This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/3CGZIVaMujDI-qPAVVJCeNgj9f8.roa File: 3CGZIVaMujDI-qPAVVJCeNgj9f8.roa (raw, json) Hash identifier: 3hJZkvi3raf9DrBNutU2L8h8l7a18nJTxl78KmZVdF8= Subject key identifier: DC:21:99:21:56:8C:BA:30:C8:FA:A3:C0:55:52:42:78:D8:23:F5:FF Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2D0B0F956099AC0C24944BF72E309 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/3CGZIVaMujDI-qPAVVJCeNgj9f8.roa Signing time: Thu 01 Jan 2026 08:18:14 +0000 ROA not before: Thu 01 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215224 IP address blocks: 81.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d0:b0:f9:56:09:9a:c0:c2:49:44:bf:72:e3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc219921568cba30c8faa3c055524278d823f5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:96:d7:d2:ea:b8:fc:be:b8:ca:a2:09:5c: 1c:0d:ad:cf:f0:a6:65:41:1e:8c:25:4f:a8:a7:43: bc:90:cd:ad:6d:d9:18:95:18:d4:ea:11:61:38:4f: a5:99:53:88:13:55:13:04:00:9c:28:e2:8f:0c:f7: 5a:2c:bd:33:37:cc:37:ef:c4:a7:50:c7:3b:3c:1b: bd:10:cf:0f:97:a9:73:a7:bb:71:40:05:68:65:c6: 22:da:a1:53:0f:31:ed:7d:9a:54:9d:84:b9:a0:04: c2:db:cd:66:d5:85:05:17:0a:3c:12:51:6f:8b:67: 90:e2:19:e6:fd:1a:0b:99:d3:5e:4a:c6:32:d4:70: 15:1a:3a:6e:10:3d:5f:ad:38:71:cc:76:18:77:94: 1d:9b:5c:8c:2f:7a:fa:82:8b:f6:d7:10:b0:15:5e: 5a:62:ab:98:91:b4:a0:dc:cc:f0:4e:db:ac:ad:e4: b8:44:dd:04:8b:83:8e:26:de:35:28:7e:d0:99:f7: 4d:f3:2b:d3:5a:62:6d:a2:05:25:03:10:3b:73:c7: d6:48:94:b0:00:0c:92:8b:f3:86:16:12:fb:2d:4f: 53:f2:d9:92:f7:46:05:56:4e:44:dd:b4:e8:8b:68: 12:7b:ff:b3:cf:39:d0:4a:36:ad:67:e0:d5:a7:50: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:21:99:21:56:8C:BA:30:C8:FA:A3:C0:55:52:42:78:D8:23:F5:FF X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/3CGZIVaMujDI-qPAVVJCeNgj9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.140.0/24 Signature Algorithm: sha256WithRSAEncryption 72:0e:a4:08:25:1a:18:22:fd:51:e4:29:e4:93:ca:68:68:39: 59:af:1c:a4:1a:90:bb:ad:a2:14:3b:44:cf:dc:0f:6f:2b:0f: cb:ae:9b:78:33:1c:5d:72:9c:ce:24:c2:cd:a2:b0:6e:21:0e: a8:b0:d2:c8:c6:6b:be:a3:88:0b:43:e2:97:46:ae:6f:33:34: 64:03:af:bc:9e:d9:67:1c:da:58:67:e3:a1:09:15:2c:a0:77: 7a:6b:ab:c0:65:00:a9:d5:9f:c9:b1:05:cf:aa:93:77:c6:51: 7e:86:93:b3:ad:bf:c7:95:fc:14:21:09:d9:ce:14:6d:ce:c2: 05:60:96:b2:3e:0c:52:f0:56:97:1e:64:cf:8c:23:24:f0:55: 9a:2e:c7:ed:16:cd:46:16:02:6d:c9:40:88:71:dc:4f:5e:3b: 9d:a8:38:e1:6f:f2:3e:e8:94:17:79:13:ec:b0:14:15:b4:10: b3:fc:ea:e3:be:d9:e0:58:56:d5:29:f9:a9:85:50:a4:e3:11: 1e:a3:70:33:27:5d:23:d8:23:96:cb:82:2f:15:63:4d:2b:06: 3c:ce:f9:01:58:ac:92:4d:ae:15:05:28:66:a2:87:95:53:2d: 5e:7b:1e:b3:be:cb:52:88:24:c6:37:c1:d5:0a:fd:b6:f9:2c: 50:3e:2d:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otCw+VYJmsDCSUS/cuMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzIxOTkyMTU2OGNiYTMwYzhmYWEzYzA1NTUyNDI3OGQ4MjNmNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUeW19LquPy+uMqiCVwcDa3P8KZl QR6MJU+op0O8kM2tbdkYlRjU6hFhOE+lmVOIE1UTBACcKOKPDPdaLL0zN8w378Sn UMc7PBu9EM8Pl6lzp7txQAVoZcYi2qFTDzHtfZpUnYS5oATC281m1YUFFwo8ElFv i2eQ4hnm/RoLmdNeSsYy1HAVGjpuED1frThxzHYYd5Qdm1yML3r6gov21xCwFV5a YquYkbSg3MzwTtusreS4RN0Ei4OOJt41KH7QmfdN8yvTWmJtogUlAxA7c8fWSJSw AAySi/OGFhL7LU9T8tmS90YFVk5E3bToi2gSe/+zzznQSjatZ+DVp1DZCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNwhmSFWjLowyPqjwFVSQnjYI/X/MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvM0NHWklWYU11akRJLXFQQVZWSkNlTmdqOWY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaMMA0G CSqGSIb3DQEBCwUAA4IBAQByDqQIJRoYIv1R5Cnkk8poaDlZrxykGpC7raIUO0TP 3A9vKw/Lrpt4MxxdcpzOJMLNorBuIQ6osNLIxmu+o4gLQ+KXRq5vMzRkA6+8ntln HNpYZ+OhCRUsoHd6a6vAZQCp1Z/JsQXPqpN3xlF+hpOzrb/HlfwUIQnZzhRtzsIF YJayPgxS8FaXHmTPjCMk8FWaLsftFs1GFgJtyUCIcdxPXjudqDjhb/I+6JQXeRPs sBQVtBCz/OrjvtngWFbVKfmphVCk4xEeo3AzJ10j2COWy4IvFWNNKwY8zvkBWKyS Ta4VBShmooeVUy1eex6zvstSiCTGN8HVCv22+SxQPi1Y -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:56 2026 by rpki-client