This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/3V9wiUwvfamuLVADXY0C4Wev7bI.roa File: 3V9wiUwvfamuLVADXY0C4Wev7bI.roa (raw, json) Hash identifier: l+RFmyKJ2p1Pn5PCTCrdi1at5JyBh4SapJ5re9I2vYw= Subject key identifier: DD:5F:70:89:4C:2F:7D:A9:AE:2D:50:03:5D:8D:02:E1:67:AF:ED:B2 Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693 Certificate serial: 019B7B363515A6E6B3638C1B922F7C7FE208 Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/3V9wiUwvfamuLVADXY0C4Wev7bI.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56532 IP address blocks: 185.103.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:35:15:a6:e6:b3:63:8c:1b:92:2f:7c:7f:e2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693 Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd5f70894c2f7da9ae2d50035d8d02e167afedb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:f7:e4:2c:2f:9c:8e:8a:c0:93:64:40:bc: 90:e8:51:c0:a8:b7:ca:fa:b2:97:ad:d3:59:b5:f8: 43:ea:d0:95:9c:bb:12:d0:fc:f6:66:99:6a:96:92: e5:03:29:bd:08:b9:8f:fa:9b:4a:f9:35:fd:45:eb: c7:ce:a4:74:92:e2:52:0d:b0:1a:b5:42:de:74:cf: ab:3a:5c:02:50:c3:07:01:7b:8d:29:c3:54:7a:bd: 20:01:69:16:fc:ee:9c:02:2a:e7:4f:73:93:e7:17: be:63:ee:83:0b:ac:29:39:7b:04:74:fc:fc:8f:89: 6a:f2:7c:02:3d:86:fc:2a:2e:1b:c0:e1:9e:8c:72: 0e:01:3a:f9:f9:70:94:31:c1:41:bf:ae:37:bf:56: 49:84:ea:be:10:6b:5e:31:d8:88:33:ec:0b:1f:7a: 8d:f3:ab:b9:fd:04:c7:a2:8b:bf:07:a4:1d:f8:f1: be:30:e8:01:77:c1:a9:6d:8c:81:88:f5:bf:76:95: 9c:b3:15:de:ae:5c:7f:4e:e1:f8:23:cb:58:a8:0a: df:86:c7:40:ed:39:fc:26:68:38:86:63:19:07:a3: c9:f2:77:74:2e:b6:a2:1a:1b:41:78:39:ba:77:e2: 3b:6b:a2:f4:20:b2:eb:94:0d:0f:ea:9b:a2:09:73: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5F:70:89:4C:2F:7D:A9:AE:2D:50:03:5D:8D:02:E1:67:AF:ED:B2 X509v3 Authority Key Identifier: keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/3V9wiUwvfamuLVADXY0C4Wev7bI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.232.0/22 Signature Algorithm: sha256WithRSAEncryption 95:66:ec:a0:8d:8b:69:6a:15:de:a9:9d:01:05:7a:24:e0:aa: c2:1a:57:98:c7:28:e2:28:53:f1:21:d9:34:bf:ed:06:45:d6: a7:f4:86:9a:ed:98:fc:16:76:9b:d6:95:c8:a2:cb:66:04:40: d4:39:e1:38:1b:2e:a0:e3:18:e2:a6:71:c7:2f:8b:04:b2:50: 55:52:af:04:dc:a0:43:d1:30:db:fe:46:0a:6c:35:b6:8a:27: 1d:83:b3:8a:4d:19:bb:9b:70:90:2e:a8:f0:8f:10:54:b5:83: e5:c5:e8:10:f2:2d:da:e8:a7:eb:b2:41:3d:00:bd:a5:78:3a: 59:ed:e0:2f:1d:f6:99:90:0d:47:a9:42:d1:1b:33:2f:ef:2b: 15:88:af:5c:37:eb:f1:bb:b6:4e:1f:c1:a5:eb:3c:ec:a7:f5: b0:af:85:06:a5:9f:04:bb:4d:83:c9:0d:c4:9c:35:14:5b:ca: a5:b3:e9:de:4c:55:42:6e:57:75:02:fb:c4:21:50:ec:3f:cb: 5c:ff:9d:41:27:b7:b4:b0:fd:7a:12:cc:e9:60:17:16:e4:e8: d8:c4:e9:0a:83:48:36:87:77:b4:09:6c:95:26:96:6f:9b:00: 11:53:eb:05:16:fd:3d:ba:f4:0f:47:6b:bf:6e:06:55:0d:97: 38:8a:8e:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NjUVpuazY4wbki98f+IIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZDY1ZmEzM2NlNWIzZjdiZGI0OTdlNWZjYTUwOWQ3ZmMw M2M2OTMwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDVmNzA4OTRjMmY3ZGE5YWUyZDUwMDM1ZDhkMDJlMTY3YWZlZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvz35CwvnI6KwJNkQLyQ6FHAqLfK +rKXrdNZtfhD6tCVnLsS0Pz2ZplqlpLlAym9CLmP+ptK+TX9RevHzqR0kuJSDbAa tULedM+rOlwCUMMHAXuNKcNUer0gAWkW/O6cAirnT3OT5xe+Y+6DC6wpOXsEdPz8 j4lq8nwCPYb8Ki4bwOGejHIOATr5+XCUMcFBv643v1ZJhOq+EGteMdiIM+wLH3qN 86u5/QTHoou/B6Qd+PG+MOgBd8GpbYyBiPW/dpWcsxXerlx/TuH4I8tYqArfhsdA 7Tn8Jmg4hmMZB6PJ8nd0LraiGhtBeDm6d+I7a6L0ILLrlA0P6puiCXN7YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN1fcIlML32pri1QA12NAuFnr+2yMB8GA1UdIwQY MBaAFBnWX6M85bP3vbSX5fylCdf8A8aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MjVjMjItN2VlYy00MDMzLWE3NjMt Yzg3Y2U3NjM4M2JjLzEvM1Y5d2lVd3ZmYW11TFZBRFhZMEM0V2V2N2JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83MjVjMjItN2VlYy00MDMzLWE3NjMtYzg3Y2U3NjM4M2Jj LzEvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWfoMA0G CSqGSIb3DQEBCwUAA4IBAQCVZuygjYtpahXeqZ0BBXok4KrCGleYxyjiKFPxIdk0 v+0GRdan9Iaa7Zj8Fnab1pXIostmBEDUOeE4Gy6g4xjipnHHL4sEslBVUq8E3KBD 0TDb/kYKbDW2iicdg7OKTRm7m3CQLqjwjxBUtYPlxegQ8i3a6KfrskE9AL2leDpZ 7eAvHfaZkA1HqULRGzMv7ysViK9cN+vxu7ZOH8Gl6zzsp/Wwr4UGpZ8Eu02DyQ3E nDUUW8qls+neTFVCbld1AvvEIVDsP8tc/51BJ7e0sP16EszpYBcW5OjYxOkKg0g2 h3e0CWyVJpZvmwARU+sFFv09uvQPR2u/bgZVDZc4io5A -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:25 2026 by rpki-client