This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/n3LXa0-xioBb1QsCYTVot6eV2ZE.roa File: n3LXa0-xioBb1QsCYTVot6eV2ZE.roa (raw, json) Hash identifier: n4raPKw8IwbnWXJNFwCqDhVOg3Y+1y9CxDz8k7+MVtI= Subject key identifier: 9F:72:D7:6B:4F:B1:8A:80:5B:D5:0B:02:61:35:68:B7:A7:95:D9:91 Certificate issuer: /CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78 Certificate serial: 019B79ED0BF72BFDD499ADF7B560E7B40E5C Authority key identifier: B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/n3LXa0-xioBb1QsCYTVot6eV2ZE.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210197 IP address blocks: 81.30.101.0/24 maxlen: 24 85.204.38.0/24 maxlen: 24 2a13:f400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0b:f7:2b:fd:d4:99:ad:f7:b5:60:e7:b4:0e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f72d76b4fb18a805bd50b02613568b7a795d991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:41:74:3c:9b:95:e7:f1:5d:d4:26:43:3d: 22:e8:12:10:4a:04:93:a8:f6:24:b5:5f:21:87:74: 78:55:e8:e5:f3:f8:5c:c8:05:97:34:99:82:32:7a: 72:cc:a7:7e:4b:9c:21:38:e3:87:ce:6f:91:50:22: c0:00:8e:cd:82:63:9f:35:31:1f:4b:f0:3d:ef:cf: 5d:3c:d6:c0:58:fa:3a:a8:42:98:d0:d9:b9:6d:c2: 97:1c:77:f9:e5:b6:5f:fc:e7:47:bd:46:0f:56:38: bc:e8:b4:9c:7c:80:0d:41:98:c0:3b:e3:58:45:20: fa:f6:a0:77:ba:08:4f:2e:27:b5:a1:20:47:7f:39: 10:81:aa:fa:cb:73:d7:61:3e:18:d4:45:d9:dc:b1: 83:14:9c:4d:22:7f:f1:62:85:22:49:6b:88:98:3e: 4c:75:de:1a:13:e4:6b:9c:5b:08:16:c8:48:f8:45: 55:4a:90:26:d0:76:1f:e9:62:87:e6:e2:3f:0d:7d: 01:07:b2:32:f8:d6:e8:47:74:ac:d3:05:76:7a:d6: b3:fa:c2:68:f8:cb:6d:ab:c6:b3:3d:b5:47:a4:a4: 12:e6:7d:53:14:8c:65:f5:bd:3d:0f:10:96:74:9e: be:f3:6f:7e:f3:48:67:0b:aa:5b:40:87:41:ce:d3: 83:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:72:D7:6B:4F:B1:8A:80:5B:D5:0B:02:61:35:68:B7:A7:95:D9:91 X509v3 Authority Key Identifier: keyid:B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/n3LXa0-xioBb1QsCYTVot6eV2ZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.101.0/24 85.204.38.0/24 IPv6: 2a13:f400::/29 Signature Algorithm: sha256WithRSAEncryption a1:cd:4e:4b:f9:ef:0e:8a:3e:47:c4:79:d5:f3:53:a1:7e:43: 73:30:cb:3c:4c:ba:ec:6b:1f:26:f3:f7:b3:4f:6f:75:0e:95: 9c:a5:4e:aa:87:c3:4f:8f:75:4d:18:1d:24:4e:7c:67:a9:df: 0c:d9:a4:1b:77:cc:fd:14:15:7a:5d:d1:7f:3e:b0:8e:28:cc: c2:03:c5:7f:26:94:76:f8:e2:87:40:89:50:04:43:33:f2:c8: 31:8c:ab:ff:70:03:29:42:a5:35:7c:92:b2:80:6b:7c:11:d6: ca:b2:a3:dd:2f:8d:4e:1c:3a:16:fd:c9:be:e6:0d:d9:26:bc: 91:5c:61:52:d1:4c:ca:5c:b2:55:53:7b:f2:8b:a2:ad:44:67: 20:9d:52:8d:b8:25:af:61:a3:66:bc:c3:88:65:9c:fc:21:33: 6e:ea:a7:06:83:11:6b:84:4c:ae:52:36:88:0c:4f:31:75:9b: 6f:c3:15:57:52:6a:58:66:a3:c7:7c:af:f5:c6:e1:bc:a0:99: 2f:7d:84:a2:c5:ad:af:76:12:6b:c1:d8:86:6d:a8:52:0b:d4: af:0a:66:ca:e9:16:c4:56:d3:9f:96:df:75:f3:c2:79:8e:e8: 9c:24:76:d9:7e:5f:f4:c4:2a:16:46:57:1d:7d:18:94:23:32: 5e:3d:47:c8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57Qv3K/3Uma33tWDntA5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NGRkZjZmMDMzMzFjZDc3M2M3ZTdhYmIxNTQyOWJhOGQy MGJkNzgwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjcyZDc2YjRmYjE4YTgwNWJkNTBiMDI2MTM1NjhiN2E3OTVkOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WxBdDyblefxXdQmQz0i6BIQSgST qPYktV8hh3R4Vejl8/hcyAWXNJmCMnpyzKd+S5whOOOHzm+RUCLAAI7NgmOfNTEf S/A9789dPNbAWPo6qEKY0Nm5bcKXHHf55bZf/OdHvUYPVji86LScfIANQZjAO+NY RSD69qB3ughPLie1oSBHfzkQgar6y3PXYT4Y1EXZ3LGDFJxNIn/xYoUiSWuImD5M dd4aE+RrnFsIFshI+EVVSpAm0HYf6WKH5uI/DX0BB7Iy+NboR3Ss0wV2etaz+sJo +Mttq8azPbVHpKQS5n1TFIxl9b09DxCWdJ6+829+80hnC6pbQIdBztODKwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ9y12tPsYqAW9ULAmE1aLenldmRMB8GA1UdIwQY MBaAFLVN328DMxzXc8fnq7FUKbqNIL14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFUzZmJ3TXpITmR6eC1lcnNWUXB1bzBndlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82NWJjZmYtYmEwMS00OThjLWI1NGQt ODQwMjZiYzg1MmYwLzEvbjNMWGEwLXhpb0JiMVFzQ1lUVm90NmVWMlpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82NWJjZmYtYmEwMS00OThjLWI1NGQtODQwMjZiYzg1MmYw LzEvdFUzZmJ3TXpITmR6eC1lcnNWUXB1bzBndlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAUR5lAwQA VcwmMA0EAgACMAcDBQMqE/QAMA0GCSqGSIb3DQEBCwUAA4IBAQChzU5L+e8Oij5H xHnV81OhfkNzMMs8TLrsax8m8/ezT291DpWcpU6qh8NPj3VNGB0kTnxnqd8M2aQb d8z9FBV6XdF/PrCOKMzCA8V/JpR2+OKHQIlQBEMz8sgxjKv/cAMpQqU1fJKygGt8 EdbKsqPdL41OHDoW/cm+5g3ZJryRXGFS0UzKXLJVU3vyi6KtRGcgnVKNuCWvYaNm vMOIZZz8ITNu6qcGgxFrhEyuUjaIDE8xdZtvwxVXUmpYZqPHfK/1xuG8oJkvfYSi xa2vdhJrwdiGbahSC9SvCmbK6RbEVtOflt9188J5juicJHbZfl/0xCoWRlcdfRiU IzJePUfI -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:53 2026 by rpki-client