This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/3ab_o0Nl-S6Ei86C2hafif65fQo.roa File: 3ab_o0Nl-S6Ei86C2hafif65fQo.roa (raw, json) Hash identifier: dJDFaPL1IxpS3bFn7gG9LpNkmVG6kmHGyMD/BQus07s= Subject key identifier: DD:A6:FF:A3:43:65:F9:2E:84:8B:CE:82:DA:16:9F:89:FE:B9:7D:0A Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da Certificate serial: 019B79ED133C83567B80F1A7CD4B08DC2439 Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/3ab_o0Nl-S6Ei86C2hafif65fQo.roa Signing time: Thu 01 Jan 2026 14:18:58 +0000 ROA not before: Thu 01 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35518 IP address blocks: 46.245.184.0/21 maxlen: 21 87.245.64.0/18 maxlen: 18 88.151.144.0/21 maxlen: 21 88.213.128.0/18 maxlen: 18 91.102.192.0/21 maxlen: 21 185.43.200.0/22 maxlen: 22 193.134.4.0/22 maxlen: 22 2a00:d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:13:3c:83:56:7b:80:f1:a7:cd:4b:08:dc:24:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dda6ffa34365f92e848bce82da169f89feb97d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1e:31:fb:e2:fc:ca:4c:39:16:a4:b7:44:45: ca:ae:55:29:0e:66:c3:0b:d3:2a:fe:d0:96:b2:1b: 05:42:42:ae:47:22:c3:20:4a:06:61:12:be:76:d1: 5b:ee:a6:83:e2:90:ba:db:69:79:80:1d:6e:e7:0b: 86:30:61:90:a4:4e:ce:ae:84:64:a2:7e:34:3e:1c: 43:89:8e:a0:31:c5:1e:4f:78:91:3c:40:44:80:68: 66:73:28:ea:a4:a2:bd:59:ea:77:36:24:95:6d:07: ea:26:64:71:31:98:f9:56:3f:de:1a:32:4c:45:8a: 44:70:ea:97:52:92:be:75:8a:c7:e6:f1:55:90:81: 4b:68:8e:61:78:e8:9f:37:0f:1e:99:b0:78:3d:d3: 23:1a:bf:62:24:7a:2b:5c:8d:f4:09:97:36:7e:d2: a5:80:2e:d3:4c:42:f7:1c:80:58:2e:97:8a:8c:eb: 81:b5:48:2f:29:6d:78:df:cd:c6:61:56:3d:8d:fb: 19:7f:a4:b3:62:ce:b5:36:2d:b5:25:2a:d2:8b:3d: a2:e7:62:99:00:d1:05:33:9d:31:9b:dd:31:e3:cb: 64:f8:48:a7:9f:e6:53:08:fc:5e:46:aa:2e:2a:64: e2:34:98:54:b9:a1:50:d0:73:4e:9e:92:27:f5:a8: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A6:FF:A3:43:65:F9:2E:84:8B:CE:82:DA:16:9F:89:FE:B9:7D:0A X509v3 Authority Key Identifier: keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/3ab_o0Nl-S6Ei86C2hafif65fQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.184.0/21 87.245.64.0/18 88.151.144.0/21 88.213.128.0/18 91.102.192.0/21 185.43.200.0/22 193.134.4.0/22 IPv6: 2a00:d80::/29 Signature Algorithm: sha256WithRSAEncryption 41:11:f8:f9:85:fd:5e:fa:16:7a:c9:bf:23:62:ca:af:a3:c1: 8f:a4:dd:91:53:fa:65:19:04:52:90:18:59:b1:16:3a:ad:ff: ea:3e:b5:a2:c7:33:e7:54:3c:2e:7e:b5:19:7e:17:aa:a0:08: fc:bf:a1:31:83:85:44:ad:7b:fc:8c:12:04:e9:87:2d:9f:44: 39:1d:3c:e1:76:d8:00:f5:71:f5:56:0e:b5:ab:91:21:c8:75: a8:50:f6:f9:81:b4:4e:b4:17:05:f0:57:fe:44:f3:8e:7e:f7: 9e:3b:bf:88:0a:c8:dc:f8:33:e7:1c:97:5a:01:7f:d7:68:62: 42:46:2d:ef:8c:43:8c:22:92:a4:84:a5:3f:8a:21:f7:63:07: 79:8c:8e:56:d9:ed:12:bd:a8:6b:2c:38:be:44:a0:6a:00:7d: 09:ff:fb:f8:a4:88:7d:b8:1a:96:71:1c:5d:e2:d6:85:05:15: c2:1d:3f:b6:21:c5:ca:7f:32:3c:ad:af:74:01:b5:78:3b:00: 41:06:d0:93:2e:61:70:76:bb:8c:b7:80:36:32:db:e3:b5:91: f8:df:67:4d:87:3e:15:20:c3:5a:8b:20:6c:10:50:7a:a3:be: 59:ac:77:20:a0:36:3b:ad:96:49:5f:71:e7:d1:9d:4b:a3:8d: e8:d9:a1:6f -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt57RM8g1Z7gPGnzUsI3CQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MWVmMGFkNDNjN2I4ZTI2YzE3NWZkYzFmMTY5NmQwMDgx ZGM0ZGEwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGE2ZmZhMzQzNjVmOTJlODQ4YmNlODJkYTE2OWY4OWZlYjk3ZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB4x++L8ykw5FqS3REXKrlUpDmbD C9Mq/tCWshsFQkKuRyLDIEoGYRK+dtFb7qaD4pC622l5gB1u5wuGMGGQpE7OroRk on40PhxDiY6gMcUeT3iRPEBEgGhmcyjqpKK9Wep3NiSVbQfqJmRxMZj5Vj/eGjJM RYpEcOqXUpK+dYrH5vFVkIFLaI5heOifNw8embB4PdMjGr9iJHorXI30CZc2ftKl gC7TTEL3HIBYLpeKjOuBtUgvKW14383GYVY9jfsZf6SzYs61Ni21JSrSiz2i52KZ ANEFM50xm90x48tk+Einn+ZTCPxeRqouKmTiNJhUuaFQ0HNOnpIn9aiL4QIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFN2m/6NDZfkuhIvOgtoWn4n+uX0KMB8GA1UdIwQY MBaAFMce8K1Dx7jibBdf3B8WltAIHcTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMWMzYWEtYTJhNy00MmU3LTgwNDYt MjI0M2UzNjk4M2UzLzEvM2FiX28wTmwtUzZFaTg2QzJoYWZpZjY1ZlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMWMzYWEtYTJhNy00MmU3LTgwNDYtMjI0M2UzNjk4M2Uz LzEveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDLvW4AwQG V/VAAwQDWJeQAwQGWNWAAwQDW2bAAwQCuSvIAwQCwYYEMA0EAgACMAcDBQMqAA2A MA0GCSqGSIb3DQEBCwUAA4IBAQBBEfj5hf1e+hZ6yb8jYsqvo8GPpN2RU/plGQRS kBhZsRY6rf/qPrWixzPnVDwufrUZfheqoAj8v6Exg4VErXv8jBIE6Yctn0Q5HTzh dtgA9XH1Vg61q5EhyHWoUPb5gbROtBcF8Ff+RPOOfveeO7+ICsjc+DPnHJdaAX/X aGJCRi3vjEOMIpKkhKU/iiH3Ywd5jI5W2e0SvahrLDi+RKBqAH0J//v4pIh9uBqW cRxd4taFBRXCHT+2IcXKfzI8ra90AbV4OwBBBtCTLmFwdruMt4A2MtvjtZH432dN hz4VIMNaiyBsEFB6o75ZrHcgoDY7rZZJX3Hn0Z1Lo43o2aFv -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:09 2026 by rpki-client