This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/w3_eDrVHUYCcKtbza7c41NLDYIM.roa File: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (raw, json) Hash identifier: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4= Subject key identifier: C3:7F:DE:0E:B5:47:51:80:9C:2A:D6:F3:6B:B7:38:D4:D2:C3:60:83 Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a Certificate serial: 019B7B360FFBCE7A3A9061BEA18AB1090365 Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/w3_eDrVHUYCcKtbza7c41NLDYIM.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8787 IP address blocks: 195.88.10.0/23 maxlen: 23 2001:67c:2090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0f:fb:ce:7a:3a:90:61:be:a1:8a:b1:09:03:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c37fde0eb54751809c2ad6f36bb738d4d2c36083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:23:f4:62:04:02:33:a7:7d:f0:31:f6:cf: 68:a5:66:c4:c8:7e:18:22:e5:2b:5f:e4:10:15:d3: 4f:c8:49:b3:2d:dd:57:54:97:1f:9f:a5:62:5a:c1: 6f:3b:27:e6:f7:b1:04:57:2d:86:e7:63:e9:d4:f1: 5d:1e:40:70:79:1c:d2:7f:71:21:e1:06:5f:8a:bf: 01:d2:57:67:4e:ea:87:bb:5d:9a:46:7d:73:54:5b: e5:a2:45:1d:d8:bd:90:b6:85:15:c8:bc:3c:8b:db: d1:25:f8:f7:bc:32:01:90:1c:8d:45:3e:c3:d2:0b: 9a:53:30:15:0c:1a:77:b0:21:33:fb:43:8f:98:24: ab:a1:5a:93:85:a2:39:8a:b6:01:8b:7b:14:41:59: 3b:b1:8d:1b:55:ba:58:d8:3e:2b:10:59:25:42:0a: b7:ac:7a:8a:ce:12:ef:21:a0:8a:50:d7:99:62:5b: bf:c5:a2:a1:9d:24:9e:8c:78:a8:2c:fe:c1:54:93: 39:c7:fc:d3:72:c5:16:2d:5f:ad:87:4a:a1:f4:f7: d3:f5:88:9d:d8:02:5d:8a:bc:d9:ef:8b:5c:fb:c7: 8e:a1:ab:0d:f0:97:f3:e6:29:84:83:6e:16:4b:4b: 95:8b:87:65:53:79:ee:c6:e9:6f:f1:a0:dd:4f:83: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7F:DE:0E:B5:47:51:80:9C:2A:D6:F3:6B:B7:38:D4:D2:C3:60:83 X509v3 Authority Key Identifier: keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/w3_eDrVHUYCcKtbza7c41NLDYIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.10.0/23 IPv6: 2001:67c:2090::/48 Signature Algorithm: sha256WithRSAEncryption 7b:30:29:60:f6:88:24:6e:f3:83:b0:56:b1:14:c5:7c:11:24: 94:b3:21:09:d8:08:62:87:62:14:48:66:f7:ca:35:19:85:25: 09:1d:73:9d:fc:6e:7e:35:cc:03:b6:dc:dd:ac:b2:09:79:a2: 7c:e0:a7:7e:2e:8d:51:97:ca:a0:3d:5f:3b:e6:a0:23:4b:fa: b6:04:37:af:25:73:c8:65:13:f6:5f:74:aa:5c:4c:f8:df:21: e7:36:74:38:ac:f2:24:a8:c6:80:d1:72:2e:16:1d:1e:1f:c3: a9:7c:0b:ad:9f:b2:98:ee:7a:f2:5b:9a:ce:32:f2:d3:f8:62: 44:63:e6:82:3a:82:1d:ab:a8:cc:9d:4f:6f:94:cb:fd:1c:8a: 8b:33:a5:2c:24:cd:0d:8e:04:71:d1:01:0c:4b:8d:db:d8:92: 2a:b1:b2:6c:0b:1b:10:4b:01:20:2b:fc:f2:eb:2d:8f:f7:d5: 6c:69:f8:cd:2a:df:c2:4b:41:a7:90:8a:0b:29:90:57:1b:d2: e1:c1:42:5f:cd:ce:81:4c:ed:9f:36:f5:c5:08:f4:8e:85:fa: f2:70:f7:f7:30:d1:58:ff:13:70:7d:eb:f1:61:8e:07:4f:2c: 23:38:88:a6:e8:26:6b:d4:bd:58:04:c0:9a:17:89:81:53:de: 45:5d:56:a5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Ng/7zno6kGG+oYqxCQNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNTVlYzE3NWY2ZWU3YTFmYzFmODlhZGY3NTRiYjJhMDg2 MjU3OGEwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzdmZGUwZWI1NDc1MTgwOWMyYWQ2ZjM2YmI3MzhkNGQyYzM2MDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnEj9GIEAjOnffAx9s9opWbEyH4Y IuUrX+QQFdNPyEmzLd1XVJcfn6ViWsFvOyfm97EEVy2G52Pp1PFdHkBweRzSf3Eh 4QZfir8B0ldnTuqHu12aRn1zVFvlokUd2L2QtoUVyLw8i9vRJfj3vDIBkByNRT7D 0guaUzAVDBp3sCEz+0OPmCSroVqThaI5irYBi3sUQVk7sY0bVbpY2D4rEFklQgq3 rHqKzhLvIaCKUNeZYlu/xaKhnSSejHioLP7BVJM5x/zTcsUWLV+th0qh9PfT9Yid 2AJdirzZ74tc+8eOoasN8Jfz5imEg24WS0uVi4dlU3nuxulv8aDdT4Pg2QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMN/3g61R1GAnCrW82u3ONTSw2CDMB8GA1UdIwQY MBaAFN1V7Bdfbueh/B+JrfdUuyoIYleKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYt NDZjMmNjMjgwMmYxLzEvdzNfZURyVkhVWUNjS3RiemE3YzQxTkxEWUlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYtNDZjMmNjMjgwMmYx LzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw1gKMA8E AgACMAkDBwAgAQZ8IJAwDQYJKoZIhvcNAQELBQADggEBAHswKWD2iCRu84OwVrEU xXwRJJSzIQnYCGKHYhRIZvfKNRmFJQkdc538bn41zAO23N2ssgl5onzgp34ujVGX yqA9XzvmoCNL+rYEN68lc8hlE/ZfdKpcTPjfIec2dDis8iSoxoDRci4WHR4fw6l8 C62fspjuevJbms4y8tP4YkRj5oI6gh2rqMydT2+Uy/0cioszpSwkzQ2OBHHRAQxL jdvYkiqxsmwLGxBLASAr/PLrLY/31Wxp+M0q38JLQaeQigspkFcb0uHBQl/NzoFM 7Z829cUI9I6F+vJw9/cw0Vj/E3B96/FhjgdPLCM4iKboJmvUvVgEwJoXiYFT3kVd VqU= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:47 2026 by rpki-client