This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3zu06x96nnA9zHy4WGds3PSo4ho.roa File: 3zu06x96nnA9zHy4WGds3PSo4ho.roa (raw, json) Hash identifier: tgO5lwvQa/ffNEeOeYEIsdsKYKDkpiLzECPhEe5wlqw= Subject key identifier: DF:3B:B4:EB:1F:7A:9E:70:3D:CC:7C:B8:58:67:6C:DC:F4:A8:E2:1A Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D45DE75EBBE519446B5ACED63DFC0 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3zu06x96nnA9zHy4WGds3PSo4ho.roa Signing time: Fri 02 Jan 2026 06:20:23 +0000 ROA not before: Fri 02 Jan 2026 06:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60068 IP address blocks: 193.19.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:45:de:75:eb:be:51:94:46:b5:ac:ed:63:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df3bb4eb1f7a9e703dcc7cb858676cdcf4a8e21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c5:66:0e:1e:b0:5b:f6:06:56:d2:4c:32:d3: 49:10:c3:02:f9:d2:cb:f0:2f:c9:63:a6:c9:d0:25: 07:ec:9a:92:34:03:d9:96:d6:96:88:52:86:41:68: d8:b5:c5:d2:4b:6e:2f:86:bb:ed:47:5c:7d:56:c9: e0:31:ff:a6:c6:06:07:d2:27:fc:15:8b:b6:f1:a1: 49:d7:4d:1f:03:95:6e:45:18:38:c7:ff:f4:f2:3d: ae:dd:65:47:61:e7:ee:aa:5d:7c:ff:cd:3f:0b:8c: 70:ff:ab:39:13:19:68:d0:46:f7:17:ac:43:a0:bd: 5e:0a:4a:20:4f:0d:02:40:2e:72:63:d6:06:16:a5: 40:0d:16:6b:a8:d9:92:d4:89:67:c1:3a:71:99:9e: 28:0b:90:75:cc:f6:ca:73:27:8f:8b:b5:4e:56:d0: 76:24:cb:c3:90:d3:01:c2:58:b4:d0:4b:9a:a2:d9: 69:ef:eb:68:39:d0:1b:bf:27:59:4f:de:b1:62:14: 73:19:27:d8:fd:c1:18:96:07:a5:a3:c8:ca:e0:66: 4f:94:c3:77:77:78:f4:ea:84:33:ad:e0:4e:fe:23: 23:35:c6:1a:c1:56:f5:99:56:92:57:fd:d9:f0:15: cb:b1:48:7c:97:dd:c7:1b:93:93:0b:44:19:af:94: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3B:B4:EB:1F:7A:9E:70:3D:CC:7C:B8:58:67:6C:DC:F4:A8:E2:1A X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/3zu06x96nnA9zHy4WGds3PSo4ho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.108.0/24 Signature Algorithm: sha256WithRSAEncryption 65:f8:a4:62:9f:2a:19:cf:94:00:61:db:aa:c1:fd:36:8e:44: a4:d0:31:d0:44:d6:31:ab:ae:7e:f1:75:f3:54:ef:d2:e2:25: c1:08:15:ba:b5:50:3e:cc:a8:b4:47:a3:22:0c:2e:74:4c:7e: aa:39:a6:f7:d8:49:b0:e8:83:73:99:f1:e6:c4:2a:23:10:56: 85:10:4c:21:04:ed:16:2b:d8:c1:94:0e:30:e6:a4:46:77:6b: 6a:9a:85:87:1a:6f:76:ed:51:d6:94:43:f0:58:8f:5b:7e:1b: bc:30:87:70:66:fe:c8:8d:e2:70:aa:bb:04:00:48:81:cc:cf: 70:78:f0:f6:ce:88:74:a6:eb:89:85:c1:45:3e:33:dd:d9:6b: 68:2f:df:e0:5e:58:ef:26:aa:1e:de:51:83:4d:d5:8d:8f:d4: 2a:34:5e:2c:78:89:ea:4e:2f:5f:22:3c:e1:1b:56:e1:f8:0e: 23:e0:36:0c:f1:b8:40:8d:d6:17:ff:df:a4:81:63:36:3b:b0: dd:25:7b:56:c1:8b:67:ca:de:61:2f:b4:87:f5:4d:8d:09:5b: 0e:fb:33:78:47:82:7c:83:4c:41:29:70:a8:1b:72:94:77:70: ea:70:cb:ee:f5:b4:43:a6:26:21:b0:32:66:32:96:45:9e:6c: 8f:51:5f:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XUXedeu+UZRGtaztY9/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjNiYjRlYjFmN2E5ZTcwM2RjYzdjYjg1ODY3NmNkY2Y0YThlMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8VmDh6wW/YGVtJMMtNJEMMC+dLL 8C/JY6bJ0CUH7JqSNAPZltaWiFKGQWjYtcXSS24vhrvtR1x9VsngMf+mxgYH0if8 FYu28aFJ100fA5VuRRg4x//08j2u3WVHYefuql18/80/C4xw/6s5Exlo0Eb3F6xD oL1eCkogTw0CQC5yY9YGFqVADRZrqNmS1IlnwTpxmZ4oC5B1zPbKcyePi7VOVtB2 JMvDkNMBwli00Euaotlp7+toOdAbvydZT96xYhRzGSfY/cEYlgelo8jK4GZPlMN3 d3j06oQzreBO/iMjNcYawVb1mVaSV/3Z8BXLsUh8l93HG5OTC0QZr5SPawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN87tOsfep5wPcx8uFhnbNz0qOIaMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvM3p1MDZ4OTZubkE5ekh5NFdHZHMzUFNvNGhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRNsMA0G CSqGSIb3DQEBCwUAA4IBAQBl+KRinyoZz5QAYduqwf02jkSk0DHQRNYxq65+8XXz VO/S4iXBCBW6tVA+zKi0R6MiDC50TH6qOab32Emw6INzmfHmxCojEFaFEEwhBO0W K9jBlA4w5qRGd2tqmoWHGm927VHWlEPwWI9bfhu8MIdwZv7IjeJwqrsEAEiBzM9w ePD2zoh0puuJhcFFPjPd2WtoL9/gXljvJqoe3lGDTdWNj9QqNF4seInqTi9fIjzh G1bh+A4j4DYM8bhAjdYX/9+kgWM2O7DdJXtWwYtnyt5hL7SH9U2NCVsO+zN4R4J8 g0xBKXCoG3KUd3DqcMvu9bRDpiYhsDJmMpZFnmyPUV/c -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:19 2026 by rpki-client