This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/3gfFN41_-V5KCVj9bLCnPzDA4Sg.roa File: 3gfFN41_-V5KCVj9bLCnPzDA4Sg.roa (raw, json) Hash identifier: feVZbY6ZTCnUm+ks82CSr0rpu6G60t2RiQeNmO5z3TE= Subject key identifier: DE:07:C5:37:8D:7F:F9:5E:4A:09:58:FD:6C:B0:A7:3F:30:C0:E1:28 Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184 Certificate serial: 019B7B36F1F708F9134C185879B7F43A36D3 Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/3gfFN41_-V5KCVj9bLCnPzDA4Sg.roa Signing time: Thu 01 Jan 2026 20:19:17 +0000 ROA not before: Thu 01 Jan 2026 20:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8639 IP address blocks: 185.121.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f1:f7:08:f9:13:4c:18:58:79:b7:f4:3a:36:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184 Validity Not Before: Jan 1 20:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de07c5378d7ff95e4a0958fd6cb0a73f30c0e128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:50:a7:cc:e7:80:bf:45:b7:b8:a1:0a:ac:1c: fc:ad:79:59:8d:4a:b4:18:96:aa:61:69:98:d4:8d: 70:fa:84:20:01:63:ca:25:e6:3c:15:24:14:1e:8d: ac:25:60:5a:aa:c4:a0:58:91:2b:4e:1e:66:c8:68: b3:aa:e7:3f:ef:d4:7b:74:d3:89:36:fc:81:93:75: c1:d8:bf:51:ad:26:0d:89:ad:19:ac:29:ef:11:3e: 05:ab:7f:a7:ca:03:d9:ba:41:13:db:78:03:32:69: 0c:8a:ca:46:48:17:9e:d3:60:37:02:18:34:c2:ea: e1:49:52:1a:ea:74:21:92:c9:d4:9b:d6:9d:0e:08: bf:a2:0f:95:aa:7c:5a:b9:85:ce:f0:e7:b1:1e:d4: d2:c2:7d:05:1c:43:98:ce:34:40:1b:7a:fc:b1:d9: fc:fc:29:d2:56:de:34:29:27:33:6a:23:c3:0a:2c: 81:10:4b:b7:66:1f:42:27:a2:26:88:b5:f8:42:0e: f0:c5:89:28:fa:72:83:e1:20:2c:35:f9:54:5f:01: 48:ec:36:56:57:3c:6b:0f:b5:7a:87:d4:8c:a3:87: 3d:38:02:e7:9f:ac:38:19:d1:f4:be:c8:ab:47:21: 2b:53:d7:04:60:0e:cf:25:dc:fa:26:c8:2d:8a:2e: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:07:C5:37:8D:7F:F9:5E:4A:09:58:FD:6C:B0:A7:3F:30:C0:E1:28 X509v3 Authority Key Identifier: keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/3gfFN41_-V5KCVj9bLCnPzDA4Sg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.20.0/22 Signature Algorithm: sha256WithRSAEncryption ad:e3:76:e6:c7:a3:09:f5:04:2c:ea:8a:87:e0:69:be:a4:18: 7c:d2:44:65:ea:95:4a:f5:fd:6e:bb:5e:ae:91:10:36:f1:fc: fa:0e:9a:39:29:35:cb:dd:d6:72:9b:1b:9d:6a:8a:0f:32:ce: 5d:1f:d8:89:0b:d1:7e:8b:3c:ff:21:80:85:89:c4:40:bc:4d: b0:d8:9a:62:39:8a:be:22:6f:28:dc:2a:e9:22:23:80:a0:8b: 8d:8e:61:11:e5:57:09:78:0f:7e:5b:8b:cd:64:23:5d:3d:e6: 33:4f:4c:08:ae:d8:29:b1:de:d6:76:4a:74:9c:f1:f9:7e:ef: e4:7c:bb:7e:c0:93:95:4a:89:5f:91:c9:f4:94:a8:64:90:4a: 8e:54:d5:1f:11:96:46:25:9e:08:07:05:9e:16:d8:6a:51:55: 3d:ef:67:18:da:91:6a:f7:ac:83:da:bd:06:62:51:6e:4c:fc: d4:9f:04:4e:33:28:fe:6e:50:0f:f2:b5:b4:e4:67:de:a6:76: c0:fe:42:9a:24:74:09:45:e2:27:1c:b4:1e:c4:1e:aa:91:f9: 74:06:94:25:4f:d1:1a:d0:c4:f4:65:ab:9f:60:0f:d3:67:a9: d1:36:7d:3f:a8:6c:4b:f2:5d:97:53:d6:e9:de:9a:b6:2b:d1: 38:e2:2d:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NvH3CPkTTBhYebf0OjbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzQzNWY0YmUyYzU0M2JmMzQ4M2UzNzdmODAzMTRkMjgy MzAxODQwHhcNMjYwMTAxMjAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTA3YzUzNzhkN2ZmOTVlNGEwOTU4ZmQ2Y2IwYTczZjMwYzBlMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51CnzOeAv0W3uKEKrBz8rXlZjUq0 GJaqYWmY1I1w+oQgAWPKJeY8FSQUHo2sJWBaqsSgWJErTh5myGizquc/79R7dNOJ NvyBk3XB2L9RrSYNia0ZrCnvET4Fq3+nygPZukET23gDMmkMispGSBee02A3Ahg0 wurhSVIa6nQhksnUm9adDgi/og+VqnxauYXO8OexHtTSwn0FHEOYzjRAG3r8sdn8 /CnSVt40KSczaiPDCiyBEEu3Zh9CJ6ImiLX4Qg7wxYko+nKD4SAsNflUXwFI7DZW VzxrD7V6h9SMo4c9OALnn6w4GdH0vsirRyErU9cEYA7PJdz6Jsgtii4R6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN4HxTeNf/leSglY/Wywpz8wwOEoMB8GA1UdIwQY MBaAFMU0NfS+LFQ780g+N3+AMU0oIwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWIt OWY0ZmU0Y2QwMjQ2LzEvM2dmRk40MV8tVjVLQ1ZqOWJMQ25QekRBNFNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWItOWY0ZmU0Y2QwMjQ2 LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXkUMA0G CSqGSIb3DQEBCwUAA4IBAQCt43bmx6MJ9QQs6oqH4Gm+pBh80kRl6pVK9f1uu16u kRA28fz6Dpo5KTXL3dZymxudaooPMs5dH9iJC9F+izz/IYCFicRAvE2w2JpiOYq+ Im8o3CrpIiOAoIuNjmER5VcJeA9+W4vNZCNdPeYzT0wIrtgpsd7Wdkp0nPH5fu/k fLt+wJOVSolfkcn0lKhkkEqOVNUfEZZGJZ4IBwWeFthqUVU972cY2pFq96yD2r0G YlFuTPzUnwROMyj+blAP8rW05GfepnbA/kKaJHQJReInHLQexB6qkfl0BpQlT9Ea 0MT0ZaufYA/TZ6nRNn0/qGxL8l2XU9bp3pq2K9E44i0b -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:25 2026 by rpki-client