This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/rK_eXiPCuOjW-auhckDc_o9LpbU.roa File: rK_eXiPCuOjW-auhckDc_o9LpbU.roa (raw, json) Hash identifier: 9zrMuRy0E1ETZnPDy8ZqKg+/z8n/i1oHLCCis26nPQg= Subject key identifier: AC:AF:DE:5E:23:C2:B8:E8:D6:F9:AB:A1:72:40:DC:FE:8F:4B:A5:B5 Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Certificate serial: 019B7A5B8D4A70F86383C96B4F5121C0670B Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/rK_eXiPCuOjW-auhckDc_o9LpbU.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196816 IP address blocks: 94.143.24.0/21 maxlen: 24 185.21.32.0/22 maxlen: 24 2a01:4480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8d:4a:70:f8:63:83:c9:6b:4f:51:21:c0:67:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acafde5e23c2b8e8d6f9aba17240dcfe8f4ba5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:34:4d:48:93:3d:b0:3d:95:02:f7:c9:51: bc:59:4e:c1:fe:cb:25:6f:80:e1:c6:51:53:66:19: 04:ba:77:47:d4:8c:89:fe:de:c4:48:22:9b:00:f6: 62:b7:20:d2:67:a1:9e:e0:a6:ce:41:7f:7d:63:cb: 13:71:9d:9a:d0:5e:bc:43:e1:ee:50:04:51:27:93: 7d:08:85:2e:a2:a1:c1:c6:b5:34:09:c2:0e:1a:20: 2c:15:71:40:c3:4a:e1:e6:e1:ea:53:4e:da:fb:df: 0b:c6:b7:96:62:dd:ce:de:ba:81:b5:54:d8:a8:da: 96:8d:00:f3:d5:b3:4a:56:89:46:7f:db:dc:20:06: b1:fa:b1:d8:06:46:2f:c7:46:78:4a:b6:ed:ff:3b: 70:9f:49:f6:6d:91:f1:50:52:ca:f2:fa:75:1c:9b: ce:e8:25:1b:d9:30:62:c3:a1:47:f1:42:3c:62:88: 6d:c5:85:44:5b:4f:ae:ca:2b:31:72:ae:6c:c6:ff: cf:eb:6b:1c:9d:59:a6:ad:97:84:00:6c:15:72:d2: 3e:7e:d4:7d:ab:8a:1d:cf:4d:46:72:e7:8b:64:35: 94:43:13:73:b3:7a:2a:b0:b5:35:fd:28:b4:f7:9a: 7d:10:d5:0b:78:75:15:9e:a7:51:d7:36:4a:a3:89: bf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AF:DE:5E:23:C2:B8:E8:D6:F9:AB:A1:72:40:DC:FE:8F:4B:A5:B5 X509v3 Authority Key Identifier: keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/rK_eXiPCuOjW-auhckDc_o9LpbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.143.24.0/21 185.21.32.0/22 IPv6: 2a01:4480::/32 Signature Algorithm: sha256WithRSAEncryption 43:7b:1c:ae:47:94:bb:71:f9:5a:dc:8c:8f:85:50:e9:fc:14: c5:3e:cf:d5:67:c9:41:94:c4:a1:75:65:d9:ad:dd:61:63:71: 41:82:a9:8b:16:94:fc:20:3d:44:6d:9a:ee:f6:44:5b:b0:91: 75:99:61:23:8a:03:84:3a:36:52:bd:bf:36:63:88:4a:0a:38: 3c:2d:32:80:51:2b:4c:42:c4:1e:02:82:61:69:1f:c4:57:bb: 68:8b:f5:e0:a3:ac:f9:11:b0:ae:4b:89:77:8f:4e:39:d2:ee: df:b5:e7:5c:32:5e:17:f1:6a:bb:da:ba:26:e9:dd:cd:a2:08: 71:70:d3:bf:54:5a:15:76:77:a1:c7:fe:3a:86:f1:b2:96:9e: 29:93:d4:21:a6:ba:a4:f2:14:df:47:67:03:5b:22:65:b4:88: 70:d0:a7:7b:e9:a0:14:3c:2d:eb:89:95:d1:de:64:47:b5:b8: 9e:09:c2:e9:26:30:02:ba:52:45:8d:ee:88:84:94:bb:fe:fb: a2:12:2a:7d:de:84:6c:19:df:94:11:43:f6:55:54:3d:64:71: 28:6a:39:d1:25:13:b7:cd:90:ed:f8:58:00:4e:cd:0a:09:d2: 8a:43:b4:f5:92:0d:06:75:5a:d7:c1:e6:fe:15:86:46:45:2f: e7:ab:2c:67 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W41KcPhjg8lrT1EhwGcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh MjhlMTMwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2FmZGU1ZTIzYzJiOGU4ZDZmOWFiYTE3MjQwZGNmZThmNGJhNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojg0TUiTPbA9lQL3yVG8WU7B/ssl b4DhxlFTZhkEundH1IyJ/t7ESCKbAPZityDSZ6Ge4KbOQX99Y8sTcZ2a0F68Q+Hu UARRJ5N9CIUuoqHBxrU0CcIOGiAsFXFAw0rh5uHqU07a+98LxreWYt3O3rqBtVTY qNqWjQDz1bNKVolGf9vcIAax+rHYBkYvx0Z4Srbt/ztwn0n2bZHxUFLK8vp1HJvO 6CUb2TBiw6FH8UI8YohtxYVEW0+uyisxcq5sxv/P62scnVmmrZeEAGwVctI+ftR9 q4odz01GcueLZDWUQxNzs3oqsLU1/Si095p9ENULeHUVnqdR1zZKo4m/cQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKyv3l4jwrjo1vmroXJA3P6PS6W1MB8GA1UdIwQY MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt ZGE3MzhhMzkwZjZlLzEvcktfZVhpUEN1T2pXLWF1aGNrRGNfbzlMcGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXo8YAwQC uRUgMA0EAgACMAcDBQAqAUSAMA0GCSqGSIb3DQEBCwUAA4IBAQBDexyuR5S7cfla 3IyPhVDp/BTFPs/VZ8lBlMShdWXZrd1hY3FBgqmLFpT8ID1EbZru9kRbsJF1mWEj igOEOjZSvb82Y4hKCjg8LTKAUStMQsQeAoJhaR/EV7toi/Xgo6z5EbCuS4l3j045 0u7ftedcMl4X8Wq72rom6d3NoghxcNO/VFoVdnehx/46hvGylp4pk9Qhprqk8hTf R2cDWyJltIhw0Kd76aAUPC3riZXR3mRHtbieCcLpJjACulJFje6IhJS7/vuiEip9 3oRsGd+UEUP2VVQ9ZHEoajnRJRO3zZDt+FgATs0KCdKKQ7T1kg0GdVrXweb+FYZG RS/nqyxn -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:29 2026 by rpki-client