This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/3E9T9RFa1PZkIhLi3ry8IootMJg.roa
File: 3E9T9RFa1PZkIhLi3ry8IootMJg.roa (raw, json)
Hash identifier: bckLvV/Gm52OLV1kFd90y/TjObd2VP8TIpXKSHLQWz4=
Subject key identifier: DC:4F:53:F5:11:5A:D4:F6:64:22:12:E2:DE:BC:BC:22:8A:2D:30:98
Certificate issuer: /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial: 019B76EB241131E7E166A4684CEC3730A172
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/3E9T9RFa1PZkIhLi3ry8IootMJg.roa
Signing time: Thu 01 Jan 2026 00:18:00 +0000
ROA not before: Thu 01 Jan 2026 00:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206640
IP address blocks: 185.180.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:24:11:31:e7:e1:66:a4:68:4c:ec:37:30:a1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795582c73302eb0a974477603049850833bd210
Validity
Not Before: Jan 1 00:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc4f53f5115ad4f6642212e2debcbc228a2d3098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:b7:43:25:aa:d5:b1:24:0d:6c:18:6e:96:
c0:1c:4b:37:95:f4:5e:03:95:a6:e0:54:41:23:9d:
25:30:2c:f8:e1:d1:7c:49:51:59:ec:0b:22:ce:a2:
4d:9a:88:4c:9b:46:ff:76:8c:ef:10:31:fb:de:07:
f1:00:62:5d:a0:92:2f:36:1f:7b:72:1c:65:a3:fb:
0c:17:2f:5f:9b:4c:e1:3a:79:38:be:7e:f4:37:ec:
ed:76:31:19:d3:a3:f2:17:61:08:f1:db:b8:10:7e:
c6:87:ac:48:04:5f:49:01:c9:b8:17:10:b3:04:1e:
df:83:61:58:01:ab:d6:29:2c:a4:69:c1:a9:a6:dc:
4c:83:b1:ea:26:e8:a9:8b:3f:ce:e1:34:80:f5:c3:
02:37:39:95:a5:f6:a1:20:84:38:48:42:be:b2:df:
73:e5:3d:df:8d:fd:8b:1f:77:f9:ce:75:cc:20:92:
69:f7:ce:0b:39:c9:06:d2:c8:ef:b2:8b:0f:43:8d:
63:d6:d9:37:00:85:a9:8b:0c:83:20:e2:bd:0b:e6:
55:5e:e8:cc:cd:bd:66:8c:32:f7:ed:2d:f4:0d:3c:
3c:35:7d:e9:02:a4:0f:6c:bb:10:9a:2b:91:87:03:
6f:06:5f:c9:9a:ab:b8:0f:67:b1:e8:2c:93:6c:fa:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4F:53:F5:11:5A:D4:F6:64:22:12:E2:DE:BC:BC:22:8A:2D:30:98
X509v3 Authority Key Identifier:
keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/3E9T9RFa1PZkIhLi3ry8IootMJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:b4:27:3e:61:44:6b:a8:f9:ff:44:13:f1:87:57:92:d5:20:
46:08:ba:7a:97:81:ee:12:b1:fa:de:b4:eb:24:4b:fe:72:c3:
be:a2:83:7c:59:fc:e6:4d:68:44:9b:22:a3:2e:e6:fc:98:5e:
0b:dc:ac:2a:32:37:9c:a6:02:fa:49:40:a6:c2:e0:1b:64:f2:
b3:21:67:37:51:78:ed:0e:91:d5:53:87:e2:f6:98:0e:b1:31:
11:8c:24:ef:dd:18:86:b9:0d:37:f9:d7:d1:09:39:d4:45:d2:
a6:1c:c2:0a:dc:bb:fe:d4:d7:5e:a8:cd:6e:17:bb:bc:56:2e:
6b:4e:f7:aa:a8:f3:aa:92:a5:3a:7d:11:df:52:d3:7c:93:00:
6e:d4:a1:58:ee:12:ef:49:9b:9f:99:b7:3c:ca:0e:21:92:70:
13:36:c2:38:33:0c:90:03:84:40:d0:11:36:42:5f:70:15:bb:
c6:ef:c6:3f:cb:e6:0f:25:16:d8:1b:d0:ba:5e:60:37:f6:d0:
08:5b:15:9c:13:25:bc:d7:fc:80:77:2f:45:26:ac:66:1b:74:
c8:74:1b:db:66:43:1a:fb:38:c6:98:99:f8:73:5a:a0:a1:49:
b8:a6:41:59:26:06:fc:55:8f:d9:02:03:aa:1b:12:47:bd:07:
5a:c9:7f:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26yQRMefhZqRoTOw3MKFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTU1ODJjNzMzMDJlYjBhOTc0NDc3NjAzMDQ5ODUwODMz
YmQyMTAwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzRmNTNmNTExNWFkNGY2NjQyMjEyZTJkZWJjYmMyMjhhMmQzMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU23QyWq1bEkDWwYbpbAHEs3lfRe
A5Wm4FRBI50lMCz44dF8SVFZ7AsizqJNmohMm0b/dozvEDH73gfxAGJdoJIvNh97
chxlo/sMFy9fm0zhOnk4vn70N+ztdjEZ06PyF2EI8du4EH7Gh6xIBF9JAcm4FxCz
BB7fg2FYAavWKSykacGpptxMg7HqJuipiz/O4TSA9cMCNzmVpfahIIQ4SEK+st9z
5T3fjf2LH3f5znXMIJJp984LOckG0sjvsosPQ41j1tk3AIWpiwyDIOK9C+ZVXujM
zb1mjDL37S30DTw8NX3pAqQPbLsQmiuRhwNvBl/Jmqu4D2ex6CyTbPpq9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNxPU/URWtT2ZCIS4t68vCKKLTCYMB8GA1UdIwQY
MBaAFLeVWCxzMC6wqXRHdgMEmFCDO9IQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMt
YzJiZDVmYzA0NDI0LzEvM0U5VDlSRmExUFprSWhMaTNyeThJb290TUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMtYzJiZDVmYzA0NDI0
LzEvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubRwMA0G
CSqGSIb3DQEBCwUAA4IBAQCgtCc+YURrqPn/RBPxh1eS1SBGCLp6l4HuErH63rTr
JEv+csO+ooN8WfzmTWhEmyKjLub8mF4L3KwqMjecpgL6SUCmwuAbZPKzIWc3UXjt
DpHVU4fi9pgOsTERjCTv3RiGuQ03+dfRCTnURdKmHMIK3Lv+1NdeqM1uF7u8Vi5r
TveqqPOqkqU6fRHfUtN8kwBu1KFY7hLvSZufmbc8yg4hknATNsI4MwyQA4RA0BE2
Ql9wFbvG78Y/y+YPJRbYG9C6XmA39tAIWxWcEyW81/yAdy9FJqxmG3TIdBvbZkMa
+zjGmJn4c1qgoUm4pkFZJgb8VY/ZAgOqGxJHvQdayX8+
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:49:17 2026 by rpki-client