This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/3q-sPVu82kr7qyF0YIsPFo6DSns.roa File: 3q-sPVu82kr7qyF0YIsPFo6DSns.roa (raw, json) Hash identifier: XgUPqwuS3Q/lF9SmyreBKw77t9sWRJkTinie+M7+t7w= Subject key identifier: DE:AF:AC:3D:5B:BC:DA:4A:FB:AB:21:74:60:8B:0F:16:8E:83:4A:7B Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe Certificate serial: 019B7910660276F3A1832ADF24A1C8E7AA2A Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/3q-sPVu82kr7qyF0YIsPFo6DSns.roa Signing time: Thu 01 Jan 2026 10:17:56 +0000 ROA not before: Thu 01 Jan 2026 10:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50873 IP address blocks: 37.228.130.0/24 maxlen: 24 94.247.143.0/24 maxlen: 24 185.97.4.0/22 maxlen: 22 185.97.6.0/24 maxlen: 24 194.104.114.0/23 maxlen: 23 194.104.149.0/24 maxlen: 24 2a06:1c0::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:66:02:76:f3:a1:83:2a:df:24:a1:c8:e7:aa:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe Validity Not Before: Jan 1 10:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deafac3d5bbcda4afbab2174608b0f168e834a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:bc:dc:36:ed:cd:53:e8:e4:c9:e1:7a:89: 32:99:a6:ad:cb:ec:77:04:b4:49:d2:8a:f5:24:f7: bb:88:57:37:e4:e9:1d:39:4c:0c:7b:b6:00:00:b2: 1a:8d:ab:7d:41:9f:50:e3:32:13:40:51:ca:b9:b4: f1:0f:8a:97:11:05:d7:25:47:91:8d:67:e3:20:f0: 83:45:b3:b7:6e:fd:67:6d:96:c3:f9:6b:5d:ae:a7: 81:b3:b6:49:ab:73:fb:4b:6b:2a:ca:89:ab:75:60: 03:b8:8c:03:89:6f:be:fb:59:bf:f3:8a:fc:62:17: ee:23:1b:2c:90:88:91:8f:24:70:99:88:fb:b6:d7: 21:9b:82:c2:3a:6c:69:da:2d:19:d2:9e:8d:d6:25: 6d:b6:79:63:78:60:f4:13:8b:85:d3:e2:5f:8d:63: ef:53:9d:d6:7f:cd:09:0c:15:eb:f4:b7:5b:3a:67: a3:55:d0:33:00:38:82:c7:2a:ba:69:32:27:97:23: 7c:eb:e3:6e:97:de:29:89:11:f3:1d:96:bc:cb:a1: da:6c:f5:5a:0a:df:5a:87:6e:c0:86:1b:e2:7e:89: 88:11:fc:87:0a:5f:0c:87:f8:bc:d9:c1:d1:c9:bc: 6e:37:b7:69:f6:51:29:0d:3a:d5:39:4d:f4:73:59: 26:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AF:AC:3D:5B:BC:DA:4A:FB:AB:21:74:60:8B:0F:16:8E:83:4A:7B X509v3 Authority Key Identifier: keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/3q-sPVu82kr7qyF0YIsPFo6DSns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.228.130.0/24 94.247.143.0/24 185.97.4.0/22 194.104.114.0/23 194.104.149.0/24 IPv6: 2a06:1c0::/30 Signature Algorithm: sha256WithRSAEncryption b4:92:b7:30:19:f5:9e:5a:07:c3:68:77:35:5c:e4:80:4c:f5: c9:3d:e2:58:66:f2:31:c1:0e:bc:96:52:2d:d1:a7:a6:d7:ba: 04:03:ac:d3:ab:33:8e:f4:04:c3:1f:e2:99:c0:6f:7f:68:18: 5b:8a:fc:45:b4:57:1f:b6:10:03:58:c4:c7:1b:f4:b9:ea:79: 64:b7:08:a4:23:5d:67:6e:ef:03:1e:01:2f:6d:bd:6d:76:22: e4:4c:1e:5a:05:7b:91:93:f8:ab:25:d7:1e:e0:c3:eb:36:11: e7:d7:ec:64:2a:5e:91:59:bf:96:7f:c9:8e:ec:42:c9:f5:5a: 89:fb:47:eb:d3:ed:bf:7f:f6:b5:d5:cf:3b:37:66:46:c3:f6: a5:69:92:ad:f0:ee:47:2a:31:20:91:88:68:04:3d:16:59:84: 4b:7d:a0:d6:a6:44:3e:75:40:83:6f:d5:1e:6a:5e:cf:77:28: 8a:d6:68:57:22:4c:5b:8f:c9:20:7a:0f:97:28:dc:5e:63:a6: 82:e6:74:39:58:a4:21:9e:01:7f:15:6a:a6:8b:28:cc:52:18: 03:d2:ad:c9:94:e3:2d:17:8b:5c:0b:ef:99:28:5b:da:41:3f: 94:df:bf:eb:a6:bf:d3:ae:ee:55:40:1d:b1:49:bf:56:37:81: 9f:1c:d8:a8 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5EGYCdvOhgyrfJKHI56oqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZDU5NmMxZWE3ZWNiYjFiZTE3NzdmYzBkMzhlZDA2Y2E0 MGVhYmUwHhcNMjYwMTAxMTAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWFmYWMzZDViYmNkYTRhZmJhYjIxNzQ2MDhiMGYxNjhlODM0YTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkW83DbtzVPo5Mnheokymaaty+x3 BLRJ0or1JPe7iFc35OkdOUwMe7YAALIajat9QZ9Q4zITQFHKubTxD4qXEQXXJUeR jWfjIPCDRbO3bv1nbZbD+WtdrqeBs7ZJq3P7S2sqyomrdWADuIwDiW+++1m/84r8 YhfuIxsskIiRjyRwmYj7ttchm4LCOmxp2i0Z0p6N1iVttnljeGD0E4uF0+JfjWPv U53Wf80JDBXr9LdbOmejVdAzADiCxyq6aTInlyN86+Nul94piRHzHZa8y6HabPVa Ct9ah27AhhvifomIEfyHCl8Mh/i82cHRybxuN7dp9lEpDTrVOU30c1kmFQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFN6vrD1bvNpK+6shdGCLDxaOg0p7MB8GA1UdIwQY MBaAFC3VlsHqfsuxvhd3/A047QbKQOq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRXV3dlcC15N0ctRjNmOERUanRCc3BBNnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNjNlY2MtMmFhMS00MjgxLTk1YjEt OGIwZmMwNzg1OGQ2LzEvM3Etc1BWdTgya3I3cXlGMFlJc1BGbzZEU25zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zNjNlY2MtMmFhMS00MjgxLTk1YjEtOGIwZmMwNzg1OGQ2 LzEvTGRXV3dlcC15N0ctRjNmOERUanRCc3BBNnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAJeSCAwQA XvePAwQCuWEEAwQBwmhyAwQAwmiVMA0EAgACMAcDBQIqBgHAMA0GCSqGSIb3DQEB CwUAA4IBAQC0krcwGfWeWgfDaHc1XOSATPXJPeJYZvIxwQ68llIt0aem17oEA6zT qzOO9ATDH+KZwG9/aBhbivxFtFcfthADWMTHG/S56nlktwikI11nbu8DHgEvbb1t diLkTB5aBXuRk/irJdce4MPrNhHn1+xkKl6RWb+Wf8mO7ELJ9VqJ+0fr0+2/f/a1 1c87N2ZGw/alaZKt8O5HKjEgkYhoBD0WWYRLfaDWpkQ+dUCDb9Ueal7PdyiK1mhX Ikxbj8kgeg+XKNxeY6aC5nQ5WKQhngF/FWqmiyjMUhgD0q3JlOMtF4tcC++ZKFva QT+U37/rpr/Tru5VQB2xSb9WN4GfHNio -----END CERTIFICATE-----Generated at Mon Feb 2 14:10:30 2026 by rpki-client