This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/N3bT1IaKzz8bPCDOKdRhB25HaJo.roa File: N3bT1IaKzz8bPCDOKdRhB25HaJo.roa (raw, json) Hash identifier: gNPs9wYplfUU1SfOLDMFM4D/p2vF/ZGKLKirAoSCGto= Subject key identifier: 37:76:D3:D4:86:8A:CF:3F:1B:3C:20:CE:29:D4:61:07:6E:47:68:9A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE98201664CCEF5E7EA0E8170ACDC Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/N3bT1IaKzz8bPCDOKdRhB25HaJo.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 77.107.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e9:82:01:66:4c:ce:f5:e7:ea:0e:81:70:ac:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3776d3d4868acf3f1b3c20ce29d461076e47689a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:11:16:32:bc:60:32:a9:b6:05:c1:06:25: 40:94:df:c8:51:cf:b0:40:b2:29:b7:e7:38:48:98: 0d:24:ae:6a:8e:af:8a:b2:57:0a:80:9f:42:97:11: de:a0:fe:5e:77:49:f1:8a:d7:fb:ec:2d:f1:41:35: 4a:b7:24:a2:29:d8:43:c2:6d:10:b2:95:09:3c:df: e1:d7:2c:20:80:53:52:f7:01:c6:05:17:d2:51:e1: 2c:24:62:6d:b0:c7:c6:d9:28:7b:68:06:29:a6:7c: c7:1f:a7:e1:32:80:5b:1f:4e:06:61:67:a8:37:02: a6:a6:82:bb:c6:ef:55:aa:04:66:c6:64:fb:0e:74: 23:7c:cc:e8:af:64:f8:1d:6f:52:4e:a1:22:65:38: 21:83:2e:17:c5:0b:f0:cd:35:c7:eb:3f:48:c8:91: ca:38:72:6b:02:15:4f:d9:ea:bb:61:b0:1d:31:13: 26:21:67:40:d0:85:f5:49:38:b3:8c:78:7e:fd:58: 30:52:be:ae:bc:46:d6:46:95:7c:d7:ed:09:61:f0: 55:ae:19:e2:fe:24:5b:71:93:22:91:94:0e:1a:cb: 82:8c:5c:6d:2d:05:be:df:b7:28:be:76:5d:c1:9b: e9:ac:af:e8:6e:e7:e7:f2:72:f4:3b:2f:a2:98:69: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:76:D3:D4:86:8A:CF:3F:1B:3C:20:CE:29:D4:61:07:6E:47:68:9A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/N3bT1IaKzz8bPCDOKdRhB25HaJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.107.126.0/24 Signature Algorithm: sha256WithRSAEncryption 36:9a:1f:ed:0f:43:73:29:36:15:ac:02:12:f1:85:77:43:af: ad:64:ab:0b:5c:11:9a:89:e1:7c:66:54:ef:6c:05:1e:a2:23: 36:e6:aa:b8:81:cc:ba:34:5e:38:67:6f:a5:7f:4b:71:b5:bf: b8:1f:50:f0:0a:b9:0b:b2:19:33:9c:d0:ae:cc:d8:3f:f4:58: 96:a2:01:e9:85:f2:bf:e7:f7:5f:c0:3f:a2:99:23:f5:55:17: f4:68:1d:ce:97:dd:32:40:4c:e4:0b:20:5c:eb:89:e2:5f:2a: 7a:b6:d5:39:bb:4a:11:e2:e8:8e:ee:30:58:77:71:25:d5:23: fe:4b:96:e3:5f:c2:09:33:2e:ec:95:60:99:6e:c7:03:d3:82: aa:f1:17:7c:9b:bf:06:25:b2:ed:e5:21:66:89:e4:67:9d:22: b7:b7:fd:78:f3:a4:b5:4a:96:87:6a:f8:d6:12:e4:a6:0d:f3: 5d:36:04:f3:89:61:f4:4f:0b:fa:1e:98:a7:1a:24:a6:85:0e: 04:cf:63:24:90:3a:20:55:cd:e0:59:7f:4a:3d:cb:00:2a:53: f1:ff:5f:dd:4f:06:60:e7:f5:1d:18:eb:c4:af:94:0c:d5:f5: a8:cf:91:a7:0a:97:87:54:95:f6:b5:94:7e:0c:97:7b:a7:1d: 7d:e4:73:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WumCAWZMzvXn6g6BcKzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzc2ZDNkNDg2OGFjZjNmMWIzYzIwY2UyOWQ0NjEwNzZlNDc2ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCERFjK8YDKptgXBBiVAlN/IUc+w QLIpt+c4SJgNJK5qjq+KslcKgJ9ClxHeoP5ed0nxitf77C3xQTVKtySiKdhDwm0Q spUJPN/h1ywggFNS9wHGBRfSUeEsJGJtsMfG2Sh7aAYppnzHH6fhMoBbH04GYWeo NwKmpoK7xu9VqgRmxmT7DnQjfMzor2T4HW9STqEiZTghgy4XxQvwzTXH6z9IyJHK OHJrAhVP2eq7YbAdMRMmIWdA0IX1STizjHh+/VgwUr6uvEbWRpV81+0JYfBVrhni /iRbcZMikZQOGsuCjFxtLQW+37covnZdwZvprK/obufn8nL0Oy+imGmoNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDd209SGis8/GzwgzinUYQduR2iaMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvTjNiVDFJYUt6ejhiUENET0tkUmhCMjVIYUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWt+MA0G CSqGSIb3DQEBCwUAA4IBAQA2mh/tD0NzKTYVrAIS8YV3Q6+tZKsLXBGaieF8ZlTv bAUeoiM25qq4gcy6NF44Z2+lf0txtb+4H1DwCrkLshkznNCuzNg/9FiWogHphfK/ 5/dfwD+imSP1VRf0aB3Ol90yQEzkCyBc64niXyp6ttU5u0oR4uiO7jBYd3El1SP+ S5bjX8IJMy7slWCZbscD04Kq8Rd8m78GJbLt5SFmieRnnSK3t/1486S1SpaHavjW EuSmDfNdNgTziWH0Twv6HpinGiSmhQ4Ez2MkkDogVc3gWX9KPcsAKlPx/1/dTwZg 5/UdGOvEr5QM1fWoz5GnCpeHVJX2tZR+DJd7px195HMN -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:32 2026 by rpki-client