This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/PItnMttIkdeuTPXavmvPG7wEEmg.roa File: PItnMttIkdeuTPXavmvPG7wEEmg.roa (raw, json) Hash identifier: g8vhWp9yKKoH5MZ8w1k35uUTgUFMBWzylaX6sR0nuqk= Subject key identifier: 3C:8B:67:32:DB:48:91:D7:AE:4C:F5:DA:BE:6B:CF:1B:BC:04:12:68 Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc Certificate serial: 019B7C131C950AEC45D5A0854CDDF9B4EA6C Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/PItnMttIkdeuTPXavmvPG7wEEmg.roa Signing time: Fri 02 Jan 2026 00:19:45 +0000 ROA not before: Fri 02 Jan 2026 00:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 185.34.224.0/24 maxlen: 24 185.34.225.0/24 maxlen: 24 185.34.226.0/24 maxlen: 24 185.34.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1c:95:0a:ec:45:d5:a0:85:4c:dd:f9:b4:ea:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c8b6732db4891d7ae4cf5dabe6bcf1bbc041268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:70:c9:9f:03:4e:43:2b:41:0b:30:1c:71: 41:e2:08:7e:25:eb:cf:a5:fe:e6:5b:74:55:db:77: fc:6b:48:65:86:c7:56:73:df:8f:61:28:21:ae:33: 73:c9:8b:c7:29:b1:ba:a4:4d:33:10:94:18:c7:fa: 72:48:5c:30:df:87:89:0d:b1:93:0e:b4:49:73:31: bd:6d:6c:e7:ba:3f:44:9f:5f:b2:4d:bc:a7:63:6a: c9:72:5f:07:48:e8:da:6c:d1:e8:97:71:0e:76:24: 9d:22:a1:17:f7:2e:2f:48:52:71:7f:92:b6:73:4e: cf:0e:21:9e:d1:15:c0:6c:67:48:70:ff:3a:82:57: 3a:f0:61:f4:7b:a0:65:2c:9e:c7:38:f2:96:5e:5b: 58:aa:6d:12:04:0c:a2:55:f6:c9:fe:71:34:36:7c: 67:6f:46:3f:7e:57:e5:35:57:83:eb:81:df:fb:64: a8:c7:c9:12:af:c1:47:66:6b:27:c6:d2:e8:07:07: ac:13:02:12:d0:6d:9d:05:a8:c4:db:d3:b0:83:98: 67:84:8c:98:87:5c:27:5e:91:f8:8a:37:7f:8c:99: d6:ef:e2:e0:9c:53:4c:28:25:2c:0b:f2:86:cb:6f: 89:33:dd:68:71:cb:ed:de:47:c7:65:f5:de:ca:38: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8B:67:32:DB:48:91:D7:AE:4C:F5:DA:BE:6B:CF:1B:BC:04:12:68 X509v3 Authority Key Identifier: keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/PItnMttIkdeuTPXavmvPG7wEEmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.224.0/22 Signature Algorithm: sha256WithRSAEncryption bd:0e:b9:c3:90:f1:ae:38:aa:f1:5c:b7:1a:5c:8c:47:5c:f3: 46:a6:39:36:45:7e:e6:19:7b:48:a6:f8:6c:c9:25:34:65:36: 61:cd:b6:fb:77:be:e6:e3:0e:16:04:8c:79:11:e5:b4:01:ed: c0:fd:0a:43:5e:c0:b2:a3:23:64:b0:86:78:08:12:bd:8f:c9: c6:d9:e6:d3:4a:b0:1a:cd:ec:42:af:67:f7:ad:1d:8e:20:44: 2d:d8:65:8a:92:4c:31:4f:65:35:fe:0f:90:ed:7a:b7:df:76: b4:24:a8:86:54:46:00:3f:46:d5:8e:90:78:11:d8:38:b1:f5: a1:16:39:06:51:fb:09:7d:d0:25:e6:64:29:aa:50:39:99:3a: 5c:92:c1:87:06:39:2f:5d:88:1f:c8:47:46:48:fd:8c:ab:62: d5:d4:7b:86:62:1f:28:35:18:28:fb:4f:10:c6:f7:91:57:21: d3:1a:ea:ab:ec:ad:0e:29:e6:3d:18:2f:f6:97:74:4b:9f:2b: 85:2c:e2:72:b3:12:cf:98:d2:27:37:e8:ef:4e:28:ed:79:b7: d9:bc:7a:25:ae:01:03:84:45:bc:7d:32:6f:86:df:95:0c:bd: d6:69:18:61:85:6e:ce:e8:7d:17:5f:04:d0:2a:c3:5e:12:a6: 97:c5:33:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExyVCuxF1aCFTN35tOpsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzgzMWE2MWJjOGE4ZjRjYjg1ODg3MDIyZmI2Zjg2Mzk3 MzQ1ZGMwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzhiNjczMmRiNDg5MWQ3YWU0Y2Y1ZGFiZTZiY2YxYmJjMDQxMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGJwyZ8DTkMrQQswHHFB4gh+JevP pf7mW3RV23f8a0hlhsdWc9+PYSghrjNzyYvHKbG6pE0zEJQYx/pySFww34eJDbGT DrRJczG9bWznuj9En1+yTbynY2rJcl8HSOjabNHol3EOdiSdIqEX9y4vSFJxf5K2 c07PDiGe0RXAbGdIcP86glc68GH0e6BlLJ7HOPKWXltYqm0SBAyiVfbJ/nE0Nnxn b0Y/flflNVeD64Hf+2Sox8kSr8FHZmsnxtLoBwesEwIS0G2dBajE29Owg5hnhIyY h1wnXpH4ijd/jJnW7+LgnFNMKCUsC/KGy2+JM91occvt3kfHZfXeyjj4yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDyLZzLbSJHXrkz12r5rzxu8BBJoMB8GA1UdIwQY MBaAFGA4MaYbyKj0y4WIcCL7b4Y5c0XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURneHBodklxUFRMaFlod0l2dHZoamx6UmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzMyNzYtNTBhZC00ZWJjLWEyYTYt OTgwODU0NTkzM2M5LzEvUEl0bk10dElrZGV1VFBYYXZtdlBHN3dFRW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hYzMyNzYtNTBhZC00ZWJjLWEyYTYtOTgwODU0NTkzM2M5 LzEvWURneHBodklxUFRMaFlod0l2dHZoamx6UmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSLgMA0G CSqGSIb3DQEBCwUAA4IBAQC9DrnDkPGuOKrxXLcaXIxHXPNGpjk2RX7mGXtIpvhs ySU0ZTZhzbb7d77m4w4WBIx5EeW0Ae3A/QpDXsCyoyNksIZ4CBK9j8nG2ebTSrAa zexCr2f3rR2OIEQt2GWKkkwxT2U1/g+Q7Xq333a0JKiGVEYAP0bVjpB4Edg4sfWh FjkGUfsJfdAl5mQpqlA5mTpcksGHBjkvXYgfyEdGSP2Mq2LV1HuGYh8oNRgo+08Q xveRVyHTGuqr7K0OKeY9GC/2l3RLnyuFLOJysxLPmNInN+jvTijtebfZvHolrgED hEW8fTJvht+VDL3WaRhhhW7O6H0XXwTQKsNeEqaXxTNZ -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:19 2026 by rpki-client