This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/3C-MFf4CxJMdsuA2xUMbeT95cFQ.roa File: 3C-MFf4CxJMdsuA2xUMbeT95cFQ.roa (raw, json) Hash identifier: l72WNVI7l9ZF7eo8/aRUo3EuE6KrjKZ6m4xqm9jc1jg= Subject key identifier: DC:2F:8C:15:FE:02:C4:93:1D:B2:E0:36:C5:43:1B:79:3F:79:70:54 Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb Certificate serial: 019B7B35AAF44A0E76D6A76B0DA10D5D2952 Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/3C-MFf4CxJMdsuA2xUMbeT95cFQ.roa Signing time: Thu 01 Jan 2026 20:17:53 +0000 ROA not before: Thu 01 Jan 2026 20:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16117 IP address blocks: 62.116.224.0/19 maxlen: 19 79.142.208.0/20 maxlen: 20 84.23.128.0/19 maxlen: 19 185.98.244.0/22 maxlen: 22 213.141.64.0/19 maxlen: 19 2001:b48::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:aa:f4:4a:0e:76:d6:a7:6b:0d:a1:0d:5d:29:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc2f8c15fe02c4931db2e036c5431b793f797054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:5c:00:23:71:26:f5:10:0f:22:8a:ca:29: eb:fc:84:fc:51:81:59:c0:64:c1:9a:71:db:62:74: 5f:2e:9c:3d:ef:5b:7b:3a:bf:1f:51:de:ca:2b:13: 6d:07:37:43:54:50:9a:aa:95:40:fd:41:23:5d:a5: 2b:b7:b2:31:62:97:4e:8d:24:e2:02:5a:83:92:e1: 6a:06:20:44:b9:66:bf:aa:2f:b7:09:e7:bf:8f:22: b7:a5:28:ba:7d:f3:0e:ff:d1:97:b5:f8:22:b8:5a: f6:02:2d:69:66:4b:09:3b:f6:66:d5:6f:f7:25:78: 2c:14:2b:22:d7:f5:dd:b0:95:dd:d4:cc:1d:02:19: 9a:4c:5c:71:b7:56:86:3c:16:53:b1:19:2a:3f:79: 8a:89:c5:40:13:2e:ef:39:29:d6:bf:47:bf:11:b9: c3:77:11:ff:14:69:6f:b3:10:ed:b8:8c:1a:d8:31: d6:6e:a4:5d:db:38:c9:fe:dd:13:13:83:43:6d:7d: 53:5d:47:bf:76:d7:de:64:87:44:ad:55:bb:34:b4: a9:a5:99:f1:3c:30:b5:ad:aa:72:e2:2c:b5:a8:bb: 7a:7d:c3:97:4d:6a:28:e0:c9:3c:13:12:e6:f2:81: 66:a2:13:67:96:cd:56:c4:21:09:7b:34:e7:21:0d: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2F:8C:15:FE:02:C4:93:1D:B2:E0:36:C5:43:1B:79:3F:79:70:54 X509v3 Authority Key Identifier: keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/3C-MFf4CxJMdsuA2xUMbeT95cFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.116.224.0/19 79.142.208.0/20 84.23.128.0/19 185.98.244.0/22 213.141.64.0/19 IPv6: 2001:b48::/29 Signature Algorithm: sha256WithRSAEncryption a5:89:67:46:22:cf:04:48:53:f3:25:f7:6c:3b:32:4c:4e:7d: ce:e0:19:18:d3:43:32:de:1f:a9:21:2d:72:98:00:9d:d6:28: 56:17:c4:20:fa:37:3b:d5:66:9a:91:41:59:d1:e2:cb:fe:6f: 2e:8b:87:d3:f9:b7:19:8f:63:44:09:94:e9:14:bf:64:09:b1: fc:5d:b9:0a:5b:ed:42:33:63:cd:e6:a3:f6:c6:07:22:e6:bd: 31:59:fc:d9:fd:8d:55:f2:36:c3:ae:dd:9e:19:5a:a9:53:85: a1:4d:0e:e8:41:cf:4a:d4:2d:d3:2b:1e:1b:ac:bb:e2:b1:ea: d3:3e:82:e7:53:c3:cb:82:69:b7:0e:6f:7a:9f:aa:12:00:03: a3:c0:12:e4:09:79:06:ba:94:fa:36:c6:27:06:59:c6:e5:f9: 0b:20:9c:ee:1f:e8:c9:33:0f:65:39:ae:e5:cb:39:ae:28:e1: fa:30:fa:a0:f1:d5:85:15:93:fc:ce:55:40:b8:28:6a:a1:e9: 50:1d:ab:8d:93:96:9d:d2:00:a1:dc:c3:bb:25:6f:5a:52:1d: d3:a7:b8:ed:bf:2c:6a:f1:0d:5c:08:8b:98:85:fe:74:30:bd: 27:da:0e:a4:0a:4f:6f:48:d8:d1:58:a1:f4:87:fb:bb:cb:03: 24:7d:3a:a4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7Nar0Sg521qdrDaENXSlSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MDk3YzJiYjA2MmI1YzI5OTIzOTFhNGVkMWVlNGY0ZmEz Nzc5Y2IwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzJmOGMxNWZlMDJjNDkzMWRiMmUwMzZjNTQzMWI3OTNmNzk3MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRpcACNxJvUQDyKKyinr/IT8UYFZ wGTBmnHbYnRfLpw971t7Or8fUd7KKxNtBzdDVFCaqpVA/UEjXaUrt7IxYpdOjSTi AlqDkuFqBiBEuWa/qi+3Cee/jyK3pSi6ffMO/9GXtfgiuFr2Ai1pZksJO/Zm1W/3 JXgsFCsi1/XdsJXd1MwdAhmaTFxxt1aGPBZTsRkqP3mKicVAEy7vOSnWv0e/EbnD dxH/FGlvsxDtuIwa2DHWbqRd2zjJ/t0TE4NDbX1TXUe/dtfeZIdErVW7NLSppZnx PDC1rapy4iy1qLt6fcOXTWoo4Mk8ExLm8oFmohNnls1WxCEJezTnIQ167QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFNwvjBX+AsSTHbLgNsVDG3k/eXBUMB8GA1UdIwQY MBaAFJgJfCuwYrXCmSORpO0e5PT6N3nLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUt OThiYzI1NGMyM2U1LzEvM0MtTUZmNEN4Sk1kc3VBMnhVTWJlVDk1Y0ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUtOThiYzI1NGMyM2U1 LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFPnTgAwQE T47QAwQFVBeAAwQCuWL0AwQF1Y1AMA0EAgACMAcDBQMgAQtIMA0GCSqGSIb3DQEB CwUAA4IBAQCliWdGIs8ESFPzJfdsOzJMTn3O4BkY00My3h+pIS1ymACd1ihWF8Qg +jc71WaakUFZ0eLL/m8ui4fT+bcZj2NECZTpFL9kCbH8XbkKW+1CM2PN5qP2xgci 5r0xWfzZ/Y1V8jbDrt2eGVqpU4WhTQ7oQc9K1C3TKx4brLviserTPoLnU8PLgmm3 Dm96n6oSAAOjwBLkCXkGupT6NsYnBlnG5fkLIJzuH+jJMw9lOa7lyzmuKOH6MPqg 8dWFFZP8zlVAuChqoelQHauNk5ad0gCh3MO7JW9aUh3Tp7jtvyxq8Q1cCIuYhf50 ML0n2g6kCk9vSNjRWKH0h/u7ywMkfTqk -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:04 2026 by rpki-client