This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa File: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (raw, json) Hash identifier: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg= Subject key identifier: DD:F4:B9:74:FE:EC:1B:EC:6F:14:C6:C1:3F:B5:14:8B:47:94:51:29 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED6A9C6BD52292517A7B374313A450 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa Signing time: Thu 01 Jan 2026 14:19:21 +0000 ROA not before: Thu 01 Jan 2026 14:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210392 IP address blocks: 185.180.128.0/24 maxlen: 24 185.180.129.0/24 maxlen: 24 185.180.130.0/24 maxlen: 24 185.180.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:6a:9c:6b:d5:22:92:51:7a:7b:37:43:13:a4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddf4b974feec1bec6f14c6c13fb5148b47945129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0d:75:a8:95:53:1e:dc:b9:47:84:7d:49:6f: c0:42:fb:be:c8:d2:85:04:c4:61:15:2f:ba:9e:71: ea:d8:59:0e:41:31:0b:19:05:54:a1:e6:47:f7:21: 8c:61:4f:2b:c1:09:94:8a:be:0d:79:df:dd:45:d4: 1b:ca:30:2b:38:f0:bc:4a:53:76:aa:ab:61:6f:15: 46:67:43:e4:38:19:34:46:16:c1:7d:5d:70:a2:ac: 3b:d7:17:d2:58:55:4c:bf:a3:b3:91:2d:e2:7d:e7: 89:01:f1:3c:3b:ab:01:30:88:b5:9d:14:76:2e:34: d9:0e:eb:51:0b:b7:cb:93:4f:ce:66:85:63:c9:1b: f7:f0:bd:c0:23:fd:8b:52:cb:57:14:33:68:d8:1f: 71:29:3c:f2:27:1f:06:f0:01:c1:e8:dd:91:c0:aa: 25:85:f3:53:47:e1:18:cb:35:34:fd:17:05:8c:61: a9:cc:1d:ef:bd:0b:39:ef:59:b5:fd:22:1c:97:9d: 75:92:ab:2c:fa:01:1a:bd:aa:3c:5f:3c:2a:80:a2: f4:4d:95:3e:5a:94:1f:32:d7:44:02:17:f4:a3:5b: 56:71:48:d5:bb:0b:14:61:12:31:52:90:67:83:22: d3:11:02:46:5e:0e:5e:ed:54:4c:16:7e:6f:9b:40: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F4:B9:74:FE:EC:1B:EC:6F:14:C6:C1:3F:B5:14:8B:47:94:51:29 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.128.0/22 Signature Algorithm: sha256WithRSAEncryption 73:82:7b:7e:6a:6a:82:eb:65:b0:f9:12:ac:eb:71:f7:53:fe: 09:55:53:15:16:b3:08:59:ed:28:9b:5b:c3:c2:59:21:be:75: 43:f8:fd:ee:a5:e4:bf:48:9d:47:57:64:3f:8e:df:95:3c:89: 63:6a:3e:8e:ed:e1:85:ec:5a:ff:d2:f0:8f:f8:4a:46:c5:e5: 4e:61:3b:4a:c2:b6:c9:a2:5b:2b:83:e1:17:77:e7:f0:6b:c0: dc:c1:9f:76:d2:74:96:23:6a:63:a3:6a:9c:e4:67:e7:5d:0d: 57:c2:0c:df:3e:05:af:68:53:c1:f4:01:84:b7:b0:c7:f2:42: d9:fa:a6:5a:4b:2d:27:55:82:a8:ff:c7:ea:ed:b5:f7:2b:39: 13:d4:ef:b7:50:00:5a:8b:94:8f:7d:89:05:4c:06:0d:cb:25: f2:65:7f:cb:8c:31:59:07:3c:2d:82:02:db:80:d3:2b:29:e2: 0f:4b:4a:89:e9:52:af:f0:8a:fa:f2:0f:bd:fa:15:94:ee:87: d3:c0:83:71:d8:be:f3:09:87:6f:3e:47:9d:91:38:e2:88:36: ac:6a:7d:79:a3:da:9b:62:61:e3:df:33:68:ff:1f:87:e3:57: 9f:fb:00:77:f5:26:60:fc:ee:21:4b:a6:a2:6e:62:8a:4a:3b: cf:16:fb:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Wqca9UiklF6ezdDE6RQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGY0Yjk3NGZlZWMxYmVjNmYxNGM2YzEzZmI1MTQ4YjQ3OTQ1MTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g11qJVTHty5R4R9SW/AQvu+yNKF BMRhFS+6nnHq2FkOQTELGQVUoeZH9yGMYU8rwQmUir4Ned/dRdQbyjArOPC8SlN2 qqthbxVGZ0PkOBk0RhbBfV1woqw71xfSWFVMv6OzkS3ifeeJAfE8O6sBMIi1nRR2 LjTZDutRC7fLk0/OZoVjyRv38L3AI/2LUstXFDNo2B9xKTzyJx8G8AHB6N2RwKol hfNTR+EYyzU0/RcFjGGpzB3vvQs571m1/SIcl511kqss+gEavao8XzwqgKL0TZU+ WpQfMtdEAhf0o1tWcUjVuwsUYRIxUpBngyLTEQJGXg5e7VRMFn5vm0BeOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN30uXT+7BvsbxTGwT+1FItHlFEpMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvM2ZTNWRQN3NHLXh2Rk1iQlA3VVVpMGVVVVNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubSAMA0G CSqGSIb3DQEBCwUAA4IBAQBzgnt+amqC62Ww+RKs63H3U/4JVVMVFrMIWe0om1vD wlkhvnVD+P3upeS/SJ1HV2Q/jt+VPIljaj6O7eGF7Fr/0vCP+EpGxeVOYTtKwrbJ olsrg+EXd+fwa8DcwZ920nSWI2pjo2qc5GfnXQ1XwgzfPgWvaFPB9AGEt7DH8kLZ +qZaSy0nVYKo/8fq7bX3KzkT1O+3UABai5SPfYkFTAYNyyXyZX/LjDFZBzwtggLb gNMrKeIPS0qJ6VKv8Ir68g+9+hWU7ofTwINx2L7zCYdvPkedkTjiiDasan15o9qb YmHj3zNo/x+H41ef+wB39SZg/O4hS6aibmKKSjvPFvv2 -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:18 2026 by rpki-client