This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/3qtjPVhy36B112_T9YD_k1D7PrQ.roa File: 3qtjPVhy36B112_T9YD_k1D7PrQ.roa (raw, json) Hash identifier: TnLbrW8cdvU0sgFs8JL8GKZ+s8BUvq1O8YCehip/3/4= Subject key identifier: DE:AB:63:3D:58:72:DF:A0:75:D7:6F:D3:F5:80:FF:93:50:FB:3E:B4 Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08 Certificate serial: 019B7F83894B1A531A723240DF0966BC04B6 Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/3qtjPVhy36B112_T9YD_k1D7PrQ.roa Signing time: Fri 02 Jan 2026 16:21:25 +0000 ROA not before: Fri 02 Jan 2026 16:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8660 IP address blocks: 80.93.64.0/20 maxlen: 24 212.48.0.0/19 maxlen: 24 213.209.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:89:4b:1a:53:1a:72:32:40:df:09:66:bc:04:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08 Validity Not Before: Jan 2 16:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deab633d5872dfa075d76fd3f580ff9350fb3eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:e7:55:2e:1e:46:8a:58:7e:3f:f8:90:00: f9:22:9d:b9:35:c2:ae:ac:27:36:f8:a4:5c:04:66: 40:18:6e:85:4f:ed:7a:07:09:01:7d:52:92:99:4e: ba:c6:2e:07:5b:0d:71:04:04:44:94:eb:e2:1f:48: 51:3c:02:d9:2e:66:8e:83:50:b5:c1:87:eb:f4:b8: bf:75:8a:d2:83:76:35:54:aa:c1:9b:5e:28:47:c6: 4a:27:d2:9b:13:8b:e0:28:a3:2d:68:ff:7f:44:70: 55:98:7f:64:9b:36:b5:47:d1:41:0c:23:fd:08:a2: 52:8d:30:d1:c9:98:13:f9:74:d5:c9:e5:f8:84:5b: 92:05:42:43:38:8d:48:9a:d2:2d:e3:94:fa:8c:9d: 23:57:38:69:ff:cb:b8:d5:72:80:07:36:28:eb:6c: 80:3f:51:e6:fc:7e:ec:4f:0f:96:df:78:08:72:8f: d7:ef:fe:a7:f5:49:df:68:3c:b3:90:56:ee:8f:37: a8:72:e7:dc:4f:ce:4c:c1:c0:85:7f:e0:01:d9:98: 5e:79:c6:5e:05:bf:a1:35:c9:a9:44:54:c7:05:19: e3:e4:66:7e:a5:b0:89:09:cc:7d:fd:48:d6:8f:96: f9:79:2c:d1:86:59:dd:8c:35:dc:53:97:4a:6f:08: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AB:63:3D:58:72:DF:A0:75:D7:6F:D3:F5:80:FF:93:50:FB:3E:B4 X509v3 Authority Key Identifier: keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/3qtjPVhy36B112_T9YD_k1D7PrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.64.0/20 212.48.0.0/19 213.209.0.0/18 Signature Algorithm: sha256WithRSAEncryption 82:18:f8:78:76:f9:2e:60:67:cc:3a:32:da:dd:89:a8:2e:02: b9:c1:da:e2:2f:0f:80:03:c6:dc:bc:86:f9:39:6e:a1:61:7b: 0e:92:4a:c3:92:8e:fc:10:b1:ce:7e:e1:39:e4:f4:1a:c7:37: 06:02:29:a3:0c:ac:4b:85:9a:37:d8:2c:aa:6a:96:ec:07:93: 47:47:11:90:5d:b0:69:75:e7:97:fb:d0:bd:bf:f1:6f:49:0c: 46:4b:dd:a2:8d:be:16:d4:fb:33:ab:bb:aa:4e:eb:24:86:9a: 2d:7c:23:b4:f5:a1:86:de:03:d8:ca:9b:38:4c:59:09:4b:64: a8:bb:fe:89:03:41:3f:eb:09:a0:ac:b6:66:ee:b9:e8:40:34: ec:ec:b7:a6:d5:8a:76:70:48:3e:ed:f8:08:87:04:3e:a2:1c: fd:ab:36:77:13:dd:c8:4e:65:d9:e8:35:80:d9:70:40:0a:fc: a3:dd:89:d4:4b:9f:8c:47:64:6c:14:10:e9:2d:97:e2:fd:08: f5:6c:65:c6:66:80:c6:41:1e:20:ee:ab:c3:3e:54:2a:90:c8: 37:96:bb:81:26:b1:2a:f1:ed:c5:89:92:b3:60:02:96:1b:da: d9:c7:3b:fb:97:22:39:ba:45:83:64:c4:ea:f4:f5:70:10:ee: 1a:06:0d:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g4lLGlMacjJA3wlmvAS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZmMzZDJjOTI5NzEwMzA2ZTg0N2M2MDdkMzgxMTRhZWJi M2NjMDgwHhcNMjYwMTAyMTYyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWFiNjMzZDU4NzJkZmEwNzVkNzZmZDNmNTgwZmY5MzUwZmIzZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMjnVS4eRopYfj/4kAD5Ip25NcKu rCc2+KRcBGZAGG6FT+16BwkBfVKSmU66xi4HWw1xBARElOviH0hRPALZLmaOg1C1 wYfr9Li/dYrSg3Y1VKrBm14oR8ZKJ9KbE4vgKKMtaP9/RHBVmH9kmza1R9FBDCP9 CKJSjTDRyZgT+XTVyeX4hFuSBUJDOI1ImtIt45T6jJ0jVzhp/8u41XKABzYo62yA P1Hm/H7sTw+W33gIco/X7/6n9UnfaDyzkFbujzeocufcT85MwcCFf+AB2ZheecZe Bb+hNcmpRFTHBRnj5GZ+pbCJCcx9/UjWj5b5eSzRhlndjDXcU5dKbwjObQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN6rYz1Yct+gdddv0/WA/5NQ+z60MB8GA1UdIwQY MBaAFKr8PSySlxAwboR8YH04EUrrs8wIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZ3OUxKS1hFREJ1aEh4Z2ZUZ1JTdXV6ekFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82Mzc5NDYtN2JmMi00OWEzLWI1MGMt MTM3ZDg2ZTMwM2M1LzEvM3F0alBWaHkzNkIxMTJfVDlZRF9rMUQ3UHJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82Mzc5NDYtN2JmMi00OWEzLWI1MGMtMTM3ZDg2ZTMwM2M1 LzEvcXZ3OUxKS1hFREJ1aEh4Z2ZUZ1JTdXV6ekFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUF1AAwQF 1DAAAwQG1dEAMA0GCSqGSIb3DQEBCwUAA4IBAQCCGPh4dvkuYGfMOjLa3YmoLgK5 wdriLw+AA8bcvIb5OW6hYXsOkkrDko78ELHOfuE55PQaxzcGAimjDKxLhZo32Cyq apbsB5NHRxGQXbBpdeeX+9C9v/FvSQxGS92ijb4W1Pszq7uqTuskhpotfCO09aGG 3gPYyps4TFkJS2Sou/6JA0E/6wmgrLZm7rnoQDTs7Lem1Yp2cEg+7fgIhwQ+ohz9 qzZ3E93ITmXZ6DWA2XBACvyj3YnUS5+MR2RsFBDpLZfi/Qj1bGXGZoDGQR4g7qvD PlQqkMg3lruBJrEq8e3FiZKzYAKWG9rZxzv7lyI5ukWDZMTq9PVwEO4aBg2D -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:37 2026 by rpki-client