:4e:fc:1e:34:fd:6c:3d:12: c1:68:e0:8d:56:a0:74:26:94:df:4d:05:41:82:17:6d:b1:41: db:82:e2:00:c2:91:8e:dc:f7:05:01:2f:02:3a:33:48:8d:87: 68:a6:07:db:95:55:7d:80:54:48:0f:06:eb:e2:8b:a0:a8:07: 62:7d:2f:45:7d:14:cd:d4:45:64:96:b9:6e:13:33:38:e0:8e: f1:38:c8:f0:5e:65:31:9d:13:37:54:0c:04:6f:4d:2a:9a:48: 13:5b:35:f7 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt87TntHyyMfnVLWTbF0ZSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjI1OGNlMjAzZTA0YTMzZjRlOTA2NTExNTNiMjU5Y2Zm YTNlODgwHhcNMjYwMTAyMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWI4ZDk3Y2VhOWM3YzU4MjlkNDM2MGIwZmQ4ZWEzNmYzMTYxYWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+3oGbNODfOOmJEQH6P0dP0OtCNR7 7yPiJd/3oTcOtWh8bD21LDb7SnZi+TGhpH0ay1oDY8s9aui927xQAejJ8g5gyjw6 +83c9456WGy5v7CQdoE6G97e+Tk8YJ/ee0cpSt3LepfI0SkxDQw7TibUAkyi/ls5 JFxmp1WbrCYKyq9OhycgRlUgjVjxDEpM1KhhvAXweGvfpRqZwhdJevdCX4dlELgm IvhJbxLJzJdV84tEA+98xazib2BJbHVmiOu+Pd7CWCFmiYossyeNNBuU5VvgO0fO 6FPEC9p3MdKjCZswZdygDGMJWHnW6WH1quNI/wE9iz7/lzH4oQnxKb9yRQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFN642XzqnHxYKdQ2Cw/Y6jbzFhrrMB8GA1UdIwQY MBaAFMjyWM4gPgSjP06QZRFTslnP+j6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBKWXppQS1CS01fVHBCbEVWT3lXY182UG9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQt NmM4OGJmYTdiNTVjLzEvM3JqWmZPcWNmRmdwMURZTEQ5anFOdk1XR3VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQtNmM4OGJmYTdiNTVj LzEveVBKWXppQS1CS01fVHBCbEVWT3lXY182UG9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuZzMAwQC wgVkMBYEAgACMBAwDgMFACoHoQUDBQAqB6EGMA0GCSqGSIb3DQEBCwUAA4IBAQBA UtlZLFgkAsIJs0q2rsv/7/DxNr9SvoJAfBWJhNQA36ULa22dJwsrU4TYgG0ShnAD GjGpYG4J/Xqp5sof8JwRiTZ3CUgc643NzBIqzPu5w1epTrA/zfZIj4NmC9Ja0jLV /i0ZgfjHEC1V5yMmtYle1TreXGWJ5gnIsD+1zJhgxW9ILflnmG4NuNa29hCfKXK+ IZedHcOkxVXgTvweNP1sPRLBaOCNVqB0JpTfTQVBghdtsUHbguIAwpGO3PcFAS8C OjNIjYdopgfblVV9gFRIDwbr4ougqAdifS9FfRTN1EVklrluEzM44I7xOMjwXmUx nRM3VAwEb00qmkgTWzX3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:15 2026 by rpki-client