This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/3fyx-p3WHg4HW6gSMmsV59sHTOg.roa File: 3fyx-p3WHg4HW6gSMmsV59sHTOg.roa (raw, json) Hash identifier: KzJB0qP80lxfCKsP/1OfkrNmaCcpviEI58pfIyVbz78= Subject key identifier: DD:FC:B1:FA:9D:D6:1E:0E:07:5B:A8:12:32:6B:15:E7:DB:07:4C:E8 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8D0EBCACEC129878CF8A5AE4F26A1 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/3fyx-p3WHg4HW6gSMmsV59sHTOg.roa Signing time: Thu 01 Jan 2026 18:18:59 +0000 ROA not before: Thu 01 Jan 2026 18:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213936 IP address blocks: 87.246.180.0/24 maxlen: 24 87.246.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d0:eb:ca:ce:c1:29:87:8c:f8:a5:ae:4f:26:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddfcb1fa9dd61e0e075ba812326b15e7db074ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ab:85:98:a2:85:0b:a5:ff:1c:29:23:36:3a: b2:6f:e9:e1:ae:18:16:48:b8:02:b7:57:58:4f:d3: 19:56:ec:b6:c2:0c:41:b6:e1:41:4b:85:b4:03:f0: 40:c8:e0:50:5c:ed:e8:bf:d9:28:87:67:5d:99:8d: 60:eb:ed:1f:b5:63:84:cb:f3:df:88:c5:2a:78:99: 32:56:5d:db:9c:03:a0:d8:0d:fd:09:8f:a0:22:09: 96:e3:4a:eb:85:7e:c2:f4:a8:69:13:7d:16:26:08: 49:d3:0a:c4:f6:3e:f7:9d:c2:c5:d7:e6:6f:b1:98: 5a:17:46:6d:54:a0:4a:29:48:83:b6:23:97:cb:bf: 9d:b2:0b:7a:a6:30:55:2a:57:15:37:18:49:1c:5c: d2:ac:95:37:50:cd:01:b0:44:cf:b9:c0:e2:83:5a: f4:7c:91:2d:65:74:1e:eb:08:6c:0f:bd:f7:f8:79: a6:e8:bd:23:7e:55:48:9b:e1:89:88:e1:e7:89:df: 7b:8e:4c:dd:b8:34:0b:84:81:1e:e0:62:f7:34:5d: 24:b4:b2:cc:d9:1a:fa:ff:a9:6b:ad:2f:c9:95:03: 57:34:1a:e2:90:59:80:21:fd:26:76:b8:a6:d6:12: 26:1f:6a:1a:c3:97:ab:68:fd:af:7d:7b:6c:dd:5a: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:B1:FA:9D:D6:1E:0E:07:5B:A8:12:32:6B:15:E7:DB:07:4C:E8 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/3fyx-p3WHg4HW6gSMmsV59sHTOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.246.180.0/23 Signature Algorithm: sha256WithRSAEncryption 89:dd:9e:3f:33:c3:c5:fe:30:0c:fa:dc:7f:b3:56:14:0c:5b: da:54:18:1a:61:a3:8a:f4:1d:c2:37:b4:eb:59:89:9e:ff:bd: d7:5b:b9:40:79:02:cf:64:3a:7d:84:95:55:b1:9d:68:69:44: b3:37:28:0d:dc:46:52:08:59:45:cd:fe:92:f0:f9:46:2f:87: 80:f5:7f:d2:db:3d:03:01:f3:2d:2f:11:89:ed:2e:cc:4c:84: 97:d7:31:1b:8a:24:20:f6:03:5c:e1:fb:f0:3a:95:67:a7:e4: ac:db:ad:d7:c9:1d:d9:c7:f0:59:cf:16:3f:81:0c:7e:c4:9b: 31:35:ef:d2:a1:74:db:33:51:78:16:2e:67:b8:ae:f8:17:f0: 3e:0c:38:aa:3d:67:a2:05:cf:e7:2d:28:e1:68:78:e7:cd:d1: 69:83:3b:61:b1:0e:94:c8:50:f0:18:3c:90:38:e3:d8:02:c3: d8:74:f9:e3:85:9b:18:36:8b:6a:86:cc:38:fd:49:85:1f:24: c1:19:11:cd:e2:4f:4d:fd:16:06:56:f6:d0:33:64:01:66:d6: d8:75:66:84:73:97:76:bc:5b:d4:c1:b0:3f:47:af:e1:73:f3: dd:ca:7a:d4:d1:b0:cf:9e:b0:aa:e8:38:9f:03:1b:8f:e7:2b: 8a:db:73:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNDrys7BKYeM+KWuTyahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGZjYjFmYTlkZDYxZTBlMDc1YmE4MTIzMjZiMTVlN2RiMDc0Y2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KuFmKKFC6X/HCkjNjqyb+nhrhgW SLgCt1dYT9MZVuy2wgxBtuFBS4W0A/BAyOBQXO3ov9koh2ddmY1g6+0ftWOEy/Pf iMUqeJkyVl3bnAOg2A39CY+gIgmW40rrhX7C9KhpE30WJghJ0wrE9j73ncLF1+Zv sZhaF0ZtVKBKKUiDtiOXy7+dsgt6pjBVKlcVNxhJHFzSrJU3UM0BsETPucDig1r0 fJEtZXQe6whsD733+Hmm6L0jflVIm+GJiOHnid97jkzduDQLhIEe4GL3NF0ktLLM 2Rr6/6lrrS/JlQNXNBrikFmAIf0mdrim1hImH2oaw5eraP2vfXts3VoWgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN38sfqd1h4OB1uoEjJrFefbB0zoMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvM2Z5eC1wM1dIZzRIVzZnU01tc1Y1OXNIVE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/a0MA0G CSqGSIb3DQEBCwUAA4IBAQCJ3Z4/M8PF/jAM+tx/s1YUDFvaVBgaYaOK9B3CN7Tr WYme/73XW7lAeQLPZDp9hJVVsZ1oaUSzNygN3EZSCFlFzf6S8PlGL4eA9X/S2z0D AfMtLxGJ7S7MTISX1zEbiiQg9gNc4fvwOpVnp+Ss263XyR3Zx/BZzxY/gQx+xJsx Ne/SoXTbM1F4Fi5nuK74F/A+DDiqPWeiBc/nLSjhaHjnzdFpgzthsQ6UyFDwGDyQ OOPYAsPYdPnjhZsYNotqhsw4/UmFHyTBGRHN4k9N/RYGVvbQM2QBZtbYdWaEc5d2 vFvUwbA/R6/hc/PdynrU0bDPnrCq6DifAxuP5yuK23MX -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:56 2026 by rpki-client