This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3eK1ZL7O23CEW3-d4NQhqQce6UE.roa File: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (raw, json) Hash identifier: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk= Subject key identifier: DD:E2:B5:64:BE:CE:DB:70:84:5B:7F:9D:E0:D4:21:A9:07:1E:E9:41 Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e Certificate serial: 019B7CEDD72057F95D1EFC0D265E6D842091 Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3eK1ZL7O23CEW3-d4NQhqQce6UE.roa Signing time: Fri 02 Jan 2026 04:18:40 +0000 ROA not before: Fri 02 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199963 IP address blocks: 185.142.115.0/24 maxlen: 24 2a13:a900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d7:20:57:f9:5d:1e:fc:0d:26:5e:6d:84:20:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e Validity Not Before: Jan 2 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dde2b564becedb70845b7f9de0d421a9071ee941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:5b:c2:be:ce:2a:ab:9a:9c:20:2b:55:6b: 53:6b:ce:59:c6:55:54:d4:65:36:3a:b5:3b:84:cb: a2:50:1e:7f:ef:11:89:e5:ab:5e:c1:3d:58:41:27: 73:f0:5d:8b:65:89:78:9e:4a:05:05:4b:42:37:0b: 95:ef:22:57:9d:1c:31:e1:d6:0c:3b:cd:3d:7f:ef: f0:a3:0b:9c:00:a6:6b:d5:2d:18:3f:0e:58:5a:23: f1:a1:02:33:0f:66:97:3c:23:71:1d:fa:46:13:cf: 03:4f:ab:b0:c2:14:4d:84:f2:2d:c3:cb:06:04:96: 98:4e:2b:5f:29:02:3a:8f:e9:62:4d:6a:3c:a1:77: f6:30:40:36:49:be:6d:1a:3b:57:50:2f:8c:6b:20: fe:97:81:b5:b8:89:24:92:4d:54:0b:3a:6c:4f:b9: 50:fe:37:63:f1:dd:35:b1:f5:4d:1c:ca:fb:71:7e: f0:ec:39:14:0e:50:ff:56:67:0c:0e:4f:5d:84:17: d9:65:67:47:86:90:73:41:2d:dd:fd:67:e0:ae:84: 06:d9:42:d1:9d:3d:85:dc:f9:38:6f:3e:88:9a:77: 4b:a1:70:df:0a:ae:f7:55:84:b5:7c:c0:4e:65:bb: 5c:09:c4:25:9a:27:94:c6:52:60:fd:93:19:50:93: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E2:B5:64:BE:CE:DB:70:84:5B:7F:9D:E0:D4:21:A9:07:1E:E9:41 X509v3 Authority Key Identifier: keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3eK1ZL7O23CEW3-d4NQhqQce6UE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.115.0/24 IPv6: 2a13:a900::/29 Signature Algorithm: sha256WithRSAEncryption 27:9a:09:d7:c5:f0:67:8f:ff:a7:72:cf:1f:bf:0f:a3:be:2c: b4:6b:c4:9e:ae:3f:ab:f6:5f:0a:87:01:84:d7:fb:44:fe:97: e6:cb:ce:9f:2c:2e:c9:e8:3b:a1:c6:0e:1e:2c:14:d5:95:64: 26:78:f6:80:54:3f:46:be:d9:bf:66:fd:94:37:85:af:33:9b: c1:76:6c:07:82:92:b4:05:96:50:c8:85:86:68:d5:78:d3:50: ce:22:99:2e:03:27:e3:39:6d:ee:89:d9:32:b4:b9:b7:97:88: f3:24:75:eb:0f:30:c6:44:ed:d7:d4:cd:73:17:64:25:7f:7c: 68:2e:48:d6:9a:3b:7c:9d:2b:47:9c:1d:fd:21:71:ec:f7:55: 41:34:14:ed:c8:ef:8d:a4:7d:2c:4e:49:a7:ae:42:b8:bb:88: 17:52:23:6e:e6:79:c9:04:83:2f:bd:a7:62:f5:c4:82:40:3d: f9:84:6c:03:e3:f2:7b:aa:3a:24:73:8b:af:fe:fe:15:1d:b4: 2e:0e:96:5c:43:24:a0:14:bc:fe:4a:ea:32:8a:d3:1c:bc:8f: 54:ad:43:5d:d1:f6:27:1a:19:ce:38:00:eb:0d:7b:e2:58:73: d0:7a:de:b8:12:2e:09:6b:26:b7:4e:f2:8b:ff:c2:19:cf:f8: cb:c9:2c:5e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87dcgV/ldHvwNJl5thCCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjIwYTA2ODViNmZlOTc1NGNhMjI0ODY3NzViMmQ4YTdl OWMxMWUwHhcNMjYwMTAyMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGUyYjU2NGJlY2VkYjcwODQ1YjdmOWRlMGQ0MjFhOTA3MWVlOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/tbwr7OKquanCArVWtTa85ZxlVU 1GU2OrU7hMuiUB5/7xGJ5atewT1YQSdz8F2LZYl4nkoFBUtCNwuV7yJXnRwx4dYM O809f+/wowucAKZr1S0YPw5YWiPxoQIzD2aXPCNxHfpGE88DT6uwwhRNhPItw8sG BJaYTitfKQI6j+liTWo8oXf2MEA2Sb5tGjtXUC+MayD+l4G1uIkkkk1UCzpsT7lQ /jdj8d01sfVNHMr7cX7w7DkUDlD/VmcMDk9dhBfZZWdHhpBzQS3d/WfgroQG2ULR nT2F3Pk4bz6ImndLoXDfCq73VYS1fMBOZbtcCcQlmieUxlJg/ZMZUJMwzwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN3itWS+zttwhFt/neDUIakHHulBMB8GA1UdIwQY MBaAFN3yCgaFtv6XVMoiSGd1stin6cEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYt NTgzNDlmNzQwZTk2LzEvM2VLMVpMN08yM0NFVzMtZDROUWhxUWNlNlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYtNTgzNDlmNzQwZTk2 LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuY5zMA0E AgACMAcDBQMqE6kAMA0GCSqGSIb3DQEBCwUAA4IBAQAnmgnXxfBnj/+ncs8fvw+j viy0a8Serj+r9l8KhwGE1/tE/pfmy86fLC7J6Duhxg4eLBTVlWQmePaAVD9Gvtm/ Zv2UN4WvM5vBdmwHgpK0BZZQyIWGaNV401DOIpkuAyfjOW3uidkytLm3l4jzJHXr DzDGRO3X1M1zF2Qlf3xoLkjWmjt8nStHnB39IXHs91VBNBTtyO+NpH0sTkmnrkK4 u4gXUiNu5nnJBIMvvadi9cSCQD35hGwD4/J7qjokc4uv/v4VHbQuDpZcQySgFLz+ SuoyitMcvI9UrUNd0fYnGhnOOADrDXviWHPQet64Ei4Jaya3TvKL/8IZz/jLySxe -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:44 2026 by rpki-client