This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/3N0dHv-xJkNoqDOEbaTM1qQvvJE.roa File: 3N0dHv-xJkNoqDOEbaTM1qQvvJE.roa (raw, json) Hash identifier: lBjhizr/A2yfBjgVd0NnugXlCtBd9MzIpDvSSSs3Z3U= Subject key identifier: DC:DD:1D:1E:FF:B1:26:43:68:A8:33:84:6D:A4:CC:D6:A4:2F:BC:91 Certificate issuer: /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14 Certificate serial: 019B7C12E2A3D4D250332F9D4E77A2666115 Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/3N0dHv-xJkNoqDOEbaTM1qQvvJE.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201625 IP address blocks: 185.68.164.0/22 maxlen: 32 2a05:1220::/29 maxlen: 48 2a05:1220::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e2:a3:d4:d2:50:33:2f:9d:4e:77:a2:66:61:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcdd1d1effb1264368a833846da4ccd6a42fbc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:43:88:04:66:1f:7d:31:90:0d:86:ab:4b: aa:7f:78:88:97:b3:08:4d:ec:b6:fe:a4:56:fd:c4: 5d:7f:f6:36:8f:c2:28:ae:e8:bf:c5:29:f2:0a:b5: ed:4a:40:78:df:87:c4:1c:b0:11:0c:00:83:c2:10: 1c:8e:7d:c4:ec:43:3d:fb:fe:a4:b3:5d:93:6c:b9: c3:e1:43:c4:16:db:a2:ad:a1:42:bf:bb:1f:f0:0b: 8b:c9:83:b5:3b:0a:d3:90:c6:5b:a4:07:a5:42:f0: e5:df:73:52:4a:a0:e7:10:1d:46:6c:65:47:95:cd: ef:ba:75:a8:67:82:68:43:cd:12:ce:0f:1a:0c:c3: 8b:e2:c5:c3:5f:88:97:12:6e:9f:19:f6:d3:71:2d: fa:ba:96:68:24:ab:68:e0:f8:c4:eb:bb:ea:1e:17: 26:6c:7a:04:c7:a6:e7:b5:00:ea:e6:93:74:2d:28: 79:b1:3f:71:45:65:6a:bf:0b:fa:2f:60:00:8f:22: 1c:ef:3e:42:37:cc:0d:1a:97:a8:35:f2:f2:da:56: 44:e1:89:61:be:ff:8d:29:42:dc:24:f9:9d:62:f5: 39:e6:c8:15:71:fb:25:a9:b1:d1:a5:11:4d:ff:f0: e7:9c:2f:ff:ef:fe:41:0f:f6:f4:05:6b:b7:1b:2f: 98:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DD:1D:1E:FF:B1:26:43:68:A8:33:84:6D:A4:CC:D6:A4:2F:BC:91 X509v3 Authority Key Identifier: keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/3N0dHv-xJkNoqDOEbaTM1qQvvJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.164.0/22 IPv6: 2a05:1220::/29 Signature Algorithm: sha256WithRSAEncryption 63:7e:fd:a8:c2:98:08:3f:8b:6b:1e:95:e6:19:29:fb:df:ea: de:80:59:a2:50:71:76:a9:24:99:eb:ad:d1:44:6d:a7:f9:17: 27:92:09:60:d2:ad:99:ff:f0:c5:1e:d7:7c:fa:e0:25:26:a8: 21:47:dc:f7:a1:4e:4c:80:83:b4:b4:73:6a:b7:35:29:ba:95: c8:c3:ad:65:5e:37:4e:25:0e:3e:16:f2:b0:91:49:79:d5:03: 2d:0b:8e:bc:30:8c:13:78:22:60:08:80:2c:a6:dc:6a:7b:69: df:f7:05:2f:19:a2:31:20:7e:8a:7c:8f:40:ce:3f:dc:68:f1: 0b:47:6e:ac:cf:b8:83:17:08:9b:76:5b:4a:ef:8c:73:2a:24: a2:aa:3e:d8:44:42:b9:db:44:e9:54:dc:b5:af:29:bc:96:0e: 3e:89:da:01:9d:e5:51:a8:7b:ed:b8:8b:1a:dd:17:ad:c6:9b: 85:f7:43:85:c1:00:9f:04:16:69:ed:e3:78:8b:92:d6:73:f7: 34:d1:67:f1:c9:05:d2:b2:8a:41:01:b3:62:bc:22:7a:f2:dd: a6:93:91:b4:c3:91:d6:10:74:ee:93:60:d3:e8:42:49:62:79: b3:e5:9f:eb:bf:3d:bc:94:3b:2c:98:86:32:9a:ab:63:0d:a2: e2:9e:5e:e9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EuKj1NJQMy+dTneiZmEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2IzZmIzYmVhOGNjOGUzNmUzZGE3ZDljNDcwNDliZmM2 ZmZiMTQwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2RkMWQxZWZmYjEyNjQzNjhhODMzODQ2ZGE0Y2NkNmE0MmZiYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D1DiARmH30xkA2Gq0uqf3iIl7MI Tey2/qRW/cRdf/Y2j8Iorui/xSnyCrXtSkB434fEHLARDACDwhAcjn3E7EM9+/6k s12TbLnD4UPEFtuiraFCv7sf8AuLyYO1OwrTkMZbpAelQvDl33NSSqDnEB1GbGVH lc3vunWoZ4JoQ80Szg8aDMOL4sXDX4iXEm6fGfbTcS36upZoJKto4PjE67vqHhcm bHoEx6bntQDq5pN0LSh5sT9xRWVqvwv6L2AAjyIc7z5CN8wNGpeoNfLy2lZE4Ylh vv+NKULcJPmdYvU55sgVcfslqbHRpRFN//DnnC//7/5BD/b0BWu3Gy+YqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNzdHR7/sSZDaKgzhG2kzNakL7yRMB8GA1UdIwQY MBaAFG7LP7O+qMyONuPafZxHBJv8b/sUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUt YTM3MGY0YmEyZDJiLzEvM04wZEh2LXhKa05vcURPRWJhVE0xcVF2dkpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUtYTM3MGY0YmEyZDJi LzEvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUSkMA0E AgACMAcDBQMqBRIgMA0GCSqGSIb3DQEBCwUAA4IBAQBjfv2owpgIP4trHpXmGSn7 3+regFmiUHF2qSSZ663RRG2n+Rcnkglg0q2Z//DFHtd8+uAlJqghR9z3oU5MgIO0 tHNqtzUpupXIw61lXjdOJQ4+FvKwkUl51QMtC468MIwTeCJgCIAsptxqe2nf9wUv GaIxIH6KfI9Azj/caPELR26sz7iDFwibdltK74xzKiSiqj7YREK520TpVNy1rym8 lg4+idoBneVRqHvtuIsa3RetxpuF90OFwQCfBBZp7eN4i5LWc/c00WfxyQXSsopB AbNivCJ68t2mk5G0w5HWEHTuk2DT6EJJYnmz5Z/rvz28lDssmIYymqtjDaLinl7p -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:55 2026 by rpki-client