This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/3cRUjdhX8xbK1k4DfWaubJp1w0E.roa File: 3cRUjdhX8xbK1k4DfWaubJp1w0E.roa (raw, json) Hash identifier: Z7aa0TuqsrWRnvU0sn3YMIcRZ7r4lbfupWu8b6jE2/I= Subject key identifier: DD:C4:54:8D:D8:57:F3:16:CA:D6:4E:03:7D:66:AE:6C:9A:75:C3:41 Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5 Certificate serial: 019B7EA74150A9210E222EB32C928384E0D8 Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/3cRUjdhX8xbK1k4DfWaubJp1w0E.roa Signing time: Fri 02 Jan 2026 12:20:49 +0000 ROA not before: Fri 02 Jan 2026 12:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56874 IP address blocks: 185.62.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:41:50:a9:21:0e:22:2e:b3:2c:92:83:84:e0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5 Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddc4548dd857f316cad64e037d66ae6c9a75c341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:68:8b:51:79:6b:e1:d8:25:7c:81:15:80: 6b:b1:5d:9f:d6:6d:f5:ef:d0:c2:2c:93:58:1e:89: 31:1c:6f:47:e2:3b:0f:7e:7e:07:11:ce:21:bd:91: bb:64:8d:18:e5:35:7f:e9:89:b0:e4:08:96:ce:74: 94:89:47:ab:40:36:ff:5c:33:c1:e5:63:ec:b1:94: 46:02:2e:12:63:12:e5:09:f6:7c:81:e6:42:24:cd: 2c:c9:37:4d:47:3f:1d:86:98:10:53:74:d0:2b:7c: fd:ae:a1:1d:c5:69:34:40:42:75:6e:bb:b5:53:a1: e5:2b:c5:10:35:bc:40:f0:e9:23:2e:8e:2d:1b:8e: 08:b0:90:3d:e8:2c:c7:0d:0e:35:13:7c:fb:f5:4e: 03:ec:19:78:3f:70:c5:4b:86:e9:1d:67:01:5c:cf: 73:e1:d1:65:68:bd:1b:fa:eb:96:1b:55:9d:6e:c9: fe:48:69:c6:8b:8d:a7:68:cd:11:37:4d:5a:fb:47: e3:0a:24:75:7b:70:80:b9:bc:e1:5e:d3:54:93:97: fc:74:17:24:03:ec:36:0e:96:50:aa:47:0c:62:36: 06:6e:24:31:a0:e0:c9:d2:af:a3:52:97:02:4e:54: 1d:3c:51:a7:e2:25:83:e4:88:03:6e:6e:17:8d:a5: 5b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C4:54:8D:D8:57:F3:16:CA:D6:4E:03:7D:66:AE:6C:9A:75:C3:41 X509v3 Authority Key Identifier: keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/3cRUjdhX8xbK1k4DfWaubJp1w0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.229.0/24 Signature Algorithm: sha256WithRSAEncryption a2:f1:19:12:50:0d:4e:e5:c7:3e:98:a0:6f:d1:3f:b5:9b:86: 69:99:fc:24:40:b9:32:c8:4e:51:27:4e:a0:82:58:a6:fd:5e: 1e:0d:13:06:d8:78:e6:0c:30:f4:a9:29:e2:63:17:fe:32:67: e0:37:b3:4b:8b:63:57:a1:20:c7:e8:90:a1:03:ce:41:1d:b2: 44:4c:1e:7e:ca:8b:40:1a:f9:f0:e8:10:4a:9e:14:03:b2:f0: a8:52:41:83:ca:5d:32:bf:f8:04:92:ac:89:46:3a:0f:63:f3: 5e:ee:cc:0e:e8:92:cf:8f:6e:6a:39:a2:60:39:88:de:6e:21: 3a:07:b7:39:64:cd:1f:27:c4:d2:d2:e3:11:25:82:b0:94:cf: 08:b2:00:d6:f0:b6:dd:e8:7d:c8:34:62:da:ac:36:8c:bb:f6: 4f:8d:91:6b:86:cc:95:4e:b2:58:2e:98:8c:2c:61:59:f3:a4: 7d:13:86:3d:4f:d2:9c:ff:79:60:d4:15:5c:c4:ca:c5:62:8d: bc:5e:3f:0c:5b:c3:8f:b4:2a:5e:31:20:d6:5f:69:8e:97:47: e0:6e:59:1e:4f:93:d4:f4:e5:f8:6c:7c:25:ab:ed:87:e8:29: 4b:c6:2e:bd:94:29:a1:c7:61:63:22:ba:98:f6:98:0b:30:f2: 94:54:69:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0FQqSEOIi6zLJKDhODYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NGFiYzhlNDVkZTIzMWZiODI5YmNhMjJiYjJmMGIzMWUx ZjdhZjUwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGM0NTQ4ZGQ4NTdmMzE2Y2FkNjRlMDM3ZDY2YWU2YzlhNzVjMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSdoi1F5a+HYJXyBFYBrsV2f1m31 79DCLJNYHokxHG9H4jsPfn4HEc4hvZG7ZI0Y5TV/6Ymw5AiWznSUiUerQDb/XDPB 5WPssZRGAi4SYxLlCfZ8geZCJM0syTdNRz8dhpgQU3TQK3z9rqEdxWk0QEJ1bru1 U6HlK8UQNbxA8OkjLo4tG44IsJA96CzHDQ41E3z79U4D7Bl4P3DFS4bpHWcBXM9z 4dFlaL0b+uuWG1Wdbsn+SGnGi42naM0RN01a+0fjCiR1e3CAubzhXtNUk5f8dBck A+w2DpZQqkcMYjYGbiQxoODJ0q+jUpcCTlQdPFGn4iWD5IgDbm4XjaVbaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN3EVI3YV/MWytZOA31mrmyadcNBMB8GA1UdIwQY MBaAFGVKvI5F3iMfuCm8oiuy8LMeH3r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82MTU1ZDUtMzFiYS00MjM5LWE3NTMt ZjI4N2I3YjZkN2IyLzEvM2NSVWpkaFg4eGJLMWs0RGZXYXViSnAxdzBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS82MTU1ZDUtMzFiYS00MjM5LWE3NTMtZjI4N2I3YjZkN2Iy LzEvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT7lMA0G CSqGSIb3DQEBCwUAA4IBAQCi8RkSUA1O5cc+mKBv0T+1m4ZpmfwkQLkyyE5RJ06g glim/V4eDRMG2HjmDDD0qSniYxf+MmfgN7NLi2NXoSDH6JChA85BHbJETB5+yotA Gvnw6BBKnhQDsvCoUkGDyl0yv/gEkqyJRjoPY/Ne7swO6JLPj25qOaJgOYjebiE6 B7c5ZM0fJ8TS0uMRJYKwlM8IsgDW8Lbd6H3INGLarDaMu/ZPjZFrhsyVTrJYLpiM LGFZ86R9E4Y9T9Kc/3lg1BVcxMrFYo28Xj8MW8OPtCpeMSDWX2mOl0fgblkeT5PU 9OX4bHwlq+2H6ClLxi69lCmhx2FjIrqY9pgLMPKUVGm+ -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:53 2026 by rpki-client