This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3TEHAkp09YPOEmt-F_Cjae-w1cE.roa File: 3TEHAkp09YPOEmt-F_Cjae-w1cE.roa (raw, json) Hash identifier: KJjanuz0sDgB++HBSfOqd7BaeYpAQjqAfijY+9WJTBw= Subject key identifier: DD:31:07:02:4A:74:F5:83:CE:12:6B:7E:17:F0:A3:69:EF:B0:D5:C1 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA48E1A862CBA8102E184B637A24801 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3TEHAkp09YPOEmt-F_Cjae-w1cE.roa Signing time: Thu 01 Jan 2026 22:19:00 +0000 ROA not before: Thu 01 Jan 2026 22:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41957 IP address blocks: 45.86.169.0/24 maxlen: 24 77.83.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:8e:1a:86:2c:ba:81:02:e1:84:b6:37:a2:48:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd3107024a74f583ce126b7e17f0a369efb0d5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:63:e1:48:7e:66:7e:12:ae:62:a5:70:b3: 51:9f:db:17:d4:99:33:6d:f9:5c:60:a5:59:53:03: 5a:9d:8d:e3:19:d9:26:d3:91:f2:85:a0:f8:1b:44: f3:22:2b:28:66:13:4f:17:a9:1d:01:2f:51:0a:6d: d1:77:88:c0:63:41:87:73:bd:39:5b:b3:89:4e:3c: af:46:fa:3b:c6:40:f8:78:61:8b:de:e8:67:2a:07: f6:10:b8:e8:fe:2c:06:06:1d:9e:d5:cf:1d:98:ff: 01:5e:e8:f0:57:be:41:6f:91:1c:f7:49:79:6d:18: 91:1d:be:9d:41:07:5c:3b:f5:fe:9a:db:cb:1c:57: 2a:85:0f:13:f3:7d:10:45:7a:ec:bf:2a:71:5b:39: 69:16:d4:59:44:f6:46:24:12:b4:c3:cb:2f:60:4c: f5:75:34:0b:0f:d5:82:d8:d5:af:81:03:28:ef:b8: c7:51:77:3c:e9:04:13:e4:06:cb:bf:ee:40:55:1c: 96:1e:1a:53:49:02:45:d1:38:13:8d:2d:26:c9:0f: 48:bf:25:c4:a2:a3:ce:d1:8d:c5:f8:4b:b7:cd:9a: 0b:c0:d9:73:83:df:ef:23:1e:23:bc:99:f8:89:a4: 7d:cf:cc:c9:f3:bd:04:be:dc:56:a6:cd:ce:fd:3e: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:31:07:02:4A:74:F5:83:CE:12:6B:7E:17:F0:A3:69:EF:B0:D5:C1 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3TEHAkp09YPOEmt-F_Cjae-w1cE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.169.0/24 77.83.94.0/24 Signature Algorithm: sha256WithRSAEncryption 17:6e:1f:d4:4f:d5:de:2d:e7:bd:d5:6d:18:25:3b:11:0d:88: d8:94:22:49:75:21:02:13:2e:50:d3:e2:46:32:40:fb:3d:32: 3d:23:51:a8:32:86:54:a9:00:ea:a0:8b:25:62:2c:9c:b8:de: 6b:c6:9a:dd:1e:fd:16:f8:88:96:e0:93:0b:9b:52:b2:fb:7d: bd:59:ae:13:3e:e9:c1:80:a9:49:c6:c7:bc:01:7a:77:c6:f4: 91:27:eb:89:26:02:68:8a:be:a8:fc:a0:1d:94:c6:88:f1:f8: 3f:e9:47:af:f1:1f:97:83:5c:1e:a8:14:8e:22:97:c9:97:f8: de:ba:c3:46:2f:0d:11:91:12:cf:9c:80:b3:cf:5b:6e:1c:25: c8:0b:00:83:b2:af:2e:8b:f7:f0:1a:3e:c8:57:5b:3f:48:00: ac:86:4a:fa:47:d3:e2:70:60:8f:1e:63:f6:f0:60:fc:d1:59: 50:e6:ed:5c:02:8c:ad:5a:a9:bd:00:cd:da:29:00:2b:81:68: 30:9c:0d:61:26:44:b6:1f:85:ce:22:f9:93:4c:4c:af:7e:c0: f3:e8:be:6a:29:2a:92:17:5a:cd:93:32:09:c3:c1:8b:f5:5d: dc:3c:42:25:be:a4:1f:e8:7c:aa:c3:70:99:7a:55:32:f6:38: bb:cf:40:f9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pI4ahiy6gQLhhLY3okgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDMxMDcwMjRhNzRmNTgzY2UxMjZiN2UxN2YwYTM2OWVmYjBkNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGdj4Uh+Zn4SrmKlcLNRn9sX1Jkz bflcYKVZUwNanY3jGdkm05HyhaD4G0TzIisoZhNPF6kdAS9RCm3Rd4jAY0GHc705 W7OJTjyvRvo7xkD4eGGL3uhnKgf2ELjo/iwGBh2e1c8dmP8BXujwV75Bb5Ec90l5 bRiRHb6dQQdcO/X+mtvLHFcqhQ8T830QRXrsvypxWzlpFtRZRPZGJBK0w8svYEz1 dTQLD9WC2NWvgQMo77jHUXc86QQT5AbLv+5AVRyWHhpTSQJF0TgTjS0myQ9IvyXE oqPO0Y3F+Eu3zZoLwNlzg9/vIx4jvJn4iaR9z8zJ870EvtxWps3O/T6tiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN0xBwJKdPWDzhJrfhfwo2nvsNXBMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvM1RFSEFrcDA5WVBPRW10LUZfQ2phZS13MWNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVapAwQA TVNeMA0GCSqGSIb3DQEBCwUAA4IBAQAXbh/UT9XeLee91W0YJTsRDYjYlCJJdSEC Ey5Q0+JGMkD7PTI9I1GoMoZUqQDqoIslYiycuN5rxprdHv0W+IiW4JMLm1Ky+329 Wa4TPunBgKlJxse8AXp3xvSRJ+uJJgJoir6o/KAdlMaI8fg/6Uev8R+Xg1weqBSO IpfJl/jeusNGLw0RkRLPnICzz1tuHCXICwCDsq8ui/fwGj7IV1s/SACshkr6R9Pi cGCPHmP28GD80VlQ5u1cAoytWqm9AM3aKQArgWgwnA1hJkS2H4XOIvmTTEyvfsDz 6L5qKSqSF1rNkzIJw8GL9V3cPEIlvqQf6Hyqw3CZelUy9ji7z0D5 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:56 2026 by rpki-client