This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/3M28JHI7FacsIOAJQWmxce2Slr8.roa File: 3M28JHI7FacsIOAJQWmxce2Slr8.roa (raw, json) Hash identifier: YkTIvgr/OPBfSq7cSMGcukiH55SIyz1JhUaAuApclZY= Subject key identifier: DC:CD:BC:24:72:3B:15:A7:2C:20:E0:09:41:69:B1:71:ED:92:96:BF Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Certificate serial: 019B7F145D279CCAA6A6B0F1A7CF580E3808 Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/3M28JHI7FacsIOAJQWmxce2Slr8.roa Signing time: Fri 02 Jan 2026 14:19:59 +0000 ROA not before: Fri 02 Jan 2026 14:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400039 IP address blocks: 185.143.242.0/24 maxlen: 24 185.200.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5d:27:9c:ca:a6:a6:b0:f1:a7:cf:58:0e:38:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Validity Not Before: Jan 2 14:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dccdbc24723b15a72c20e0094169b171ed9296bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:71:99:e7:84:ba:25:6b:ad:82:9f:ad:c4: 84:b9:e3:56:8c:c0:6d:1e:93:9c:d5:4a:18:f3:a3: 58:24:5f:e5:ec:e6:61:25:88:7d:73:55:a6:73:00: 98:ce:0a:35:49:2e:af:98:d0:f7:97:4d:c3:db:17: b7:f4:6b:2f:5b:09:b0:3e:58:78:9c:ec:ac:cb:58: 93:93:44:ce:48:2f:7e:72:92:88:ef:bb:70:42:0f: 5c:23:7a:30:cd:49:70:55:d7:b4:3c:48:fb:66:0a: c3:25:0f:0f:33:5e:66:62:a3:a1:82:ed:c7:28:49: af:4f:90:16:c1:5a:c3:0f:1c:e9:a4:30:44:e8:3f: 8e:e0:32:49:73:92:ef:ab:b7:44:8c:d0:02:10:db: 71:f6:c2:5c:e6:aa:c1:eb:02:3a:59:5a:83:62:ab: dd:f1:bb:a3:e6:ae:c5:ed:11:2e:60:d7:5b:63:b8: bd:62:f5:f1:9e:dc:5b:a9:9d:36:45:15:28:86:a4: e6:3a:67:27:0d:e0:3e:2b:53:f6:10:42:b3:d1:c6: f7:68:fa:97:30:3d:22:78:51:5f:db:79:ca:bb:a8: 45:8e:95:ba:8f:cc:2f:a6:07:23:52:e8:7f:c9:b1: 19:7b:b2:20:39:99:e0:47:45:a8:af:40:84:7a:7b: ed:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CD:BC:24:72:3B:15:A7:2C:20:E0:09:41:69:B1:71:ED:92:96:BF X509v3 Authority Key Identifier: keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/3M28JHI7FacsIOAJQWmxce2Slr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.242.0/24 185.200.245.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:d7:bb:b6:df:90:9c:80:50:55:c1:35:01:03:29:ca:a7:e8: f4:b8:04:d0:e2:66:4b:73:76:ac:fb:b8:0b:01:c7:55:39:f9: 55:a9:71:3b:dd:06:42:36:5f:69:14:4e:12:22:01:0d:3a:44: d7:29:73:e5:f8:d6:83:ef:b3:ad:db:5c:ad:10:58:df:13:a8: 9e:bd:3f:40:1a:1f:81:72:2a:bb:77:22:46:d2:fc:aa:12:e2: a4:1b:fb:8f:af:7f:2a:96:63:5c:90:50:4f:26:b7:c3:3d:c3: 96:63:a6:4e:98:b7:18:98:b2:71:73:91:69:4c:90:89:a3:5d: 81:28:07:9a:8f:57:fc:57:a3:79:0e:87:87:d1:24:b2:1f:80: 6d:9b:8e:f5:f6:9e:59:c2:e9:bc:bf:f3:3c:26:fb:b7:29:f9: 12:38:3e:4b:49:e7:6f:ac:cd:ce:05:58:41:84:79:5d:64:32: e4:45:15:bc:28:37:63:86:66:1b:ab:b7:e0:bc:bc:4b:3e:07: 7f:66:9a:05:d3:4f:e8:b0:94:32:8d:8a:08:b6:91:42:30:86: 36:5a:32:57:31:ae:f1:97:c7:70:c6:e8:06:c4:2b:25:2b:9b: 68:5b:fb:b0:a1:4b:b2:62:a5:5c:ab:0c:3f:1c:00:bb:51:e2: bb:ba:81:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FF0nnMqmprDxp89YDjgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm MTZhOWYwHhcNMjYwMTAyMTQxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2NkYmMyNDcyM2IxNWE3MmMyMGUwMDk0MTY5YjE3MWVkOTI5NmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0VxmeeEuiVrrYKfrcSEueNWjMBt HpOc1UoY86NYJF/l7OZhJYh9c1WmcwCYzgo1SS6vmND3l03D2xe39GsvWwmwPlh4 nOysy1iTk0TOSC9+cpKI77twQg9cI3owzUlwVde0PEj7ZgrDJQ8PM15mYqOhgu3H KEmvT5AWwVrDDxzppDBE6D+O4DJJc5Lvq7dEjNACENtx9sJc5qrB6wI6WVqDYqvd 8buj5q7F7REuYNdbY7i9YvXxntxbqZ02RRUohqTmOmcnDeA+K1P2EEKz0cb3aPqX MD0ieFFf23nKu6hFjpW6j8wvpgcjUuh/ybEZe7IgOZngR0Wor0CEenvtvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNzNvCRyOxWnLCDgCUFpsXHtkpa/MB8GA1UdIwQY MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt ODZhNTUxOGUyZDUyLzEvM00yOEpISTdGYWNzSU9BSlFXbXhjZTJTbHI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuY/yAwQA ucj1MA0GCSqGSIb3DQEBCwUAA4IBAQCa17u235CcgFBVwTUBAynKp+j0uATQ4mZL c3as+7gLAcdVOflVqXE73QZCNl9pFE4SIgENOkTXKXPl+NaD77Ot21ytEFjfE6ie vT9AGh+Bciq7dyJG0vyqEuKkG/uPr38qlmNckFBPJrfDPcOWY6ZOmLcYmLJxc5Fp TJCJo12BKAeaj1f8V6N5DoeH0SSyH4Btm4719p5Zwum8v/M8Jvu3KfkSOD5LSedv rM3OBVhBhHldZDLkRRW8KDdjhmYbq7fgvLxLPgd/ZpoF00/osJQyjYoItpFCMIY2 WjJXMa7xl8dwxugGxCslK5toW/uwoUuyYqVcqww/HAC7UeK7uoGa -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:30 2026 by rpki-client