This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3BxH_bEdWRum2rhs_55rh-xY-JE.roa File: 3BxH_bEdWRum2rhs_55rh-xY-JE.roa (raw, json) Hash identifier: L7QbNE/A+wkbmeuga30Pjc/Z4164/JddJVT41mQnxHE= Subject key identifier: DC:1C:47:FD:B1:1D:59:1B:A6:DA:B8:6C:FF:9E:6B:87:EC:58:F8:91 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B7C12E025A0F2D5953B8BC0D75505CF0F Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3BxH_bEdWRum2rhs_55rh-xY-JE.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215027 IP address blocks: 185.255.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e0:25:a0:f2:d5:95:3b:8b:c0:d7:55:05:cf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc1c47fdb11d591ba6dab86cff9e6b87ec58f891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:00:93:c8:e5:63:d4:2e:57:23:cb:5d:15:44: 3f:95:6b:3f:e7:3a:62:ce:04:82:85:7a:f2:66:f3: ca:df:5e:93:02:5d:57:d6:e2:3b:ba:a8:04:5a:b7: ce:36:fc:ab:d3:f1:2f:78:fc:0b:df:52:3e:f8:2b: 8a:a9:65:cd:69:00:41:46:0c:57:9c:8d:2f:9d:ad: 2f:f2:d9:cd:48:92:96:13:23:5e:31:dd:36:3c:e5: 19:51:a9:85:51:c9:36:dc:29:de:3f:a6:e2:b2:ba: 85:ec:d9:84:4a:1c:21:5f:92:00:ef:d0:93:f1:c9: 92:3d:bd:bc:5a:9e:9e:a6:d2:4d:7d:5a:3a:8c:61: d4:55:65:66:c6:1b:76:36:f4:2b:a2:0a:0b:00:ad: f5:05:6b:1a:3a:f7:3b:cc:a8:03:cf:a7:5b:2a:2c: 08:4e:27:cb:f8:8f:6f:66:7d:ef:12:52:29:04:ee: 3d:64:62:0b:b5:81:be:ed:0c:6c:c9:ce:1c:2f:bb: d8:f1:4f:6c:e4:c9:90:c9:d4:37:d9:df:3a:6f:9e: ca:b5:87:60:e8:54:50:2d:4f:3a:2e:01:08:18:74: 8e:60:7b:2b:fc:db:c9:63:04:73:df:03:3b:91:26: 35:70:dd:97:9a:d6:26:19:0d:32:76:5d:e4:66:cb: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1C:47:FD:B1:1D:59:1B:A6:DA:B8:6C:FF:9E:6B:87:EC:58:F8:91 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3BxH_bEdWRum2rhs_55rh-xY-JE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.4.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:33:25:7b:d0:d0:4e:6e:ad:04:22:37:8e:13:aa:10:0e:7b: 21:ce:81:8c:d6:b2:72:99:8f:9b:cf:35:e9:13:24:b6:34:10: 15:b4:b0:d7:ad:33:59:8a:07:83:fa:da:d7:f4:94:25:a5:77: 60:b4:af:87:d0:fe:36:4e:5a:c6:ac:da:e9:fe:8b:a2:3a:a7: 44:ea:ee:0a:a7:eb:95:66:54:5e:3a:69:ff:f0:62:d1:ea:2d: d0:90:e4:38:3f:39:24:37:e4:d9:b0:24:79:c2:ba:03:27:be: 60:cb:2a:e2:d5:71:cc:f3:92:2a:3c:06:10:1f:e8:3f:40:e7: c8:b9:a1:ab:18:b9:d0:af:ca:4c:d2:44:02:62:06:9b:5a:dd: 4f:75:e3:2d:0f:36:d2:b3:b7:d1:17:db:ae:96:da:8a:52:b2: 53:d8:9a:d6:85:49:01:f6:52:55:61:d9:2d:26:59:f6:ae:a3: f5:1f:c9:4e:9e:e7:34:9b:2b:12:ec:50:f8:2a:d6:cb:27:c7: 50:06:77:e3:d0:db:2f:08:fa:bf:d9:78:10:81:68:c1:54:f2: ca:bc:ea:94:66:65:e2:97:1d:d3:7a:1a:7e:9f:8c:b8:5a:c8: 19:c2:d5:fd:1c:06:1a:96:3e:57:94:6f:69:9a:70:9d:d8:fd: fb:49:c7:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuAloPLVlTuLwNdVBc8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzFjNDdmZGIxMWQ1OTFiYTZkYWI4NmNmZjllNmI4N2VjNThmODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ACTyOVj1C5XI8tdFUQ/lWs/5zpi zgSChXryZvPK316TAl1X1uI7uqgEWrfONvyr0/EvePwL31I++CuKqWXNaQBBRgxX nI0vna0v8tnNSJKWEyNeMd02POUZUamFUck23CneP6bisrqF7NmEShwhX5IA79CT 8cmSPb28Wp6eptJNfVo6jGHUVWVmxht2NvQrogoLAK31BWsaOvc7zKgDz6dbKiwI TifL+I9vZn3vElIpBO49ZGILtYG+7Qxsyc4cL7vY8U9s5MmQydQ32d86b57KtYdg 6FRQLU86LgEIGHSOYHsr/NvJYwRz3wM7kSY1cN2XmtYmGQ0ydl3kZsvL4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwcR/2xHVkbptq4bP+ea4fsWPiRMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM0J4SF9iRWRXUnVtMnJoc181NXJoLXhZLUpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8EMA0G CSqGSIb3DQEBCwUAA4IBAQBNMyV70NBObq0EIjeOE6oQDnshzoGM1rJymY+bzzXp EyS2NBAVtLDXrTNZigeD+trX9JQlpXdgtK+H0P42TlrGrNrp/ouiOqdE6u4Kp+uV ZlReOmn/8GLR6i3QkOQ4PzkkN+TZsCR5wroDJ75gyyri1XHM85IqPAYQH+g/QOfI uaGrGLnQr8pM0kQCYgabWt1PdeMtDzbSs7fRF9uultqKUrJT2JrWhUkB9lJVYdkt Jln2rqP1H8lOnuc0mysS7FD4KtbLJ8dQBnfj0NsvCPq/2XgQgWjBVPLKvOqUZmXi lx3Tehp+n4y4WsgZwtX9HAYalj5XlG9pmnCd2P37Scdi -----END CERTIFICATE-----Generated at Mon Jan 19 21:56:39 2026 by rpki-client