This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/3CIM-rszzFckhjZbgzPmZtOKZv4.roa File: 3CIM-rszzFckhjZbgzPmZtOKZv4.roa (raw, json) Hash identifier: VqajRiaghj0MLKmKn/iBz4Zyi+LNEnSguYlblCLEBTI= Subject key identifier: DC:22:0C:FA:BB:33:CC:57:24:86:36:5B:83:33:E6:66:D3:8A:66:FE Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6 Certificate serial: 019B7C80B93DAE44B18DD161A73733E1C711 Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/3CIM-rszzFckhjZbgzPmZtOKZv4.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 192.12.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b9:3d:ae:44:b1:8d:d1:61:a7:37:33:e1:c7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc220cfabb33cc572486365b8333e666d38a66fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:a9:27:d8:bf:35:a2:82:72:72:50:89:9c: 67:3c:76:99:23:e1:dd:fc:8a:36:62:96:44:4b:34: 15:56:82:c6:c1:3f:7d:7c:0d:14:0f:c1:62:5c:5b: ef:f3:cc:51:a9:73:59:7e:6b:ed:0f:e0:79:c9:52: 45:fe:19:52:52:4d:98:42:91:d6:ba:de:3c:91:4f: f5:b2:fd:db:2f:86:24:a0:cc:dc:3f:b9:81:e3:94: 1c:96:52:e9:19:9b:00:fd:79:04:56:c7:1f:55:1b: 08:53:29:93:45:a4:32:cf:26:f1:9e:f1:70:fc:63: 17:a8:dd:eb:53:90:77:7b:2c:ce:8b:9c:29:da:8e: 7d:0f:f4:f3:2d:05:e3:02:96:ad:7b:b9:98:5e:9a: 46:5c:7b:63:43:d6:2e:51:8d:6c:e1:7a:c1:25:01: 9e:6e:f6:33:0f:9f:77:45:28:7e:3a:d0:7c:b6:a1: 00:6d:11:ee:0f:88:a2:8d:39:f6:9e:ff:c1:26:4d: a2:8a:57:48:85:ad:8a:9e:f2:4a:de:58:0a:68:95: b6:8b:db:de:cd:2f:c9:08:be:5d:2b:12:ab:a3:23: 3c:db:0a:3a:81:f7:a3:db:d9:1e:50:a9:27:5a:eb: ef:75:8c:c5:d6:3c:c3:ad:4a:0f:9f:96:69:76:0f: 7b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:22:0C:FA:BB:33:CC:57:24:86:36:5B:83:33:E6:66:D3:8A:66:FE X509v3 Authority Key Identifier: keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/3CIM-rszzFckhjZbgzPmZtOKZv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.12.81.0/24 Signature Algorithm: sha256WithRSAEncryption 28:ef:91:5b:2e:3d:b0:df:29:3a:96:40:48:90:29:bf:65:87: 6b:11:8e:8f:ec:5a:bf:f7:dd:f4:cf:05:58:0b:4d:b6:32:c9: 13:8a:d9:44:8e:19:d0:f2:98:26:43:e5:0f:d3:d6:19:9c:d1: c4:0e:c7:af:29:ca:fa:81:8a:49:c6:c1:71:fa:5a:f7:39:ba: 3a:e9:a6:13:0b:22:3d:24:fe:29:eb:b0:d2:5c:c3:42:fa:75: a8:25:f0:f6:b6:ae:4b:4e:cc:7f:06:a7:8e:c3:c7:73:76:4a: e9:af:46:ee:1e:68:20:03:f2:2b:4a:8c:23:b3:b4:a0:a6:32: 14:d8:66:9b:84:8a:c6:c6:67:16:cf:4d:35:ad:1b:4c:bc:6f: 96:47:8d:71:0c:1c:8a:5d:c1:89:b0:9d:88:0d:ae:a6:76:3a: 54:3e:6f:9e:5e:c8:44:00:f2:5d:f5:2a:08:25:e4:62:f6:2f: ac:45:ed:d1:3a:0c:1a:0b:8d:e6:03:a3:7a:63:37:b5:d0:88: 36:a1:63:58:25:b7:05:0f:79:46:3d:cb:1a:92:7f:a3:71:a4: ed:58:c0:04:00:40:e7:86:96:87:a0:7d:cd:32:e1:48:29:ab: 1d:29:b9:22:f0:a5:30:77:33:b6:74:9f:0a:0e:9b:38:56:c4: ba:80:f9:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLk9rkSxjdFhpzcz4ccRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjFiMTI2ZGFjMGFhMGI3Nzk0ODY0MDBlZGU3MjU0YjI1 ZWVhYTYwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzIyMGNmYWJiMzNjYzU3MjQ4NjM2NWI4MzMzZTY2NmQzOGE2NmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHupJ9i/NaKCcnJQiZxnPHaZI+Hd /Io2YpZESzQVVoLGwT99fA0UD8FiXFvv88xRqXNZfmvtD+B5yVJF/hlSUk2YQpHW ut48kU/1sv3bL4YkoMzcP7mB45QcllLpGZsA/XkEVscfVRsIUymTRaQyzybxnvFw /GMXqN3rU5B3eyzOi5wp2o59D/TzLQXjApate7mYXppGXHtjQ9YuUY1s4XrBJQGe bvYzD593RSh+OtB8tqEAbRHuD4iijTn2nv/BJk2iildIha2KnvJK3lgKaJW2i9ve zS/JCL5dKxKroyM82wo6gfej29keUKknWuvvdYzF1jzDrUoPn5Zpdg97fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwiDPq7M8xXJIY2W4Mz5mbTimb+MB8GA1UdIwQY MBaAFLCxsSbawKoLd5SGQA7eclSyXuqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMt ZmY4MjRiNDE1NjkzLzEvM0NJTS1yc3p6RmNraGpaYmd6UG1adE9LWnY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMtZmY4MjRiNDE1Njkz LzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxRMA0G CSqGSIb3DQEBCwUAA4IBAQAo75FbLj2w3yk6lkBIkCm/ZYdrEY6P7Fq/9930zwVY C022MskTitlEjhnQ8pgmQ+UP09YZnNHEDsevKcr6gYpJxsFx+lr3Obo66aYTCyI9 JP4p67DSXMNC+nWoJfD2tq5LTsx/BqeOw8dzdkrpr0buHmggA/IrSowjs7SgpjIU 2GabhIrGxmcWz001rRtMvG+WR41xDByKXcGJsJ2IDa6mdjpUPm+eXshEAPJd9SoI JeRi9i+sRe3ROgwaC43mA6N6Yze10Ig2oWNYJbcFD3lGPcsakn+jcaTtWMAEAEDn hpaHoH3NMuFIKasdKbki8KUwdzO2dJ8KDps4VsS6gPmm -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:00 2026 by rpki-client