This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/3xEx3bVGfXIchqPcHOE-UCr11f0.roa File: 3xEx3bVGfXIchqPcHOE-UCr11f0.roa (raw, json) Hash identifier: y+CVyDs3ZBJgnuFTk7NR2y3nV9NJmzoB4Ik1Ns4joJs= Subject key identifier: DF:11:31:DD:B5:46:7D:72:1C:86:A3:DC:1C:E1:3E:50:2A:F5:D5:FD Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f Certificate serial: 019B7AC89D830B1293CE0EFFF3F7F3A8A87C Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/3xEx3bVGfXIchqPcHOE-UCr11f0.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.221.84.0/24 maxlen: 24 212.32.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9d:83:0b:12:93:ce:0e:ff:f3:f7:f3:a8:a8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df1131ddb5467d721c86a3dc1ce13e502af5d5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cd:84:61:7b:b2:ee:b0:ef:ed:df:f5:4f:9e: 39:35:74:50:44:78:3c:df:1b:3b:5e:cd:c7:fd:9c: ef:74:48:c1:0b:10:67:ce:a8:aa:77:05:bd:19:59: 96:a9:d0:06:9e:58:ed:0a:13:26:2e:aa:c9:67:f5: 16:15:35:d8:c4:4d:1f:26:99:45:cc:ee:0d:0a:35: a6:00:85:1a:f1:0f:e3:33:f0:8d:4f:67:df:65:b0: d4:d2:01:9b:5f:17:a9:8f:b1:95:dd:2a:0f:70:c4: f9:79:f8:fe:d0:f2:ff:40:de:f7:3f:49:8e:2c:72: 26:eb:58:f6:bb:90:b2:23:0a:9d:be:c7:05:00:78: 93:47:25:de:b0:fb:9c:06:73:48:f4:11:be:62:d8: de:14:2e:ab:e8:ab:58:fe:74:38:f1:4d:33:e9:3f: f2:3e:8e:ee:51:e8:26:60:0d:29:a5:9f:3f:d7:65: a5:d5:bd:fd:ba:04:25:16:39:87:d3:6d:ae:e1:ea: 16:1d:09:66:79:66:01:f9:4c:5f:ee:e9:b1:80:81: 48:b0:b1:bf:75:a0:cc:91:58:86:79:ca:0f:cb:47: 37:3d:03:d0:6a:ce:98:48:12:b6:bd:91:1c:13:f0: 36:7d:9e:05:36:d3:8d:93:e4:d3:58:80:de:e1:a8: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:11:31:DD:B5:46:7D:72:1C:86:A3:DC:1C:E1:3E:50:2A:F5:D5:FD X509v3 Authority Key Identifier: keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/3xEx3bVGfXIchqPcHOE-UCr11f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.84.0/24 212.32.0.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:ee:d1:76:63:7f:00:9d:ce:e2:19:7e:7c:d1:b2:c5:a7:cb: c2:0d:a6:8c:eb:b2:31:62:2b:1a:3e:a2:78:ed:4d:ce:a4:23: 7d:14:58:5d:cb:00:64:d9:76:c9:46:2a:f2:1f:c8:98:ab:47: 8c:85:10:ee:da:36:32:4b:d2:a8:e5:fd:7f:15:13:92:1e:9d: 5f:a6:34:87:99:8a:c0:1c:48:71:e6:0b:e6:fb:ad:fa:51:db: 6f:32:4a:97:d7:6f:07:41:60:c7:89:59:52:db:ad:61:11:5e: d0:f7:41:7d:5a:31:cc:de:55:20:aa:fe:5c:16:cd:af:cc:59: 20:3f:da:0a:96:73:cf:8c:f4:2c:5c:7c:20:79:5e:95:b0:ae: b9:6e:e0:f4:37:f9:61:6e:60:e1:57:76:19:63:a0:ac:01:a9: c8:91:aa:ae:d6:3c:ce:f9:cb:b6:1e:12:4e:6c:5b:83:6f:2e: 39:88:ab:09:35:a9:d2:54:2c:b6:be:0f:ac:0f:52:93:96:ba: 9f:50:a0:97:8b:7b:be:de:ad:5c:77:ec:c4:6c:61:02:ac:52: 73:9f:58:0b:5c:24:a8:8b:5d:80:dc:b2:b8:20:a1:9f:2e:05: 98:31:83:50:65:2c:08:d6:89:a5:63:32:92:15:03:9c:78:cb: 27:29:f3:a1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yJ2DCxKTzg7/8/fzqKh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1 ZWRjN2YwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjExMzFkZGI1NDY3ZDcyMWM4NmEzZGMxY2UxM2U1MDJhZjVkNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA282EYXuy7rDv7d/1T545NXRQRHg8 3xs7Xs3H/ZzvdEjBCxBnzqiqdwW9GVmWqdAGnljtChMmLqrJZ/UWFTXYxE0fJplF zO4NCjWmAIUa8Q/jM/CNT2ffZbDU0gGbXxepj7GV3SoPcMT5efj+0PL/QN73P0mO LHIm61j2u5CyIwqdvscFAHiTRyXesPucBnNI9BG+YtjeFC6r6KtY/nQ48U0z6T/y Po7uUegmYA0ppZ8/12Wl1b39ugQlFjmH022u4eoWHQlmeWYB+Uxf7umxgIFIsLG/ daDMkViGecoPy0c3PQPQas6YSBK2vZEcE/A2fZ4FNtONk+TTWIDe4ajZVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN8RMd21Rn1yHIaj3BzhPlAq9dX9MB8GA1UdIwQY MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt MzY4N2M4MThlZGU1LzEvM3hFeDNiVkdmWEljaHFQY0hPRS1VQ3IxMWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1 LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud1UAwQD 1CAAMA0GCSqGSIb3DQEBCwUAA4IBAQBO7tF2Y38Anc7iGX580bLFp8vCDaaM67Ix YisaPqJ47U3OpCN9FFhdywBk2XbJRiryH8iYq0eMhRDu2jYyS9Ko5f1/FROSHp1f pjSHmYrAHEhx5gvm+636UdtvMkqX128HQWDHiVlS261hEV7Q90F9WjHM3lUgqv5c Fs2vzFkgP9oKlnPPjPQsXHwgeV6VsK65buD0N/lhbmDhV3YZY6CsAanIkaqu1jzO +cu2HhJObFuDby45iKsJNanSVCy2vg+sD1KTlrqfUKCXi3u+3q1cd+zEbGECrFJz n1gLXCSoi12A3LK4IKGfLgWYMYNQZSwI1omlYzKSFQOceMsnKfOh -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:31 2026 by rpki-client