This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/3Cud0IjmLSFijPu1FHVaG-hN8Io.roa File: 3Cud0IjmLSFijPu1FHVaG-hN8Io.roa (raw, json) Hash identifier: era6BJ/gH62QZKVqWWZexM6Ohqb5Okgw649Y5mKkQ3o= Subject key identifier: DC:2B:9D:D0:88:E6:2D:21:62:8C:FB:B5:14:75:5A:1B:E8:4D:F0:8A Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B7910404945AFDE617D2C41082F08F7A8 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/3Cud0IjmLSFijPu1FHVaG-hN8Io.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 195.216.162.0/24 maxlen: 24 195.216.163.0/24 maxlen: 24 195.216.172.0/24 maxlen: 24 195.216.173.0/24 maxlen: 24 195.216.174.0/24 maxlen: 24 195.216.175.0/24 maxlen: 24 195.216.191.0/24 maxlen: 24 213.182.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:40:49:45:af:de:61:7d:2c:41:08:2f:08:f7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc2b9dd088e62d21628cfbb514755a1be84df08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c7:35:42:eb:29:66:17:61:86:6c:ad:e6:2e: 2c:7d:49:d3:b3:15:9d:f9:49:f7:e3:24:d0:5a:bf: 09:2a:74:57:59:f0:4e:41:85:d6:3f:72:eb:f8:cf: 7d:59:70:ff:d2:dd:92:bb:73:ac:1e:93:af:15:7d: 6a:a2:f6:e2:ac:1e:67:ee:08:b1:07:fe:ad:42:a0: 64:f8:0c:cb:b3:20:6a:39:9e:61:99:55:ed:e1:92: 1d:ac:dc:a4:4d:5c:8d:f7:e3:48:b7:cd:66:6a:63: 0d:92:e1:b7:9f:1e:61:70:99:db:8f:a9:3c:c5:df: 15:ef:dc:f4:45:0f:e9:fe:7e:f2:16:de:05:fd:4c: 0b:7a:0c:ad:06:f8:01:75:31:26:05:dc:47:27:67: 24:f9:02:d8:ff:51:32:af:29:31:2a:b4:16:93:92: 4c:f4:d9:09:25:36:9f:77:07:c6:1b:59:d2:c8:5e: cf:b7:15:c0:51:81:a5:66:ca:31:15:a8:7e:58:21: 9f:2b:e9:8c:12:5c:9f:fd:fa:24:48:59:7b:79:1f: 90:ef:e0:48:39:a8:ab:13:8e:88:0d:82:2d:b4:a2: c7:7b:72:9f:1b:0a:4c:12:f1:83:90:de:76:be:f2: 8e:40:77:1a:00:29:91:8c:2b:a5:53:a1:d0:42:32: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2B:9D:D0:88:E6:2D:21:62:8C:FB:B5:14:75:5A:1B:E8:4D:F0:8A X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/3Cud0IjmLSFijPu1FHVaG-hN8Io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.162.0/23 195.216.172.0/22 195.216.191.0/24 213.182.192.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c8:5b:fb:53:d9:9c:5a:9e:a8:46:ce:01:ae:ff:10:23:63: 6d:c9:7e:22:c8:88:d3:cb:2f:1e:b0:a7:ba:b3:9d:1d:e6:33: 6b:ac:5c:a9:b2:23:cf:17:1d:fd:cb:32:62:ea:d7:3e:3a:c6: f9:ee:50:36:39:dc:0f:d2:6b:68:9f:ee:e5:37:8d:ce:29:80: c1:b2:97:15:1a:ec:41:00:a1:06:72:d5:4f:a6:af:16:a5:a9: e9:d8:bc:97:4b:3d:35:0b:35:0d:ee:56:6d:ac:a3:06:1e:b8: f2:43:fa:e2:14:a6:dc:1a:b7:72:d7:08:32:7d:9b:70:d5:1c: 32:63:fa:dd:d6:b9:3a:c4:bf:7a:70:d3:a6:7e:fe:8c:20:30: dd:09:45:42:98:24:fd:69:66:d8:36:49:74:b2:c9:45:7d:e7: 34:f6:43:1d:5a:72:c9:10:fc:09:59:5e:06:81:38:eb:e4:5e: 7c:65:ab:4c:80:d7:cb:55:f4:d9:f5:88:a1:e5:53:9d:4c:53: 21:68:1b:2b:89:f7:10:32:2e:ca:70:5a:b6:33:66:b2:67:50: f1:b3:e3:e6:8a:7c:ea:17:a4:a9:a1:18:f6:b1:f0:79:0e:57: d9:80:e2:c1:d1:62:78:d7:27:4d:b1:4c:87:da:82:23:54:da: a1:ae:7c:13 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EEBJRa/eYX0sQQgvCPeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzJiOWRkMDg4ZTYyZDIxNjI4Y2ZiYjUxNDc1NWExYmU4NGRmMDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMc1QuspZhdhhmyt5i4sfUnTsxWd +Un34yTQWr8JKnRXWfBOQYXWP3Lr+M99WXD/0t2Su3OsHpOvFX1qovbirB5n7gix B/6tQqBk+AzLsyBqOZ5hmVXt4ZIdrNykTVyN9+NIt81mamMNkuG3nx5hcJnbj6k8 xd8V79z0RQ/p/n7yFt4F/UwLegytBvgBdTEmBdxHJ2ck+QLY/1EyrykxKrQWk5JM 9NkJJTafdwfGG1nSyF7PtxXAUYGlZsoxFah+WCGfK+mMElyf/fokSFl7eR+Q7+BI OairE46IDYIttKLHe3KfGwpMEvGDkN52vvKOQHcaACmRjCulU6HQQjLXDQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNwrndCI5i0hYoz7tRR1WhvoTfCKMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvM0N1ZDBJam1MU0ZpalB1MUZIVmFHLWhOOElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBw9iiAwQC w9isAwQAw9i/AwQA1bbAMA0GCSqGSIb3DQEBCwUAA4IBAQAFyFv7U9mcWp6oRs4B rv8QI2NtyX4iyIjTyy8esKe6s50d5jNrrFypsiPPFx39yzJi6tc+Osb57lA2OdwP 0mton+7lN43OKYDBspcVGuxBAKEGctVPpq8Wpanp2LyXSz01CzUN7lZtrKMGHrjy Q/riFKbcGrdy1wgyfZtw1RwyY/rd1rk6xL96cNOmfv6MIDDdCUVCmCT9aWbYNkl0 sslFfec09kMdWnLJEPwJWV4GgTjr5F58ZatMgNfLVfTZ9Yih5VOdTFMhaBsrifcQ Mi7KcFq2M2ayZ1Dxs+PminzqF6SpoRj2sfB5DlfZgOLB0WJ41ydNsUyH2oIjVNqh rnwT -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:44 2026 by rpki-client