This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/a3EzX3WcmdhmQvwA-GnAI4JgEtw.roa File: a3EzX3WcmdhmQvwA-GnAI4JgEtw.roa (raw, json) Hash identifier: C4cMB04OWyPRUy1OSkZ4yaaLwpazM0m/JqgEaW9Hrpg= Subject key identifier: 6B:71:33:5F:75:9C:99:D8:66:42:FC:00:F8:69:C0:23:82:60:12:DC Certificate issuer: /CN=73340fd7b3c285637adc00f1e61e2b8e402658f3 Certificate serial: 019B78A33F1E8A20D8ACF85AA92409CC1AD9 Authority key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/a3EzX3WcmdhmQvwA-GnAI4JgEtw.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51299 IP address blocks: 185.158.144.0/22 maxlen: 24 194.61.87.0/24 maxlen: 24 2a07:ae00::/31 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3f:1e:8a:20:d8:ac:f8:5a:a9:24:09:cc:1a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3 Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b71335f759c99d86642fc00f869c023826012dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:df:ee:5e:16:95:29:af:f0:a7:84:e3:4d:a4: 14:6c:bd:5f:16:00:1c:e8:54:78:79:92:16:08:fd: 46:98:50:ae:0c:ce:cc:94:e3:df:e0:3d:40:27:41: 3f:31:b2:04:dd:39:7f:38:9d:fb:87:dc:cf:80:64: d4:fa:87:c9:c9:51:4b:ea:c6:8c:d6:16:5a:fc:0d: 95:0a:d7:43:19:6d:1f:ef:c7:d0:19:96:12:49:0b: e4:39:3c:35:f7:20:00:b1:bf:75:19:71:ec:0c:32: bd:1a:5b:78:97:d9:c6:65:09:43:aa:89:44:ad:f5: 78:d7:c7:81:ae:c9:b6:45:a9:57:e7:46:c4:30:67: 1c:6d:61:26:64:44:11:c9:64:dd:08:63:f8:e7:c3: 37:dd:cf:57:bc:b0:15:6e:c6:8f:19:11:93:87:a2: 20:b2:40:42:c4:74:fb:28:a1:58:41:c5:7b:1f:10: 65:2e:75:97:aa:e6:56:02:99:4d:c7:f9:3e:24:78: 99:a9:b8:df:92:d6:25:3f:0b:e9:ed:f8:3e:9f:d6: ba:c3:01:48:33:c9:d2:d0:18:f7:ca:16:86:93:d1: 1b:4b:c3:99:88:49:a6:f8:01:42:af:db:cf:c7:2f: de:15:fd:f6:f6:1f:8d:64:53:09:f7:d3:e7:d2:04: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:71:33:5F:75:9C:99:D8:66:42:FC:00:F8:69:C0:23:82:60:12:DC X509v3 Authority Key Identifier: keyid:73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/a3EzX3WcmdhmQvwA-GnAI4JgEtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.144.0/22 194.61.87.0/24 IPv6: 2a07:ae00::/31 Signature Algorithm: sha256WithRSAEncryption 01:36:d1:ce:dd:f5:38:e5:c8:db:a1:5c:4c:a1:d4:88:3e:b5: 4d:0d:b1:ab:93:68:6b:e0:56:6e:36:1d:70:77:28:63:4d:00: a6:6c:0c:87:79:f4:1b:dd:d2:a6:c8:0c:91:e9:90:4c:d7:bc: b2:d0:98:cd:be:bc:3c:a2:e2:b1:75:ff:20:f5:0e:e9:6f:15: 1e:f3:14:b5:98:c8:ea:94:9b:53:41:e9:43:10:a0:55:b2:97: b8:99:48:19:b4:ab:76:64:da:82:10:7b:9a:d6:b1:cc:fb:d8: bb:77:59:7a:00:d4:f6:94:50:8b:61:4a:a5:8d:6a:b5:74:8f: c1:a9:69:42:20:d4:6e:49:0b:d5:4e:06:57:2a:c4:a7:67:35: a5:52:b7:9d:21:4f:0c:65:2d:26:ec:76:2c:4f:68:cf:e4:b6: f8:ab:ca:d7:ea:19:9e:c4:41:89:8a:17:7d:50:b8:89:78:e7: 57:8a:85:e0:04:d9:62:07:08:b9:47:2d:00:15:6e:03:ad:3c: c3:0e:81:ef:0f:a5:04:23:68:ef:a3:66:a6:46:fe:79:ca:a6: 93:26:9c:14:e9:eb:4d:48:4a:e8:e4:06:96:c7:7b:77:a7:7d: 08:7f:92:8e:ec:ac:9f:17:c9:39:5f:6a:a2:84:a9:b6:bc:c4: 1c:51:78:83 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4oz8eiiDYrPhaqSQJzBrZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMzQwZmQ3YjNjMjg1NjM3YWRjMDBmMWU2MWUyYjhlNDAy NjU4ZjMwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjcxMzM1Zjc1OWM5OWQ4NjY0MmZjMDBmODY5YzAyMzgyNjAxMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd/uXhaVKa/wp4TjTaQUbL1fFgAc 6FR4eZIWCP1GmFCuDM7MlOPf4D1AJ0E/MbIE3Tl/OJ37h9zPgGTU+ofJyVFL6saM 1hZa/A2VCtdDGW0f78fQGZYSSQvkOTw19yAAsb91GXHsDDK9Glt4l9nGZQlDqolE rfV418eBrsm2RalX50bEMGccbWEmZEQRyWTdCGP458M33c9XvLAVbsaPGRGTh6Ig skBCxHT7KKFYQcV7HxBlLnWXquZWAplNx/k+JHiZqbjfktYlPwvp7fg+n9a6wwFI M8nS0Bj3yhaGk9EbS8OZiEmm+AFCr9vPxy/eFf329h+NZFMJ99Pn0gQNVwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGtxM191nJnYZkL8APhpwCOCYBLcMB8GA1UdIwQY MBaAFHM0D9ezwoVjetwA8eYeK45AJljzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3pRUDE3UENoV042M0FEeDVoNHJqa0FtV1BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wYjRkYmEtMDc0Ny00ZTBmLTgwMzYt ZjIyMjM2MDZjNTM4LzEvYTNFelgzV2NtZGhtUXZ3QS1HbkFJNEpnRXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8wYjRkYmEtMDc0Ny00ZTBmLTgwMzYtZjIyMjM2MDZjNTM4 LzEvY3pRUDE3UENoV042M0FEeDVoNHJqa0FtV1BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuZ6QAwQA wj1XMA0EAgACMAcDBQEqB64AMA0GCSqGSIb3DQEBCwUAA4IBAQABNtHO3fU45cjb oVxModSIPrVNDbGrk2hr4FZuNh1wdyhjTQCmbAyHefQb3dKmyAyR6ZBM17yy0JjN vrw8ouKxdf8g9Q7pbxUe8xS1mMjqlJtTQelDEKBVspe4mUgZtKt2ZNqCEHua1rHM +9i7d1l6ANT2lFCLYUqljWq1dI/BqWlCINRuSQvVTgZXKsSnZzWlUredIU8MZS0m 7HYsT2jP5Lb4q8rX6hmexEGJihd9ULiJeOdXioXgBNliBwi5Ry0AFW4DrTzDDoHv D6UEI2jvo2amRv55yqaTJpwU6etNSEro5AaWx3t3p30If5KO7KyfF8k5X2qihKm2 vMQcUXiD -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:56 2026 by rpki-client