This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/3MWi_sarB7UU3XV2Gox6fZeLswg.roa File: 3MWi_sarB7UU3XV2Gox6fZeLswg.roa (raw, json) Hash identifier: HWOigSGmjipZJyJg7lhUPHpbYL3EZByxIWX1N59lfc0= Subject key identifier: DC:C5:A2:FE:C6:AB:07:B5:14:DD:75:76:1A:8C:7A:7D:97:8B:B3:08 Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019B7E386A1927F40BD90C8E77C4660CA623 Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/3MWi_sarB7UU3XV2Gox6fZeLswg.roa Signing time: Fri 02 Jan 2026 10:19:44 +0000 ROA not before: Fri 02 Jan 2026 10:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15440 IP address blocks: 91.188.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6a:19:27:f4:0b:d9:0c:8e:77:c4:66:0c:a6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcc5a2fec6ab07b514dd75761a8c7a7d978bb308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:ca:50:56:7c:c1:55:96:ba:d1:f3:80:58: 0c:01:7c:e8:6e:c6:d2:fd:f9:31:44:07:05:79:bc: 94:35:70:38:68:8f:55:fe:0c:f0:76:0c:df:e9:29: 85:c2:08:ef:73:a8:07:b2:bc:da:e9:cc:4e:b1:4a: 53:78:c4:36:b2:12:b0:a0:28:83:24:c6:ec:0a:0e: 5d:ba:e3:71:c0:5b:28:23:07:2a:c9:6e:d0:d2:df: a8:63:03:92:1d:91:c1:8d:2d:19:dd:96:ae:a4:a0: 9a:ca:a1:70:11:66:d4:c7:92:01:76:4b:76:0c:99: 60:d3:5d:97:2c:4a:1d:71:ba:b2:51:98:6f:ab:87: 54:48:d5:fa:5c:d4:7e:04:6f:02:c0:1d:82:e1:a7: db:ed:86:c9:48:0c:6a:f8:d8:a6:41:63:a7:5f:5a: 49:19:6e:9e:d9:e1:34:8b:e1:71:ff:0c:c8:68:58: 97:d4:8c:a3:4d:ce:f6:ff:4d:68:18:39:e8:48:85: aa:fa:45:10:e4:a6:15:1f:11:e0:d6:75:0b:73:a3: 9f:71:39:c0:05:6c:d5:5b:1e:98:04:dc:8d:45:b6: 6f:51:9b:23:62:5d:84:f0:c0:a0:6a:ce:a6:24:16: 73:71:0e:33:af:c6:6e:f1:51:51:d7:6a:c3:e5:f3: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C5:A2:FE:C6:AB:07:B5:14:DD:75:76:1A:8C:7A:7D:97:8B:B3:08 X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/3MWi_sarB7UU3XV2Gox6fZeLswg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.188.254.0/24 Signature Algorithm: sha256WithRSAEncryption c0:24:fd:b6:94:64:4e:f3:07:d9:b6:35:f0:59:c5:8b:1a:40: 9b:6b:5b:8a:f1:55:37:ae:bf:39:49:ae:53:ac:cd:d3:61:0f: ee:a3:6b:2d:24:dd:80:8a:2b:74:4c:a6:e1:da:61:8a:55:6c: 9d:5f:7c:2f:9f:1b:a8:1d:55:0e:ab:74:53:a3:9c:10:e6:e8: c0:e3:61:a6:8c:48:59:7e:36:3f:2b:6f:84:58:d1:46:65:2d: 8a:0e:04:b8:7a:b3:6b:d9:c1:3a:42:19:c1:de:d9:fd:e1:1f: c0:0a:fa:fd:a8:80:29:a1:12:80:87:c6:fe:5c:75:35:c7:e4: 3e:a0:fc:26:0a:98:9b:e8:f2:32:36:4e:5f:df:59:11:2d:cb: 59:20:d7:e0:b3:80:48:2e:35:8f:ea:51:09:ca:d2:a1:a6:67: ba:fe:81:aa:a3:50:ba:7d:f9:fb:e0:6c:72:16:d4:5a:51:59: a2:26:b8:ab:0c:c2:31:8a:57:4e:d0:93:82:71:7e:69:6f:6c: 8f:f4:44:89:96:c5:fc:fc:5b:6b:0b:39:be:f8:f2:79:1c:f3: 38:08:93:de:a1:7e:4b:da:f7:61:11:a9:98:4e:c5:35:13:7d: 6b:9b:03:d6:03:31:03:55:5a:ba:b0:dc:4c:af:db:e6:90:f9: 32:c4:64:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGoZJ/QL2QyOd8RmDKYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2M1YTJmZWM2YWIwN2I1MTRkZDc1NzYxYThjN2E3ZDk3OGJiMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL3KUFZ8wVWWutHzgFgMAXzobsbS /fkxRAcFebyUNXA4aI9V/gzwdgzf6SmFwgjvc6gHsrza6cxOsUpTeMQ2shKwoCiD JMbsCg5duuNxwFsoIwcqyW7Q0t+oYwOSHZHBjS0Z3ZaupKCayqFwEWbUx5IBdkt2 DJlg012XLEodcbqyUZhvq4dUSNX6XNR+BG8CwB2C4afb7YbJSAxq+NimQWOnX1pJ GW6e2eE0i+Fx/wzIaFiX1IyjTc72/01oGDnoSIWq+kUQ5KYVHxHg1nULc6OfcTnA BWzVWx6YBNyNRbZvUZsjYl2E8MCgas6mJBZzcQ4zr8Zu8VFR12rD5fPTDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNzFov7Gqwe1FN11dhqMen2Xi7MIMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvM01XaV9zYXJCN1VVM1hWMkdveDZmWmVMc3dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z+MA0G CSqGSIb3DQEBCwUAA4IBAQDAJP22lGRO8wfZtjXwWcWLGkCba1uK8VU3rr85Sa5T rM3TYQ/uo2stJN2Aiit0TKbh2mGKVWydX3wvnxuoHVUOq3RTo5wQ5ujA42GmjEhZ fjY/K2+EWNFGZS2KDgS4erNr2cE6QhnB3tn94R/ACvr9qIApoRKAh8b+XHU1x+Q+ oPwmCpib6PIyNk5f31kRLctZINfgs4BILjWP6lEJytKhpme6/oGqo1C6ffn74Gxy FtRaUVmiJrirDMIxildO0JOCcX5pb2yP9ESJlsX8/FtrCzm++PJ5HPM4CJPeoX5L 2vdhEamYTsU1E31rmwPWAzEDVVq6sNxMr9vmkPkyxGRj -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:13 2026 by rpki-client