This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/3rInZjWK_OrArZZOM2bV6e4iorQ.roa File: 3rInZjWK_OrArZZOM2bV6e4iorQ.roa (raw, json) Hash identifier: zuQXjoQYRWkqfCz+15TulpJjZN3HgFJdjfwCUHW+tCo= Subject key identifier: DE:B2:27:66:35:8A:FC:EA:C0:AD:96:4E:33:66:D5:E9:EE:22:A2:B4 Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556 Certificate serial: 019C03E959D24EAAD2B25BD226E501C73173 Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/3rInZjWK_OrArZZOM2bV6e4iorQ.roa Signing time: Wed 28 Jan 2026 09:22:30 +0000 ROA not before: Wed 28 Jan 2026 09:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205009 IP address blocks: 185.141.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:e9:59:d2:4e:aa:d2:b2:5b:d2:26:e5:01:c7:31:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556 Validity Not Before: Jan 28 09:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deb22766358afceac0ad964e3366d5e9ee22a2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:74:94:56:e0:eb:02:fb:dd:07:d4:6f:06: 2f:c6:1d:e1:52:c3:8d:7e:11:c4:64:cd:3b:50:9f: e3:9c:48:bb:ad:06:df:b8:3f:bc:00:ba:0e:21:63: f7:32:8c:33:a6:2a:e3:d0:aa:fe:85:a2:d3:a8:67: 74:2a:97:3e:77:62:24:53:f8:77:57:76:38:fc:fb: 51:4e:fd:12:f9:f4:ed:82:c4:dc:0f:db:57:2a:6c: 28:bb:ff:00:80:26:34:e8:5a:58:c2:2e:0a:5f:f2: 5f:bd:04:68:0b:47:d1:38:b9:7a:4f:dc:45:0b:0c: 9a:40:19:03:9d:bf:a1:ba:78:08:7c:c4:97:e7:a2: 76:c6:e4:92:d8:56:77:c8:d0:8a:8c:70:b4:40:09: 83:be:48:5b:9e:99:51:c2:35:ad:94:48:00:fd:56: e4:5b:83:dc:41:b8:58:8b:85:c3:42:a4:b1:11:8d: f7:37:63:f1:0b:ae:b5:74:32:98:71:ec:fe:7f:8e: 8b:8f:7e:21:17:c8:ca:97:59:99:d5:f6:b3:cf:62: 1e:30:3f:30:1a:52:e2:a1:05:2b:0b:e5:40:a0:4c: cd:24:34:26:a4:94:a5:cc:a5:66:1a:09:c9:e2:b7: b9:34:e6:90:ca:9b:b5:9a:d8:89:53:d1:9c:bc:78: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B2:27:66:35:8A:FC:EA:C0:AD:96:4E:33:66:D5:E9:EE:22:A2:B4 X509v3 Authority Key Identifier: keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/3rInZjWK_OrArZZOM2bV6e4iorQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.25.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:37:6d:61:fe:1a:ca:ff:19:30:78:29:ec:2f:45:fd:e3:00: 4b:83:38:a9:09:6f:d8:2e:33:b9:52:b6:25:27:1b:7e:2e:65: 6e:d3:3b:fd:60:ba:fe:f1:f1:6a:ee:1e:5e:2d:7c:42:d1:81: 69:4d:1b:47:99:4c:fd:ad:7b:f3:fa:fa:f0:f9:eb:80:38:5a: 39:92:1e:71:46:72:54:47:57:7c:27:a3:80:79:2e:59:73:08: bc:f8:10:56:dd:21:51:e9:23:e0:c9:1b:9b:18:cf:f7:d8:75: 05:4c:a0:c5:a7:83:97:0a:99:f9:82:13:b9:83:39:86:7a:ae: 3c:27:64:55:52:3c:84:b2:54:9d:74:a9:30:06:06:f5:a3:56: 65:16:26:9c:29:53:f7:ac:af:91:d9:30:50:91:4d:a6:16:a6: 46:f3:7f:f7:ef:ad:bf:22:ee:e2:c3:fb:dc:63:ed:25:0d:98: 79:ad:cf:0b:7c:4f:a3:4f:68:7e:e2:ac:b2:b1:5d:79:70:f6: a6:3f:ce:c7:7c:ea:b2:3e:38:ba:f7:e3:1a:67:6b:39:24:9c: b5:95:04:be:5e:1a:43:5c:85:47:0e:8e:89:9f:36:6b:6c:ad: c1:1b:06:b9:65:89:e6:ed:6b:0d:f3:9d:db:3e:8e:23:59:bc: 6e:d2:9c:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwD6VnSTqrSslvSJuUBxzFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1 MzE1NTYwHhcNMjYwMTI4MDkyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWIyMjc2NjM1OGFmY2VhYzBhZDk2NGUzMzY2ZDVlOWVlMjJhMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK90lFbg6wL73QfUbwYvxh3hUsON fhHEZM07UJ/jnEi7rQbfuD+8ALoOIWP3Mowzpirj0Kr+haLTqGd0Kpc+d2IkU/h3 V3Y4/PtRTv0S+fTtgsTcD9tXKmwou/8AgCY06FpYwi4KX/JfvQRoC0fROLl6T9xF CwyaQBkDnb+hungIfMSX56J2xuSS2FZ3yNCKjHC0QAmDvkhbnplRwjWtlEgA/Vbk W4PcQbhYi4XDQqSxEY33N2PxC661dDKYcez+f46Lj34hF8jKl1mZ1fazz2IeMD8w GlLioQUrC+VAoEzNJDQmpJSlzKVmGgnJ4re5NOaQypu1mtiJU9GcvHipkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN6yJ2Y1ivzqwK2WTjNm1enuIqK0MB8GA1UdIwQY MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct NjQxYjhlNjBkM2UyLzEvM3JJblpqV0tfT3JBclpaT00yYlY2ZTRpb3JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY0ZMA0G CSqGSIb3DQEBCwUAA4IBAQCfN21h/hrK/xkweCnsL0X94wBLgzipCW/YLjO5UrYl Jxt+LmVu0zv9YLr+8fFq7h5eLXxC0YFpTRtHmUz9rXvz+vrw+euAOFo5kh5xRnJU R1d8J6OAeS5Zcwi8+BBW3SFR6SPgyRubGM/32HUFTKDFp4OXCpn5ghO5gzmGeq48 J2RVUjyEslSddKkwBgb1o1ZlFiacKVP3rK+R2TBQkU2mFqZG83/3762/Iu7iw/vc Y+0lDZh5rc8LfE+jT2h+4qyysV15cPamP87HfOqyPji69+MaZ2s5JJy1lQS+XhpD XIVHDo6JnzZrbK3BGwa5ZYnm7WsN853bPo4jWbxu0pwF -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:32 2026 by rpki-client