This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/3KMzftpbJOARIPFwkH4LCQGCFNw.roa File: 3KMzftpbJOARIPFwkH4LCQGCFNw.roa (raw, json) Hash identifier: kXGt4d9WD7X2Wn0o/hJTyXRdGjpQM8KJT8r0nz9hLnk= Subject key identifier: DC:A3:33:7E:DA:5B:24:E0:11:20:F1:70:90:7E:0B:09:01:82:14:DC Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277 Certificate serial: 019B7B36D1D012FE8679BA35BBC57B33CB15 Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/3KMzftpbJOARIPFwkH4LCQGCFNw.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215833 IP address blocks: 185.104.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d1:d0:12:fe:86:79:ba:35:bb:c5:7b:33:cb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dca3337eda5b24e01120f170907e0b09018214dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:e2:d7:c7:34:7e:f2:02:35:b5:37:8b:68: 70:67:f9:31:63:d7:80:44:6e:a7:a2:ea:43:3c:10: 93:dd:10:54:be:f0:44:f8:65:27:0d:81:92:32:0c: 70:ab:0f:fe:a2:f0:06:1e:1f:bc:58:89:47:be:85: 84:3b:1f:74:44:cd:8b:19:1f:94:bb:f5:f0:05:56: a3:73:76:0b:aa:d3:f8:5b:95:c9:cf:1d:7b:d4:5e: 02:c4:ee:92:61:ec:d6:f0:8f:1b:4b:45:99:4e:2b: fd:d5:ef:05:47:98:da:69:85:d5:f4:73:64:63:0f: d5:83:bd:15:06:a8:18:05:ac:6d:75:71:3e:1d:3a: a1:c5:be:96:e0:db:5d:1b:6b:2d:83:b7:50:ba:a9: 89:8e:69:95:bb:3d:d0:d6:33:55:7a:75:bf:18:a7: 29:80:d2:dc:a4:a9:c3:04:fd:54:95:84:1f:42:90: e9:37:17:d4:ac:db:d6:c2:f7:0a:38:bd:d9:9b:a4: ad:1e:12:1b:5d:ca:37:dd:f1:68:6c:c6:9d:ab:0f: 43:d1:d9:29:a5:2a:3d:02:74:74:71:dc:85:9c:4e: 21:90:27:f8:cb:c8:a3:1e:53:0f:91:44:20:68:8b: 6c:37:97:f6:e9:e7:da:70:05:6c:76:9d:e1:41:20: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A3:33:7E:DA:5B:24:E0:11:20:F1:70:90:7E:0B:09:01:82:14:DC X509v3 Authority Key Identifier: keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/3KMzftpbJOARIPFwkH4LCQGCFNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.123.0/24 Signature Algorithm: sha256WithRSAEncryption 18:6f:ee:97:c0:18:3a:0e:11:3e:03:1f:7a:5f:be:62:bd:48: 25:37:69:0e:5b:b4:5b:52:7a:a1:23:64:79:71:dc:ec:c0:70: 01:84:e7:97:78:3b:92:ef:36:38:32:8a:df:43:ef:6f:84:78: 21:90:40:12:55:c1:b5:7b:e1:38:77:65:d0:a7:b2:7f:da:cf: 14:40:29:86:ac:bd:35:58:ab:30:8d:5e:2a:3b:5f:6f:11:fe: 72:34:90:68:0b:02:f9:1b:6d:0a:15:2c:bc:6f:e8:ad:41:81: 66:51:b1:47:1d:51:3a:7c:34:b8:8d:3c:16:c1:49:42:73:58: ac:22:04:97:0c:ed:8d:6b:5e:78:43:af:c2:65:6e:3c:7c:3c: 57:34:e8:63:83:7d:d0:bb:08:b8:9e:c7:6c:f8:da:b8:37:23: da:84:e9:a5:17:78:c9:e6:a2:1b:82:76:b7:a6:8e:ba:a1:70: b0:29:52:1e:78:ee:be:83:40:15:f6:69:05:93:2f:f9:14:a1: b0:bb:8d:0c:ed:f5:ff:a2:ae:66:ec:c9:f6:48:1e:8f:13:1e: 24:22:7e:76:80:8c:b0:a9:d6:e2:51:86:07:4f:a3:6c:70:fd: d6:1c:33:e5:e8:ca:a7:cd:74:d4:4b:74:62:4e:0b:7f:e4:b7: 08:48:d1:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtHQEv6Gebo1u8V7M8sVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzUzNzc5MDFhNzg3MWQzYmZmN2E3MDI3N2EyZjRlMmZj MGUyNzcwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2EzMzM3ZWRhNWIyNGUwMTEyMGYxNzA5MDdlMGIwOTAxODIxNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfPi18c0fvICNbU3i2hwZ/kxY9eA RG6noupDPBCT3RBUvvBE+GUnDYGSMgxwqw/+ovAGHh+8WIlHvoWEOx90RM2LGR+U u/XwBVajc3YLqtP4W5XJzx171F4CxO6SYezW8I8bS0WZTiv91e8FR5jaaYXV9HNk Yw/Vg70VBqgYBaxtdXE+HTqhxb6W4NtdG2stg7dQuqmJjmmVuz3Q1jNVenW/GKcp gNLcpKnDBP1UlYQfQpDpNxfUrNvWwvcKOL3Zm6StHhIbXco33fFobMadqw9D0dkp pSo9AnR0cdyFnE4hkCf4y8ijHlMPkUQgaItsN5f26efacAVsdp3hQSAg8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNyjM37aWyTgESDxcJB+CwkBghTcMB8GA1UdIwQY MBaAFLE1N3kBp4cdO/96cCd6L04vwOJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80NjVjNDAtNjcxOC00ZWE5LTkxZTUt OTEyMDQ3MTUzZTAxLzEvM0tNemZ0cGJKT0FSSVBGd2tINExDUUdDRk53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi80NjVjNDAtNjcxOC00ZWE5LTkxZTUtOTEyMDQ3MTUzZTAx LzEvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWh7MA0G CSqGSIb3DQEBCwUAA4IBAQAYb+6XwBg6DhE+Ax96X75ivUglN2kOW7RbUnqhI2R5 cdzswHABhOeXeDuS7zY4MorfQ+9vhHghkEASVcG1e+E4d2XQp7J/2s8UQCmGrL01 WKswjV4qO19vEf5yNJBoCwL5G20KFSy8b+itQYFmUbFHHVE6fDS4jTwWwUlCc1is IgSXDO2Na154Q6/CZW48fDxXNOhjg33Quwi4nsds+Nq4NyPahOmlF3jJ5qIbgna3 po66oXCwKVIeeO6+g0AV9mkFky/5FKGwu40M7fX/oq5m7Mn2SB6PEx4kIn52gIyw qdbiUYYHT6NscP3WHDPl6MqnzXTUS3RiTgt/5LcISNHz -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:19 2026 by rpki-client