This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa File: r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa (raw, json) Hash identifier: axK8NfXG0oP4PqyHKrnwHUrltZg/uDJF8UJbff87uoU= Subject key identifier: AF:7F:A8:18:26:62:BB:E7:F4:A7:37:E3:A1:9C:98:E6:17:D6:1C:4D Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc Certificate serial: 019B7F136277F63F65302F0D7B3FA9EC3203 Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa Signing time: Fri 02 Jan 2026 14:18:55 +0000 ROA not before: Fri 02 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13037 IP address blocks: 185.169.116.0/23 maxlen: 23 185.169.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:62:77:f6:3f:65:30:2f:0d:7b:3f:a9:ec:32:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc Validity Not Before: Jan 2 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af7fa8182662bbe7f4a737e3a19c98e617d61c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:19:f8:f6:17:6d:68:79:b6:c5:19:ae:d9:0c: 45:10:f1:79:dd:bc:5e:fb:b2:6f:f4:23:7e:4a:e4: d9:f9:8a:2e:9e:ad:c3:bd:87:ae:f4:50:c5:57:a2: c5:26:4a:bb:1b:35:64:57:b4:2a:47:53:e1:60:36: 18:53:bc:b9:f0:4a:e1:f3:18:03:01:60:0f:21:fd: 67:d2:e1:51:81:6b:27:06:a1:6b:c2:35:97:be:3e: c9:a4:5b:96:ec:64:66:89:f4:b0:84:74:2e:8c:1f: cc:67:d6:45:ca:52:97:2b:51:56:3c:68:76:b8:af: 47:ff:44:77:c9:de:cb:a4:ea:17:d8:74:12:fc:5e: f6:a5:cd:0b:97:5f:26:62:42:ef:fb:cb:e2:52:81: 8f:8b:e7:b0:bb:91:f6:4d:e0:2b:d1:49:23:58:74: 1e:6f:87:86:5e:e4:fc:d4:18:4e:43:53:62:a2:e2: 59:cb:e2:3e:fc:32:1a:1a:34:b9:3b:56:5c:a7:f7: 60:80:e0:94:34:58:97:ce:9d:20:4c:9c:ef:f1:1e: 2b:63:a1:76:cc:97:ee:34:74:f9:aa:4e:20:9f:18: ce:98:bf:e6:56:00:40:50:ca:7a:bf:f6:50:73:85: 54:e2:28:94:a4:bb:f4:51:86:e8:33:b6:0e:5e:f1: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7F:A8:18:26:62:BB:E7:F4:A7:37:E3:A1:9C:98:E6:17:D6:1C:4D X509v3 Authority Key Identifier: keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.116.0/22 Signature Algorithm: sha256WithRSAEncryption 84:85:46:76:9a:c1:7b:40:37:56:11:a0:de:ed:04:ab:86:47: c7:95:82:f1:44:e4:3c:92:db:71:f5:1a:e7:30:9f:18:5f:b1: 71:0a:57:1d:98:58:20:5a:c8:0f:16:02:6c:8a:52:f2:a7:21: 17:eb:a9:aa:ac:f0:6d:c6:9f:98:a1:5c:7c:f5:c1:2d:f8:39: 02:bb:c0:f3:2d:19:bd:fc:db:ef:e9:bc:76:bb:f7:ce:98:67: c8:ae:8b:12:45:a8:a4:bf:e3:09:b2:f9:d8:69:c2:e6:ea:fa: 38:5e:15:f8:7d:78:71:e0:df:50:47:63:31:2a:26:6c:e1:e1: 4a:8b:f3:38:3a:c4:22:f6:93:98:a1:7d:df:b7:96:e6:c4:10: 80:b4:1c:85:4b:c3:19:d4:84:04:f2:39:bb:ed:86:12:74:be: 1f:20:1f:f9:35:b0:39:dd:d5:44:f9:b6:8c:84:65:c8:a3:ca: 36:46:18:37:94:45:64:d8:6f:de:3c:b7:9d:bf:58:9e:42:89: b2:67:32:0d:df:9e:98:1f:86:9d:50:d3:5a:a0:79:50:8f:95: 3e:1a:41:fb:e7:9e:e5:fd:3e:95:04:b3:c6:b5:c0:b2:13:40: ab:58:3b:8b:de:48:0c:73:32:66:15:7e:ef:61:e7:f7:a5:3b: 11:ac:a1:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E2J39j9lMC8Nez+p7DIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTRhYjk0ZTQ1OTUxOTRkMmMzOWIxZDNmZTZhODkxZjFl YjkyYmMwHhcNMjYwMTAyMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjdmYTgxODI2NjJiYmU3ZjRhNzM3ZTNhMTljOThlNjE3ZDYxYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBn49hdtaHm2xRmu2QxFEPF53bxe +7Jv9CN+SuTZ+Younq3DvYeu9FDFV6LFJkq7GzVkV7QqR1PhYDYYU7y58Erh8xgD AWAPIf1n0uFRgWsnBqFrwjWXvj7JpFuW7GRmifSwhHQujB/MZ9ZFylKXK1FWPGh2 uK9H/0R3yd7LpOoX2HQS/F72pc0Ll18mYkLv+8viUoGPi+ewu5H2TeAr0UkjWHQe b4eGXuT81BhOQ1NiouJZy+I+/DIaGjS5O1Zcp/dggOCUNFiXzp0gTJzv8R4rY6F2 zJfuNHT5qk4gnxjOmL/mVgBAUMp6v/ZQc4VU4iiUpLv0UYboM7YOXvFsZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9/qBgmYrvn9Kc346GcmOYX1hxNMB8GA1UdIwQY MBaAFNlUq5TkWVGU0sObHT/mqJHx65K8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZTcmxPUlpVWlRTdzVzZFAtYW9rZkhya3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82NDc0ODUtNjM1ZS00YWM2LWIwYjkt MzM1MWM1NzdiNDMyLzEvcjMtb0dDWml1LWYwcHpmam9aeVk1aGZXSEUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82NDc0ODUtNjM1ZS00YWM2LWIwYjktMzM1MWM1NzdiNDMy LzEvMlZTcmxPUlpVWlRTdzVzZFAtYW9rZkhya3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCual0MA0G CSqGSIb3DQEBCwUAA4IBAQCEhUZ2msF7QDdWEaDe7QSrhkfHlYLxROQ8kttx9Rrn MJ8YX7FxClcdmFggWsgPFgJsilLypyEX66mqrPBtxp+YoVx89cEt+DkCu8DzLRm9 /Nvv6bx2u/fOmGfIrosSRaikv+MJsvnYacLm6vo4XhX4fXhx4N9QR2MxKiZs4eFK i/M4OsQi9pOYoX3ft5bmxBCAtByFS8MZ1IQE8jm77YYSdL4fIB/5NbA53dVE+baM hGXIo8o2Rhg3lEVk2G/ePLedv1ieQomyZzIN356YH4adUNNaoHlQj5U+GkH7557l /T6VBLPGtcCyE0CrWDuL3kgMczJmFX7vYef3pTsRrKHo -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:22 2026 by rpki-client